Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/34352e3233342e3132312e302f32342d3234203d3e20323636383030.roa
File:                     34352e3233342e3132312e302f32342d3234203d3e20323636383030.roa (raw, json)
Hash identifier:          B42ZtufovsW7NvUBu3xQ6Rf2Bj/NZzN8G/Mvnlfu058=
Subject key identifier:   01:D7:30:EE:8E:67:37:84:C4:DF:F9:01:91:A8:BC:D1:54:DC:2D:81
Certificate issuer:       /CN=E5E5F55E39001EF24D658430EB3A500D80E40348
Certificate serial:       5EA6CD04BDFB0A5A0EC0510270AB34169A695788
Authority key identifier: E5:E5:F5:5E:39:00:1E:F2:4D:65:84:30:EB:3A:50:0D:80:E4:03:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/34352e3233342e3132312e302f32342d3234203d3e20323636383030.roa
Signing time:             Tue 05 Mar 2024 18:20:08 +0000
ROA not before:           Tue 05 Mar 2024 18:15:08 +0000
ROA not after:            Tue 04 Mar 2025 18:20:08 +0000
asID:                     266800
IP address blocks:        45.234.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a6:cd:04:bd:fb:0a:5a:0e:c0:51:02:70:ab:34:16:9a:69:57:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5F55E39001EF24D658430EB3A500D80E40348
        Validity
            Not Before: Mar  5 18:15:08 2024 GMT
            Not After : Mar  4 18:20:08 2025 GMT
        Subject: CN=01D730EE8E673784C4DFF90191A8BCD154DC2D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:71:40:39:fe:14:bc:d7:9f:b6:44:0d:76:03:
                    29:18:d9:e2:66:d1:3b:29:49:bd:c6:a0:c5:38:f3:
                    b2:b4:aa:f2:94:b0:d8:ef:bc:30:42:11:40:72:a8:
                    b5:01:15:39:83:0b:1a:61:e4:f1:67:e8:b2:3f:7e:
                    95:d4:aa:b4:d4:2c:20:de:16:58:b1:e8:8b:ab:f7:
                    fb:ea:3f:d5:db:93:62:67:10:4c:df:74:da:d6:fb:
                    e1:34:ba:11:b8:e3:36:99:66:86:2c:59:ce:a9:fc:
                    6f:43:1a:9d:0c:71:9c:93:44:d4:f6:fa:e5:3b:e3:
                    9e:18:e8:69:c0:d4:54:6d:3a:d4:7b:9b:3c:7d:69:
                    88:65:7b:eb:db:6c:6f:72:70:8b:8d:20:0b:82:43:
                    90:b4:3e:0f:7d:4b:65:78:10:5d:7b:e1:9a:8d:bf:
                    67:f6:4e:86:cc:f3:68:18:9b:1b:db:5f:88:b3:4c:
                    51:d3:89:a3:ae:b8:64:e1:93:04:d1:81:8d:1d:6c:
                    65:74:63:f8:4d:82:f8:9e:29:96:c7:6d:c7:3e:14:
                    13:d5:80:11:33:08:73:4d:d0:5b:24:a7:b3:a0:97:
                    bc:6b:01:e7:3f:95:c5:18:c2:69:19:72:65:46:05:
                    c5:d5:8c:ed:56:27:08:14:14:f6:c0:16:04:78:a6:
                    30:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D7:30:EE:8E:67:37:84:C4:DF:F9:01:91:A8:BC:D1:54:DC:2D:81
            X509v3 Authority Key Identifier:
                keyid:E5:E5:F5:5E:39:00:1E:F2:4D:65:84:30:EB:3A:50:0D:80:E4:03:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/34352e3233342e3132312e302f32342d3234203d3e20323636383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:fb:a7:81:c7:d3:39:df:18:eb:08:4f:ec:0b:e1:6b:8f:4a:
