Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/34352e3136332e3134322e302f32342d3234203d3e20323637363836.roa
File:                     34352e3136332e3134322e302f32342d3234203d3e20323637363836.roa (raw, json)
Hash identifier:          Q5l9XGppKTQoMIEzg8EsRxUqWj6DWaxQ+JLFLkd1zyg=
Subject key identifier:   32:92:FB:FB:2C:46:7E:13:D6:7C:1C:EB:C9:7B:DE:7E:24:10:1E:0C
Certificate issuer:       /CN=DA19E2D8391E84E168C007F85FDC2E229A1D9BC4
Certificate serial:       0FA582C266B88E86354CB55847C1C5E783896010
Authority key identifier: DA:19:E2:D8:39:1E:84:E1:68:C0:07:F8:5F:DC:2E:22:9A:1D:9B:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/34352e3136332e3134322e302f32342d3234203d3e20323637363836.roa
Signing time:             Tue 05 Mar 2024 17:48:35 +0000
ROA not before:           Tue 05 Mar 2024 17:43:35 +0000
ROA not after:            Tue 04 Mar 2025 17:48:35 +0000
asID:                     267686
IP address blocks:        45.163.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a5:82:c2:66:b8:8e:86:35:4c:b5:58:47:c1:c5:e7:83:89:60:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA19E2D8391E84E168C007F85FDC2E229A1D9BC4
        Validity
            Not Before: Mar  5 17:43:35 2024 GMT
            Not After : Mar  4 17:48:35 2025 GMT
        Subject: CN=3292FBFB2C467E13D67C1CEBC97BDE7E24101E0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:76:1f:10:ef:86:3d:1b:f3:a2:4c:73:bc:
                    40:58:0c:ca:78:f2:85:e9:83:8a:6c:34:fc:fe:e9:
                    67:1e:1c:22:bd:ff:91:0b:38:3e:9f:27:53:f4:dc:
                    fc:5d:82:bd:82:55:d8:fe:63:02:c1:39:b8:ae:da:
                    89:51:76:ee:07:64:e5:25:48:bc:bf:71:c9:7e:1b:
                    81:a3:6e:2a:f7:46:84:b1:2b:2f:15:4e:3d:3e:8b:
                    48:3b:cc:2e:5b:e0:11:60:04:d5:f4:64:30:74:40:
                    f2:5b:4e:15:22:42:e1:29:f0:12:70:1d:f3:6e:57:
                    38:18:81:41:43:2d:18:ee:55:be:6f:17:52:18:e6:
                    86:87:da:45:5e:eb:de:6c:80:db:8f:0e:f6:09:41:
                    db:64:10:63:c0:1a:73:8a:93:95:e3:ae:79:b5:dd:
                    cb:df:42:96:77:c4:02:3e:6f:66:6c:03:12:a8:38:
                    c4:5a:1c:e7:b4:fb:d9:b3:3b:b3:1a:3d:4e:b3:45:
                    43:5c:c6:cb:92:71:8e:c6:c3:30:45:5d:4b:a4:04:
                    ea:72:ee:0d:04:0b:47:a7:ac:47:6c:10:b6:ac:be:
                    d7:c2:bd:9f:ff:95:72:f5:99:a1:b0:6d:4d:cf:87:
                    ee:c3:48:0c:70:7f:53:a0:8b:07:1e:cd:88:73:fd:
                    87:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:92:FB:FB:2C:46:7E:13:D6:7C:1C:EB:C9:7B:DE:7E:24:10:1E:0C
            X509v3 Authority Key Identifier:
                keyid:DA:19:E2:D8:39:1E:84:E1:68:C0:07:F8:5F:DC:2E:22:9A:1D:9B:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/34352e3136332e3134322e302f32342d3234203d3e20323637363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:1e:77:ad:ff:80:ea:13:2d:28:36:16:2b:d9:3c:79:ee:12:
