Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/34352e3232382e31362e302f32322d3232203d3e20323636363835.roa
File:                     34352e3232382e31362e302f32322d3232203d3e20323636363835.roa (raw, json)
Hash identifier:          JVb3eociJmVMgCFZE2iHGepHNBnf1h+uGomOzvr7gls=
Subject key identifier:   50:2C:9F:20:AB:D4:C9:E3:EF:04:CC:6C:49:55:7C:5F:C9:69:37:5E
Certificate issuer:       /CN=A91EA82506B0E7F6BACFA600950807C98CE9C2B3
Certificate serial:       1DA7AC91D2B7EB6301E229A79AE0C97851275D13
Authority key identifier: A9:1E:A8:25:06:B0:E7:F6:BA:CF:A6:00:95:08:07:C9:8C:E9:C2:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/34352e3232382e31362e302f32322d3232203d3e20323636363835.roa
Signing time:             Tue 05 Mar 2024 17:43:04 +0000
ROA not before:           Tue 05 Mar 2024 17:38:04 +0000
ROA not after:            Tue 04 Mar 2025 17:43:04 +0000
asID:                     266685
IP address blocks:        45.228.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a7:ac:91:d2:b7:eb:63:01:e2:29:a7:9a:e0:c9:78:51:27:5d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA82506B0E7F6BACFA600950807C98CE9C2B3
        Validity
            Not Before: Mar  5 17:38:04 2024 GMT
            Not After : Mar  4 17:43:04 2025 GMT
        Subject: CN=502C9F20ABD4C9E3EF04CC6C49557C5FC969375E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fc:27:a0:0d:23:f9:6d:67:5e:10:8c:59:fe:
                    98:3a:05:0d:02:c2:cb:4b:34:ac:39:4e:ad:6d:c8:
                    28:5c:b5:e2:5f:8c:b9:f6:bb:8f:78:b1:39:5c:35:
                    40:bf:6e:5b:e4:84:da:48:26:8a:52:5b:76:2f:8a:
                    48:45:40:76:30:45:a1:0a:bf:06:65:f1:0e:1f:41:
                    a8:23:20:b4:1e:d1:ec:d3:d9:a9:88:fc:c9:b0:78:
                    b8:97:3b:16:5b:81:40:72:10:f1:92:e0:52:95:2c:
                    9f:70:77:22:0f:0c:aa:c3:4a:ab:15:12:4d:2d:f1:
                    8a:ef:05:69:a4:37:aa:2e:9b:42:b3:87:5f:cf:85:
                    6d:a7:af:34:e4:99:84:52:1a:b3:d4:6f:ce:84:84:
                    4a:13:88:7c:c6:61:a5:2c:67:cd:e7:e4:2c:40:31:
                    bf:df:dd:90:28:8a:11:6f:fa:53:52:63:32:aa:5f:
                    d2:14:c5:ef:4d:28:4f:e9:16:5c:9b:a5:2a:08:af:
                    a4:83:30:ca:e6:30:e9:d6:d9:b0:55:18:88:3a:0a:
                    af:23:40:40:84:3c:47:f8:49:c2:c8:b8:ed:cf:69:
                    72:65:5b:2a:6f:6f:5a:c3:00:73:d2:45:98:f1:87:
                    54:2d:09:06:93:0f:03:3c:ff:8a:1d:69:dc:57:6c:
                    a7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2C:9F:20:AB:D4:C9:E3:EF:04:CC:6C:49:55:7C:5F:C9:69:37:5E
            X509v3 Authority Key Identifier:
                keyid:A9:1E:A8:25:06:B0:E7:F6:BA:CF:A6:00:95:08:07:C9:8C:E9:C2:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/34352e3232382e31362e302f32322d3232203d3e20323636363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:5d:a4:6c:09:d0:1d:47:48:5d:c2:82:df:7a:2c:c0:df:1d:
         e4:63:aa:81:61:0e:19:75:b6:11:b8:31:5b:65:c9:a4:24:82:
         5e:ac:7c:ac:ef:40:d4:6d:25:5e:b3:45:74:6a:93:ba:d6:68:
         1b:d2:be:a4:96:db:83:4e:84:84:0f:59:25:f8:d6:58:6b:1c:
         b5:45:d2:50:0f:94:88:bb:c2:5d:0b:f0:86:c3:8c:21:a9:ba:
         12:5b:1c:40:1a:2e:ea:17:e7:42:39:36:1c:1a:b3:f1:3b:43:
         38:6f:e3:cd:46:08:25:b4:dd:94:03:d2:25:a7:96:0d:a6:aa:
         7b:a4:24:0f:03:1b:c5:d8:d1:c8:4d:4d:0d:1e:b7:f5:36:76:
         db:4c:0a:b9:c1:c4:64:66:62:34:d9:f6:9b:2b:8d:48:86:9a:
         16:d6:73:27:e2:81:50:0e:b4:88:0b:4b:7f:18:68:1f:55:8d:
         b3:d8:71:ca:bf:bb:7b:56:89:20:bb:a1:13:5f:b8:67:e1:26:
         b0:df:fd:31:a3:4f:ba:c6:59:0d:51:4a:09:5d:aa:28:05:25:
         36:4f:de:e2:72:91:5c:99:04:b1:29:16:60:9d:6c:ca:f6:6b:
         51:0b:cf:27:de:cf:d2:f1:85:e5:0f:8c:7e:8f:a7:cc:88:47:
         95:be:77:a4
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHaeskdK362MB4imnmuDJeFEnXRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTkxRUE4MjUwNkIwRTdGNkJBQ0ZBNjAwOTUwODA3Qzk4
Q0U5QzJCMzAeFw0yNDAzMDUxNzM4MDRaFw0yNTAzMDQxNzQzMDRaMDMxMTAvBgNV
BAMTKDUwMkM5RjIwQUJENEM5RTNFRjA0Q0M2QzQ5NTU3QzVGQzk2OTM3NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY/CegDSP5bWdeEIxZ/pg6BQ0C
wstLNKw5Tq1tyChcteJfjLn2u494sTlcNUC/blvkhNpIJopSW3YvikhFQHYwRaEK
vwZl8Q4fQagjILQe0ezT2amI/MmweLiXOxZbgUByEPGS4FKVLJ9wdyIPDKrDSqsV
Ek0t8YrvBWmkN6oum0Kzh1/PhW2nrzTkmYRSGrPUb86EhEoTiHzGYaUsZ83n5CxA
Mb/f3ZAoihFv+lNSYzKqX9IUxe9NKE/pFlybpSoIr6SDMMrmMOnW2bBVGIg6Cq8j
QECEPEf4ScLIuO3PaXJlWypvb1rDAHPSRZjxh1QtCQaTDwM8/4odadxXbKcbAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUUCyfIKvUyePvBMxsSVV8X8lpN14wHwYDVR0j
BBgwFoAUqR6oJQaw5/a6z6YAlQgHyYzpwrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQjQ1OTJFQTFGQkU5OUJCMEU2RTE1MjQzMzVENDVDRTYw
MjVBMkE3Mzk5RDMyMDZGREY4QzExMUQ3RDkwRTQ1LzAvQTkxRUE4MjUwNkIwRTdG
NkJBQ0ZBNjAwOTUwODA3Qzk4Q0U5QzJCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BOTFFQTgyNTA2QjBFN0Y2QkFD
RkE2MDA5NTA4MDdDOThDRTlDMkIzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEI0NTkyRUExRkJFOTlCQjBFNkUxNTI0MzM1RDQ1Q0U2MDI1QTJBNzM5
OUQzMjA2RkRGOEMxMTFEN0Q5MEU0NS8wLzM0MzUyZTMyMzIzODJlMzEzNjJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNjM2MzgzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3kEDAN
BgkqhkiG9w0BAQsFAAOCAQEADF2kbAnQHUdIXcKC33oswN8d5GOqgWEOGXW2Ebgx
W2XJpCSCXqx8rO9A1G0lXrNFdGqTutZoG9K+pJbbg06EhA9ZJfjWWGsctUXSUA+U
iLvCXQvwhsOMIam6ElscQBou6hfnQjk2HBqz8TtDOG/jzUYIJbTdlAPSJaeWDaaq
e6QkDwMbxdjRyE1NDR639TZ220wKucHEZGZiNNn2myuNSIaaFtZzJ+KBUA60iAtL
fxhoH1WNs9hxyr+7e1aJILuhE1+4Z+EmsN/9MaNPusZZDVFKCV2qKAUlNk/e4nKR
XJkEsSkWYJ1syvZrUQvPJ97P0vGF5Q+Mfo+nzIhHlb53pA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org