Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/34352e3137312e33362e302f32322d3234203d3e20323634363739.roa
File:                     34352e3137312e33362e302f32322d3234203d3e20323634363739.roa (raw, json)
Hash identifier:          Xc8s0Ys8g9Y+9cV1f3zV29nsMCAElZA96cIF2okfLNQ=
Subject key identifier:   78:9E:5C:5B:AD:5C:C6:B9:9E:E4:06:11:01:A0:9E:32:20:65:48:3E
Certificate issuer:       /CN=5506AF01F36FB1CE1124E8FE845AB28B7A0834AE
Certificate serial:       487D2D898B88E332F967BBA280F0308E1DF8E64C
Authority key identifier: 55:06:AF:01:F3:6F:B1:CE:11:24:E8:FE:84:5A:B2:8B:7A:08:34:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/34352e3137312e33362e302f32322d3234203d3e20323634363739.roa
Signing time:             Tue 05 Mar 2024 18:17:58 +0000
ROA not before:           Tue 05 Mar 2024 18:12:58 +0000
ROA not after:            Tue 04 Mar 2025 18:17:58 +0000
asID:                     264679
IP address blocks:        45.171.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7d:2d:89:8b:88:e3:32:f9:67:bb:a2:80:f0:30:8e:1d:f8:e6:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5506AF01F36FB1CE1124E8FE845AB28B7A0834AE
        Validity
            Not Before: Mar  5 18:12:58 2024 GMT
            Not After : Mar  4 18:17:58 2025 GMT
        Subject: CN=789E5C5BAD5CC6B99EE4061101A09E322065483E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:43:27:06:e6:46:07:a9:80:43:4a:39:2e:a2:
                    7a:84:9b:a1:f8:06:d7:5c:bc:83:ae:38:9c:34:7b:
                    a3:3f:2d:df:65:fb:5e:f4:53:97:6c:66:c5:3d:7f:
                    84:9c:53:b9:a1:72:98:ec:a3:c3:9b:fe:3a:d5:fb:
                    fd:35:10:f8:55:13:3e:9f:b5:29:30:4a:b6:33:a7:
                    93:50:27:96:1c:bd:f3:d8:de:74:43:0d:d0:4d:9a:
                    38:fc:da:31:8f:2c:07:da:b1:7d:dc:a5:ec:c3:a5:
                    c6:c0:8d:81:33:39:fe:ee:8e:06:87:1a:02:9b:f2:
                    3d:a0:84:5b:2a:09:b8:71:d9:00:f2:90:0d:d7:22:
                    90:9a:d2:42:15:4c:6e:87:57:17:81:c0:f1:5a:6f:
                    ea:41:94:a9:dc:5a:1e:80:a3:9e:e7:a6:f7:f7:5f:
                    9e:96:eb:34:ec:91:21:15:5d:fb:de:f4:2b:47:ee:
                    1f:21:46:37:5f:f1:fd:f9:b3:54:31:ee:12:d9:9b:
                    c5:b8:35:b1:0b:45:91:d3:9c:22:b2:28:8a:ae:6a:
                    37:dd:96:48:16:cf:00:2b:75:36:fb:a0:a5:d7:3c:
                    4c:d4:38:23:01:12:55:57:78:d1:a7:ca:ff:57:10:
                    36:65:d5:00:02:98:02:a7:fd:16:16:9e:e6:82:21:
                    cc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9E:5C:5B:AD:5C:C6:B9:9E:E4:06:11:01:A0:9E:32:20:65:48:3E
            X509v3 Authority Key Identifier:
                keyid:55:06:AF:01:F3:6F:B1:CE:11:24:E8:FE:84:5A:B2:8B:7A:08:34:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/34352e3137312e33362e302f32322d3234203d3e20323634363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:9a:f2:c9:ba:62:c1:65:79:5f:df:4d:8b:4d:47:9c:e5:55:
         44:f4:c4:29:84:de:ac:4f:32:05:fb:75:e3:c3:15:3c:86:27:
         80:7b:aa:52:b6:f9:83:6c:3e:c2:a5:b0:46:99:21:68:15:9e:
         bd:a0:a6:c2:06:e6:18:aa:11:f9:a6:b9:5f:0c:11:ae:58:4c:
         57:e5:28:36:af:4c:c9:01:02:e2:0f:d8:3e:81:04:c6:fb:61:
         6d:d8:30:5c:15:f9:1b:f4:7c:34:32:c4:86:6f:19:b7:ef:72:
         ef:3c:8f:aa:d3:48:45:02:88:c2:38:50:57:59:f3:b7:db:d1:
         f0:ed:d4:62:13:3e:f1:4e:03:90:f9:04:95:8c:45:8b:7b:0f:
         9a:c5:bb:ce:ed:d9:ed:3d:8d:dc:7f:ca:e9:ea:08:36:63:6e:
         db:0c:5d:b5:84:b2:85:b2:8a:d7:ad:01:28:7b:b2:7c:3a:3b:
         da:44:ff:fa:d4:4a:e7:d0:0a:1b:b1:f2:0a:aa:fb:ec:a9:90:
         e0:19:a1:a9:36:38:aa:28:9c:97:65:8b:8c:0e:60:f5:8d:45:
         86:c4:d8:eb:c9:02:c9:1c:9b:20:f6:e1:85:c9:91:fc:8b:b3:
         57:97:80:96:17:4d:e7:f5:16:57:c6:f2:3d:69:71:d7:94:53:
         57:5c:55:de
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSH0tiYuI4zL5Z7uigPAwjh345kwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUwNkFGMDFGMzZGQjFDRTExMjRFOEZFODQ1QUIyOEI3
QTA4MzRBRTAeFw0yNDAzMDUxODEyNThaFw0yNTAzMDQxODE3NThaMDMxMTAvBgNV
BAMTKDc4OUU1QzVCQUQ1Q0M2Qjk5RUU0MDYxMTAxQTA5RTMyMjA2NTQ4M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfQycG5kYHqYBDSjkuonqEm6H4
BtdcvIOuOJw0e6M/Ld9l+170U5dsZsU9f4ScU7mhcpjso8Ob/jrV+/01EPhVEz6f
tSkwSrYzp5NQJ5YcvfPY3nRDDdBNmjj82jGPLAfasX3cpezDpcbAjYEzOf7ujgaH
GgKb8j2ghFsqCbhx2QDykA3XIpCa0kIVTG6HVxeBwPFab+pBlKncWh6Ao57npvf3
X56W6zTskSEVXfve9CtH7h8hRjdf8f35s1Qx7hLZm8W4NbELRZHTnCKyKIquajfd
lkgWzwArdTb7oKXXPEzUOCMBElVXeNGnyv9XEDZl1QACmAKn/RYWnuaCIcx9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUeJ5cW61cxrme5AYRAaCeMiBlSD4wHwYDVR0j
BBgwFoAUVQavAfNvsc4RJOj+hFqyi3oINK4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xOEEyNEM0MzRBRUY5RUVEQURGQzgwMjczMkRGMEYyRUU5
QjMyQzgwNzhBN0ZEMjMzRDMwRTJGRUZCNURDMEUyLzAvNTUwNkFGMDFGMzZGQjFD
RTExMjRFOEZFODQ1QUIyOEI3QTA4MzRBRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NTA2QUYwMUYzNkZCMUNFMTEy
NEU4RkU4NDVBQjI4QjdBMDgzNEFFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMThBMjRDNDM0QUVGOUVFREFERkM4MDI3MzJERjBGMkVFOUIzMkM4MDc4
QTdGRDIzM0QzMEUyRkVGQjVEQzBFMi8wLzM0MzUyZTMxMzczMTJlMzMzNjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNDM2MzczOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2rJDAN
BgkqhkiG9w0BAQsFAAOCAQEAo5ryybpiwWV5X99Ni01HnOVVRPTEKYTerE8yBft1
48MVPIYngHuqUrb5g2w+wqWwRpkhaBWevaCmwgbmGKoR+aa5XwwRrlhMV+UoNq9M
yQEC4g/YPoEExvthbdgwXBX5G/R8NDLEhm8Zt+9y7zyPqtNIRQKIwjhQV1nzt9vR
8O3UYhM+8U4DkPkElYxFi3sPmsW7zu3Z7T2N3H/K6eoINmNu2wxdtYSyhbKK160B
KHuyfDo72kT/+tRK59AKG7HyCqr77KmQ4BmhqTY4qiicl2WLjA5g9Y1FhsTY68kC
yRybIPbhhcmR/IuzV5eAlhdN5/UWV8byPWlx15RTV1xV3g==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org