Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/34352e3233362e33312e302f32342d3234203d3e20323636383039.roa
File:                     34352e3233362e33312e302f32342d3234203d3e20323636383039.roa (raw, json)
Hash identifier:          ZnZQ8DfgQ8MbsSB5MyLuRiY1qQlEdX5WGH5nVFEOlok=
Subject key identifier:   08:49:AA:19:0F:4C:80:E8:39:73:CD:09:33:32:00:70:E3:B0:5B:A0
Certificate issuer:       /CN=226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D
Certificate serial:       55405A3C0D592BB7A971EF98E00DFC2CACB71931
Authority key identifier: 22:61:00:C1:EB:3A:9C:EB:94:E4:55:0B:DB:99:7B:7B:3D:F9:BC:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/34352e3233362e33312e302f32342d3234203d3e20323636383039.roa
Signing time:             Thu 30 May 2024 13:35:00 +0000
ROA not before:           Thu 30 May 2024 13:30:00 +0000
ROA not after:            Thu 29 May 2025 13:35:00 +0000
asID:                     266809
IP address blocks:        45.236.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:40:5a:3c:0d:59:2b:b7:a9:71:ef:98:e0:0d:fc:2c:ac:b7:19:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D
        Validity
            Not Before: May 30 13:30:00 2024 GMT
            Not After : May 29 13:35:00 2025 GMT
        Subject: CN=0849AA190F4C80E83973CD0933320070E3B05BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:01:3b:72:49:f3:2e:95:fe:d7:74:ff:46:22:
                    c1:8e:7e:fa:f7:aa:10:25:8a:79:a2:f4:33:c2:19:
                    83:d8:b0:79:31:a4:36:18:55:83:74:8d:9f:02:b1:
                    60:68:87:ca:86:cf:94:5f:89:4c:e4:d0:76:5a:44:
                    b3:1e:cb:74:91:59:08:b8:72:d4:db:c3:ba:f3:6a:
                    df:d5:71:f8:97:9e:65:00:64:9f:01:88:d2:49:56:
                    1a:7c:f6:cc:58:f4:8c:cd:d5:2a:6c:8c:a4:8e:51:
                    b9:3d:aa:13:5d:81:02:ab:93:93:c2:23:dd:2e:7f:
                    5b:9c:e7:2b:64:80:c3:d2:62:23:da:23:25:1e:97:
                    2c:b7:04:d6:12:31:e2:fb:28:5a:43:be:be:48:d3:
                    9d:d5:64:b9:1b:f7:f7:ad:18:33:8e:23:a1:7e:39:
                    0b:9a:b2:1e:23:46:9b:03:37:27:2b:20:fd:7f:7a:
                    55:3e:f9:9c:2f:42:59:bc:8f:b8:73:43:ad:3c:44:
                    b8:24:dc:48:ea:0c:75:16:93:db:7c:63:ef:58:3f:
                    06:36:9a:69:1a:9d:87:32:b2:fb:32:4e:c2:d5:6b:
                    32:89:27:35:bb:23:c3:2a:c1:62:fd:82:4f:a2:ab:
                    5a:2c:b2:4c:45:26:02:d3:c5:60:8e:0b:64:92:ce:
                    22:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:49:AA:19:0F:4C:80:E8:39:73:CD:09:33:32:00:70:E3:B0:5B:A0
            X509v3 Authority Key Identifier:
                keyid:22:61:00:C1:EB:3A:9C:EB:94:E4:55:0B:DB:99:7B:7B:3D:F9:BC:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/34352e3233362e33312e302f32342d3234203d3e20323636383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:3f:64:f5:f8:f7:60:c6:c0:bc:85:ca:79:27:8b:78:2a:b5:
         fb:c5:df:2d:70:02:1b:9b:2b:01:41:93:51:42:48:4f:d1:7b:
         d7:a8:04:f3:4f:3c:77:a6:9f:d8:f5:3c:3d:ac:b0:4a:2e:79:
         28:5b:ec:44:71:de:21:5a:f0:e2:9a:69:a8:54:9e:79:8e:3b:
         dc:99:58:8c:9e:37:a9:9b:6a:18:d7:80:bd:ea:e4:3e:09:ed:
         be:79:83:3a:53:ad:0a:4a:25:a3:27:47:a5:c0:54:26:41:31:
         8a:5d:7a:a9:a2:2e:44:a2:40:8c:9e:d1:14:15:8d:d0:9c:cc:
         8b:7c:6e:a6:48:15:3d:26:78:20:b7:60:d0:c8:cd:83:2f:bf:
         53:f9:e8:bc:75:02:c1:cf:84:64:35:cd:e9:46:93:62:fb:b4:
         22:95:c2:58:0d:50:71:e5:0b:15:7e:a8:b8:df:02:50:93:30:
         37:db:b2:a1:21:2e:f1:52:aa:9d:89:e6:da:03:1e:5a:19:09:
         bf:92:2c:5a:87:a0:0d:81:f1:70:af:14:3f:2c:0c:1d:61:73:
         25:a9:16:fb:84:fd:f1:4c:9f:96:0b:b3:4d:97:77:e2:1d:58:
         f2:7b:49:03:e7:c9:8b:35:ba:d7:04:55:c5:ed:ac:78:50:3c:
         6c:55:97:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:23 2024 by rpki-client on console-fra.rpki-client.org