Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31322e302f32342d3234203d3e20323636383337.roa
File:                     34352e3233382e31322e302f32342d3234203d3e20323636383337.roa (raw, json)
Hash identifier:          ZqjrylmRAMSD4SndX3439GaIBgZVzniOvF2jiqpQMzk=
Subject key identifier:   23:6E:32:B7:94:7B:75:BE:A3:B2:39:99:8D:B5:12:3B:C0:A3:14:4F
Certificate issuer:       /CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
Certificate serial:       2F11DB01161A552114E49AD3AB39FEA103C554DF
Authority key identifier: 3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31322e302f32342d3234203d3e20323636383337.roa
Signing time:             Wed 21 Aug 2024 21:05:01 +0000
ROA not before:           Wed 21 Aug 2024 21:00:01 +0000
ROA not after:            Wed 20 Aug 2025 21:05:01 +0000
asID:                     266837
IP address blocks:        45.238.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:11:db:01:16:1a:55:21:14:e4:9a:d3:ab:39:fe:a1:03:c5:54:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
        Validity
            Not Before: Aug 21 21:00:01 2024 GMT
            Not After : Aug 20 21:05:01 2025 GMT
        Subject: CN=236E32B7947B75BEA3B239998DB5123BC0A3144F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2b:ed:36:48:d5:66:8c:8d:7c:08:8a:14:af:
                    8d:79:9c:34:ac:6f:6d:2c:64:e3:60:ea:cb:21:8a:
                    e7:11:99:b2:17:6a:4b:10:6a:fb:64:d0:b5:cf:74:
                    58:7a:ed:68:43:60:77:25:61:9f:2b:6d:bb:32:1b:
                    d3:a3:e5:e2:1d:a6:03:6c:53:1c:81:ae:03:da:51:
                    d4:c2:76:5d:06:c0:44:31:b9:90:95:9d:ad:12:13:
                    e4:9b:be:0c:47:66:ef:b9:6f:f0:91:fa:de:eb:4e:
                    f3:9a:d0:b4:73:0e:14:21:61:83:38:7c:0e:6e:ae:
                    93:ee:30:db:90:f8:9f:ef:03:a4:7c:e8:ad:ed:ae:
                    83:81:3f:c1:0d:05:71:59:12:14:92:86:87:a4:31:
                    1e:36:18:ef:67:9d:b4:d2:ef:da:2c:86:2e:b5:28:
                    ba:9b:4f:f7:57:ef:0f:34:df:08:8e:4f:8a:3d:fb:
                    7b:9d:ab:0c:86:7e:02:07:f9:8d:8e:1f:36:ee:95:
                    c6:de:53:33:58:dd:ad:39:d0:b9:41:f9:69:e7:a0:
                    b4:d3:fd:c4:24:4a:94:d6:95:5b:ba:db:18:4a:f7:
                    9d:12:37:28:f7:bb:06:5a:a3:9b:27:3c:c0:c7:75:
                    76:b3:50:fc:21:24:1b:2a:b4:ee:93:09:33:49:4c:
                    7f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6E:32:B7:94:7B:75:BE:A3:B2:39:99:8D:B5:12:3B:C0:A3:14:4F
            X509v3 Authority Key Identifier:
                keyid:3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31322e302f32342d3234203d3e20323636383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:59:80:66:23:cb:2e:f9:ca:65:4f:a2:ca:fe:04:e6:ff:d3:
         48:33:cf:2e:ea:cc:9d:22:a5:36:08:b8:96:82:99:83:81:ff:
         b1:fd:7e:fa:b6:1f:8a:2f:4a:b3:fe:9a:74:c1:0a:6c:95:92:
         08:d2:3b:a5:dc:f1:0d:b4:14:96:bf:15:e2:60:a6:37:88:17:
         31:f7:14:fc:e3:bd:66:16:35:5f:ec:54:02:15:98:ea:e7:58:
         ae:53:5a:2a:78:e0:e5:b3:3c:07:22:a4:e1:05:70:b8:bf:35:
         d2:63:b8:43:09:0e:87:67:5d:c3:bc:9f:28:d5:d5:ae:cf:58:
         bd:77:50:35:c6:0a:7d:5d:c8:98:ca:3f:aa:93:fe:01:a8:6c:
         60:79:50:d6:99:6a:a4:67:c4:0b:cd:78:9f:5c:c5:19:a8:c1:
         23:b7:40:e6:ab:b0:26:1a:ce:84:a3:70:ff:5c:9e:79:45:0d:
         d7:11:63:38:84:17:e3:e3:46:4b:94:a5:c6:ce:e0:7f:a2:f6:
         ba:46:e4:2e:3f:ae:a8:67:20:81:bc:b2:3e:ca:e0:89:76:24:
         4c:1e:e2:e9:ea:c5:e6:5b:d5:54:25:52:7b:65:24:39:3e:55:
         b8:5d:c6:4c:ff:14:83:35:0a:10:ec:19:62:a7:ab:f5:44:d4:
         25:cb:8d:ab
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULxHbARYaVSEU5JrTqzn+oQPFVN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0EyQzNERTM5REVEQkE1MjI1RUE3RkVCQzI4OTMzMTIw
QUI5MzYxQjAeFw0yNDA4MjEyMTAwMDFaFw0yNTA4MjAyMTA1MDFaMDMxMTAvBgNV
BAMTKDIzNkUzMkI3OTQ3Qjc1QkVBM0IyMzk5OThEQjUxMjNCQzBBMzE0NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGK+02SNVmjI18CIoUr415nDSs
b20sZONg6sshiucRmbIXaksQavtk0LXPdFh67WhDYHclYZ8rbbsyG9Oj5eIdpgNs
UxyBrgPaUdTCdl0GwEQxuZCVna0SE+SbvgxHZu+5b/CR+t7rTvOa0LRzDhQhYYM4
fA5urpPuMNuQ+J/vA6R86K3troOBP8ENBXFZEhSShoekMR42GO9nnbTS79oshi61
KLqbT/dX7w803wiOT4o9+3udqwyGfgIH+Y2OHzbulcbeUzNY3a050LlB+WnnoLTT
/cQkSpTWlVu62xhK950SNyj3uwZao5snPMDHdXazUPwhJBsqtO6TCTNJTH+jAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUI24yt5R7db6jsjmZjbUSO8CjFE8wHwYDVR0j
BBgwFoAUOiw9453tulIl6n/rwokzEgq5NhswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0YwODIzMkJGNTAyMTk0RTNBMkU0MDExREI0ODNERDdC
RjQ4Qzg0NjU3NDE4MEY0RUVCNTE3RUE5MTgzRjMwLzAvM0EyQzNERTM5REVEQkE1
MjI1RUE3RkVCQzI4OTMzMTIwQUI5MzYxQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQTJDM0RFMzlERURCQTUyMjVF
QTdGRUJDMjg5MzMxMjBBQjkzNjFCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNGMDgyMzJCRjUwMjE5NEUzQTJFNDAxMURCNDgzREQ3QkY0OEM4NDY1
NzQxODBGNEVFQjUxN0VBOTE4M0YzMC8wLzM0MzUyZTMyMzMzODJlMzEzMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM4MzMzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3uDDAN
BgkqhkiG9w0BAQsFAAOCAQEAOlmAZiPLLvnKZU+iyv4E5v/TSDPPLurMnSKlNgi4
loKZg4H/sf1++rYfii9Ks/6adMEKbJWSCNI7pdzxDbQUlr8V4mCmN4gXMfcU/OO9
ZhY1X+xUAhWY6udYrlNaKnjg5bM8ByKk4QVwuL810mO4QwkOh2ddw7yfKNXVrs9Y
vXdQNcYKfV3ImMo/qpP+AahsYHlQ1plqpGfEC814n1zFGajBI7dA5quwJhrOhKNw
/1yeeUUN1xFjOIQX4+NGS5Slxs7gf6L2ukbkLj+uqGcggbyyPsrgiXYkTB7i6erF
5lvVVCVSe2UkOT5VuF3GTP8UgzUKEOwZYqer9UTUJcuNqw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org