Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/34352e3136342e3133362e302f32322d3234203d3e20323635353536.roa
File:                     34352e3136342e3133362e302f32322d3234203d3e20323635353536.roa (raw, json)
Hash identifier:          P/AXkjyM2ufSkL+kk4cDzTzUxhREFG/RuK3fzfyKrjk=
Subject key identifier:   D4:85:75:DE:13:84:68:71:C2:7B:B2:A7:51:85:C2:CB:7F:6B:E6:AA
Certificate issuer:       /CN=2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3
Certificate serial:       3681E7E103E018ED646A6521553B056594D1FD6B
Authority key identifier: 21:55:D8:99:F5:71:21:56:D0:B4:E8:7A:3F:DF:C6:A0:E1:A3:FA:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/34352e3136342e3133362e302f32322d3234203d3e20323635353536.roa
Signing time:             Tue 05 Mar 2024 17:58:08 +0000
ROA not before:           Tue 05 Mar 2024 17:53:08 +0000
ROA not after:            Tue 04 Mar 2025 17:58:08 +0000
asID:                     265556
IP address blocks:        45.164.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:81:e7:e1:03:e0:18:ed:64:6a:65:21:55:3b:05:65:94:d1:fd:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3
        Validity
            Not Before: Mar  5 17:53:08 2024 GMT
            Not After : Mar  4 17:58:08 2025 GMT
        Subject: CN=D48575DE13846871C27BB2A75185C2CB7F6BE6AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b6:aa:8b:60:cd:57:59:6f:eb:87:77:ec:f9:
                    97:fe:41:df:f5:90:a3:e5:35:ae:69:36:d9:b1:c1:
                    e1:3d:66:8b:3d:fc:c4:f4:25:79:e4:75:b7:92:30:
                    bb:16:d7:66:ec:68:ce:da:d6:4d:0c:5f:be:07:1a:
                    88:3f:4d:1d:4a:ce:7d:a1:0b:64:b8:6e:11:63:fd:
                    62:47:a5:c8:13:74:46:b5:ca:58:7c:29:ad:fd:6d:
                    6a:8c:e0:a1:2d:40:52:ab:1c:a2:63:da:c6:fb:24:
                    8d:d0:5c:5f:ae:94:fb:62:ed:47:74:10:18:17:86:
                    0d:f8:09:e0:1b:cd:c5:d7:94:b0:87:c4:4a:26:e5:
                    17:89:78:76:3c:1b:0d:52:fd:bd:2b:b3:a8:1d:7c:
                    1b:5c:95:6f:9a:ac:ef:6c:65:e9:c8:f7:b2:97:1b:
                    a6:e9:3e:30:ad:00:75:39:f1:5f:15:da:ca:6f:7e:
                    6f:2d:5c:8c:de:b4:92:d1:7d:05:81:02:bb:57:37:
                    eb:ba:20:a1:0e:d5:c8:b9:8b:29:20:56:29:9d:53:
                    95:3d:fb:d1:29:85:9d:ec:9e:f1:35:86:47:d3:17:
                    22:62:b8:13:17:39:52:ab:50:a0:e5:ad:fd:48:11:
                    df:fa:0d:cf:c2:24:fd:59:d9:16:33:4d:f2:6f:39:
                    62:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:85:75:DE:13:84:68:71:C2:7B:B2:A7:51:85:C2:CB:7F:6B:E6:AA
            X509v3 Authority Key Identifier:
                keyid:21:55:D8:99:F5:71:21:56:D0:B4:E8:7A:3F:DF:C6:A0:E1:A3:FA:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/34352e3136342e3133362e302f32322d3234203d3e20323635353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:64:08:41:94:0c:5a:f4:c8:b0:b9:9b:64:12:43:0d:c2:67:
         6c:33:c6:7b:03:16:02:71:22:5a:41:d0:38:b7:ad:64:b1:07:
         44:43:e9:b9:7b:75:ef:b7:62:6f:1b:04:21:1a:6d:3c:e7:43:
         a3:55:b2:ed:b4:06:b5:9e:ef:b9:36:fa:13:03:cb:3a:45:32:
         b8:ef:65:33:e6:98:ac:35:fa:ee:98:81:ea:a2:77:af:e5:37:
         c0:c8:93:aa:cb:65:21:8c:42:3f:d9:ab:86:70:27:de:18:f9:
         14:fd:7e:97:fb:e9:89:91:50:dc:e5:da:54:75:59:1d:3e:f1:
         dd:73:23:e5:39:66:44:53:49:24:1d:62:07:1f:01:f6:f4:0e:
         ae:f2:ed:50:2c:b2:60:ab:61:05:84:78:79:33:52:c3:b4:ab:
         81:b5:c8:91:ce:53:81:37:a9:59:17:dd:33:6d:16:00:6a:66:
         af:58:df:ff:64:29:9d:96:05:ad:41:28:6d:d9:1a:36:41:e1:
         e4:68:28:33:80:17:20:f9:ae:82:da:b3:10:ec:1c:8f:2e:44:
         10:4b:bf:7f:ad:b9:10:67:55:95:57:4d:77:74:e8:31:29:c8:
         d8:bb:c6:55:dc:8f:8c:ba:33:df:90:10:aa:31:33:fa:dc:18:
         2a:f2:fd:e9
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUNoHn4QPgGO1kamUhVTsFZZTR/WswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE1NUQ4OTlGNTcxMjE1NkQwQjRFODdBM0ZERkM2QTBF
MUEzRkFDMzAeFw0yNDAzMDUxNzUzMDhaFw0yNTAzMDQxNzU4MDhaMDMxMTAvBgNV
BAMTKEQ0ODU3NURFMTM4NDY4NzFDMjdCQjJBNzUxODVDMkNCN0Y2QkU2QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0tqqLYM1XWW/rh3fs+Zf+Qd/1
kKPlNa5pNtmxweE9Zos9/MT0JXnkdbeSMLsW12bsaM7a1k0MX74HGog/TR1Kzn2h
C2S4bhFj/WJHpcgTdEa1ylh8Ka39bWqM4KEtQFKrHKJj2sb7JI3QXF+ulPti7Ud0
EBgXhg34CeAbzcXXlLCHxEom5ReJeHY8Gw1S/b0rs6gdfBtclW+arO9sZenI97KX
G6bpPjCtAHU58V8V2spvfm8tXIzetJLRfQWBArtXN+u6IKEO1ci5iykgVimdU5U9
+9EphZ3snvE1hkfTFyJiuBMXOVKrUKDlrf1IEd/6Dc/CJP1Z2RYzTfJvOWKlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU1IV13hOEaHHCe7KnUYXCy39r5qowHwYDVR0j
BBgwFoAUIVXYmfVxIVbQtOh6P9/GoOGj+sMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNDYxRTVBRDJBQjkxNUYwMzc5ODBBODQzRENFMzk5RjA5
MjIzNjFENzFGMTU3QUY4NjJGM0UzOUUwMjhEMzY2LzAvMjE1NUQ4OTlGNTcxMjE1
NkQwQjRFODdBM0ZERkM2QTBFMUEzRkFDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTU1RDg5OUY1NzEyMTU2RDBC
NEU4N0EzRkRGQzZBMEUxQTNGQUMzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTQ2MUU1QUQyQUI5MTVGMDM3OTgwQTg0M0RDRTM5OUYwOTIyMzYxRDcx
RjE1N0FGODYyRjNFMzlFMDI4RDM2Ni8wLzM0MzUyZTMxMzYzNDJlMzEzMzM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzUzNTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLaSI
MA0GCSqGSIb3DQEBCwUAA4IBAQCPZAhBlAxa9MiwuZtkEkMNwmdsM8Z7AxYCcSJa
QdA4t61ksQdEQ+m5e3Xvt2JvGwQhGm0850OjVbLttAa1nu+5NvoTA8s6RTK472Uz
5pisNfrumIHqonev5TfAyJOqy2UhjEI/2auGcCfeGPkU/X6X++mJkVDc5dpUdVkd
PvHdcyPlOWZEU0kkHWIHHwH29A6u8u1QLLJgq2EFhHh5M1LDtKuBtciRzlOBN6lZ
F90zbRYAamavWN//ZCmdlgWtQSht2Ro2QeHkaCgzgBcg+a6C2rMQ7ByPLkQQS79/
rbkQZ1WVV013dOgxKcjYu8ZV3I+MujPfkBCqMTP63Bgq8v3p
-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:39 2024 by rpki-client on console-fra.rpki-client.org