Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/34352e3232382e31392e302f32342d3234203d3e20323636363835.roa
File:                     34352e3232382e31392e302f32342d3234203d3e20323636363835.roa (raw, json)
Hash identifier:          tOx//Jg85isFQgmNEWO+nQTaLDjWjZSwUK99MawIwwo=
Subject key identifier:   DE:1A:A4:54:CC:A6:4F:A0:88:2E:93:97:39:E5:5C:B1:FE:45:70:3D
Certificate issuer:       /CN=A91EA82506B0E7F6BACFA600950807C98CE9C2B3
Certificate serial:       0605465FA1963C9B91F68F3FEB8E5CA2B7B5638B
Authority key identifier: A9:1E:A8:25:06:B0:E7:F6:BA:CF:A6:00:95:08:07:C9:8C:E9:C2:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/34352e3232382e31392e302f32342d3234203d3e20323636363835.roa
Signing time:             Tue 05 Mar 2024 17:43:03 +0000
ROA not before:           Tue 05 Mar 2024 17:38:03 +0000
ROA not after:            Tue 04 Mar 2025 17:43:03 +0000
asID:                     266685
IP address blocks:        45.228.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:05:46:5f:a1:96:3c:9b:91:f6:8f:3f:eb:8e:5c:a2:b7:b5:63:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA82506B0E7F6BACFA600950807C98CE9C2B3
        Validity
            Not Before: Mar  5 17:38:03 2024 GMT
            Not After : Mar  4 17:43:03 2025 GMT
        Subject: CN=DE1AA454CCA64FA0882E939739E55CB1FE45703D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cc:b8:d7:a2:fa:7d:f3:af:39:16:d1:4d:7d:
                    a4:d5:29:ee:af:aa:06:02:00:27:db:84:4b:65:38:
                    6b:d8:7e:39:8b:b2:10:77:02:ac:80:a5:21:e0:67:
                    b9:80:d0:e4:21:41:f3:d3:7f:3e:5c:d2:cb:c7:73:
                    db:70:f9:0b:a7:f7:2e:3c:f6:a8:d0:26:45:b4:67:
                    9a:74:44:cf:eb:a8:d7:b9:a5:0a:39:60:74:98:6d:
                    8b:db:b5:6c:03:9c:7b:2d:c8:74:37:06:6a:ea:c8:
                    70:93:a2:17:5b:db:30:e8:71:49:c6:85:80:c9:d9:
                    54:7a:af:31:aa:6f:ce:5c:58:a0:06:86:eb:56:cf:
                    46:9e:bc:5e:a8:43:6a:c7:98:6b:68:8c:8c:d3:6f:
                    ed:3c:b8:a0:70:b3:a0:45:50:39:f4:0c:cc:97:66:
                    7b:f5:62:1e:83:48:c8:7b:9f:e8:5b:75:c6:a3:79:
                    3f:1f:8d:65:1f:4f:b1:94:51:47:c5:83:47:42:16:
                    9f:b0:34:06:b7:ab:5f:6a:a3:e0:8b:0e:35:8b:d1:
                    f2:98:67:fc:3e:8b:b6:60:ad:af:86:17:02:01:c8:
                    7d:c8:99:fc:3f:d8:f8:1e:e0:a6:93:f5:0d:7e:36:
                    90:2a:dd:b9:45:d8:67:aa:3d:c4:11:8c:90:31:d1:
                    15:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1A:A4:54:CC:A6:4F:A0:88:2E:93:97:39:E5:5C:B1:FE:45:70:3D
            X509v3 Authority Key Identifier:
                keyid:A9:1E:A8:25:06:B0:E7:F6:BA:CF:A6:00:95:08:07:C9:8C:E9:C2:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/34352e3232382e31392e302f32342d3234203d3e20323636363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:6b:92:2f:b3:17:42:79:3c:39:31:ec:b5:a4:bb:5c:74:66:
