Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0735EA22DDA461FBB5E15927E935AAA75CC50234C528933D6EB901422B8A78BA/0/34352e3233302e32312e302f32342d3234203d3e20323731383033.roa
File:                     34352e3233302e32312e302f32342d3234203d3e20323731383033.roa (raw, json)
Hash identifier:          Eb45aa/oBzVQGwN/HdcMT4VXUS83ZSAVRIpJXgW4+LE=
Subject key identifier:   1E:23:9E:B1:D6:C1:C4:C4:09:9E:AC:C9:BC:D7:C6:8D:20:B8:EC:D7
Certificate issuer:       /CN=BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC
Certificate serial:       7A8D1B7BCF91A606EE476FBAD30E61304A256EDB
Authority key identifier: BC:2E:4C:D2:EE:87:1C:1F:84:6B:EE:09:B5:44:CE:8C:CF:99:DC:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0735EA22DDA461FBB5E15927E935AAA75CC50234C528933D6EB901422B8A78BA/0/34352e3233302e32312e302f32342d3234203d3e20323731383033.roa
Signing time:             Tue 05 Mar 2024 17:42:26 +0000
ROA not before:           Tue 05 Mar 2024 17:37:26 +0000
ROA not after:            Tue 04 Mar 2025 17:42:26 +0000
asID:                     271803
IP address blocks:        45.230.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0735EA22DDA461FBB5E15927E935AAA75CC50234C528933D6EB901422B8A78BA/0/BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0735EA22DDA461FBB5E15927E935AAA75CC50234C528933D6EB901422B8A78BA/0/BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:8d:1b:7b:cf:91:a6:06:ee:47:6f:ba:d3:0e:61:30:4a:25:6e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC
        Validity
            Not Before: Mar  5 17:37:26 2024 GMT
            Not After : Mar  4 17:42:26 2025 GMT
        Subject: CN=1E239EB1D6C1C4C4099EACC9BCD7C68D20B8ECD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:36:cc:a0:91:ca:eb:1a:18:3e:bc:8c:98:74:
                    9c:8b:97:1f:02:cc:ac:25:ae:81:29:9e:60:23:bd:
                    da:41:77:70:10:22:dd:d1:cf:c3:a3:08:40:75:95:
                    f2:78:49:56:49:68:6c:25:c8:b5:08:be:d3:9f:56:
                    82:ae:84:78:28:99:a0:f2:73:47:4e:44:b6:0a:2f:
                    3e:bc:a4:f9:3c:db:6a:3a:26:e0:7e:28:96:06:f2:
                    7c:b6:d0:cc:0e:c8:cf:6b:19:ad:3a:c2:5c:3b:6c:
                    d1:52:44:73:b8:59:08:12:0c:d8:d0:a6:54:77:1d:
                    98:74:5a:11:83:f5:be:e5:d0:99:15:a7:b1:20:c6:
                    34:06:fd:f1:67:22:5a:7e:06:2d:47:6d:bb:88:b8:
                    0e:bb:d1:cd:79:c4:52:e2:96:55:04:8c:fd:c6:0a:
                    14:ee:72:69:50:a4:f8:17:54:10:62:10:d2:75:56:
                    a4:db:6b:7a:00:76:1f:eb:f4:d2:f4:9f:b2:03:99:
                    5d:e1:56:17:89:a7:de:c8:a5:4f:42:79:b1:3f:04:
                    e4:8e:eb:d5:6e:3f:4e:d4:ce:b9:86:f3:80:f6:38:
                    f4:12:11:56:63:04:86:a5:7b:0f:df:c5:0f:d0:75:
                    14:e8:3f:36:75:ad:b3:95:e2:fd:96:ab:cb:6f:e6:
                    b5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:23:9E:B1:D6:C1:C4:C4:09:9E:AC:C9:BC:D7:C6:8D:20:B8:EC:D7
            X509v3 Authority Key Identifier:
