Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/34352e3139312e38382e302f32322d3234203d3e20323639383837.roa
File:                     34352e3139312e38382e302f32322d3234203d3e20323639383837.roa (raw, json)
Hash identifier:          xdR9lX6ZkMpd2xxt3M2/ezTIY1wCqjhbMMe+1PCvvb4=
Subject key identifier:   00:B2:E2:CA:66:C9:99:2C:99:4A:19:97:34:07:35:BB:F3:C4:97:88
Certificate issuer:       /CN=9F12506BED8DAFE7AD724FA19BA1A600CB9F1459
Certificate serial:       4012C1277217330F4E2536B5322882F7EF8E5472
Authority key identifier: 9F:12:50:6B:ED:8D:AF:E7:AD:72:4F:A1:9B:A1:A6:00:CB:9F:14:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/34352e3139312e38382e302f32322d3234203d3e20323639383837.roa
Signing time:             Tue 05 Mar 2024 18:05:21 +0000
ROA not before:           Tue 05 Mar 2024 18:00:21 +0000
ROA not after:            Tue 04 Mar 2025 18:05:21 +0000
asID:                     269887
IP address blocks:        45.191.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:12:c1:27:72:17:33:0f:4e:25:36:b5:32:28:82:f7:ef:8e:54:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F12506BED8DAFE7AD724FA19BA1A600CB9F1459
        Validity
            Not Before: Mar  5 18:00:21 2024 GMT
            Not After : Mar  4 18:05:21 2025 GMT
        Subject: CN=00B2E2CA66C9992C994A1997340735BBF3C49788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:73:a8:21:38:98:8e:1d:b9:fc:a1:2f:03:
                    27:9b:cd:41:81:62:c1:8a:41:d5:54:ea:a2:9d:73:
                    4f:2b:8b:42:42:43:4a:44:73:d9:69:c6:21:11:6f:
                    2e:18:12:c8:c6:ff:54:df:31:2e:87:cb:80:6c:00:
                    33:33:ec:58:e6:7e:a9:8f:f9:a0:2d:75:7d:9f:a3:
                    44:d3:17:3a:65:00:ee:b2:ff:b2:45:2d:57:67:eb:
                    1e:bc:89:26:90:47:cd:1c:f1:ad:ce:b7:67:60:38:
                    f0:e0:40:1f:01:6d:4c:19:f2:fe:d6:4e:7b:4b:97:
                    1a:66:a4:e0:d6:9c:4a:f1:bb:27:3e:a3:b8:86:8a:
                    86:c0:eb:9d:04:78:42:af:f2:a6:1b:cc:b3:e5:42:
                    a3:bf:0b:96:2d:2c:c0:d7:41:f5:2c:50:99:5c:3b:
                    48:28:28:51:93:b1:8c:75:50:e4:32:de:ac:82:07:
                    4b:e7:10:ad:ec:5e:1e:e7:b4:2e:48:6c:4b:24:2b:
                    2e:e5:e5:13:8f:9a:ef:4b:97:80:96:09:8e:f3:75:
                    16:5b:79:db:1e:d5:8e:db:28:80:50:76:93:0c:b5:
                    83:f2:8f:26:e4:78:71:4c:c3:f6:91:55:49:c2:b7:
                    49:f3:2e:36:f1:2b:7a:22:46:eb:2f:e2:e7:ad:27:
                    61:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B2:E2:CA:66:C9:99:2C:99:4A:19:97:34:07:35:BB:F3:C4:97:88
            X509v3 Authority Key Identifier:
                keyid:9F:12:50:6B:ED:8D:AF:E7:AD:72:4F:A1:9B:A1:A6:00:CB:9F:14:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/34352e3139312e38382e302f32322d3234203d3e20323639383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:2c:bb:d8:d8:52:af:d4:56:93:bf:5d:53:2c:e4:37:42:04:
