Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/259B7A4A6BF7FADB2C5E38124645C110FFFB6004B82A97BDE19A2CBB2B95ECAC/0/34352e352e37392e302f32342d3234203d3e20323635363830.roa
File:                     34352e352e37392e302f32342d3234203d3e20323635363830.roa (raw, json)
Hash identifier:          uwkpHT09gvRKBqn62qTpbueVDSuWz4wsTcfOFSNdFfM=
Subject key identifier:   A5:A5:2F:00:B5:D7:5F:60:7A:F8:2F:E7:CF:A9:56:CF:E3:E7:45:F9
Certificate issuer:       /CN=E80A8AB689AB034F3F64DE7FFC596924B02BA842
Certificate serial:       4509A11A0C5E282C38BB119BAE61D6BBD2870C8B
Authority key identifier: E8:0A:8A:B6:89:AB:03:4F:3F:64:DE:7F:FC:59:69:24:B0:2B:A8:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80A8AB689AB034F3F64DE7FFC596924B02BA842.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/259B7A4A6BF7FADB2C5E38124645C110FFFB6004B82A97BDE19A2CBB2B95ECAC/0/34352e352e37392e302f32342d3234203d3e20323635363830.roa
Signing time:             Tue 05 Mar 2024 18:15:08 +0000
ROA not before:           Tue 05 Mar 2024 18:10:08 +0000
ROA not after:            Tue 04 Mar 2025 18:15:08 +0000
asID:                     265680
IP address blocks:        45.5.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/259B7A4A6BF7FADB2C5E38124645C110FFFB6004B82A97BDE19A2CBB2B95ECAC/0/E80A8AB689AB034F3F64DE7FFC596924B02BA842.crl
                          rsync://repository.lacnic.net/rpki/lacnic/259B7A4A6BF7FADB2C5E38124645C110FFFB6004B82A97BDE19A2CBB2B95ECAC/0/E80A8AB689AB034F3F64DE7FFC596924B02BA842.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80A8AB689AB034F3F64DE7FFC596924B02BA842.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:09:a1:1a:0c:5e:28:2c:38:bb:11:9b:ae:61:d6:bb:d2:87:0c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E80A8AB689AB034F3F64DE7FFC596924B02BA842
        Validity
            Not Before: Mar  5 18:10:08 2024 GMT
            Not After : Mar  4 18:15:08 2025 GMT
        Subject: CN=A5A52F00B5D75F607AF82FE7CFA956CFE3E745F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:77:ed:4f:cd:06:ee:89:77:dc:50:2e:13:
                    d6:61:cf:15:40:5b:a7:35:ef:21:2b:f5:d4:fa:d9:
                    91:af:e1:93:e9:d3:53:4d:57:d7:2e:c4:34:40:e3:
                    d8:f1:29:14:13:52:4f:3b:8a:6d:7b:d1:a9:8d:c7:
                    4c:aa:99:85:fd:c8:c6:a4:d2:1a:b9:50:ab:7b:9a:
                    34:b7:1e:c7:98:72:5e:a9:b7:a1:de:34:34:63:3f:
                    17:ce:4e:37:15:f9:90:6a:e9:ed:ef:8d:17:9b:70:
                    59:14:cf:93:b7:5a:2b:26:bd:b9:dd:3b:86:c0:6b:
                    ed:8f:8a:93:8a:87:c3:fc:79:12:7d:49:6d:de:94:
                    2c:4c:8b:eb:7d:52:7d:d3:d5:27:fe:f0:33:1e:97:
                    2c:9a:76:be:58:4a:8e:d7:da:19:35:4d:bf:d1:88:
                    34:b0:02:f2:bc:cc:ee:be:83:18:d7:8f:29:31:1e:
                    58:85:3e:d4:93:cd:81:a0:ea:f2:85:f9:2c:db:1e:
                    5e:6f:5d:77:68:eb:9b:b3:0e:48:29:f4:0a:0f:2f:
                    eb:00:1d:35:3c:ce:78:38:75:ff:0a:9a:8d:af:81:
                    61:77:4b:97:b8:63:f5:51:42:29:cb:f4:57:dc:43:
                    c9:d8:4f:16:7d:f6:eb:a5:19:6c:6a:8a:54:3c:72:
                    a3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A5:2F:00:B5:D7:5F:60:7A:F8:2F:E7:CF:A9:56:CF:E3:E7:45:F9
            X509v3 Authority Key Identifier:
                keyid:E8:0A:8A:B6:89:AB:03:4F:3F:64:DE:7F:FC:59:69:24:B0:2B:A8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/259B7A4A6BF7FADB2C5E38124645C110FFFB6004B82A97BDE19A2CBB2B95ECAC/0/E80A8AB689AB034F3F64DE7FFC596924B02BA842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80A8AB689AB034F3F64DE7FFC596924B02BA842.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/259B7A4A6BF7FADB2C5E38124645C110FFFB6004B82A97BDE19A2CBB2B95ECAC/0/34352e352e37392e302f32342d3234203d3e20323635363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:a0:4e:70:07:fa:18:04:e0:db:08:a6:2b:06:83:37:d7:28:
         de:9c:d4:c1:8b:a5:19:04:16:4a:37:d1:55:b4:94:68:2e:23:
         4e:ed:1e:cd:cd:cc:4f:1d:3b:49:45:4c:8d:be:98:2b:34:4c:
         f5:9c:a5:db:b7:b0:f7:c0:6c:09:7a:19:7c:72:5f:0b:9f:87:
         5a:93:7d:76:db:34:ea:49:71:b4:6d:02:06:a2:c3:36:a1:4e:
         df:26:3a:c4:87:89:e3:2d:36:1e:5d:87:50:67:7d:ae:4a:79:
         26:ee:5f:59:97:89:4e:d4:1d:80:3c:0c:c9:5e:00:ee:cd:4a:
         1c:6e:b2:de:44:70:7b:d3:82:b7:0e:b3:d1:97:a6:77:3c:d4:
         a9:eb:74:77:62:7e:d9:ea:05:ef:64:b9:5f:2b:1f:f9:e8:e3:
         64:61:65:6b:35:df:75:5b:ff:f6:05:2a:25:a4:f9:a2:5f:26:
         e9:65:43:2d:1b:5d:76:7e:61:88:21:af:70:43:ee:81:ea:28:
         fc:70:90:20:ca:62:49:06:af:a3:40:4d:78:ae:64:0b:e4:cd:
         ad:31:0d:fa:45:f9:2c:87:16:e1:9f:56:ef:6d:12:c2:c1:c8:
         cb:f3:7f:e9:34:d6:36:27:fd:31:95:17:4b:c4:02:db:c5:af:
         03:e9:22:b9
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIURQmhGgxeKCw4uxGbrmHWu9KHDIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTgwQThBQjY4OUFCMDM0RjNGNjRERTdGRkM1OTY5MjRC
MDJCQTg0MjAeFw0yNDAzMDUxODEwMDhaFw0yNTAzMDQxODE1MDhaMDMxMTAvBgNV
BAMTKEE1QTUyRjAwQjVENzVGNjA3QUY4MkZFN0NGQTk1NkNGRTNFNzQ1RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+3XftT80G7ol33FAuE9ZhzxVA
W6c17yEr9dT62ZGv4ZPp01NNV9cuxDRA49jxKRQTUk87im170amNx0yqmYX9yMak
0hq5UKt7mjS3HseYcl6pt6HeNDRjPxfOTjcV+ZBq6e3vjRebcFkUz5O3Wismvbnd
O4bAa+2PipOKh8P8eRJ9SW3elCxMi+t9Un3T1Sf+8DMelyyadr5YSo7X2hk1Tb/R
iDSwAvK8zO6+gxjXjykxHliFPtSTzYGg6vKF+SzbHl5vXXdo65uzDkgp9AoPL+sA
HTU8zng4df8Kmo2vgWF3S5e4Y/VRQinL9FfcQ8nYTxZ99uulGWxqilQ8cqPbAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUpaUvALXXX2B6+C/nz6lWz+PnRfkwHwYDVR0j
BBgwFoAU6AqKtomrA08/ZN5//FlpJLArqEIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTlCN0E0QTZCRjdGQURCMkM1RTM4MTI0NjQ1QzExMEZG
RkI2MDA0QjgyQTk3QkRFMTlBMkNCQjJCOTVFQ0FDLzAvRTgwQThBQjY4OUFCMDM0
RjNGNjRERTdGRkM1OTY5MjRCMDJCQTg0Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FODBBOEFCNjg5QUIwMzRGM0Y2
NERFN0ZGQzU5NjkyNEIwMkJBODQyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU5QjdBNEE2QkY3RkFEQjJDNUUzODEyNDY0NUMxMTBGRkZCNjAwNEI4
MkE5N0JERTE5QTJDQkIyQjk1RUNBQy8wLzM0MzUyZTM1MmUzNzM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQVPMA0GCSqG
SIb3DQEBCwUAA4IBAQBDoE5wB/oYBODbCKYrBoM31yjenNTBi6UZBBZKN9FVtJRo
LiNO7R7NzcxPHTtJRUyNvpgrNEz1nKXbt7D3wGwJehl8cl8Ln4dak3122zTqSXG0
bQIGosM2oU7fJjrEh4njLTYeXYdQZ32uSnkm7l9Zl4lO1B2APAzJXgDuzUocbrLe
RHB704K3DrPRl6Z3PNSp63R3Yn7Z6gXvZLlfKx/56ONkYWVrNd91W//2BSolpPmi
XybpZUMtG112fmGIIa9wQ+6B6ij8cJAgymJJBq+jQE14rmQL5M2tMQ36Rfkshxbh
n1bvbRLCwcjL83/pNNY2J/0xlRdLxALbxa8D6SK5
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:48 2024 by rpki-client on console-ams.rpki-client.org