Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/34352e3137342e3132392e302f32342d3234203d3e20323637383230.roa
File:                     34352e3137342e3132392e302f32342d3234203d3e20323637383230.roa (raw, json)
Hash identifier:          C7LjR/odBzVELhN2F8ZliiXXv9SoKuY1+XeGyVjeqek=
Subject key identifier:   CB:21:27:B8:83:EF:A7:2F:61:B8:FC:E0:F1:5C:B2:24:A7:12:EC:BC
Certificate issuer:       /CN=2C105A8B66A79B278FD2A38A1572477F4D886617
Certificate serial:       42D0CCFF9F7FBFD10D1395819B1312EF83AACA5E
Authority key identifier: 2C:10:5A:8B:66:A7:9B:27:8F:D2:A3:8A:15:72:47:7F:4D:88:66:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C105A8B66A79B278FD2A38A1572477F4D886617.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/34352e3137342e3132392e302f32342d3234203d3e20323637383230.roa
Signing time:             Tue 05 Mar 2024 18:21:46 +0000
ROA not before:           Tue 05 Mar 2024 18:16:46 +0000
ROA not after:            Tue 04 Mar 2025 18:21:46 +0000
asID:                     267820
IP address blocks:        45.174.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C105A8B66A79B278FD2A38A1572477F4D886617.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d0:cc:ff:9f:7f:bf:d1:0d:13:95:81:9b:13:12:ef:83:aa:ca:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C105A8B66A79B278FD2A38A1572477F4D886617
        Validity
            Not Before: Mar  5 18:16:46 2024 GMT
            Not After : Mar  4 18:21:46 2025 GMT
        Subject: CN=CB2127B883EFA72F61B8FCE0F15CB224A712ECBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:20:54:18:c1:72:66:b7:6f:cb:40:ef:67:
                    84:93:c4:e3:97:b9:4d:26:52:da:5b:3f:7d:92:12:
                    fd:3b:76:e6:15:63:0d:a8:e1:47:31:cb:8a:58:26:
                    3c:56:4c:d9:b8:6d:68:ab:42:83:b2:d4:63:04:61:
                    6f:bb:9c:05:ae:e6:c7:18:78:f5:cf:10:7d:6f:09:
                    83:d0:92:99:2b:6c:c0:d9:ed:c1:9b:84:0d:d5:47:
                    49:e8:f4:dd:7e:23:3c:4c:4c:72:cf:d8:eb:be:02:
                    ea:69:f6:96:7c:31:1f:79:0b:ed:fb:1c:f2:dd:aa:
                    be:95:49:33:df:93:11:30:5f:c7:46:38:38:da:04:
                    71:f0:59:d1:e4:ac:9d:8d:e7:59:56:74:af:8b:95:
                    e9:73:3b:2c:7a:dd:2b:b0:b9:6c:af:89:b9:26:34:
                    46:71:a1:1c:77:52:44:ab:a2:79:66:e9:5c:86:28:
                    38:cf:fb:d7:a1:75:e0:fd:d0:1c:ee:8b:81:e3:17:
                    9d:ca:e9:63:70:1e:fd:7b:7e:c2:3a:8e:3c:a9:34:
                    bc:15:ca:42:f9:24:06:39:06:2a:ab:95:00:4d:53:
                    29:63:05:b6:29:77:99:99:34:9c:9f:50:0d:68:7a:
                    e4:e9:8a:4b:84:cd:b0:25:2a:ff:71:aa:39:e2:b4:
                    7f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:21:27:B8:83:EF:A7:2F:61:B8:FC:E0:F1:5C:B2:24:A7:12:EC:BC
            X509v3 Authority Key Identifier:
