Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/34352e37312e3138302e302f32342d3234203d3e2033383136.roa
File:                     34352e37312e3138302e302f32342d3234203d3e2033383136.roa (raw, json)
Hash identifier:          BiVAwn1iz0dtGhFF5lAGg9GbN8TcJQCMGMM8akWigCY=
Subject key identifier:   F9:07:F0:35:15:F2:C2:92:19:D4:D3:65:D8:75:AF:2B:0D:3F:1B:9B
Certificate issuer:       /CN=53B789249C8E4F6C0983C68CAB7B40E7DF627C35
Certificate serial:       270DC4934B1FBFA2BF6287E48E86DE1AC92C48B3
Authority key identifier: 53:B7:89:24:9C:8E:4F:6C:09:83:C6:8C:AB:7B:40:E7:DF:62:7C:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/34352e37312e3138302e302f32342d3234203d3e2033383136.roa
Signing time:             Tue 05 Mar 2024 17:48:32 +0000
ROA not before:           Tue 05 Mar 2024 17:43:32 +0000
ROA not after:            Tue 04 Mar 2025 17:48:32 +0000
asID:                     3816
IP address blocks:        45.71.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0d:c4:93:4b:1f:bf:a2:bf:62:87:e4:8e:86:de:1a:c9:2c:48:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B789249C8E4F6C0983C68CAB7B40E7DF627C35
        Validity
            Not Before: Mar  5 17:43:32 2024 GMT
            Not After : Mar  4 17:48:32 2025 GMT
        Subject: CN=F907F03515F2C29219D4D365D875AF2B0D3F1B9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ce:5d:d6:ab:c1:5a:b8:bc:80:2f:19:f2:e2:
                    71:ec:21:c5:36:cb:4b:1d:94:03:59:b5:95:6d:e7:
                    28:14:fc:ab:c4:97:30:16:54:e9:15:c7:65:73:60:
                    9d:1c:89:e5:03:0a:fc:90:a2:47:05:d2:b0:1a:61:
                    61:04:df:34:42:8d:36:6c:29:6e:37:25:03:90:a5:
                    a4:2c:cc:d5:d1:ec:34:93:ee:9c:0d:7c:a1:79:c6:
                    3a:c9:e2:3b:e9:89:6b:51:50:9f:84:5c:d6:69:bd:
                    94:8a:66:eb:78:a2:7f:f5:1d:cc:06:31:c4:5f:0e:
                    04:e6:b0:55:25:a0:18:bb:06:14:c1:17:05:8e:a5:
                    cd:a3:94:8d:67:71:ea:45:29:ea:13:4d:c4:5e:03:
                    0e:ca:ab:b8:51:00:a0:53:b7:3f:3b:0d:52:5e:b8:
                    69:18:b7:09:4c:b7:97:69:60:5e:b4:80:f0:b8:2e:
                    3e:3b:38:71:f6:77:56:3c:ce:10:b7:da:2d:80:17:
                    23:7f:81:c0:21:d6:ec:2c:94:90:9c:f9:25:23:66:
                    e1:1f:e8:c2:5d:fc:54:48:4b:bf:72:a2:81:25:9c:
                    c6:8e:21:73:19:a6:c2:32:bd:e9:9b:6f:95:43:4c:
                    46:3f:42:be:29:f9:19:78:01:e3:64:8b:e2:dc:68:
                    fe:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:07:F0:35:15:F2:C2:92:19:D4:D3:65:D8:75:AF:2B:0D:3F:1B:9B
            X509v3 Authority Key Identifier:
                keyid:53:B7:89:24:9C:8E:4F:6C:09:83:C6:8C:AB:7B:40:E7:DF:62:7C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/34352e37312e3138302e302f32342d3234203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:5c:f1:5d:a1:67:8a:fe:fe:43:97:62:bd:7e:6c:c0:08:76:
