Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/312FCC972BFCA282A74E643E42BE2DBAF446A0132FECB897C18F163FC9C11A46/0/34352e3138312e362e302f32342d3234203d3e20323639373639.roa
File:                     34352e3138312e362e302f32342d3234203d3e20323639373639.roa (raw, json)
Hash identifier:          x1lGVAFDVll1YT1GaFs/E9xIirW0eyL9PzNZ+vfF7DE=
Subject key identifier:   68:2F:C0:16:78:AA:7F:A9:F6:39:37:9E:B5:A0:8A:F2:BB:88:99:CA
Certificate issuer:       /CN=777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A
Certificate serial:       313F0F465DE846E671A438546F9257883650856D
Authority key identifier: 77:75:95:F3:FA:C1:85:2A:DF:D7:FD:5C:20:A4:C1:9D:2B:E9:6F:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/312FCC972BFCA282A74E643E42BE2DBAF446A0132FECB897C18F163FC9C11A46/0/34352e3138312e362e302f32342d3234203d3e20323639373639.roa
Signing time:             Tue 05 Mar 2024 18:11:41 +0000
ROA not before:           Tue 05 Mar 2024 18:06:41 +0000
ROA not after:            Tue 04 Mar 2025 18:11:41 +0000
asID:                     269769
IP address blocks:        45.181.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/312FCC972BFCA282A74E643E42BE2DBAF446A0132FECB897C18F163FC9C11A46/0/777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/312FCC972BFCA282A74E643E42BE2DBAF446A0132FECB897C18F163FC9C11A46/0/777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 07:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:3f:0f:46:5d:e8:46:e6:71:a4:38:54:6f:92:57:88:36:50:85:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A
        Validity
            Not Before: Mar  5 18:06:41 2024 GMT
            Not After : Mar  4 18:11:41 2025 GMT
        Subject: CN=682FC01678AA7FA9F639379EB5A08AF2BB8899CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:35:9b:bf:b6:70:5b:7b:dc:5b:64:2e:e8:10:
                    87:cc:78:af:92:79:ec:db:0b:01:c1:e6:c7:2b:ca:
                    6e:11:1f:b2:36:01:2f:d9:64:a8:f1:29:4e:d0:16:
                    f9:3c:b8:75:84:68:95:03:c1:58:ee:ac:17:62:51:
                    67:e4:38:1f:14:2a:ab:23:14:8c:d1:f1:f9:11:07:
                    2a:2a:03:96:bf:e8:01:8a:81:aa:6d:90:ec:d5:39:
                    da:c7:a5:7d:42:6f:c7:70:5f:86:7c:97:ec:81:f9:
                    37:0e:ab:a3:a0:91:7a:3b:05:59:2b:70:86:a1:e7:
                    40:b3:48:b9:f6:26:d4:0f:20:de:e4:6b:bf:1a:af:
                    4c:79:9b:57:ee:88:31:3a:e9:89:58:5a:1e:0b:46:
                    58:81:e7:3f:d4:1b:97:fe:9e:46:d1:64:af:99:6f:
                    82:4f:07:cd:5c:64:39:f2:a7:09:60:6c:45:26:c8:
                    26:da:bc:57:76:d1:be:33:24:57:c1:32:8a:a8:b4:
                    bc:3c:03:e5:e8:15:68:75:38:f1:37:c9:2d:45:e4:
                    8b:ac:bc:1a:47:d2:ce:d4:14:fb:2e:83:ac:e8:94:
                    b7:61:47:d7:ba:fb:34:69:b7:fd:77:99:15:1e:20:
                    da:9d:33:21:6c:98:50:ef:96:be:19:2a:98:e6:a5:
                    1e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2F:C0:16:78:AA:7F:A9:F6:39:37:9E:B5:A0:8A:F2:BB:88:99:CA
            X509v3 Authority Key Identifier:
                keyid:77:75:95:F3:FA:C1:85:2A:DF:D7:FD:5C:20:A4:C1:9D:2B:E9:6F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/312FCC972BFCA282A74E643E42BE2DBAF446A0132FECB897C18F163FC9C11A46/0/777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/312FCC972BFCA282A74E643E42BE2DBAF446A0132FECB897C18F163FC9C11A46/0/34352e3138312e362e302f32342d3234203d3e20323639373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:60:49:5a:4f:3c:b5:a5:67:00:86:2e:48:9f:8f:e4:4c:e9:
         e6:76:e4:e1:1a:d4:22:89:1e:9a:4e:1b:2e:b1:0d:cb:4d:b5:
         34:08:59:72:30:8b:3c:49:36:a1:1e:9b:50:9e:e9:b4:06:47:
         0d:44:7b:65:16:01:24:ff:0c:e8:0e:34:70:74:0c:c5:fe:c2:
         0a:58:15:20:8b:fe:32:34:7a:ef:be:c2:d8:37:2a:d4:88:91:
         40:9d:cb:8f:fc:06:c1:00:e5:d8:87:09:ba:2e:de:b7:ce:0a:
         9f:7d:36:5f:1a:70:df:e3:9d:3f:e2:2d:49:92:ac:c8:a4:b6:
         9d:d1:ee:68:38:5f:9d:12:59:49:28:e0:15:56:de:d8:d1:ea:
         6e:f1:4c:cf:b6:89:7f:75:24:21:bc:53:80:c2:79:67:f4:19:
         6a:cf:51:70:ad:ad:13:33:e0:c9:79:a1:47:22:ba:cb:32:a0:
         69:4a:df:01:fb:b3:26:9b:a1:2b:ed:97:70:b3:bc:24:31:7c:
         d1:af:a4:9a:b0:a7:7c:41:d4:40:cb:53:6b:f8:9a:0a:ec:0a:
         9d:8b:eb:2f:e4:51:6e:cd:ea:da:8e:37:ff:f7:fb:4b:c4:57:
         d8:2c:74:8f:56:1d:56:db:c4:41:b5:d1:7d:c8:8e:02:50:82:
         16:00:47:b9
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUMT8PRl3oRuZxpDhUb5JXiDZQhW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc3NTk1RjNGQUMxODUyQURGRDdGRDVDMjBBNEMxOUQy
QkU5NkYxQTAeFw0yNDAzMDUxODA2NDFaFw0yNTAzMDQxODExNDFaMDMxMTAvBgNV
BAMTKDY4MkZDMDE2NzhBQTdGQTlGNjM5Mzc5RUI1QTA4QUYyQkI4ODk5Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXNZu/tnBbe9xbZC7oEIfMeK+S
eezbCwHB5scrym4RH7I2AS/ZZKjxKU7QFvk8uHWEaJUDwVjurBdiUWfkOB8UKqsj
FIzR8fkRByoqA5a/6AGKgaptkOzVOdrHpX1Cb8dwX4Z8l+yB+TcOq6OgkXo7BVkr
cIah50CzSLn2JtQPIN7ka78ar0x5m1fuiDE66YlYWh4LRliB5z/UG5f+nkbRZK+Z
b4JPB81cZDnypwlgbEUmyCbavFd20b4zJFfBMoqotLw8A+XoFWh1OPE3yS1F5Ius
vBpH0s7UFPsug6zolLdhR9e6+zRpt/13mRUeINqdMyFsmFDvlr4ZKpjmpR4ZAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUaC/AFniqf6n2OTeetaCK8ruImcowHwYDVR0j
BBgwFoAUd3WV8/rBhSrf1/1cIKTBnSvpbxowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMTJGQ0M5NzJCRkNBMjgyQTc0RTY0M0U0MkJFMkRCQUY0
NDZBMDEzMkZFQ0I4OTdDMThGMTYzRkM5QzExQTQ2LzAvNzc3NTk1RjNGQUMxODUy
QURGRDdGRDVDMjBBNEMxOUQyQkU5NkYxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83Nzc1OTVGM0ZBQzE4NTJBREZE
N0ZENUMyMEE0QzE5RDJCRTk2RjFBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzEyRkNDOTcyQkZDQTI4MkE3NEU2NDNFNDJCRTJEQkFGNDQ2QTAxMzJG
RUNCODk3QzE4RjE2M0ZDOUMxMUE0Ni8wLzM0MzUyZTMxMzgzMTJlMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM2MzkzNzM2Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAttQYwDQYJ
KoZIhvcNAQELBQADggEBAKVgSVpPPLWlZwCGLkifj+RM6eZ25OEa1CKJHppOGy6x
DctNtTQIWXIwizxJNqEem1Ce6bQGRw1Ee2UWAST/DOgONHB0DMX+wgpYFSCL/jI0
eu++wtg3KtSIkUCdy4/8BsEA5diHCbou3rfOCp99Nl8acN/jnT/iLUmSrMiktp3R
7mg4X50SWUko4BVW3tjR6m7xTM+2iX91JCG8U4DCeWf0GWrPUXCtrRMz4Ml5oUci
ussyoGlK3wH7syaboSvtl3CzvCQxfNGvpJqwp3xB1EDLU2v4mgrsCp2L6y/kUW7N
6tqON//3+0vEV9gsdI9WHVbbxEG10X3IjgJQghYAR7k=
-----END CERTIFICATE-----
Generated at Sun Jun 23 23:54:42 2024 by rpki-client on console-ams.rpki-client.org