Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/34352e3137312e3136342e302f32322d3234203d3e20323732313431.roa
File:                     34352e3137312e3136342e302f32322d3234203d3e20323732313431.roa (raw, json)
Hash identifier:          Td0lG3wNio/o1S2Ww+aJKeBuKLF2tAjsZxoUaQcTPLc=
Subject key identifier:   E9:9D:3E:71:1D:A7:37:16:0C:4A:C1:B0:4B:38:AF:2F:90:E6:C7:2B
Certificate issuer:       /CN=A6E3E992F10C16F74B23F741B96CFA7F84656F28
Certificate serial:       049BDD5FD6D34ADB513D15CC325CB607FAF3BDF8
Authority key identifier: A6:E3:E9:92:F1:0C:16:F7:4B:23:F7:41:B9:6C:FA:7F:84:65:6F:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/34352e3137312e3136342e302f32322d3234203d3e20323732313431.roa
Signing time:             Sat 09 Mar 2024 14:00:00 +0000
ROA not before:           Sat 09 Mar 2024 13:55:00 +0000
ROA not after:            Sat 08 Mar 2025 14:00:00 +0000
asID:                     272141
IP address blocks:        45.171.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9b:dd:5f:d6:d3:4a:db:51:3d:15:cc:32:5c:b6:07:fa:f3:bd:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E3E992F10C16F74B23F741B96CFA7F84656F28
        Validity
            Not Before: Mar  9 13:55:00 2024 GMT
            Not After : Mar  8 14:00:00 2025 GMT
        Subject: CN=E99D3E711DA737160C4AC1B04B38AF2F90E6C72B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:72:0c:bf:b4:da:a9:9b:8e:82:57:4f:6a:25:
                    9a:07:83:cb:26:b6:ee:33:22:7f:38:12:0d:4d:96:
                    e5:d0:7b:91:28:1a:b5:d8:1b:4a:c9:fe:43:9f:52:
                    ab:22:2a:18:45:28:a2:91:06:93:7e:f2:28:b4:3b:
                    9b:f4:72:d0:3e:37:1b:43:e2:2d:fc:01:ba:df:5b:
                    db:45:1d:ff:a5:07:93:8a:e2:58:4d:4a:f3:f0:a4:
                    f2:d3:7f:77:12:ce:cf:8c:77:c0:aa:21:ef:9f:c3:
                    4c:7d:48:c1:fb:d1:c7:8d:d1:24:ed:61:ca:d2:cf:
                    e5:b7:14:6e:9a:db:30:5a:95:c8:8d:21:4f:af:72:
                    42:db:21:a0:25:02:06:8a:cf:f4:a2:a1:b4:32:90:
                    58:52:85:43:65:9e:d3:49:e8:6b:f4:aa:5d:2e:b6:
                    ce:42:be:bb:f6:c8:80:55:31:f7:53:d1:00:30:f1:
                    92:f7:68:82:29:bd:fe:ac:12:df:5f:0f:94:76:3e:
                    94:09:1a:eb:40:88:bb:a1:e4:08:84:81:93:be:b0:
                    6d:ef:aa:a6:75:84:39:cc:cf:d2:19:d8:1b:d8:b7:
                    b7:16:fb:51:28:18:63:26:1a:54:a2:ce:ef:a6:78:
                    25:75:70:4a:82:a6:a5:21:a7:ab:3c:c8:f1:14:72:
                    1f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9D:3E:71:1D:A7:37:16:0C:4A:C1:B0:4B:38:AF:2F:90:E6:C7:2B
            X509v3 Authority Key Identifier:
                keyid:A6:E3:E9:92:F1:0C:16:F7:4B:23:F7:41:B9:6C:FA:7F:84:65:6F:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/34352e3137312e3136342e302f32322d3234203d3e20323732313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:e0:fd:73:78:94:f5:9a:88:9e:93:c6:61:ca:9c:ff:dc:2d:
         d6:53:73:d2:77:5e:46:ae:17:b0:11:af:03:59:7d:b6:8b:fb:
         56:db:a8:ec:3e:d0:f6:dc:bc:d1:4e:f6:b1:a0:74:da:bb:d3:
         8a:b2:b3:2d:47:59:fa:41:48:9b:92:36:f8:07:16:29:ae:c0:
         9d:59:13:25:9c:77:41:6a:bb:06:a2:d9:a6:4a:47:ff:c6:b1:
         40:2a:90:09:81:6b:b8:ba:e9:a1:0a:1f:d3:02:23:b3:38:95:
         91:7b:99:73:80:bf:57:8c:58:f3:6f:ef:6a:9d:f5:c4:32:3f:
         aa:86:46:45:b4:25:56:a2:2a:ef:46:5f:0c:24:cb:a6:d3:0e:
         b8:04:64:b1:41:e6:de:af:ed:0c:e8:b1:e5:35:4c:e3:62:e9:
         6f:62:09:f0:fd:da:37:63:b0:ed:de:93:92:0e:91:3d:af:59:
         c4:ca:3a:02:dc:32:76:95:91:62:b0:62:49:c1:5a:9d:d7:03:
         30:6d:d1:62:f8:56:8e:2e:d2:6d:22:e4:5f:d4:6f:e5:3b:c3:
         ae:5e:df:b2:c2:d3:59:cd:43:f6:70:ce:84:d9:2a:f6:36:1f:
         4f:b2:cd:e1:c1:be:29:87:15:ea:89:98:2a:0e:7c:bf:df:ce:
         a5:02:69:1c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUBJvdX9bTSttRPRXMMly2B/rzvfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTZFM0U5OTJGMTBDMTZGNzRCMjNGNzQxQjk2Q0ZBN0Y4
NDY1NkYyODAeFw0yNDAzMDkxMzU1MDBaFw0yNTAzMDgxNDAwMDBaMDMxMTAvBgNV
BAMTKEU5OUQzRTcxMURBNzM3MTYwQzRBQzFCMDRCMzhBRjJGOTBFNkM3MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvcgy/tNqpm46CV09qJZoHg8sm
tu4zIn84Eg1NluXQe5EoGrXYG0rJ/kOfUqsiKhhFKKKRBpN+8ii0O5v0ctA+NxtD
4i38AbrfW9tFHf+lB5OK4lhNSvPwpPLTf3cSzs+Md8CqIe+fw0x9SMH70ceN0STt
YcrSz+W3FG6a2zBalciNIU+vckLbIaAlAgaKz/SiobQykFhShUNlntNJ6Gv0ql0u
ts5Cvrv2yIBVMfdT0QAw8ZL3aIIpvf6sEt9fD5R2PpQJGutAiLuh5AiEgZO+sG3v
qqZ1hDnMz9IZ2BvYt7cW+1EoGGMmGlSizu+meCV1cEqCpqUhp6s8yPEUch/xAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU6Z0+cR2nNxYMSsGwSzivL5DmxyswHwYDVR0j
BBgwFoAUpuPpkvEMFvdLI/dBuWz6f4RlbygwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xODQ1QTU0NkQ1QjBDQUUzNzM0NjczRDI5NDc0NzdBMUI5
N0U1OEUyRUExOTE0Q0FFOUQ5NTRCNkFENzdGM0Y0LzAvQTZFM0U5OTJGMTBDMTZG
NzRCMjNGNzQxQjk2Q0ZBN0Y4NDY1NkYyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNkUzRTk5MkYxMEMxNkY3NEIy
M0Y3NDFCOTZDRkE3Rjg0NjU2RjI4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTg0NUE1NDZENUIwQ0FFMzczNDY3M0QyOTQ3NDc3QTFCOTdFNThFMkVB
MTkxNENBRTlEOTU0QjZBRDc3RjNGNC8wLzM0MzUyZTMxMzczMTJlMzEzNjM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMyMzEzNDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLauk
MA0GCSqGSIb3DQEBCwUAA4IBAQCG4P1zeJT1moiek8Zhypz/3C3WU3PSd15Grhew
Ea8DWX22i/tW26jsPtD23LzRTvaxoHTau9OKsrMtR1n6QUibkjb4BxYprsCdWRMl
nHdBarsGotmmSkf/xrFAKpAJgWu4uumhCh/TAiOzOJWRe5lzgL9XjFjzb+9qnfXE
Mj+qhkZFtCVWoirvRl8MJMum0w64BGSxQeber+0M6LHlNUzjYulvYgnw/do3Y7Dt
3pOSDpE9r1nEyjoC3DJ2lZFisGJJwVqd1wMwbdFi+FaOLtJtIuRf1G/lO8OuXt+y
wtNZzUP2cM6E2Sr2Nh9Pss3hwb4phxXqiZgqDny/386lAmkc
-----END CERTIFICATE-----
Generated at Fri May 17 21:06:48 2024 by rpki-client on console-ams.rpki-client.org