         53:40:33:35:0a:2d:c2:27:f6:8c:f4:70:1b:9d:16:35:dd:f2:
         c9:f1:28:62:57:3e:9b:bf:8f:0a:b0:8c:07:f4:ed:2f:70:30:
         2a:84:ee:34:90:e1:d7:de:bb:8b:d0:66:f6:73:c5:5b:36:e7:
         d0:fb:f8:43:61:42:20:7d:36:5e:7d:52:2d:c2:39:f1:53:05:
         a3:96:19:36:8d:47:24:84:e9:5c:5c:b3:17:a5:4e:88:6e:17:
         8b:dc:35:00:45:b8:9e:ee:b0:1d:a4:d7:b2:cb:07:5d:44:f8:
         bb:1c:b0:42:38:d6:89:37:f3:9d:a7:cd:90:0c:21:d3:b6:ff:
         0d:49:17:15:8f:e4:40:0b:21:d9:51:ae:fb:97:63:4d:29:d7:
         71:c3:82:c5:a1:f9:bd:cd:b7:71:5c:d9:4a:5d:b8:a0:cf:0e:
         32:70:d3:ac:ee:a2:05:c4:4c:be:6c:f2:c7:82:d7:1f:a6:5a:
         89:75:f6:fa:f7:7c:56:ba:55:49:9c:12:25:79:84:a0:a6:83:
         93:14:45:1a:28:7e:51:f6:1b:ca:55:03:c0:f0:ad:72:be:fc:
         b0:3a:58:6b:c9:58:31:5e:43:06:dd:00:35:c5:ed:21:5a:2c:
         c5:2b:12:04
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXqbNBL37CloOwFECcKs0FpppV4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVFNUY1NUUzOTAwMUVGMjRENjU4NDMwRUIzQTUwMEQ4
MEU0MDM0ODAeFw0yNDAzMDUxODE1MDhaFw0yNTAzMDQxODIwMDhaMDMxMTAvBgNV
BAMTKDAxRDczMEVFOEU2NzM3ODRDNERGRjkwMTkxQThCQ0QxNTREQzJEODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjcUA5/hS815+2RA12AykY2eJm
0TspSb3GoMU487K0qvKUsNjvvDBCEUByqLUBFTmDCxph5PFn6LI/fpXUqrTULCDe
Flix6Iur9/vqP9Xbk2JnEEzfdNrW++E0uhG44zaZZoYsWc6p/G9DGp0McZyTRNT2
+uU7454Y6GnA1FRtOtR7mzx9aYhle+vbbG9ycIuNIAuCQ5C0Pg99S2V4EF174ZqN
v2f2TobM82gYmxvbX4izTFHTiaOuuGThkwTRgY0dbGV0Y/hNgvieKZbHbcc+FBPV
gBEzCHNN0Fskp7Ogl7xrAec/lcUYwmkZcmVGBcXVjO1WJwgUFPbAFgR4pjDlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUAdcw7o5nN4TE3/kBkai80VTcLYEwHwYDVR0j
BBgwFoAU5eX1XjkAHvJNZYQw6zpQDYDkA0gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRUVDRTU0MTJDQjA1NzgzRjE0NDQxQzkzQzJEMUY2MkM1
NDRCOTE3RUFGREY3NTY1NUI0QTg5NkUwN0RFMjE5LzAvRTVFNUY1NUUzOTAwMUVG
MjRENjU4NDMwRUIzQTUwMEQ4MEU0MDM0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUU1RjU1RTM5MDAxRUYyNEQ2
NTg0MzBFQjNBNTAwRDgwRTQwMzQ4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEVFQ0U1NDEyQ0IwNTc4M0YxNDQ0MUM5M0MyRDFGNjJDNTQ0QjkxN0VB
RkRGNzU2NTVCNEE4OTZFMDdERTIxOS8wLzM0MzUyZTMyMzMzNDJlMzEzMjMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzgzMDMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALep5
MA0GCSqGSIb3DQEBCwUAA4IBAQBt+6eBx9M53xjrCE/sC+Frj0pTQDM1Ci3CJ/aM
9HAbnRY13fLJ8ShiVz6bv48KsIwH9O0vcDAqhO40kOHX3ruL0Gb2c8VbNufQ+/hD
YUIgfTZefVItwjnxUwWjlhk2jUckhOlcXLMXpU6IbheL3DUARbie7rAdpNeyywdd
RPi7HLBCONaJN/Odp82QDCHTtv8NSRcVj+RACyHZUa77l2NNKddxw4LFofm9zbdx
XNlKXbigzw4ycNOs7qIFxEy+bPLHgtcfplqJdfb693xWulVJnBIleYSgpoOTFEUa
KH5R9hvKVQPA8K1yvvywOlhryVgxXkMG3QA1xe0hWizFKxIE
-----END CERTIFICATE-----
Generated at Fri May 10 23:02:23 2024 by rpki-client on console-ams.rpki-client.org