                keyid:2C:10:5A:8B:66:A7:9B:27:8F:D2:A3:8A:15:72:47:7F:4D:88:66:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C105A8B66A79B278FD2A38A1572477F4D886617.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/34352e3137342e3132392e302f32342d3234203d3e20323637383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:13:f1:1d:c3:56:03:31:99:0c:77:57:c5:ba:ca:a1:6a:8b:
         e7:22:eb:7a:46:ed:9a:57:6c:42:93:57:d5:06:c9:2e:25:25:
         f8:2a:78:5a:5f:0e:b0:01:28:82:2e:87:80:ae:b8:4a:c6:d7:
         94:87:01:3c:2f:11:bc:5f:76:88:5f:b0:c0:4d:5a:56:ee:f7:
         16:79:fa:b9:11:15:f7:85:38:77:b3:b4:67:c1:68:e8:f3:19:
         4f:ea:86:04:ab:8e:2f:9e:a5:28:5d:f7:85:6e:c7:99:fa:9f:
         59:39:23:19:40:52:9e:de:94:26:e0:ed:8c:04:76:fa:d3:73:
         2e:24:ba:3a:7a:f1:c1:81:47:8b:85:75:7a:43:f9:a3:3d:89:
         da:76:39:0f:4b:5d:f2:a2:13:51:dd:59:c5:65:be:c2:ef:98:
         ef:8d:07:f3:30:8f:b9:80:e9:2d:4b:fa:3c:b7:82:93:28:e3:
         d6:44:4a:b5:44:df:7e:87:70:30:53:3c:12:e7:eb:0f:5e:a0:
         d5:ae:cd:da:8f:82:96:1f:bf:19:c1:74:a2:9c:f5:79:18:ef:
         ca:eb:0e:27:6d:a2:38:d4:6d:c0:6b:7e:7a:76:26:4a:1e:8c:
         2f:fa:16:85:43:94:0a:69:4d:30:0a:cc:89:f1:5d:fa:c6:25:
         ba:ed:b2:f2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQtDM/59/v9ENE5WBmxMS74Oqyl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMxMDVBOEI2NkE3OUIyNzhGRDJBMzhBMTU3MjQ3N0Y0
RDg4NjYxNzAeFw0yNDAzMDUxODE2NDZaFw0yNTAzMDQxODIxNDZaMDMxMTAvBgNV
BAMTKENCMjEyN0I4ODNFRkE3MkY2MUI4RkNFMEYxNUNCMjI0QTcxMkVDQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGWiBUGMFyZrdvy0DvZ4STxOOX
uU0mUtpbP32SEv07duYVYw2o4Ucxy4pYJjxWTNm4bWirQoOy1GMEYW+7nAWu5scY
ePXPEH1vCYPQkpkrbMDZ7cGbhA3VR0no9N1+IzxMTHLP2Ou+Aupp9pZ8MR95C+37
HPLdqr6VSTPfkxEwX8dGODjaBHHwWdHkrJ2N51lWdK+LlelzOyx63SuwuWyvibkm
NEZxoRx3UkSronlm6VyGKDjP+9ehdeD90Bzui4HjF53K6WNwHv17fsI6jjypNLwV
ykL5JAY5BiqrlQBNUyljBbYpd5mZNJyfUA1oeuTpikuEzbAlKv9xqjnitH+VAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUyyEnuIPvpy9huPzg8VyyJKcS7LwwHwYDVR0j
BBgwFoAULBBai2anmyeP0qOKFXJHf02IZhcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRDlDNzQ3MzI5NDJGNjRFREM3MDI4RTlEN0IwNUZCRTNC
NUY1NEM1QThCRUMxNDUyOTk3OTY3ODhGNjgzMzA5LzAvMkMxMDVBOEI2NkE3OUIy
NzhGRDJBMzhBMTU3MjQ3N0Y0RDg4NjYxNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQzEwNUE4QjY2QTc5QjI3OEZE
MkEzOEExNTcyNDc3RjREODg2NjE3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0Q5Qzc0NzMyOTQyRjY0RURDNzAyOEU5RDdCMDVGQkUzQjVGNTRDNUE4
QkVDMTQ1Mjk5Nzk2Nzg4RjY4MzMwOS8wLzM0MzUyZTMxMzczNDJlMzEzMjM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzgzMjMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALa6B
MA0GCSqGSIb3DQEBCwUAA4IBAQCAE/Edw1YDMZkMd1fFusqhaovnIut6Ru2aV2xC
k1fVBskuJSX4KnhaXw6wASiCLoeArrhKxteUhwE8LxG8X3aIX7DATVpW7vcWefq5
ERX3hTh3s7RnwWjo8xlP6oYEq44vnqUoXfeFbseZ+p9ZOSMZQFKe3pQm4O2MBHb6
03MuJLo6evHBgUeLhXV6Q/mjPYnadjkPS13yohNR3VnFZb7C75jvjQfzMI+5gOkt
S/o8t4KTKOPWREq1RN9+h3AwUzwS5+sPXqDVrs3aj4KWH78ZwXSinPV5GO/K6w4n
baI41G3Aa356diZKHowv+haFQ5QKaU0wCsyJ8V36xiW67bLy
-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:29 2024 by rpki-client on console-ams.rpki-client.org