Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/34352e3136312e34372e302f32342d3234203d3e20323636393032.roa
File:                     34352e3136312e34372e302f32342d3234203d3e20323636393032.roa (raw, json)
Hash identifier:          LSa7k3uW2MkQtG6D3WlKswxlOV+3FRNlJnYXKMvMX6c=
Subject key identifier:   2B:EC:04:74:91:57:2A:9D:DF:DF:11:56:60:F2:97:E1:DA:75:D8:57
Certificate issuer:       /CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A
Certificate serial:       29BC058EBF8C35EB7A31FBB396E2F354F774C20D
Authority key identifier: 25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/34352e3136312e34372e302f32342d3234203d3e20323636393032.roa
Signing time:             Tue 05 Mar 2024 17:46:24 +0000
ROA not before:           Tue 05 Mar 2024 17:41:24 +0000
ROA not after:            Tue 04 Mar 2025 17:46:24 +0000
asID:                     266902
IP address blocks:        45.161.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:bc:05:8e:bf:8c:35:eb:7a:31:fb:b3:96:e2:f3:54:f7:74:c2:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A
        Validity
            Not Before: Mar  5 17:41:24 2024 GMT
            Not After : Mar  4 17:46:24 2025 GMT
        Subject: CN=2BEC047491572A9DDFDF115660F297E1DA75D857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:31:34:b9:67:31:95:72:40:21:60:8f:3a:
                    7a:1a:c5:11:97:c2:44:0e:f0:f2:67:41:b2:64:82:
                    fe:f2:16:a6:46:41:41:4c:7c:98:d5:ab:cb:9d:7b:
                    3f:63:f3:43:f2:41:ea:ca:c0:93:38:53:6a:0c:c4:
                    26:fe:74:07:f3:60:74:01:b2:d4:d6:17:77:01:ea:
                    4c:2e:8d:40:3c:63:19:ab:d1:96:7c:02:b7:9c:63:
                    d5:c3:a7:e9:49:f0:32:2d:96:09:4b:00:5b:9c:0b:
                    74:42:3f:f1:4d:6d:f5:c0:70:86:36:1b:ed:39:96:
                    ae:99:f7:79:7b:59:da:ab:ca:5c:82:78:e9:89:e8:
                    23:6d:70:8a:82:6f:df:dd:bc:51:d8:74:04:38:77:
                    96:3e:eb:54:04:aa:ad:c5:63:26:2e:a9:08:22:2b:
                    bb:9c:0e:41:3d:0d:87:29:a9:51:f1:54:dc:a6:63:
                    79:97:29:49:93:35:6d:23:ce:3d:69:73:f1:de:24:
                    8f:f1:9a:23:ff:02:44:03:e4:1d:27:ad:c9:69:e1:
                    e5:9d:8b:b6:72:7e:98:87:4e:19:5d:11:8a:95:91:
                    4f:8b:c1:da:b6:72:66:04:6b:e4:89:5f:a5:e1:38:
                    ea:b1:ea:1a:e7:d3:c1:ea:a6:20:47:01:9d:7f:db:
                    39:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EC:04:74:91:57:2A:9D:DF:DF:11:56:60:F2:97:E1:DA:75:D8:57
            X509v3 Authority Key Identifier:
                keyid:25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/34352e3136312e34372e302f32342d3234203d3e20323636393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:4a:42:c1:94:53:c4:81:a5:ec:7f:52:ed:9a:f9:cb:86:03:
         7c:d1:f1:40:90:db:d1:d3:0c:f3:1d:e9:1e:b2:f8:d5:a8:b1:
         3f:36:96:46:5b:68:0f:e6:98:91:8b:a9:f8:89:40:17:53:c9:
         c2:9f:54:b1:7c:a3:7c:8f:0b:3b:84:f6:e6:b2:27:46:c4:1f:
         07:d7:03:a1:db:df:fc:cb:e3:cc:f3:39:f4:a5:05:be:9e:eb:
         16:27:90:3d:7e:4f:5d:75:e4:ac:15:6e:75:f4:20:fb:36:e0:
         01:e6:37:7d:37:e8:c0:6d:07:12:21:9b:3f:8b:0c:7c:0f:60:
         d5:23:3f:5f:dc:02:cc:93:c9:59:3d:fd:10:b3:e7:33:ee:8e:
         a4:8c:d5:10:39:12:a8:6b:5b:71:27:a2:ae:a4:de:62:19:87:
         eb:be:d1:35:67:7f:91:64:38:81:5c:3d:3b:b4:d0:61:0d:31:
         a8:20:d2:11:15:41:86:9d:f6:20:f5:3e:48:f2:b4:b3:4c:d4:
         48:c9:90:d2:08:e8:73:a9:cf:91:80:eb:06:7c:f3:3a:6f:cc:
         dc:f3:39:cd:ed:a5:e0:03:dd:92:8d:0c:fb:ea:df:74:0e:f7:
         bf:59:98:87:d8:31:eb:df:70:cf:d1:bc:61:db:78:66:68:ee:
         18:80:12:54
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUKbwFjr+MNet6MfuzluLzVPd0wg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVGMjhFRjBEMEY5M0E1MjhCMzVFMDdGMDREQ0NEN0M1
QzI2NDA2QTAeFw0yNDAzMDUxNzQxMjRaFw0yNTAzMDQxNzQ2MjRaMDMxMTAvBgNV
BAMTKDJCRUMwNDc0OTE1NzJBOURERkRGMTE1NjYwRjI5N0UxREE3NUQ4NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo5zE0uWcxlXJAIWCPOnoaxRGX
wkQO8PJnQbJkgv7yFqZGQUFMfJjVq8udez9j80PyQerKwJM4U2oMxCb+dAfzYHQB
stTWF3cB6kwujUA8Yxmr0ZZ8ArecY9XDp+lJ8DItlglLAFucC3RCP/FNbfXAcIY2
G+05lq6Z93l7WdqrylyCeOmJ6CNtcIqCb9/dvFHYdAQ4d5Y+61QEqq3FYyYuqQgi
K7ucDkE9DYcpqVHxVNymY3mXKUmTNW0jzj1pc/HeJI/xmiP/AkQD5B0nrclp4eWd
i7ZyfpiHThldEYqVkU+Lwdq2cmYEa+SJX6XhOOqx6hrn08HqpiBHAZ1/2zmlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUK+wEdJFXKp3f3xFWYPKX4dp12FcwHwYDVR0j
BBgwFoAUJfKO8ND5OlKLNeB/BNzNfFwmQGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xN0Q5Nzg2MENERDE5RjkwNzZDRkM3OUUwRTJCNTAzRTQy
M0FEQzQyOEE5NDRFMjhBRTQyMDIxQjQzN0MwNTI3LzAvMjVGMjhFRjBEMEY5M0E1
MjhCMzVFMDdGMDREQ0NEN0M1QzI2NDA2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUYyOEVGMEQwRjkzQTUyOEIz
NUUwN0YwNERDQ0Q3QzVDMjY0MDZBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTdEOTc4NjBDREQxOUY5MDc2Q0ZDNzlFMEUyQjUwM0U0MjNBREM0MjhB
OTQ0RTI4QUU0MjAyMUI0MzdDMDUyNy8wLzM0MzUyZTMxMzYzMTJlMzQzNzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM5MzAzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2hLzAN
BgkqhkiG9w0BAQsFAAOCAQEADUpCwZRTxIGl7H9S7Zr5y4YDfNHxQJDb0dMM8x3p
HrL41aixPzaWRltoD+aYkYup+IlAF1PJwp9UsXyjfI8LO4T25rInRsQfB9cDodvf
/MvjzPM59KUFvp7rFieQPX5PXXXkrBVudfQg+zbgAeY3fTfowG0HEiGbP4sMfA9g
1SM/X9wCzJPJWT39ELPnM+6OpIzVEDkSqGtbcSeirqTeYhmH677RNWd/kWQ4gVw9
O7TQYQ0xqCDSERVBhp32IPU+SPK0s0zUSMmQ0gjoc6nPkYDrBnzzOm/M3PM5ze2l
4APdko0M++rfdA73v1mYh9gx699wz9G8Ydt4ZmjuGIASVA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org