Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36342e302f32322d3234203d3e20323730313433.roa
File:                     34352e372e36342e302f32322d3234203d3e20323730313433.roa (raw, json)
Hash identifier:          NJ1wnV0haaaf6bxzLgk2oHJqLAhSjf0QxGaZOfanF0o=
Subject key identifier:   3D:8A:D4:77:8F:26:E6:E0:D4:65:0F:D1:14:60:86:9A:02:3D:F3:1D
Certificate issuer:       /CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
Certificate serial:       20AFAC3DFCE33FA043E3A4F779BA2B2932529913
Authority key identifier: 3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36342e302f32322d3234203d3e20323730313433.roa
Signing time:             Tue 05 Mar 2024 18:05:02 +0000
ROA not before:           Tue 05 Mar 2024 18:00:02 +0000
ROA not after:            Tue 04 Mar 2025 18:05:02 +0000
asID:                     270143
IP address blocks:        45.7.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:af:ac:3d:fc:e3:3f:a0:43:e3:a4:f7:79:ba:2b:29:32:52:99:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
        Validity
            Not Before: Mar  5 18:00:02 2024 GMT
            Not After : Mar  4 18:05:02 2025 GMT
        Subject: CN=3D8AD4778F26E6E0D4650FD11460869A023DF31D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d8:2c:f0:52:0c:e0:0b:16:a5:4d:f5:ca:95:
                    52:24:02:a2:93:dd:1a:23:25:86:46:38:79:5c:61:
                    49:d7:53:e6:29:91:e1:19:5d:db:f5:6c:c4:38:08:
                    d2:a1:8b:ba:46:02:db:3f:42:ef:31:15:ac:1f:1e:
                    40:c0:63:62:fe:4e:ea:13:42:c0:f5:a3:6e:c2:3f:
                    81:7b:85:dd:48:48:4a:fe:d5:7d:d6:10:f6:91:3c:
                    85:2b:46:8c:2e:66:9c:f5:dc:95:1a:a4:f6:7a:7f:
                    8e:4f:51:f0:fe:1e:95:c3:e9:10:0c:30:d5:a9:38:
                    e8:00:f7:8d:d4:f5:bb:23:fc:6d:8c:20:e8:8b:a7:
                    26:fb:e1:ad:72:43:e5:da:76:a3:1c:64:f3:50:ec:
                    f7:47:3b:7e:65:66:2b:b7:e0:e0:00:49:99:8b:ab:
                    eb:d7:5b:e2:dd:67:24:96:0b:68:75:03:b6:78:95:
                    50:d0:82:71:71:6a:9e:44:b3:68:a0:4d:7d:f3:9d:
                    a5:68:76:ce:01:ff:ce:89:bd:f0:b2:56:19:f9:0c:
                    32:aa:8b:88:85:29:02:87:33:c3:41:ee:af:12:e3:
                    b2:20:ca:20:16:9e:8e:ca:81:14:66:d8:a4:0e:fe:
                    14:0c:95:65:5c:40:6d:56:78:98:79:cd:74:80:7b:
                    cc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8A:D4:77:8F:26:E6:E0:D4:65:0F:D1:14:60:86:9A:02:3D:F3:1D
            X509v3 Authority Key Identifier:
                keyid:3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36342e302f32322d3234203d3e20323730313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:7d:59:44:28:96:53:fb:31:fa:9f:a9:84:72:36:93:a1:00:
