Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/34352e3139302e3139302e302f32332d3233203d3e20323633373530.roa
File:                     34352e3139302e3139302e302f32332d3233203d3e20323633373530.roa (raw, json)
Hash identifier:          FCkSRxWC20k9gH6O954XeQldAL1TWnHJYM9mjlSZyLo=
Subject key identifier:   B8:84:CF:49:34:4C:44:EA:12:44:09:05:3E:8C:6D:84:EB:1A:11:B4
Certificate issuer:       /CN=66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698
Certificate serial:       2A67E04873F2BE4B749841C3E37D6A0BBB54DE71
Authority key identifier: 66:FF:CE:89:2A:47:04:0F:2D:AB:7D:4D:1A:0B:1B:0B:3C:07:B6:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/34352e3139302e3139302e302f32332d3233203d3e20323633373530.roa
Signing time:             Thu 27 Jun 2024 20:30:05 +0000
ROA not before:           Thu 27 Jun 2024 20:25:05 +0000
ROA not after:            Thu 26 Jun 2025 20:30:05 +0000
asID:                     263750
IP address blocks:        45.190.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Oct 2024 22:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:67:e0:48:73:f2:be:4b:74:98:41:c3:e3:7d:6a:0b:bb:54:de:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698
        Validity
            Not Before: Jun 27 20:25:05 2024 GMT
            Not After : Jun 26 20:30:05 2025 GMT
        Subject: CN=B884CF49344C44EA124409053E8C6D84EB1A11B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a9:86:47:96:47:79:cd:fd:bb:d6:f9:72:a1:
                    f7:ef:fd:08:ab:00:09:d2:a5:d6:66:df:f6:a6:04:
                    8b:d6:d3:26:06:a1:45:ff:49:c0:e3:57:3b:a9:ce:
                    6a:7f:53:54:4e:3f:a1:e0:16:be:50:4d:e3:ec:0c:
                    cf:51:f7:19:75:fc:48:ad:92:4a:e6:94:90:98:a3:
                    95:49:33:d7:6b:e0:dc:8f:b5:16:d4:2a:66:29:65:
                    47:64:8d:85:4a:ee:4d:fe:ea:18:29:e7:d5:4c:64:
                    75:6f:85:c9:5b:0c:9a:6b:9d:4e:e1:d0:e9:06:a1:
                    16:4a:5c:16:8e:83:c7:14:99:dc:7a:c8:18:42:3d:
                    34:de:ec:12:aa:11:7e:42:47:0e:c8:aa:b5:11:48:
                    eb:bc:62:a6:eb:84:f8:a6:cb:24:f6:76:76:5a:ae:
                    96:cc:49:dc:e8:1d:32:f6:32:c5:d2:73:ee:cf:d8:
                    2a:61:df:ee:cf:ab:f8:09:f7:c3:a9:16:6b:a3:5d:
                    12:80:df:80:cc:96:f9:88:20:a8:99:30:7a:a6:4c:
                    3c:8e:4c:46:72:5a:eb:66:b1:b7:87:03:47:7f:3d:
                    cd:ed:11:1d:3a:1f:ce:c6:3d:8e:05:a5:ed:64:3e:
                    87:ae:d7:7e:5e:ed:fb:57:52:1f:db:e6:bd:ef:48:
                    bf:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:84:CF:49:34:4C:44:EA:12:44:09:05:3E:8C:6D:84:EB:1A:11:B4
            X509v3 Authority Key Identifier:
                keyid:66:FF:CE:89:2A:47:04:0F:2D:AB:7D:4D:1A:0B:1B:0B:3C:07:B6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/34352e3139302e3139302e302f32332d3233203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:e5:3d:e0:bb:8d:69:a2:29:8d:7c:2d:ef:c4:94:ff:82:3c:
