Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A89790A3A5ADA35D5FECEC48AA3A1FD9456BF021B4C5F97FC873E80CB1B4046/0/34352e342e3130312e302f32342d3234203d3e20323635363733.roa
File:                     34352e342e3130312e302f32342d3234203d3e20323635363733.roa (raw, json)
Hash identifier:          TvQQEVnPgzpD0LEr+tFBfz47bf1FSlFEbSPs/5APERA=
Subject key identifier:   A4:1A:34:99:AB:AC:B9:BA:DE:A5:BF:C3:DE:7E:75:10:DC:AF:57:CD
Certificate issuer:       /CN=A663625ACEE986000D86F2BCCF5CED7DE69D4C90
Certificate serial:       2F4B108160D210FEB578B0934E5D943E056C63F8
Authority key identifier: A6:63:62:5A:CE:E9:86:00:0D:86:F2:BC:CF:5C:ED:7D:E6:9D:4C:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A663625ACEE986000D86F2BCCF5CED7DE69D4C90.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A89790A3A5ADA35D5FECEC48AA3A1FD9456BF021B4C5F97FC873E80CB1B4046/0/34352e342e3130312e302f32342d3234203d3e20323635363733.roa
Signing time:             Tue 05 Mar 2024 18:13:25 +0000
ROA not before:           Tue 05 Mar 2024 18:08:25 +0000
ROA not after:            Tue 04 Mar 2025 18:13:25 +0000
asID:                     265673
IP address blocks:        45.4.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A89790A3A5ADA35D5FECEC48AA3A1FD9456BF021B4C5F97FC873E80CB1B4046/0/A663625ACEE986000D86F2BCCF5CED7DE69D4C90.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A89790A3A5ADA35D5FECEC48AA3A1FD9456BF021B4C5F97FC873E80CB1B4046/0/A663625ACEE986000D86F2BCCF5CED7DE69D4C90.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A663625ACEE986000D86F2BCCF5CED7DE69D4C90.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:4b:10:81:60:d2:10:fe:b5:78:b0:93:4e:5d:94:3e:05:6c:63:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A663625ACEE986000D86F2BCCF5CED7DE69D4C90
        Validity
            Not Before: Mar  5 18:08:25 2024 GMT
            Not After : Mar  4 18:13:25 2025 GMT
        Subject: CN=A41A3499ABACB9BADEA5BFC3DE7E7510DCAF57CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b0:31:aa:74:93:7f:f8:d4:3d:ce:7e:31:00:
                    08:a7:5d:60:f9:8f:a5:11:61:7c:62:42:44:23:46:
                    99:a4:fc:0d:cb:75:cc:25:5b:94:c8:47:a7:5a:56:
                    f1:c6:e7:d2:f9:37:89:5c:ae:86:6e:9b:89:4f:91:
                    7c:11:28:1c:ce:01:91:cc:fa:39:08:4a:de:f2:01:
                    86:f8:84:83:b7:eb:3a:71:82:a2:0a:0a:a8:55:a8:
                    34:32:51:ce:b6:0e:a9:fc:90:b3:4c:e4:64:1b:75:
                    b1:73:e9:0c:37:c0:b1:01:17:49:60:02:e4:fa:42:
                    fe:7b:9c:62:9a:43:cf:39:9f:32:31:e6:e1:f2:ee:
                    ff:6f:24:5c:c2:1b:70:b6:a5:6d:3e:7f:e6:d0:b3:
                    01:3b:42:b7:b2:f5:b9:a5:a0:fe:c6:f3:db:93:07:
                    78:27:f9:f9:5b:74:ee:2e:73:7f:46:9f:70:53:5d:
                    df:e2:64:53:e5:29:96:d1:d7:50:b1:1f:d2:ef:de:
                    7c:2a:04:65:24:c2:08:d5:2c:7c:64:fa:c5:87:bd:
                    e4:4d:a1:8f:7b:8a:23:dd:60:53:3e:b8:78:1f:4f:
                    48:5d:16:41:a3:1b:6a:58:57:28:23:3d:00:cd:78:
                    8c:96:40:1f:33:8c:b7:76:52:e0:eb:95:58:61:3c:
                    c2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1A:34:99:AB:AC:B9:BA:DE:A5:BF:C3:DE:7E:75:10:DC:AF:57:CD
            X509v3 Authority Key Identifier:
                keyid:A6:63:62:5A:CE:E9:86:00:0D:86:F2:BC:CF:5C:ED:7D:E6:9D:4C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A89790A3A5ADA35D5FECEC48AA3A1FD9456BF021B4C5F97FC873E80CB1B4046/0/A663625ACEE986000D86F2BCCF5CED7DE69D4C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A663625ACEE986000D86F2BCCF5CED7DE69D4C90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A89790A3A5ADA35D5FECEC48AA3A1FD9456BF021B4C5F97FC873E80CB1B4046/0/34352e342e3130312e302f32342d3234203d3e20323635363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:13:d5:9f:f9:fc:3d:c3:ff:17:1c:d7:05:06:3c:2a:43:
         5c:0c:47:55:d0:13:43:db:a9:90:eb:8b:f6:58:8a:f7:76:0d:
         0d:be:8d:f3:ae:f1:c5:6a:67:a7:e6:00:4c:0f:9a:b1:87:e9:
         1a:d3:ed:04:ee:99:49:a8:42:e4:22:a4:18:f4:75:34:cb:53:
         01:89:b6:59:2b:68:e3:e3:1b:3a:12:22:d6:ae:26:11:c7:d0:
         22:25:07:39:99:ee:40:c7:1b:1c:df:f2:24:a8:4b:ec:ba:54:
         7c:2f:4b:54:e7:47:ac:6f:a7:29:47:c2:88:96:49:7e:a1:af:
         5f:c8:f9:d2:ef:a0:3f:bd:e2:20:dc:f0:d1:da:76:47:ed:89:
         6b:02:9b:e9:14:2d:e1:cd:a2:4d:52:e9:13:49:43:d4:ed:da:
         b7:b0:bf:58:85:35:e5:5a:63:30:02:59:48:f3:8d:20:d1:21:
         cd:8d:7e:f6:9c:7d:ff:d1:94:81:77:c3:92:60:50:aa:04:7f:
         90:42:76:91:fd:8a:fb:a1:fe:8c:b0:db:40:ff:bf:84:7d:b7:
         7a:7c:79:59:92:2c:d5:47:15:01:ec:76:30:49:8e:99:ef:c7:
         36:15:57:ac:83:27:df:9a:47:16:ea:22:61:ca:16:8d:7b:18:
         5b:ec:b0:b4
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUL0sQgWDSEP61eLCTTl2UPgVsY/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY2MzYyNUFDRUU5ODYwMDBEODZGMkJDQ0Y1Q0VEN0RF
NjlENEM5MDAeFw0yNDAzMDUxODA4MjVaFw0yNTAzMDQxODEzMjVaMDMxMTAvBgNV
BAMTKEE0MUEzNDk5QUJBQ0I5QkFERUE1QkZDM0RFN0U3NTEwRENBRjU3Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzsDGqdJN/+NQ9zn4xAAinXWD5
j6URYXxiQkQjRpmk/A3LdcwlW5TIR6daVvHG59L5N4lcroZum4lPkXwRKBzOAZHM
+jkISt7yAYb4hIO36zpxgqIKCqhVqDQyUc62Dqn8kLNM5GQbdbFz6Qw3wLEBF0lg
AuT6Qv57nGKaQ885nzIx5uHy7v9vJFzCG3C2pW0+f+bQswE7Qrey9bmloP7G89uT
B3gn+flbdO4uc39Gn3BTXd/iZFPlKZbR11CxH9Lv3nwqBGUkwgjVLHxk+sWHveRN
oY97iiPdYFM+uHgfT0hdFkGjG2pYVygjPQDNeIyWQB8zjLd2UuDrlVhhPMJbAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUpBo0mausubrepb/D3n51ENyvV80wHwYDVR0j
BBgwFoAUpmNiWs7phgANhvK8z1ztfeadTJAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTg5NzkwQTNBNUFEQTM1RDVGRUNFQzQ4QUEzQTFGRDk0
NTZCRjAyMUI0QzVGOTdGQzg3M0U4MENCMUI0MDQ2LzAvQTY2MzYyNUFDRUU5ODYw
MDBEODZGMkJDQ0Y1Q0VEN0RFNjlENEM5MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNjYzNjI1QUNFRTk4NjAwMEQ4
NkYyQkNDRjVDRUQ3REU2OUQ0QzkwLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E4OTc5MEEzQTVBREEzNUQ1RkVDRUM0OEFBM0ExRkQ5NDU2QkYwMjFC
NEM1Rjk3RkM4NzNFODBDQjFCNDA0Ni8wLzM0MzUyZTM0MmUzMTMwMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNjM3MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtBGUwDQYJ
KoZIhvcNAQELBQADggEBAE9UE9Wf+fw9w/8XHNcFBjwqQ1wMR1XQE0PbqZDri/ZY
ivd2DQ2+jfOu8cVqZ6fmAEwPmrGH6RrT7QTumUmoQuQipBj0dTTLUwGJtlkraOPj
GzoSItauJhHH0CIlBzmZ7kDHGxzf8iSoS+y6VHwvS1TnR6xvpylHwoiWSX6hr1/I
+dLvoD+94iDc8NHadkftiWsCm+kULeHNok1S6RNJQ9Tt2rewv1iFNeVaYzACWUjz
jSDRIc2Nfvacff/RlIF3w5JgUKoEf5BCdpH9ivuh/oyw20D/v4R9t3p8eVmSLNVH
FQHsdjBJjpnvxzYVV6yDJ9+aRxbqImHKFo17GFvssLQ=
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:11 2024 by rpki-client on console-ams.rpki-client.org