         d7:31:13:2c:8b:72:1e:32:8b:61:5d:c9:cc:a1:09:bc:fc:a4:
         e4:2d:09:ac:70:b5:47:82:5f:18:da:fe:a1:28:bb:28:84:4a:
         92:aa:ab:75:88:2b:d8:79:e7:36:f0:63:ea:00:89:09:30:cd:
         3c:7c:f0:46:7b:eb:82:56:31:74:c2:03:46:94:f2:2a:3c:a2:
         47:0b:7c:d7:33:ca:54:2b:d4:70:a8:49:5d:d2:5d:0e:d5:ce:
         8d:1b:40:c3:08:0a:16:f9:cb:12:55:4b:37:ff:e6:8d:15:02:
         ad:ff:fa:45:30:c0:c3:94:08:f7:f7:6a:83:61:f7:e3:54:4e:
         bd:d5:9b:08:6f:b9:82:73:93:91:50:35:94:02:a1:cc:03:29:
         8d:63:82:b9:f2:e9:8e:42:08:9d:ad:7a:84:3f:4a:65:16:d0:
         b9:74:96:b4:3b:3e:3d:a2:87:37:3c:44:27:3b:5d:3b:0b:9d:
         7d:81:af:fc:4c:6b:46:9b:a4:3e:bd:00:1c:7f:39:41:33:d3:
         dc:93:bf:cc:5e:dd:c9:8e:fe:6c:fa:b5:a7:55:c0:60:68:d4:
         4e:7c:fe:e7:47:d8:df:0a:47:d9:89:01:a6:cb:f8:be:4b:91:
         2f:39:ca:e1
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUIK+sPfzjP6BD46T3eborKTJSmRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I3RkJBM0UxREY4QUQ2OTFEQjc1NTM3MkQ3MzFERkFC
NkUwQ0Q4QzAeFw0yNDAzMDUxODAwMDJaFw0yNTAzMDQxODA1MDJaMDMxMTAvBgNV
BAMTKDNEOEFENDc3OEYyNkU2RTBENDY1MEZEMTE0NjA4NjlBMDIzREYzMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb2CzwUgzgCxalTfXKlVIkAqKT
3RojJYZGOHlcYUnXU+YpkeEZXdv1bMQ4CNKhi7pGAts/Qu8xFawfHkDAY2L+TuoT
QsD1o27CP4F7hd1ISEr+1X3WEPaRPIUrRowuZpz13JUapPZ6f45PUfD+HpXD6RAM
MNWpOOgA943U9bsj/G2MIOiLpyb74a1yQ+XadqMcZPNQ7PdHO35lZiu34OAASZmL
q+vXW+LdZySWC2h1A7Z4lVDQgnFxap5Es2igTX3znaVods4B/86JvfCyVhn5DDKq
i4iFKQKHM8NB7q8S47IgyiAWno7KgRRm2KQO/hQMlWVcQG1WeJh5zXSAe8xnAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUPYrUd48m5uDUZQ/RFGCGmgI98x0wHwYDVR0j
BBgwFoAUO3+6Ph34rWkdt1U3LXMd+rbgzYwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkM5QzE0MjI3NUQ2RTExQTBFRDlCNEZBQUREQkI4QzJB
N0QzRjFDNDZENzUzMjBBNzI1MUM3MTk5NjE4N0YxLzAvM0I3RkJBM0UxREY4QUQ2
OTFEQjc1NTM3MkQ3MzFERkFCNkUwQ0Q4Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQjdGQkEzRTFERjhBRDY5MURC
NzU1MzcyRDczMURGQUI2RTBDRDhDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZDOUMxNDIyNzVENkUxMUEwRUQ5QjRGQUFEREJCOEMyQTdEM0YxQzQ2
RDc1MzIwQTcyNTFDNzE5OTYxODdGMS8wLzM0MzUyZTM3MmUzNjM0MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzIzNzMwMzEzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQdAMA0GCSqG
SIb3DQEBCwUAA4IBAQAUfVlEKJZT+zH6n6mEcjaToQDXMRMsi3IeMothXcnMoQm8
/KTkLQmscLVHgl8Y2v6hKLsohEqSqqt1iCvYeec28GPqAIkJMM08fPBGe+uCVjF0
wgNGlPIqPKJHC3zXM8pUK9RwqEld0l0O1c6NG0DDCAoW+csSVUs3/+aNFQKt//pF
MMDDlAj392qDYffjVE691ZsIb7mCc5ORUDWUAqHMAymNY4K58umOQgidrXqEP0pl
FtC5dJa0Oz49ooc3PEQnO107C519ga/8TGtGm6Q+vQAcfzlBM9Pck7/MXt3Jjv5s
+rWnVcBgaNROfP7nR9jfCkfZiQGmy/i+S5EvOcrh
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:55 2024 by rpki-client on console-fra.rpki-client.org