         d2:7f:02:3e:5f:74:5f:39:bd:77:e1:fd:c4:07:09:a7:0e:b6:
         68:03:de:67:a9:31:62:7f:ea:3d:b9:6b:29:be:58:01:81:29:
         d3:20:81:38:e7:27:92:2e:b8:61:b7:39:35:03:5f:db:a5:65:
         77:1f:eb:43:66:10:e2:01:f3:65:9a:c3:68:03:fe:35:93:80:
         ef:da:33:c3:0e:02:99:c7:0d:45:2e:e7:89:10:2d:85:ab:0b:
         cb:2b:10:af:a2:64:0d:1b:2d:ba:79:84:f4:9c:b9:a4:92:d6:
         b6:c2:36:78:d2:76:9e:ca:3c:31:8a:ce:d1:45:0d:48:11:e5:
         a1:92:fa:96:1b:84:c9:34:46:98:25:e3:6c:ef:78:75:dd:2e:
         ee:f2:d9:64:6d:24:fa:22:df:b7:cb:d6:38:d9:c4:c2:aa:c5:
         7d:58:30:8c:7a:32:9c:a1:7f:3b:0a:3e:13:72:c0:71:f8:40:
         3f:aa:7e:59:61:d7:76:ef:92:52:b3:fd:34:15:a7:d4:d0:9c:
         c5:39:cc:6a:98:13:4c:77:b8:fa:78:f2:60:bd:87:b8:6f:03:
         c2:1d:78:85:38:a6:f0:fe:05:c3:ce:fb:cb:4f:d7:64:e0:13:
         28:a7:be:71
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUD6WCwma4joY1TLVYR8HF54OJYBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREExOUUyRDgzOTFFODRFMTY4QzAwN0Y4NUZEQzJFMjI5
QTFEOUJDNDAeFw0yNDAzMDUxNzQzMzVaFw0yNTAzMDQxNzQ4MzVaMDMxMTAvBgNV
BAMTKDMyOTJGQkZCMkM0NjdFMTNENjdDMUNFQkM5N0JERTdFMjQxMDFFMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxOnYfEO+GPRvzokxzvEBYDMp4
8oXpg4psNPz+6WceHCK9/5ELOD6fJ1P03Pxdgr2CVdj+YwLBObiu2olRdu4HZOUl
SLy/ccl+G4Gjbir3RoSxKy8VTj0+i0g7zC5b4BFgBNX0ZDB0QPJbThUiQuEp8BJw
HfNuVzgYgUFDLRjuVb5vF1IY5oaH2kVe695sgNuPDvYJQdtkEGPAGnOKk5Xjrnm1
3cvfQpZ3xAI+b2ZsAxKoOMRaHOe0+9mzO7MaPU6zRUNcxsuScY7GwzBFXUukBOpy
7g0EC0enrEdsELasvtfCvZ//lXL1maGwbU3Ph+7DSAxwf1OgiwcezYhz/Yd1AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUMpL7+yxGfhPWfBzryXvefiQQHgwwHwYDVR0j
BBgwFoAU2hni2DkehOFowAf4X9wuIpodm8QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRjk4QkZCRkQ2NkIxNzE2RUI5RTZEQjkxNEJGNTVDOTY1
RDA3QjVEOUFDMDg0QTc2NkUxQzlCMzc3MEI5NzJFLzAvREExOUUyRDgzOTFFODRF
MTY4QzAwN0Y4NUZEQzJFMjI5QTFEOUJDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTE5RTJEODM5MUU4NEUxNjhD
MDA3Rjg1RkRDMkUyMjlBMUQ5QkM0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEY5OEJGQkZENjZCMTcxNkVCOUU2REI5MTRCRjU1Qzk2NUQwN0I1RDlB
QzA4NEE3NjZFMUM5QjM3NzBCOTcyRS8wLzM0MzUyZTMxMzYzMzJlMzEzNDMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzYzODM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALaOO
MA0GCSqGSIb3DQEBCwUAA4IBAQBYHnet/4DqEy0oNhYr2Tx57hLSfwI+X3RfOb13
4f3EBwmnDrZoA95nqTFif+o9uWspvlgBgSnTIIE45yeSLrhhtzk1A1/bpWV3H+tD
ZhDiAfNlmsNoA/41k4Dv2jPDDgKZxw1FLueJEC2FqwvLKxCvomQNGy26eYT0nLmk
kta2wjZ40naeyjwxis7RRQ1IEeWhkvqWG4TJNEaYJeNs73h13S7u8tlkbST6It+3
y9Y42cTCqsV9WDCMejKcoX87Cj4TcsBx+EA/qn5ZYdd275JSs/00FafU0JzFOcxq
mBNMd7j6ePJgvYe4bwPCHXiFOKbw/gXDzvvLT9dk4BMop75x
-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:47 2024 by rpki-client on console-ams.rpki-client.org