         ad:45:b3:34:d0:c2:64:81:5c:a4:93:c8:a6:e4:90:59:89:fe:
         a8:7f:f0:e5:06:6f:57:b3:8e:90:c8:68:9f:1e:0f:2a:be:d6:
         ec:12:b1:a8:04:14:0c:21:f8:1b:ad:4d:5b:cf:c9:9a:fa:54:
         0e:1a:2c:68:20:f8:e7:1a:8b:c5:41:29:f6:76:f3:ba:0a:32:
         06:b5:25:75:4b:0a:45:49:8b:76:16:36:1b:51:af:9c:0f:ef:
         a5:fb:fa:e1:b1:d1:68:fb:91:41:ff:30:e1:62:81:48:d0:d5:
         62:eb:c1:d6:6d:c4:3d:02:cd:b7:4c:4c:bb:83:aa:06:8a:f3:
         26:48:d8:56:1e:74:1c:e1:d9:c9:7e:96:42:c2:17:fe:f0:75:
         ef:6f:d6:76:b7:99:79:34:89:4b:47:13:3e:56:d7:fa:86:82:
         62:30:1c:53:25:25:d8:29:ab:9f:92:cf:cf:89:d8:72:5c:f3:
         89:e5:1e:02:56:0f:41:24:97:e7:4c:a8:81:08:d2:7f:f4:4e:
         32:6a:f1:2d:be:01:18:ef:65:7f:b3:64:e8:25:c7:65:b7:78:
         3e:a0:19:b7:59:33:fb:ac:19:cf:e0:ba:41:81:af:ad:27:ff:
         42:8f:33:1f
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUJw3Ek0sfv6K/YofkjobeGsksSLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNCNzg5MjQ5QzhFNEY2QzA5ODNDNjhDQUI3QjQwRTdE
RjYyN0MzNTAeFw0yNDAzMDUxNzQzMzJaFw0yNTAzMDQxNzQ4MzJaMDMxMTAvBgNV
BAMTKEY5MDdGMDM1MTVGMkMyOTIxOUQ0RDM2NUQ4NzVBRjJCMEQzRjFCOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8zl3Wq8FauLyALxny4nHsIcU2
y0sdlANZtZVt5ygU/KvElzAWVOkVx2VzYJ0cieUDCvyQokcF0rAaYWEE3zRCjTZs
KW43JQOQpaQszNXR7DST7pwNfKF5xjrJ4jvpiWtRUJ+EXNZpvZSKZut4on/1HcwG
McRfDgTmsFUloBi7BhTBFwWOpc2jlI1ncepFKeoTTcReAw7Kq7hRAKBTtz87DVJe
uGkYtwlMt5dpYF60gPC4Lj47OHH2d1Y8zhC32i2AFyN/gcAh1uwslJCc+SUjZuEf
6MJd/FRIS79yooElnMaOIXMZpsIyvembb5VDTEY/Qr4p+Rl4AeNki+LcaP4hAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU+QfwNRXywpIZ1NNl2HWvKw0/G5swHwYDVR0j
BBgwFoAUU7eJJJyOT2wJg8aMq3tA599ifDUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzBBRUUyQzdBQzlBMzlERDhEOEY3MTc5RUU5NDQyNTEz
NzBBQzQxM0QxRTE3MTM3MzI3MDcxNTY0NzE0RTIwLzAvNTNCNzg5MjQ5QzhFNEY2
QzA5ODNDNjhDQUI3QjQwRTdERjYyN0MzNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81M0I3ODkyNDlDOEU0RjZDMDk4
M0M2OENBQjdCNDBFN0RGNjI3QzM1LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUMwQUVFMkM3QUM5QTM5REQ4RDhGNzE3OUVFOTQ0MjUxMzcwQUM0MTNE
MUUxNzEzNzMyNzA3MTU2NDcxNEUyMC8wLzM0MzUyZTM3MzEyZTMxMzgzMDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzgzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUe0MA0GCSqG
SIb3DQEBCwUAA4IBAQAoXPFdoWeK/v5Dl2K9fmzACHatRbM00MJkgVykk8im5JBZ
if6of/DlBm9Xs46QyGifHg8qvtbsErGoBBQMIfgbrU1bz8ma+lQOGixoIPjnGovF
QSn2dvO6CjIGtSV1SwpFSYt2FjYbUa+cD++l+/rhsdFo+5FB/zDhYoFI0NVi68HW
bcQ9As23TEy7g6oGivMmSNhWHnQc4dnJfpZCwhf+8HXvb9Z2t5l5NIlLRxM+Vtf6
hoJiMBxTJSXYKaufks/PidhyXPOJ5R4CVg9BJJfnTKiBCNJ/9E4yavEtvgEY72V/
s2ToJcdlt3g+oBm3WTP7rBnP4LpBga+tJ/9CjzMf
-----END CERTIFICATE-----
Generated at Sat May 4 11:04:29 2024 by rpki-client on console-ams.rpki-client.org