Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/34352e3138392e3235322e302f32322d3234203d3e20323635363133.roa
File:                     34352e3138392e3235322e302f32322d3234203d3e20323635363133.roa (raw, json)
Hash identifier:          C4FiXVW2uZCCZIZvuuTrdlzk5ZvxGLXEcwYUuPqUJuA=
Subject key identifier:   3F:12:80:DA:77:13:FE:69:AA:4F:EB:C3:91:B2:4C:89:24:3F:D9:A7
Certificate issuer:       /CN=322414D1DB98FF3F8C0C00272C00B290132C5CC4
Certificate serial:       4A517E8E911FEF34BAE5DD37647FBED309327DDA
Authority key identifier: 32:24:14:D1:DB:98:FF:3F:8C:0C:00:27:2C:00:B2:90:13:2C:5C:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/34352e3138392e3235322e302f32322d3234203d3e20323635363133.roa
Signing time:             Tue 05 Mar 2024 18:05:44 +0000
ROA not before:           Tue 05 Mar 2024 18:00:44 +0000
ROA not after:            Tue 04 Mar 2025 18:05:44 +0000
asID:                     265613
IP address blocks:        45.189.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 May 2024 05:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:51:7e:8e:91:1f:ef:34:ba:e5:dd:37:64:7f:be:d3:09:32:7d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322414D1DB98FF3F8C0C00272C00B290132C5CC4
        Validity
            Not Before: Mar  5 18:00:44 2024 GMT
            Not After : Mar  4 18:05:44 2025 GMT
        Subject: CN=3F1280DA7713FE69AA4FEBC391B24C89243FD9A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:1c:af:e7:53:5b:ba:bc:aa:21:6a:ab:d9:
                    3c:a5:70:af:6f:b3:86:5a:17:a3:48:1d:43:49:68:
                    32:7f:97:ab:85:94:f5:a2:e6:6e:7a:27:8a:5b:b7:
                    85:28:1c:d9:c6:7d:3e:6a:aa:a6:76:bb:4f:44:f9:
                    37:18:c6:e3:c8:5c:b0:a6:cf:63:bb:5b:6b:8a:1d:
                    93:13:25:01:74:f6:05:86:86:ac:7d:d2:12:24:70:
                    a2:5d:28:52:b9:5c:95:77:7d:16:55:3a:df:96:d9:
                    f4:a8:0c:63:1b:1d:27:8e:a2:7c:d1:6d:6c:6d:c6:
                    6e:a5:c7:b8:b3:b4:eb:ff:08:8b:61:c7:64:b6:47:
                    e3:de:e0:2b:8f:d2:d2:21:ff:0e:84:eb:62:dd:07:
                    c7:1a:50:ec:57:d6:e3:5d:47:0f:6b:56:9a:30:d5:
                    b3:e2:37:30:14:5b:1a:82:d9:b3:a2:83:cc:a0:51:
                    69:ea:cc:dc:7a:2a:85:ed:9f:b8:42:58:98:b3:94:
                    d7:9c:8b:8f:96:a9:2b:cd:23:93:6a:87:33:76:6a:
                    86:12:e8:09:03:84:f3:90:a5:bd:a2:ed:6a:3a:6d:
                    02:af:00:ce:93:d5:d8:63:35:4f:6c:2e:12:bc:83:
                    ce:a3:15:de:85:3a:83:8e:47:a8:41:b8:4d:f1:75:
                    71:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:12:80:DA:77:13:FE:69:AA:4F:EB:C3:91:B2:4C:89:24:3F:D9:A7
            X509v3 Authority Key Identifier:
                keyid:32:24:14:D1:DB:98:FF:3F:8C:0C:00:27:2C:00:B2:90:13:2C:5C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/34352e3138392e3235322e302f32322d3234203d3e20323635363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:1d:9e:3f:30:b1:eb:e2:d0:74:2d:e5:dc:d6:e8:d8:77:70:
         9b:e1:d1:76:29:14:31:4f:93:d1:2c:2b:21:d9:99:65:e0:8b:
         2a:19:bb:4c:9c:03:23:a1:f6:b9:33:05:3b:05:37:66:db:05:
         bf:cf:df:77:a5:2f:ba:20:da:fe:1d:6f:ee:5f:a9:5f:85:52:
         15:95:7f:2e:ae:7f:ce:a9:11:97:a7:ea:0d:03:70:1c:ea:96:
         dc:42:ed:fa:52:20:c6:b6:84:f1:62:54:ba:c4:9a:d6:de:23:
         01:21:94:7a:c1:4f:ac:37:99:cc:4f:e8:76:23:f5:33:eb:e7:
         7f:c8:28:9f:c6:41:fd:c3:27:0f:2a:e8:14:de:70:e8:78:8e:
         84:ae:a7:a6:df:95:f2:a9:94:c4:c9:4c:18:7c:37:c4:57:d1:
         21:86:1d:cf:c3:e1:49:26:50:ff:10:ea:b7:d9:59:c4:0a:e8:
         81:07:2b:4b:d4:7d:91:f1:84:bc:68:fc:c6:13:c0:8c:0e:a9:
         99:44:05:26:ea:39:5e:3e:b5:cb:8e:ec:d6:d2:50:04:9e:9c:
         4d:22:50:20:01:0f:73:80:a0:70:10:de:11:1c:83:f3:28:ce:
         9d:d1:84:46:90:fe:a3:1d:dc:81:b7:78:70:c2:f1:c5:fc:a2:
         5b:2c:c9:b1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUSlF+jpEf7zS65d03ZH++0wkyfdowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIyNDE0RDFEQjk4RkYzRjhDMEMwMDI3MkMwMEIyOTAx
MzJDNUNDNDAeFw0yNDAzMDUxODAwNDRaFw0yNTAzMDQxODA1NDRaMDMxMTAvBgNV
BAMTKDNGMTI4MERBNzcxM0ZFNjlBQTRGRUJDMzkxQjI0Qzg5MjQzRkQ5QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyihyv51NburyqIWqr2TylcK9v
s4ZaF6NIHUNJaDJ/l6uFlPWi5m56J4pbt4UoHNnGfT5qqqZ2u09E+TcYxuPIXLCm
z2O7W2uKHZMTJQF09gWGhqx90hIkcKJdKFK5XJV3fRZVOt+W2fSoDGMbHSeOonzR
bWxtxm6lx7iztOv/CIthx2S2R+Pe4CuP0tIh/w6E62LdB8caUOxX1uNdRw9rVpow
1bPiNzAUWxqC2bOig8ygUWnqzNx6KoXtn7hCWJizlNeci4+WqSvNI5NqhzN2aoYS
6AkDhPOQpb2i7Wo6bQKvAM6T1dhjNU9sLhK8g86jFd6FOoOOR6hBuE3xdXE5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUPxKA2ncT/mmqT+vDkbJMiSQ/2acwHwYDVR0j
BBgwFoAUMiQU0duY/z+MDAAnLACykBMsXMQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wOUMxMzkyRUQ3MUI0QjBFRTVCODE1NzExQTQ1QjkzMTgz
NjY3ODU2MjEwQjE3MzdFMTBDOThBM0RDOTUwOTk0LzAvMzIyNDE0RDFEQjk4RkYz
RjhDMEMwMDI3MkMwMEIyOTAxMzJDNUNDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMjI0MTREMURCOThGRjNGOEMw
QzAwMjcyQzAwQjI5MDEzMkM1Q0M0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDlDMTM5MkVENzFCNEIwRUU1QjgxNTcxMUE0NUI5MzE4MzY2Nzg1NjIx
MEIxNzM3RTEwQzk4QTNEQzk1MDk5NC8wLzM0MzUyZTMxMzgzOTJlMzIzNTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzMTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLb38
MA0GCSqGSIb3DQEBCwUAA4IBAQA7HZ4/MLHr4tB0LeXc1ujYd3Cb4dF2KRQxT5PR
LCsh2Zll4IsqGbtMnAMjofa5MwU7BTdm2wW/z993pS+6INr+HW/uX6lfhVIVlX8u
rn/OqRGXp+oNA3Ac6pbcQu36UiDGtoTxYlS6xJrW3iMBIZR6wU+sN5nMT+h2I/Uz
6+d/yCifxkH9wycPKugU3nDoeI6Erqem35XyqZTEyUwYfDfEV9Ehhh3Pw+FJJlD/
EOq32VnECuiBBytL1H2R8YS8aPzGE8CMDqmZRAUm6jlePrXLjuzW0lAEnpxNIlAg
AQ9zgKBwEN4RHIPzKM6d0YRGkP6jHdyBt3hwwvHF/KJbLMmx
-----END CERTIFICATE-----
Generated at Sat May 25 21:22:35 2024 by rpki-client on console-fra.rpki-client.org