         0e:50:40:9f:f1:c0:b2:93:11:18:07:2e:ed:c4:e3:63:9b:63:
         31:f6:6b:06:a3:0d:32:3a:4d:ed:16:37:6e:45:28:92:4c:d1:
         89:f2:0d:7b:41:c9:b9:e2:99:8f:d8:6a:a6:29:59:6a:33:bd:
         13:f4:ff:17:e9:d5:bc:a9:e0:81:1a:be:96:00:48:ab:62:19:
         6a:4b:f1:c5:2f:06:54:07:77:98:9b:05:da:79:3f:19:d1:b1:
         e4:a6:67:2b:f0:ef:f5:22:40:1d:8a:0a:70:ac:a1:2a:ed:ac:
         f5:ff:fc:8d:9a:ab:9d:ce:14:20:00:63:1c:63:58:85:94:39:
         bb:70:3f:74:e6:30:e3:66:e0:ba:bb:12:04:79:49:fa:4e:6e:
         19:0d:95:35:40:82:b7:f9:48:6d:38:f5:60:88:be:f7:1c:2c:
         00:37:dd:d3:60:6a:3d:07:15:71:1d:41:74:30:5b:74:c6:dc:
         97:84:1b:3d:b7:10:bb:1a:e0:f3:0a:ee:4e:43:6b:5e:15:e1:
         6f:b6:63:07:35:de:15:29:95:83:20:17:be:12:64:ca:5e:b7:
         05:1c:af:3f:3c:c7:60:8f:67:0a:27:08:0b:c8:21:ab:ad:ec:
         c2:86:7b:6b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQBLBJ3IXMw9OJTa1MiiC9++OVHIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUYxMjUwNkJFRDhEQUZFN0FENzI0RkExOUJBMUE2MDBD
QjlGMTQ1OTAeFw0yNDAzMDUxODAwMjFaFw0yNTAzMDQxODA1MjFaMDMxMTAvBgNV
BAMTKDAwQjJFMkNBNjZDOTk5MkM5OTRBMTk5NzM0MDczNUJCRjNDNDk3ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE8HOoITiYjh25/KEvAyebzUGB
YsGKQdVU6qKdc08ri0JCQ0pEc9lpxiERby4YEsjG/1TfMS6Hy4BsADMz7FjmfqmP
+aAtdX2fo0TTFzplAO6y/7JFLVdn6x68iSaQR80c8a3Ot2dgOPDgQB8BbUwZ8v7W
TntLlxpmpODWnErxuyc+o7iGiobA650EeEKv8qYbzLPlQqO/C5YtLMDXQfUsUJlc
O0goKFGTsYx1UOQy3qyCB0vnEK3sXh7ntC5IbEskKy7l5ROPmu9Ll4CWCY7zdRZb
edse1Y7bKIBQdpMMtYPyjybkeHFMw/aRVUnCt0nzLjbxK3oiRusv4uetJ2HDAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUALLiymbJmSyZShmXNAc1u/PEl4gwHwYDVR0j
BBgwFoAUnxJQa+2Nr+etck+hm6GmAMufFFkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMjkwQ0RCMTQwOTE2NjEwRDU2ODgwODM2QTdDQzIxMzE0
QjhEM0REMDg3QzdCMzU3RDdFQUVCOUUwQzlBMDgyLzAvOUYxMjUwNkJFRDhEQUZF
N0FENzI0RkExOUJBMUE2MDBDQjlGMTQ1OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjEyNTA2QkVEOERBRkU3QUQ3
MjRGQTE5QkExQTYwMENCOUYxNDU5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDI5MENEQjE0MDkxNjYxMEQ1Njg4MDgzNkE3Q0MyMTMxNEI4RDNERDA4
N0M3QjM1N0Q3RUFFQjlFMEM5QTA4Mi8wLzM0MzUyZTMxMzkzMTJlMzgzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzOTM4MzgzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2/WDAN
BgkqhkiG9w0BAQsFAAOCAQEAeiy72NhSr9RWk79dUyzkN0IEDlBAn/HAspMRGAcu
7cTjY5tjMfZrBqMNMjpN7RY3bkUokkzRifINe0HJueKZj9hqpilZajO9E/T/F+nV
vKnggRq+lgBIq2IZakvxxS8GVAd3mJsF2nk/GdGx5KZnK/Dv9SJAHYoKcKyhKu2s
9f/8jZqrnc4UIABjHGNYhZQ5u3A/dOYw42bgursSBHlJ+k5uGQ2VNUCCt/lIbTj1
YIi+9xwsADfd02BqPQcVcR1BdDBbdMbcl4QbPbcQuxrg8wruTkNrXhXhb7ZjBzXe
FSmVgyAXvhJkyl63BRyvPzzHYI9nCicIC8ghq63swoZ7aw==
-----END CERTIFICATE-----
Generated at Tue Nov 19 04:01:16 2024 by rpki-client on console-ams.rpki-client.org