Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/34352e3138312e34362e302f32332d3233203d3e20323637373938.roa
File:                     34352e3138312e34362e302f32332d3233203d3e20323637373938.roa (raw, json)
Hash identifier:          aE1dMiuEItBDGyDQf0fPtfts+sIw8PjI1g6apfqBFvQ=
Subject key identifier:   6E:16:FC:89:59:62:25:59:79:80:17:7D:55:62:A4:9A:C4:07:80:56
Certificate issuer:       /CN=44B7D6626292744063A0029B3E214C905150E05D
Certificate serial:       0E14A73457DB47A340ADDDC4DD153EA0FDB290D0
Authority key identifier: 44:B7:D6:62:62:92:74:40:63:A0:02:9B:3E:21:4C:90:51:50:E0:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/34352e3138312e34362e302f32332d3233203d3e20323637373938.roa
Signing time:             Fri 17 May 2024 16:50:00 +0000
ROA not before:           Fri 17 May 2024 16:45:00 +0000
ROA not after:            Fri 16 May 2025 16:50:00 +0000
asID:                     267798
IP address blocks:        45.181.46.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/44B7D6626292744063A0029B3E214C905150E05D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/44B7D6626292744063A0029B3E214C905150E05D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:14:a7:34:57:db:47:a3:40:ad:dd:c4:dd:15:3e:a0:fd:b2:90:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44B7D6626292744063A0029B3E214C905150E05D
        Validity
            Not Before: May 17 16:45:00 2024 GMT
            Not After : May 16 16:50:00 2025 GMT
        Subject: CN=6E16FC89596225597980177D5562A49AC4078056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:5b:fc:e9:c9:89:08:18:f9:e2:01:01:37:
                    1d:77:37:9d:66:62:b4:af:26:70:45:98:5d:60:c1:
                    d6:b7:dc:09:1e:1e:36:30:af:ab:dc:af:e5:d4:ec:
                    cb:c0:66:90:18:4d:7b:72:ff:1f:6c:c5:61:24:df:
                    ea:ab:08:fe:24:ed:ed:04:ef:39:0f:40:77:f9:4d:
                    3c:64:17:76:79:b8:9f:53:b3:67:db:32:79:c4:c1:
                    6e:42:83:3d:cb:6d:d8:d8:05:70:8f:84:64:0e:ae:
                    bb:7e:49:64:dd:4b:c0:c1:e7:6d:29:56:20:9d:b1:
                    8e:a2:b2:5c:f2:15:81:00:3c:a7:3e:de:10:25:ea:
                    6a:a6:4f:86:7b:22:58:0a:61:22:3c:82:85:79:70:
                    ab:0d:75:45:8a:80:37:3d:8a:c0:21:34:36:ca:90:
                    75:db:ad:df:ba:33:71:29:80:11:61:f9:5c:38:c5:
                    17:67:f1:fb:34:29:4e:05:87:07:44:8a:b8:d3:b1:
                    18:c5:72:04:18:08:3b:86:51:62:3c:3d:b5:20:04:
                    eb:5c:df:2e:76:0a:e4:46:09:3a:4a:23:ae:47:d1:
                    7e:16:1f:5f:2c:f4:66:9b:34:7f:75:41:4b:b8:63:
                    e5:10:7f:8c:0e:db:64:d9:ac:50:75:4b:76:69:a6:
                    86:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:16:FC:89:59:62:25:59:79:80:17:7D:55:62:A4:9A:C4:07:80:56
            X509v3 Authority Key Identifier:
                keyid:44:B7:D6:62:62:92:74:40:63:A0:02:9B:3E:21:4C:90:51:50:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/44B7D6626292744063A0029B3E214C905150E05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/34352e3138312e34362e302f32332d3233203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:7b:a3:b1:12:d3:af:03:31:d3:bd:bb:2b:e6:6f:0c:96:56:
         ef:82:e9:dc:06:8d:b0:84:85:0a:68:c1:69:ad:45:58:7c:ff:
         19:b6:a6:22:05:5d:f1:fa:24:32:a4:1e:a1:2b:b2:93:59:35:
         d7:09:25:b4:89:e1:ae:3a:25:95:ad:73:6e:58:26:b4:3a:d7:
         c0:97:aa:88:16:d6:c0:3d:db:a2:8b:8a:67:29:e3:02:f6:a3:
         8f:72:9b:f8:cb:08:a6:7d:7d:16:e9:5c:8e:8f:9f:03:72:6c:
         34:9b:22:b5:f4:6d:0e:a8:dc:38:39:aa:19:9b:47:3c:25:6d:
         ad:f7:dd:1c:27:dc:57:ed:a3:d6:e8:a7:be:e6:8d:8a:28:a1:
         3f:33:63:c7:49:c3:4b:f4:07:fb:df:4d:5c:aa:1f:ce:f8:44:
         25:c7:2f:95:55:c5:d2:29:f1:2b:1d:4a:26:0e:34:57:4b:87:
         91:b6:c9:c1:81:9d:20:ef:44:47:d9:6a:8a:9f:8d:45:9a:6f:
         c7:2c:53:99:65:cf:ce:4f:37:c5:d5:a3:76:6b:e3:7b:6f:27:
         86:39:8a:ca:1c:74:67:59:b3:f2:fb:93:a1:70:0a:ae:21:b1:
         ab:d0:69:b6:65:52:b7:3e:b2:9c:7a:8d:c5:54:9c:4c:26:46:
         d3:3f:9e:52
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDhSnNFfbR6NArd3E3RU+oP2ykNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRCN0Q2NjI2MjkyNzQ0MDYzQTAwMjlCM0UyMTRDOTA1
MTUwRTA1RDAeFw0yNDA1MTcxNjQ1MDBaFw0yNTA1MTYxNjUwMDBaMDMxMTAvBgNV
BAMTKDZFMTZGQzg5NTk2MjI1NTk3OTgwMTc3RDU1NjJBNDlBQzQwNzgwNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2SVv86cmJCBj54gEBNx13N51m
YrSvJnBFmF1gwda33AkeHjYwr6vcr+XU7MvAZpAYTXty/x9sxWEk3+qrCP4k7e0E
7zkPQHf5TTxkF3Z5uJ9Ts2fbMnnEwW5Cgz3LbdjYBXCPhGQOrrt+SWTdS8DB520p
ViCdsY6islzyFYEAPKc+3hAl6mqmT4Z7IlgKYSI8goV5cKsNdUWKgDc9isAhNDbK
kHXbrd+6M3EpgBFh+Vw4xRdn8fs0KU4FhwdEirjTsRjFcgQYCDuGUWI8PbUgBOtc
3y52CuRGCTpKI65H0X4WH18s9GabNH91QUu4Y+UQf4wO22TZrFB1S3ZppoYpAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUbhb8iVliJVl5gBd9VWKkmsQHgFYwHwYDVR0j
BBgwFoAURLfWYmKSdEBjoAKbPiFMkFFQ4F0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85OTBGRjlBRDUzMTA1NzRENjU0Q0E0NjlDM0M2OTc5QjIz
RDkzNEZDNUFFNjEwRkIxODZGMDZEQTY1MThCQTRBLzAvNDRCN0Q2NjI2MjkyNzQ0
MDYzQTAwMjlCM0UyMTRDOTA1MTUwRTA1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NEI3RDY2MjYyOTI3NDQwNjNB
MDAyOUIzRTIxNEM5MDUxNTBFMDVELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTkwRkY5QUQ1MzEwNTc0RDY1NENBNDY5QzNDNjk3OUIyM0Q5MzRGQzVB
RTYxMEZCMTg2RjA2REE2NTE4QkE0QS8wLzM0MzUyZTMxMzgzMTJlMzQzNjJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNzM3MzkzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS21LjAN
BgkqhkiG9w0BAQsFAAOCAQEAN3ujsRLTrwMx0727K+ZvDJZW74Lp3AaNsISFCmjB
aa1FWHz/GbamIgVd8fokMqQeoSuyk1k11wkltInhrjolla1zblgmtDrXwJeqiBbW
wD3boouKZynjAvajj3Kb+MsIpn19Fulcjo+fA3JsNJsitfRtDqjcODmqGZtHPCVt
rffdHCfcV+2j1uinvuaNiiihPzNjx0nDS/QH+99NXKofzvhEJccvlVXF0inxKx1K
Jg40V0uHkbbJwYGdIO9ER9lqip+NRZpvxyxTmWXPzk83xdWjdmvje28nhjmKyhx0
Z1mz8vuToXAKriGxq9BptmVStz6ynHqNxVScTCZG0z+eUg==
-----END CERTIFICATE-----
Generated at Mon Jun 24 20:46:18 2024 by rpki-client on console-fra.rpki-client.org