Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/34352e3136392e33372e302f32342d3234203d3e20323632313931.roa
File:                     34352e3136392e33372e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          ZkPrZA+b6GD4RxyrZ9ybDEqjJvfF0wH6IUwQv8FlkiA=
Subject key identifier:   D2:B7:74:8F:44:1F:8E:B9:5C:40:8A:AC:4D:CA:A2:D9:98:85:5A:AD
Certificate issuer:       /CN=99A57CEBEE8726CF20BD670F637543047A024742
Certificate serial:       19AB8AF1D38A06AAC7643D13E84555F9A3FC872C
Authority key identifier: 99:A5:7C:EB:EE:87:26:CF:20:BD:67:0F:63:75:43:04:7A:02:47:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A57CEBEE8726CF20BD670F637543047A024742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/34352e3136392e33372e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 17:42:37 +0000
ROA not before:           Tue 05 Mar 2024 17:37:37 +0000
ROA not after:            Tue 04 Mar 2025 17:42:37 +0000
asID:                     262191
IP address blocks:        45.169.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/99A57CEBEE8726CF20BD670F637543047A024742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/99A57CEBEE8726CF20BD670F637543047A024742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A57CEBEE8726CF20BD670F637543047A024742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ab:8a:f1:d3:8a:06:aa:c7:64:3d:13:e8:45:55:f9:a3:fc:87:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A57CEBEE8726CF20BD670F637543047A024742
        Validity
            Not Before: Mar  5 17:37:37 2024 GMT
            Not After : Mar  4 17:42:37 2025 GMT
        Subject: CN=D2B7748F441F8EB95C408AAC4DCAA2D998855AAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:06:1f:f9:bd:a6:e5:5d:2c:6d:dd:0c:e5:3f:
                    15:7f:9a:8f:5f:90:80:43:7b:b8:46:19:cb:7f:87:
                    55:b9:be:b5:0b:f8:c8:7b:42:7e:36:8b:f5:41:e1:
                    3a:a5:98:e0:57:84:0e:40:aa:d1:02:af:84:ce:bd:
                    7b:0b:eb:4f:02:93:14:79:19:1a:d8:5b:57:85:58:
                    c1:6f:c5:ee:ec:b4:13:23:a1:91:2c:ec:28:6b:4c:
                    40:00:e0:48:2d:55:e8:56:30:a7:fe:f8:5e:3e:dd:
                    bf:42:cc:eb:51:9d:21:04:ca:3d:71:02:95:00:ab:
                    ee:84:a7:15:61:7a:5d:5f:e6:8c:aa:ca:ca:68:b5:
                    df:5a:bf:aa:b6:18:c6:65:31:a3:a9:ca:3c:6c:d5:
                    0e:aa:cc:22:b7:c0:3e:55:08:de:49:7d:80:6b:75:
                    52:b9:c8:52:df:e2:ab:c8:ec:12:f4:3a:96:b6:e1:
                    d5:04:66:76:70:a7:68:0c:09:1c:74:db:ef:4f:7e:
                    d5:06:28:df:30:78:8b:7b:31:58:a6:4d:7d:54:3a:
                    17:b2:4e:6f:ec:53:fd:71:d8:97:2c:b0:37:ab:ce:
                    85:8c:06:b5:f2:c3:ac:2d:0e:55:f8:25:d9:5c:80:
                    0b:32:49:96:06:ce:ad:31:b7:77:75:dc:da:ae:58:
                    71:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B7:74:8F:44:1F:8E:B9:5C:40:8A:AC:4D:CA:A2:D9:98:85:5A:AD
            X509v3 Authority Key Identifier:
                keyid:99:A5:7C:EB:EE:87:26:CF:20:BD:67:0F:63:75:43:04:7A:02:47:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/99A57CEBEE8726CF20BD670F637543047A024742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A57CEBEE8726CF20BD670F637543047A024742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/34352e3136392e33372e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:22:47:79:fc:d0:00:38:d2:db:4b:5a:62:cb:89:21:d3:1e:
         29:fd:17:aa:52:95:fa:01:84:21:eb:58:ac:d1:ac:20:fc:72:
         fc:17:5f:0c:91:65:70:ab:0d:35:35:00:a5:34:ce:3a:43:86:
         0c:93:83:95:d2:5e:37:b6:aa:04:ef:5f:b8:a8:93:78:9b:28:
         44:bb:7a:76:74:47:10:05:17:fb:89:a2:d9:91:9d:fe:9d:33:
         70:4e:4f:78:82:92:72:ba:40:3c:7f:48:bc:8a:ca:a9:9e:eb:
         7f:f7:10:d1:a4:63:39:00:3d:7d:e3:d0:34:5e:f5:fe:9f:8f:
         10:e2:46:b1:44:08:72:3b:91:a4:a4:f4:87:9b:92:6a:f1:24:
         76:e9:df:f6:74:46:70:11:9e:77:63:ca:3d:db:07:3f:df:a5:
         ed:39:e3:0b:de:c3:88:26:84:ad:80:b8:91:02:aa:bc:73:fc:
         b8:e6:20:f4:73:22:5d:23:81:bd:77:b7:32:dd:12:bf:d5:51:
         ac:c5:63:c9:00:92:c0:41:17:63:53:ea:85:b1:f5:f9:8e:34:
         87:f7:c1:0e:37:0f:59:f1:36:08:d8:74:17:71:0b:e8:c8:c9:
         a8:9d:65:31:3c:fe:44:98:69:9b:9f:cf:92:ee:a1:d1:5d:9b:
         e2:d0:02:d3
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUGauK8dOKBqrHZD0T6EVV+aP8hywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlBNTdDRUJFRTg3MjZDRjIwQkQ2NzBGNjM3NTQzMDQ3
QTAyNDc0MjAeFw0yNDAzMDUxNzM3MzdaFw0yNTAzMDQxNzQyMzdaMDMxMTAvBgNV
BAMTKEQyQjc3NDhGNDQxRjhFQjk1QzQwOEFBQzREQ0FBMkQ5OTg4NTVBQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMBh/5vablXSxt3QzlPxV/mo9f
kIBDe7hGGct/h1W5vrUL+Mh7Qn42i/VB4TqlmOBXhA5AqtECr4TOvXsL608CkxR5
GRrYW1eFWMFvxe7stBMjoZEs7ChrTEAA4EgtVehWMKf++F4+3b9CzOtRnSEEyj1x
ApUAq+6EpxVhel1f5oyqyspotd9av6q2GMZlMaOpyjxs1Q6qzCK3wD5VCN5JfYBr
dVK5yFLf4qvI7BL0Opa24dUEZnZwp2gMCRx02+9PftUGKN8weIt7MVimTX1UOhey
Tm/sU/1x2JcssDerzoWMBrXyw6wtDlX4JdlcgAsySZYGzq0xt3d13NquWHEpAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU0rd0j0QfjrlcQIqsTcqi2ZiFWq0wHwYDVR0j
BBgwFoAUmaV86+6HJs8gvWcPY3VDBHoCR0IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTcyMUUyNkFDOEJGNUFBNzYzN0VBNUYwRjY3MUNCRThG
MzA1NTdDQTIxNTJBREVCQ0JCMUMyM0U3QjNENUFBLzAvOTlBNTdDRUJFRTg3MjZD
RjIwQkQ2NzBGNjM3NTQzMDQ3QTAyNDc0Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OUE1N0NFQkVFODcyNkNGMjBC
RDY3MEY2Mzc1NDMwNDdBMDI0NzQyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU3MjFFMjZBQzhCRjVBQTc2MzdFQTVGMEY2NzFDQkU4RjMwNTU3Q0Ey
MTUyQURFQkNCQjFDMjNFN0IzRDVBQS8wLzM0MzUyZTMxMzYzOTJlMzMzNzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjMxMzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2pJTAN
BgkqhkiG9w0BAQsFAAOCAQEASCJHefzQADjS20taYsuJIdMeKf0XqlKV+gGEIetY
rNGsIPxy/BdfDJFlcKsNNTUApTTOOkOGDJODldJeN7aqBO9fuKiTeJsoRLt6dnRH
EAUX+4mi2ZGd/p0zcE5PeIKScrpAPH9IvIrKqZ7rf/cQ0aRjOQA9fePQNF71/p+P
EOJGsUQIcjuRpKT0h5uSavEkdunf9nRGcBGed2PKPdsHP9+l7TnjC97DiCaErYC4
kQKqvHP8uOYg9HMiXSOBvXe3Mt0Sv9VRrMVjyQCSwEEXY1PqhbH1+Y40h/fBDjcP
WfE2CNh0F3EL6MjJqJ1lMTz+RJhpm5/Pku6h0V2b4tAC0w==
-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:21 2024 by rpki-client on console-ams.rpki-client.org