         a9:dd:25:19:c9:b8:59:50:a9:c5:e9:f6:28:31:d8:95:d1:ef:
         a4:13:8e:dd:7c:3a:58:6b:a6:37:fc:47:05:83:95:87:8d:a0:
         59:0d:33:c2:39:d6:28:c7:43:fe:e2:2f:1b:d3:5b:d0:e9:47:
         c1:69:e6:f0:55:ba:c5:9b:9f:f6:97:8c:d5:fb:8b:50:d2:da:
         fb:10:ea:05:7b:1f:14:05:ab:ce:ba:82:fe:94:f8:2e:cb:79:
         ca:cb:6e:8a:53:41:16:9d:05:6a:7f:b5:8b:4d:31:78:03:2e:
         49:36:f5:1c:8a:7b:73:bc:9d:f5:b6:04:a3:de:40:c8:6d:d2:
         0e:6f:7c:40:6a:bd:88:4a:7b:c3:9c:69:29:07:2f:36:21:91:
         bd:da:8f:9a:0e:a9:8b:e4:d7:98:e1:af:05:82:10:2a:62:9c:
         12:aa:32:65:5b:3d:fd:89:50:9f:e1:3b:60:9c:56:10:3c:ce:
         c3:a0:c3:c4:b2:31:34:ab:bf:16:64:6f:f4:7b:de:31:ff:4a:
         03:1f:2a:ae:c8:58:32:37:ed:1f:41:15:a1:07:83:74:f4:52:
         24:46:aa:d4:6a:35:70:f1:ea:ff:c1:54:8a:ee:31:a4:de:f6:
         65:d0:06:a3
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUBgVGX6GWPJuR9o8/645core1Y4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTkxRUE4MjUwNkIwRTdGNkJBQ0ZBNjAwOTUwODA3Qzk4
Q0U5QzJCMzAeFw0yNDAzMDUxNzM4MDNaFw0yNTAzMDQxNzQzMDNaMDMxMTAvBgNV
BAMTKERFMUFBNDU0Q0NBNjRGQTA4ODJFOTM5NzM5RTU1Q0IxRkU0NTcwM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChzLjXovp98685FtFNfaTVKe6v
qgYCACfbhEtlOGvYfjmLshB3AqyApSHgZ7mA0OQhQfPTfz5c0svHc9tw+Qun9y48
9qjQJkW0Z5p0RM/rqNe5pQo5YHSYbYvbtWwDnHstyHQ3BmrqyHCTohdb2zDocUnG
hYDJ2VR6rzGqb85cWKAGhutWz0aevF6oQ2rHmGtojIzTb+08uKBws6BFUDn0DMyX
Znv1Yh6DSMh7n+hbdcajeT8fjWUfT7GUUUfFg0dCFp+wNAa3q19qo+CLDjWL0fKY
Z/w+i7Zgra+GFwIByH3Imfw/2Pge4KaT9Q1+NpAq3blF2GeqPcQRjJAx0RUZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU3hqkVMymT6CILpOXOeVcsf5FcD0wHwYDVR0j
BBgwFoAUqR6oJQaw5/a6z6YAlQgHyYzpwrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQjQ1OTJFQTFGQkU5OUJCMEU2RTE1MjQzMzVENDVDRTYw
MjVBMkE3Mzk5RDMyMDZGREY4QzExMUQ3RDkwRTQ1LzAvQTkxRUE4MjUwNkIwRTdG
NkJBQ0ZBNjAwOTUwODA3Qzk4Q0U5QzJCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BOTFFQTgyNTA2QjBFN0Y2QkFD
RkE2MDA5NTA4MDdDOThDRTlDMkIzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEI0NTkyRUExRkJFOTlCQjBFNkUxNTI0MzM1RDQ1Q0U2MDI1QTJBNzM5
OUQzMjA2RkRGOEMxMTFEN0Q5MEU0NS8wLzM0MzUyZTMyMzIzODJlMzEzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM2MzgzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3kEzAN
BgkqhkiG9w0BAQsFAAOCAQEAQGuSL7MXQnk8OTHstaS7XHRmqd0lGcm4WVCpxen2
KDHYldHvpBOO3Xw6WGumN/xHBYOVh42gWQ0zwjnWKMdD/uIvG9Nb0OlHwWnm8FW6
xZuf9peM1fuLUNLa+xDqBXsfFAWrzrqC/pT4Lst5ystuilNBFp0Fan+1i00xeAMu
STb1HIp7c7yd9bYEo95AyG3SDm98QGq9iEp7w5xpKQcvNiGRvdqPmg6pi+TXmOGv
BYIQKmKcEqoyZVs9/YlQn+E7YJxWEDzOw6DDxLIxNKu/FmRv9HveMf9KAx8qrshY
MjftH0EVoQeDdPRSJEaq1Go1cPHq/8FUiu4xpN72ZdAGow==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org