                keyid:BC:2E:4C:D2:EE:87:1C:1F:84:6B:EE:09:B5:44:CE:8C:CF:99:DC:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0735EA22DDA461FBB5E15927E935AAA75CC50234C528933D6EB901422B8A78BA/0/BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC2E4CD2EE871C1F846BEE09B544CE8CCF99DCEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0735EA22DDA461FBB5E15927E935AAA75CC50234C528933D6EB901422B8A78BA/0/34352e3233302e32312e302f32342d3234203d3e20323731383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:a1:3f:85:f0:66:69:45:ce:39:88:23:ce:57:d0:38:60:69:
         06:62:34:e5:d0:00:e3:02:1b:99:51:b7:09:0e:b3:fa:90:71:
         ce:3d:32:38:a6:9e:7e:66:bc:34:83:4e:34:e1:fe:b3:1e:c3:
         61:80:84:2d:00:6d:39:ad:a3:4a:21:ec:62:1a:af:13:98:86:
         bf:73:a0:f3:e1:35:fe:11:b7:b8:5b:98:f4:11:0b:90:b4:0d:
         84:d0:92:c4:a2:53:a9:b3:e0:0b:cd:78:5a:cd:c1:b5:e4:e9:
         90:42:59:3b:f8:48:0a:cd:39:8d:c9:ab:13:ad:dc:d9:99:f5:
         fe:47:9b:eb:88:3f:79:14:be:ea:c9:d6:8d:e0:7b:ae:77:e0:
         ef:85:10:71:66:83:f2:ed:ef:b9:b2:23:f4:5c:77:62:c7:38:
         85:58:8b:6b:23:1e:08:d6:e5:85:57:b8:10:83:ea:85:77:af:
         f2:8f:b6:b9:7b:5a:7e:34:c5:f9:07:21:b9:14:88:80:26:97:
         17:ea:8e:58:2f:d7:75:44:5f:4c:9a:f0:ae:96:04:ce:66:88:
         a1:a3:53:1f:e4:50:e5:b6:75:dc:a1:3b:44:95:94:3c:87:cd:
         7a:53:1d:3f:e1:a3:4f:33:6e:a7:29:3e:9a:fb:9d:a7:a8:58:
         08:76:81:28
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUeo0be8+RpgbuR2+60w5hMEolbtswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkMyRTRDRDJFRTg3MUMxRjg0NkJFRTA5QjU0NENFOEND
Rjk5RENFQzAeFw0yNDAzMDUxNzM3MjZaFw0yNTAzMDQxNzQyMjZaMDMxMTAvBgNV
BAMTKDFFMjM5RUIxRDZDMUM0QzQwOTlFQUNDOUJDRDdDNjhEMjBCOEVDRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWNsygkcrrGhg+vIyYdJyLlx8C
zKwlroEpnmAjvdpBd3AQIt3Rz8OjCEB1lfJ4SVZJaGwlyLUIvtOfVoKuhHgomaDy
c0dORLYKLz68pPk822o6JuB+KJYG8ny20MwOyM9rGa06wlw7bNFSRHO4WQgSDNjQ
plR3HZh0WhGD9b7l0JkVp7EgxjQG/fFnIlp+Bi1HbbuIuA670c15xFLillUEjP3G
ChTucmlQpPgXVBBiENJ1VqTba3oAdh/r9NL0n7IDmV3hVheJp97IpU9CebE/BOSO
69VuP07UzrmG84D2OPQSEVZjBIalew/fxQ/QdRToPzZ1rbOV4v2Wq8tv5rX1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUHiOesdbBxMQJnqzJvNfGjSC47NcwHwYDVR0j
BBgwFoAUvC5M0u6HHB+Ea+4JtUTOjM+Z3OwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNzM1RUEyMkREQTQ2MUZCQjVFMTU5MjdFOTM1QUFBNzVD
QzUwMjM0QzUyODkzM0Q2RUI5MDE0MjJCOEE3OEJBLzAvQkMyRTRDRDJFRTg3MUMx
Rjg0NkJFRTA5QjU0NENFOENDRjk5RENFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQzJFNENEMkVFODcxQzFGODQ2
QkVFMDlCNTQ0Q0U4Q0NGOTlEQ0VDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDczNUVBMjJEREE0NjFGQkI1RTE1OTI3RTkzNUFBQTc1Q0M1MDIzNEM1
Mjg5MzNENkVCOTAxNDIyQjhBNzhCQS8wLzM0MzUyZTMyMzMzMDJlMzIzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTM4MzAzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3mFTAN
BgkqhkiG9w0BAQsFAAOCAQEAlKE/hfBmaUXOOYgjzlfQOGBpBmI05dAA4wIbmVG3
CQ6z+pBxzj0yOKaefma8NINONOH+sx7DYYCELQBtOa2jSiHsYhqvE5iGv3Og8+E1
/hG3uFuY9BELkLQNhNCSxKJTqbPgC814Ws3BteTpkEJZO/hICs05jcmrE63c2Zn1
/keb64g/eRS+6snWjeB7rnfg74UQcWaD8u3vubIj9Fx3Ysc4hViLayMeCNblhVe4
EIPqhXev8o+2uXtafjTF+QchuRSIgCaXF+qOWC/XdURfTJrwrpYEzmaIoaNTH+RQ
5bZ13KE7RJWUPIfNelMdP+GjTzNupyk+mvudp6hYCHaBKA==
-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org