Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135322e302f32332d3233203d3e20323639383138.roa
File:                     34352e3138342e3135322e302f32332d3233203d3e20323639383138.roa (raw, json)
Hash identifier:          GJdC3JxkcUZ4sAS4TGhOjBYRhZOIkOjI+tKzofcJB3Q=
Subject key identifier:   4E:57:0F:39:1E:9E:CD:5C:64:83:3D:CA:04:58:A4:8E:99:FD:8F:39
Certificate issuer:       /CN=7388AE25CB67430754ACD1DB6E94F8DAAC362F9C
Certificate serial:       529B684C75D09DD029C3B3CDCB748B9621F302EB
Authority key identifier: 73:88:AE:25:CB:67:43:07:54:AC:D1:DB:6E:94:F8:DA:AC:36:2F:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135322e302f32332d3233203d3e20323639383138.roa
Signing time:             Sat 16 Mar 2024 17:05:00 +0000
ROA not before:           Sat 16 Mar 2024 17:00:00 +0000
ROA not after:            Sat 15 Mar 2025 17:05:00 +0000
asID:                     269818
IP address blocks:        45.184.152.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9b:68:4c:75:d0:9d:d0:29:c3:b3:cd:cb:74:8b:96:21:f3:02:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7388AE25CB67430754ACD1DB6E94F8DAAC362F9C
        Validity
            Not Before: Mar 16 17:00:00 2024 GMT
            Not After : Mar 15 17:05:00 2025 GMT
        Subject: CN=4E570F391E9ECD5C64833DCA0458A48E99FD8F39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:48:51:d1:e4:9b:5b:9f:ed:2d:36:5e:12:26:
                    6f:c3:6c:48:b7:93:e1:42:69:ea:b6:fe:c4:5d:ec:
                    16:e9:d9:98:2e:ae:a2:4a:ba:7d:1d:0e:3e:0f:3c:
                    ea:54:5b:f5:e2:77:89:64:14:4d:d1:ff:82:d9:94:
                    bf:fa:57:79:28:0c:2d:0c:29:e0:68:73:03:ef:38:
                    98:0a:27:ea:8b:42:35:a6:f0:bd:b5:85:ea:c9:37:
                    36:e7:08:5d:75:fa:e3:a9:4b:fa:b5:a8:31:1e:2a:
                    3e:d2:51:1a:7e:1b:07:78:e8:0b:0a:72:52:fc:6e:
                    c9:51:1b:f4:23:ed:81:00:5e:a4:c4:d2:23:b3:0a:
                    b7:1a:a1:27:56:ec:89:68:97:77:cf:34:5e:40:8a:
                    c2:82:f3:28:44:f8:0d:59:07:5d:ba:39:15:b6:c7:
                    ef:d1:51:76:87:03:b4:07:a0:2a:a7:48:88:09:20:
                    e0:12:2d:3e:ad:86:fd:ce:82:1a:16:e1:14:35:1e:
                    db:fb:6d:6c:c9:15:2e:a8:0d:47:c0:96:8a:13:b5:
                    e1:a8:41:e4:d1:fd:a0:9c:82:1a:23:9b:0a:75:ab:
                    4e:5d:5a:f8:73:db:f5:3c:1b:af:fb:7e:45:20:f0:
                    ad:26:c3:6f:10:5b:90:07:02:ba:a9:23:99:dc:88:
                    63:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:57:0F:39:1E:9E:CD:5C:64:83:3D:CA:04:58:A4:8E:99:FD:8F:39
            X509v3 Authority Key Identifier:
                keyid:73:88:AE:25:CB:67:43:07:54:AC:D1:DB:6E:94:F8:DA:AC:36:2F:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135322e302f32332d3233203d3e20323639383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:d6:d6:6a:b2:c6:69:60:28:e7:24:28:e4:47:c7:ea:1a:f6:
         3a:6c:69:13:c6:e6:19:f9:19:7b:93:32:63:75:99:c7:cc:08:
         00:a1:4d:2b:b0:1c:46:75:76:84:0c:86:9a:41:32:84:20:34:
         d0:96:08:0f:60:ca:ee:90:bf:05:31:03:34:48:5d:6f:fb:13:
         3a:36:18:7c:1c:4e:7d:1c:00:58:8d:df:b6:c5:ea:8e:b8:0c:
         69:28:9c:bb:43:55:51:fd:ae:34:cc:89:f8:49:cf:b4:0b:a3:
         75:6d:f2:24:82:14:cc:23:eb:93:a4:6d:d1:7d:a4:a0:e1:b5:
         59:81:2c:60:71:14:ec:20:68:6e:ee:99:5e:27:1a:b6:34:8d:
         fb:4b:fe:f8:4d:9f:05:0d:58:84:11:42:dc:76:16:71:32:78:
         26:7d:8c:9c:78:22:3b:d1:2d:94:e4:f2:a1:82:3d:ef:e8:49:
         6c:0a:7c:dd:f4:b0:46:10:8b:11:b9:4e:81:a0:13:0e:f6:cc:
         8d:93:df:25:2b:35:31:0e:f3:cd:5e:7d:78:b2:89:55:46:45:
         ef:ec:1a:b7:7e:30:3c:f3:f4:19:d4:9b:e1:ce:c2:2f:c4:19:
         8e:e3:fa:3c:ee:e2:80:91:d8:16:27:88:8e:4c:57:5c:1e:d5:
         0c:40:c7:9e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUptoTHXQndApw7PNy3SLliHzAuswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM4OEFFMjVDQjY3NDMwNzU0QUNEMURCNkU5NEY4REFB
QzM2MkY5QzAeFw0yNDAzMTYxNzAwMDBaFw0yNTAzMTUxNzA1MDBaMDMxMTAvBgNV
BAMTKDRFNTcwRjM5MUU5RUNENUM2NDgzM0RDQTA0NThBNDhFOTlGRDhGMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxSFHR5Jtbn+0tNl4SJm/DbEi3
k+FCaeq2/sRd7Bbp2ZgurqJKun0dDj4PPOpUW/Xid4lkFE3R/4LZlL/6V3koDC0M
KeBocwPvOJgKJ+qLQjWm8L21herJNzbnCF11+uOpS/q1qDEeKj7SURp+Gwd46AsK
clL8bslRG/Qj7YEAXqTE0iOzCrcaoSdW7Ilol3fPNF5AisKC8yhE+A1ZB126ORW2
x+/RUXaHA7QHoCqnSIgJIOASLT6thv3OghoW4RQ1Htv7bWzJFS6oDUfAlooTteGo
QeTR/aCcghojmwp1q05dWvhz2/U8G6/7fkUg8K0mw28QW5AHArqpI5nciGOlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUTlcPOR6ezVxkgz3KBFikjpn9jzkwHwYDVR0j
BBgwFoAUc4iuJctnQwdUrNHbbpT42qw2L5wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRTNFNkJEN0MxMkIxRDk4OEE2NEZBNTNCNUNEMDkyMUVE
QTlGODcxM0VBQTZDREY5MzYzQjRBOTFGMDQyNjVBLzAvNzM4OEFFMjVDQjY3NDMw
NzU0QUNEMURCNkU5NEY4REFBQzM2MkY5Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83Mzg4QUUyNUNCNjc0MzA3NTRB
Q0QxREI2RTk0RjhEQUFDMzYyRjlDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUUzRTZCRDdDMTJCMUQ5ODhBNjRGQTUzQjVDRDA5MjFFREE5Rjg3MTNF
QUE2Q0RGOTM2M0I0QTkxRjA0MjY1QS8wLzM0MzUyZTMxMzgzNDJlMzEzNTMyMmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5MzgzMTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLbiY
MA0GCSqGSIb3DQEBCwUAA4IBAQCD1tZqssZpYCjnJCjkR8fqGvY6bGkTxuYZ+Rl7
kzJjdZnHzAgAoU0rsBxGdXaEDIaaQTKEIDTQlggPYMrukL8FMQM0SF1v+xM6Nhh8
HE59HABYjd+2xeqOuAxpKJy7Q1VR/a40zIn4Sc+0C6N1bfIkghTMI+uTpG3RfaSg
4bVZgSxgcRTsIGhu7pleJxq2NI37S/74TZ8FDViEEULcdhZxMngmfYyceCI70S2U
5PKhgj3v6ElsCnzd9LBGEIsRuU6BoBMO9syNk98lKzUxDvPNXn14solVRkXv7Bq3
fjA88/QZ1JvhzsIvxBmO4/o87uKAkdgWJ4iOTFdcHtUMQMee
-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:29 2024 by rpki-client on console-fra.rpki-client.org