Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32302e302f32332d3234203d3e20323634363638.roa
File:                     34352e3232342e32302e302f32332d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          E/LEkev4FXvJG9IRRJLue/cDWSNOO11j5IJYoC3DA+0=
Subject key identifier:   C0:2A:20:15:5E:20:4D:2C:A9:94:B6:B2:65:AF:83:C4:DB:6A:85:1F
Certificate issuer:       /CN=665E210B6EA50ABEA68925B6683D57E0A94D5CCF
Certificate serial:       5A2C37FF08294C89943FB9CF4C9DEE42E0A27555
Authority key identifier: 66:5E:21:0B:6E:A5:0A:BE:A6:89:25:B6:68:3D:57:E0:A9:4D:5C:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32302e302f32332d3234203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 17:48:55 +0000
ROA not before:           Tue 05 Mar 2024 17:43:55 +0000
ROA not after:            Tue 04 Mar 2025 17:48:55 +0000
asID:                     264668
IP address blocks:        45.224.20.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2c:37:ff:08:29:4c:89:94:3f:b9:cf:4c:9d:ee:42:e0:a2:75:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665E210B6EA50ABEA68925B6683D57E0A94D5CCF
        Validity
            Not Before: Mar  5 17:43:55 2024 GMT
            Not After : Mar  4 17:48:55 2025 GMT
        Subject: CN=C02A20155E204D2CA994B6B265AF83C4DB6A851F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:56:fe:24:dd:95:0a:c6:e5:c2:cb:b9:96:3c:
                    53:8d:55:1e:00:1c:76:b5:af:63:61:4a:27:80:54:
                    05:70:a6:50:2c:f6:56:cc:90:ac:7b:6a:90:04:c4:
                    fc:27:ea:45:d3:75:9a:93:09:06:06:5d:47:0a:2d:
                    77:a0:e0:76:9c:6f:b9:12:3a:76:41:50:75:13:a0:
                    81:14:32:a5:0c:d2:cf:04:bf:d5:db:70:c2:e2:cf:
                    74:8b:d0:88:4b:94:a0:0b:1e:1e:ce:eb:d9:cd:94:
                    5b:09:aa:f7:5d:40:d9:4f:1e:05:7b:d1:ee:0e:1e:
                    c5:1f:7c:b7:51:72:c7:0a:f2:64:75:3a:1a:a2:6f:
                    fe:f8:f4:a3:71:f8:aa:f9:83:56:03:61:bd:ac:cc:
                    99:1a:eb:40:77:74:76:96:5f:8a:49:b8:c5:8a:82:
                    0f:0a:4a:39:0a:91:2c:af:14:42:74:9f:e6:aa:04:
                    56:20:c5:ab:e2:59:33:f0:93:34:19:56:c3:64:dd:
                    6a:ff:e3:8d:36:e4:35:98:e6:c6:c9:e8:9d:d2:60:
                    53:05:6c:73:31:3e:6a:dd:35:b8:c4:ab:fa:d2:5b:
                    1c:91:d5:50:98:5e:79:6d:7a:66:75:fc:a3:e0:62:
                    3a:04:5e:ba:a9:13:3a:e4:6b:22:10:4d:5c:3c:79:
                    5d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2A:20:15:5E:20:4D:2C:A9:94:B6:B2:65:AF:83:C4:DB:6A:85:1F
            X509v3 Authority Key Identifier:
                keyid:66:5E:21:0B:6E:A5:0A:BE:A6:89:25:B6:68:3D:57:E0:A9:4D:5C:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32302e302f32332d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:c6:a8:76:72:48:36:5f:25:f2:d5:20:09:aa:70:a5:92:d0:
         a2:ad:b4:d8:90:71:df:af:0f:eb:7e:9d:1d:ed:d9:79:7e:4d:
         3b:fc:cf:90:e5:2d:2a:c1:4c:e4:4a:39:1c:b4:c1:5c:11:c2:
         c7:97:3d:a3:ff:bf:c9:6a:cc:3a:a9:b9:70:e2:b9:25:a8:9a:
         14:04:19:d9:dd:bf:c4:59:1a:f4:68:4a:e3:73:de:2a:2e:bc:
         cc:b8:01:4c:2c:29:f5:a0:31:73:83:01:2c:7f:f7:04:62:25:
         8c:d1:d8:a4:59:cf:81:7a:41:13:02:ad:6d:a2:c1:98:86:7b:
         03:77:c2:17:7e:14:47:a8:c7:f9:d7:2d:a9:32:81:b4:31:b1:
         5a:57:67:7a:62:47:60:b0:b4:87:81:83:69:40:0d:91:32:eb:
         99:0b:58:bf:f0:cf:76:12:dd:1e:a9:a3:b1:65:b2:f7:db:8e:
         59:41:94:2d:2e:d6:0b:ca:25:04:58:39:b9:1b:22:92:45:12:
         a6:9e:2a:8d:62:63:ce:8c:21:1e:c6:5d:df:55:64:f3:9b:c5:
         c4:f2:e0:9b:5c:99:47:2d:77:d9:09:12:29:6f:cf:c6:3b:74:
         d8:20:74:05:b9:51:11:b8:87:2f:47:20:53:02:8d:f2:36:5d:
         a2:fb:10:c4
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWiw3/wgpTImUP7nPTJ3uQuCidVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY1RTIxMEI2RUE1MEFCRUE2ODkyNUI2NjgzRDU3RTBB
OTRENUNDRjAeFw0yNDAzMDUxNzQzNTVaFw0yNTAzMDQxNzQ4NTVaMDMxMTAvBgNV
BAMTKEMwMkEyMDE1NUUyMDREMkNBOTk0QjZCMjY1QUY4M0M0REI2QTg1MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjVv4k3ZUKxuXCy7mWPFONVR4A
HHa1r2NhSieAVAVwplAs9lbMkKx7apAExPwn6kXTdZqTCQYGXUcKLXeg4Hacb7kS
OnZBUHUToIEUMqUM0s8Ev9XbcMLiz3SL0IhLlKALHh7O69nNlFsJqvddQNlPHgV7
0e4OHsUffLdRcscK8mR1Ohqib/749KNx+Kr5g1YDYb2szJka60B3dHaWX4pJuMWK
gg8KSjkKkSyvFEJ0n+aqBFYgxaviWTPwkzQZVsNk3Wr/44025DWY5sbJ6J3SYFMF
bHMxPmrdNbjEq/rSWxyR1VCYXnltemZ1/KPgYjoEXrqpEzrkayIQTVw8eV29AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUwCogFV4gTSyplLayZa+DxNtqhR8wHwYDVR0j
BBgwFoAUZl4hC26lCr6miSW2aD1X4KlNXM8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTY4M0RCMkVCRTQ4NEM3QTM1MzZDMzRDMTU4MjA2Qjg0
M0QzQ0VGOTExNDZDNDlDRjk3RkM0NjY4RkFENDFDLzAvNjY1RTIxMEI2RUE1MEFC
RUE2ODkyNUI2NjgzRDU3RTBBOTRENUNDRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NjVFMjEwQjZFQTUwQUJFQTY4
OTI1QjY2ODNENTdFMEE5NEQ1Q0NGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E2ODNEQjJFQkU0ODRDN0EzNTM2QzM0QzE1ODIwNkI4NDNEM0NFRjkx
MTQ2QzQ5Q0Y5N0ZDNDY2OEZBRDQxQy8wLzM0MzUyZTMyMzIzNDJlMzIzMDJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYzNDM2MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS3gFDAN
BgkqhkiG9w0BAQsFAAOCAQEAxcaodnJINl8l8tUgCapwpZLQoq202JBx368P636d
He3ZeX5NO/zPkOUtKsFM5Eo5HLTBXBHCx5c9o/+/yWrMOqm5cOK5JaiaFAQZ2d2/
xFka9GhK43PeKi68zLgBTCwp9aAxc4MBLH/3BGIljNHYpFnPgXpBEwKtbaLBmIZ7
A3fCF34UR6jH+dctqTKBtDGxWldnemJHYLC0h4GDaUANkTLrmQtYv/DPdhLdHqmj
sWWy99uOWUGULS7WC8olBFg5uRsikkUSpp4qjWJjzowhHsZd31Vk85vFxPLgm1yZ
Ry132QkSKW/Pxjt02CB0BblREbiHL0cgUwKN8jZdovsQxA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org