Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2046B67DC3C7954A1746B7F99F5236E2A996933DA953175E3892002F423B483F/0/34352e3138322e3131392e302f32342d3234203d3e20323639373930.roa
File:                     34352e3138322e3131392e302f32342d3234203d3e20323639373930.roa (raw, json)
Hash identifier:          mCLQtKMpkgAn0XJL4jlHaQwZNpNYVPwTIlKXWvNfs6U=
Subject key identifier:   E4:17:5A:33:DB:AC:AC:0A:2E:79:D9:52:F9:85:BC:DE:91:8A:52:A0
Certificate issuer:       /CN=ADAE6B17AF97B30DE4239CE6EB7C4781DD49C9B7
Certificate serial:       01A996CE41E002D293FFAFB8E1DB7990D001179B
Authority key identifier: AD:AE:6B:17:AF:97:B3:0D:E4:23:9C:E6:EB:7C:47:81:DD:49:C9:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADAE6B17AF97B30DE4239CE6EB7C4781DD49C9B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2046B67DC3C7954A1746B7F99F5236E2A996933DA953175E3892002F423B483F/0/34352e3138322e3131392e302f32342d3234203d3e20323639373930.roa
Signing time:             Tue 05 Mar 2024 17:48:01 +0000
ROA not before:           Tue 05 Mar 2024 17:43:01 +0000
ROA not after:            Tue 04 Mar 2025 17:48:01 +0000
asID:                     269790
IP address blocks:        45.182.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2046B67DC3C7954A1746B7F99F5236E2A996933DA953175E3892002F423B483F/0/ADAE6B17AF97B30DE4239CE6EB7C4781DD49C9B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2046B67DC3C7954A1746B7F99F5236E2A996933DA953175E3892002F423B483F/0/ADAE6B17AF97B30DE4239CE6EB7C4781DD49C9B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADAE6B17AF97B30DE4239CE6EB7C4781DD49C9B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a9:96:ce:41:e0:02:d2:93:ff:af:b8:e1:db:79:90:d0:01:17:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAE6B17AF97B30DE4239CE6EB7C4781DD49C9B7
        Validity
            Not Before: Mar  5 17:43:01 2024 GMT
            Not After : Mar  4 17:48:01 2025 GMT
        Subject: CN=E4175A33DBACAC0A2E79D952F985BCDE918A52A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:f7:0c:4f:c0:26:17:6c:c0:71:c2:89:08:e8:
                    47:a8:ea:37:d7:47:20:23:9a:e8:89:70:49:f6:4f:
                    49:6b:e7:c5:cb:57:ed:86:fa:af:18:4c:a3:d7:80:
                    b0:5d:57:db:dd:27:b3:5c:d2:c7:c3:5d:f4:47:c1:
                    ca:23:f1:57:e0:ce:44:16:28:41:a4:ae:5b:62:fc:
                    7c:ef:c4:4c:9d:ad:a0:de:1b:bf:b5:2b:23:04:6c:
                    0c:22:3b:2f:2d:38:30:f6:1a:23:98:54:92:d2:13:
                    e2:e2:da:8e:ba:7b:9d:e5:d3:bf:40:79:41:e4:eb:
                    c1:6d:fc:98:28:c1:a6:2e:c6:02:da:27:48:fe:f3:
                    96:fc:1e:80:9a:6c:81:06:4b:6b:e9:5e:64:5b:dc:
                    a1:29:80:00:50:a0:d9:b4:5c:3d:ca:91:3c:b8:e3:
                    39:32:2c:33:bf:9d:bf:15:54:23:75:92:e7:47:84:
                    8d:fd:24:25:f8:ac:8a:51:ce:46:aa:19:28:24:a4:
                    d7:41:21:cc:59:06:8d:55:3c:aa:6e:96:f6:d1:ec:
                    e5:c9:3b:c1:8f:b0:dc:26:7f:b5:eb:7d:d0:de:a1:
                    99:21:d1:9e:16:53:c7:7d:24:fa:2d:52:b5:a7:46:
                    79:27:ee:74:39:63:66:37:01:61:5e:c8:ed:60:7b:
                    92:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:17:5A:33:DB:AC:AC:0A:2E:79:D9:52:F9:85:BC:DE:91:8A:52:A0
            X509v3 Authority Key Identifier:
                keyid:AD:AE:6B:17:AF:97:B3:0D:E4:23:9C:E6:EB:7C:47:81:DD:49:C9:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2046B67DC3C7954A1746B7F99F5236E2A996933DA953175E3892002F423B483F/0/ADAE6B17AF97B30DE4239CE6EB7C4781DD49C9B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADAE6B17AF97B30DE4239CE6EB7C4781DD49C9B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2046B67DC3C7954A1746B7F99F5236E2A996933DA953175E3892002F423B483F/0/34352e3138322e3131392e302f32342d3234203d3e20323639373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:db:31:88:d1:ea:59:93:2c:6e:bd:5b:d4:2b:d2:4f:ac:76:
         19:4a:8f:5d:ae:3a:7b:6d:8e:a7:73:e0:a7:d4:f1:be:62:c7:
         a7:47:e5:15:e7:13:6b:aa:14:e5:c7:36:f6:dd:f4:72:ba:24:
         57:30:a5:d4:08:18:ae:b1:e9:eb:a2:4e:bd:4c:87:b1:19:e3:
         16:c4:0f:d7:f0:f5:9f:16:7a:7e:49:b7:48:60:22:a9:5b:0d:
         8b:b0:2e:56:82:a7:8e:a2:69:55:25:d3:cc:10:a8:3c:77:0e:
         42:66:2f:4a:c9:76:6e:da:52:87:e0:67:cc:3d:27:ff:f8:56:
         79:9f:80:e1:53:c6:83:ea:c9:9e:98:df:5c:23:bf:62:9a:8c:
         81:27:6d:27:8f:7f:33:eb:09:7f:fd:46:05:bb:b3:e5:08:a1:
         b4:8e:b9:eb:92:78:ac:0d:d2:68:0f:b5:e2:f4:f6:1a:74:af:
         cb:6f:cc:45:70:6e:81:f9:d1:92:ee:1a:a5:3b:d6:3b:b3:7f:
         14:94:ea:52:78:1a:cd:40:c4:25:6e:08:3b:27:9a:b0:f0:73:
         f9:7d:2a:d1:1e:9b:c4:43:4a:6d:bc:e4:a2:69:51:1a:4d:7d:
         f8:66:77:34:e5:f4:bc:06:52:66:e1:ae:dd:f3:48:a0:c8:b1:
         8f:c2:56:7c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUAamWzkHgAtKT/6+44dt5kNABF5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURBRTZCMTdBRjk3QjMwREU0MjM5Q0U2RUI3QzQ3ODFE
RDQ5QzlCNzAeFw0yNDAzMDUxNzQzMDFaFw0yNTAzMDQxNzQ4MDFaMDMxMTAvBgNV
BAMTKEU0MTc1QTMzREJBQ0FDMEEyRTc5RDk1MkY5ODVCQ0RFOTE4QTUyQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD89wxPwCYXbMBxwokI6Eeo6jfX
RyAjmuiJcEn2T0lr58XLV+2G+q8YTKPXgLBdV9vdJ7Nc0sfDXfRHwcoj8VfgzkQW
KEGkrlti/HzvxEydraDeG7+1KyMEbAwiOy8tODD2GiOYVJLSE+Li2o66e53l079A
eUHk68Ft/JgowaYuxgLaJ0j+85b8HoCabIEGS2vpXmRb3KEpgABQoNm0XD3KkTy4
4zkyLDO/nb8VVCN1kudHhI39JCX4rIpRzkaqGSgkpNdBIcxZBo1VPKpulvbR7OXJ
O8GPsNwmf7XrfdDeoZkh0Z4WU8d9JPotUrWnRnkn7nQ5Y2Y3AWFeyO1ge5LjAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU5BdaM9usrAouedlS+YW83pGKUqAwHwYDVR0j
BBgwFoAUra5rF6+Xsw3kI5zm63xHgd1JybcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMDQ2QjY3REMzQzc5NTRBMTc0NkI3Rjk5RjUyMzZFMkE5
OTY5MzNEQTk1MzE3NUUzODkyMDAyRjQyM0I0ODNGLzAvQURBRTZCMTdBRjk3QjMw
REU0MjM5Q0U2RUI3QzQ3ODFERDQ5QzlCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BREFFNkIxN0FGOTdCMzBERTQy
MzlDRTZFQjdDNDc4MURENDlDOUI3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjA0NkI2N0RDM0M3OTU0QTE3NDZCN0Y5OUY1MjM2RTJBOTk2OTMzREE5
NTMxNzVFMzg5MjAwMkY0MjNCNDgzRi8wLzM0MzUyZTMxMzgzMjJlMzEzMTM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzczOTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALbZ3
MA0GCSqGSIb3DQEBCwUAA4IBAQCg2zGI0epZkyxuvVvUK9JPrHYZSo9drjp7bY6n
c+Cn1PG+YsenR+UV5xNrqhTlxzb23fRyuiRXMKXUCBiusenrok69TIexGeMWxA/X
8PWfFnp+SbdIYCKpWw2LsC5WgqeOomlVJdPMEKg8dw5CZi9KyXZu2lKH4GfMPSf/
+FZ5n4DhU8aD6smemN9cI79imoyBJ20nj38z6wl//UYFu7PlCKG0jrnrknisDdJo
D7Xi9PYadK/Lb8xFcG6B+dGS7hqlO9Y7s38UlOpSeBrNQMQlbgg7J5qw8HP5fSrR
HpvEQ0ptvOSiaVEaTX34Znc05fS8BlJm4a7d80igyLGPwlZ8
-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:09 2024 by rpki-client on console-fra.rpki-client.org