         36:d3:e4:a9:4b:1e:b2:79:38:1c:19:f3:97:08:83:62:65:e1:
         96:3c:52:a5:72:f9:d0:3a:79:02:3f:47:fb:79:c6:08:ca:82:
         08:14:17:7d:85:a4:8b:1f:4f:0b:07:db:41:c1:2b:28:01:ea:
         78:31:11:41:ec:1e:c1:d4:4d:ef:08:03:bd:81:2a:f5:a5:99:
         bd:e5:44:15:07:9e:3c:e6:8a:08:53:ec:9b:f2:cc:49:1c:79:
         bc:7a:89:ec:f9:2a:a1:0b:5d:66:d4:14:7d:aa:80:7c:d2:14:
         50:95:af:21:13:f5:4f:5d:50:6e:82:dc:aa:69:f9:f2:ed:5c:
         e5:cf:ea:aa:7a:19:ee:82:f1:9d:ce:fe:17:34:26:f3:2b:c6:
         03:2f:f6:be:7f:15:95:da:b7:ae:64:84:bd:4e:9d:ec:f6:95:
         a0:fb:d7:d0:98:e0:08:47:09:cf:ad:5e:75:e3:9b:dc:dc:06:
         90:83:a0:40:fe:0a:b7:91:79:cd:a1:01:b9:4a:bb:dd:10:91:
         71:23:eb:ed:12:6f:13:e3:76:3a:39:81:44:07:d9:d5:d9:b5:
         37:d4:39:fd:61:7b:08:46:6d:58:73:3e:15:36:7f:71:fb:f8:
         8a:0a:76:14
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKmfgSHPyvkt0mEHD431qC7tU3nEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZGRkNFODkyQTQ3MDQwRjJEQUI3RDREMUEwQjFCMEIz
QzA3QjY5ODAeFw0yNDA2MjcyMDI1MDVaFw0yNTA2MjYyMDMwMDVaMDMxMTAvBgNV
BAMTKEI4ODRDRjQ5MzQ0QzQ0RUExMjQ0MDkwNTNFOEM2RDg0RUIxQTExQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtqYZHlkd5zf271vlyoffv/Qir
AAnSpdZm3/amBIvW0yYGoUX/ScDjVzupzmp/U1ROP6HgFr5QTePsDM9R9xl1/Eit
kkrmlJCYo5VJM9dr4NyPtRbUKmYpZUdkjYVK7k3+6hgp59VMZHVvhclbDJprnU7h
0OkGoRZKXBaOg8cUmdx6yBhCPTTe7BKqEX5CRw7IqrURSOu8YqbrhPimyyT2dnZa
rpbMSdzoHTL2MsXSc+7P2Cph3+7Pq/gJ98OpFmujXRKA34DMlvmIIKiZMHqmTDyO
TEZyWutmsbeHA0d/Pc3tER06H87GPY4Fpe1kPoeu135e7ftXUh/b5r3vSL+NAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUuITPSTRMROoSRAkFPoxthOsaEbQwHwYDVR0j
BBgwFoAUZv/OiSpHBA8tq31NGgsbCzwHtpgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yODc5Q0ZDMkY2NEY0RjkyQjBGODVEMDlEOTdFRkZFMzM2
Rjg4QUNGODU1MTE1QzAwRUNCQjJBQzRFOUIxQzlCLzAvNjZGRkNFODkyQTQ3MDQw
RjJEQUI3RDREMUEwQjFCMEIzQzA3QjY5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NkZGQ0U4OTJBNDcwNDBGMkRB
QjdENEQxQTBCMUIwQjNDMDdCNjk4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjg3OUNGQzJGNjRGNEY5MkIwRjg1RDA5RDk3RUZGRTMzNkY4OEFDRjg1
NTExNUMwMEVDQkIyQUM0RTlCMUM5Qi8wLzM0MzUyZTMxMzkzMDJlMzEzOTMwMmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMzMzczNTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLb6+
MA0GCSqGSIb3DQEBCwUAA4IBAQCD5T3gu41poimNfC3vxJT/gjw20+SpSx6yeTgc
GfOXCINiZeGWPFKlcvnQOnkCP0f7ecYIyoIIFBd9haSLH08LB9tBwSsoAep4MRFB
7B7B1E3vCAO9gSr1pZm95UQVB5485ooIU+yb8sxJHHm8eons+SqhC11m1BR9qoB8
0hRQla8hE/VPXVBugtyqafny7Vzlz+qqehnugvGdzv4XNCbzK8YDL/a+fxWV2reu
ZIS9Tp3s9pWg+9fQmOAIRwnPrV5145vc3AaQg6BA/gq3kXnNoQG5SrvdEJFxI+vt
Em8T43Y6OYFEB9nV2bU31Dn9YXsIRm1Ycz4VNn9x+/iKCnYU
-----END CERTIFICATE-----
Generated at Mon Oct 21 16:43:50 2024 by rpki-client on console-fra.rpki-client.org