Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/412AE136A54991700F23FB5BB1D9E54219AC1E55303CA6C86DC9A8D181184187/0/34352e3138352e3232302e302f32322d3234203d3e203634313137.roa
File:                     34352e3138352e3232302e302f32322d3234203d3e203634313137.roa (raw, json)
Hash identifier:          TgxItUNvswwDVJjewCvXl3/ck4kxBZ4+astx3HRs6B8=
Subject key identifier:   59:53:27:37:C8:BF:5C:A9:13:78:93:69:DC:9A:F9:BF:41:AA:0A:B7
Certificate issuer:       /CN=B0C74F5277521A2517C42D5A2DE11738F2647CF2
Certificate serial:       1595AD1CEA93D14FB819518E72B8CB17FBA03838
Authority key identifier: B0:C7:4F:52:77:52:1A:25:17:C4:2D:5A:2D:E1:17:38:F2:64:7C:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0C74F5277521A2517C42D5A2DE11738F2647CF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/412AE136A54991700F23FB5BB1D9E54219AC1E55303CA6C86DC9A8D181184187/0/34352e3138352e3232302e302f32322d3234203d3e203634313137.roa
Signing time:             Tue 05 Mar 2024 17:49:11 +0000
ROA not before:           Tue 05 Mar 2024 17:44:11 +0000
ROA not after:            Tue 04 Mar 2025 17:49:11 +0000
asID:                     64117
IP address blocks:        45.185.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/412AE136A54991700F23FB5BB1D9E54219AC1E55303CA6C86DC9A8D181184187/0/B0C74F5277521A2517C42D5A2DE11738F2647CF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/412AE136A54991700F23FB5BB1D9E54219AC1E55303CA6C86DC9A8D181184187/0/B0C74F5277521A2517C42D5A2DE11738F2647CF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0C74F5277521A2517C42D5A2DE11738F2647CF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:95:ad:1c:ea:93:d1:4f:b8:19:51:8e:72:b8:cb:17:fb:a0:38:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0C74F5277521A2517C42D5A2DE11738F2647CF2
        Validity
            Not Before: Mar  5 17:44:11 2024 GMT
            Not After : Mar  4 17:49:11 2025 GMT
        Subject: CN=59532737C8BF5CA913789369DC9AF9BF41AA0AB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:94:6a:62:18:24:45:28:79:a8:c3:0d:aa:
                    b9:cc:f7:f2:d0:24:8b:72:38:73:d6:4d:0a:cc:37:
                    77:9c:c2:06:3c:cc:84:c8:61:70:22:d8:b4:e4:9e:
                    6a:50:7d:40:55:81:28:de:a2:2f:b8:fb:bf:42:9a:
                    cd:21:b5:80:63:17:19:a0:ac:b2:12:46:48:88:09:
                    1b:9f:46:d5:ac:dc:c2:52:20:56:d1:b1:74:c9:dc:
                    e0:00:d6:e8:f1:f4:6f:4e:32:ae:0d:81:f7:08:35:
                    22:f3:61:63:13:2b:1c:4c:97:be:65:ea:b6:8c:64:
                    02:13:57:96:ab:73:d9:83:98:7d:cd:8f:d1:03:c4:
                    43:d7:33:34:e9:18:ae:21:64:ec:d3:fe:61:a2:0d:
                    17:6d:78:52:db:1f:f0:a6:f3:4d:4e:28:b2:8d:5d:
                    e6:e8:44:3c:00:8a:f4:f8:0c:9d:1c:58:d7:b4:86:
                    41:1d:bd:df:b6:7e:be:5c:d8:e7:e7:9a:96:02:a4:
                    5c:b5:9f:dd:5d:fc:78:a8:df:e2:fd:12:48:a5:9c:
                    85:c7:62:4e:e0:6b:f3:fa:91:e2:c2:df:05:ae:18:
                    fc:2e:5b:70:b4:c3:9a:4e:02:24:83:9a:b7:37:af:
                    4a:5a:9c:b4:4c:a1:48:63:2c:25:32:48:00:b9:00:
                    38:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:53:27:37:C8:BF:5C:A9:13:78:93:69:DC:9A:F9:BF:41:AA:0A:B7
            X509v3 Authority Key Identifier:
                keyid:B0:C7:4F:52:77:52:1A:25:17:C4:2D:5A:2D:E1:17:38:F2:64:7C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/412AE136A54991700F23FB5BB1D9E54219AC1E55303CA6C86DC9A8D181184187/0/B0C74F5277521A2517C42D5A2DE11738F2647CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0C74F5277521A2517C42D5A2DE11738F2647CF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/412AE136A54991700F23FB5BB1D9E54219AC1E55303CA6C86DC9A8D181184187/0/34352e3138352e3232302e302f32322d3234203d3e203634313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:92:4b:9f:20:7b:e6:07:fe:15:6e:e1:97:39:9a:f8:f5:67:
         ea:2e:f4:be:62:dc:01:a4:af:d5:59:e7:2e:7b:50:70:2c:06:
         e7:27:06:c9:76:90:45:58:41:68:4c:b0:ae:9f:b5:9c:52:a9:
         d3:d9:99:44:df:98:fe:51:99:0a:3a:a6:16:67:52:5f:26:1f:
         f4:87:0f:c2:5d:8e:b8:f2:1b:83:3f:46:17:f8:c5:69:24:5a:
         aa:c6:cd:62:01:72:08:04:5a:ab:a8:db:ab:2c:3d:a0:aa:ea:
         60:fa:ec:8d:48:1a:bf:53:de:42:5a:31:49:10:f2:82:3c:74:
         ac:16:51:6f:29:6c:8f:01:c0:b5:d7:a8:66:91:65:30:72:c3:
         6a:57:aa:28:8b:72:94:a2:4f:a8:bb:cd:ad:81:9f:6c:db:c7:
         8f:31:a1:e3:25:9d:f8:96:04:4b:37:82:16:23:40:d8:dc:67:
         ae:64:e3:46:8e:c4:cc:97:00:26:4d:56:11:e1:f1:28:83:48:
         6c:54:7a:11:9f:00:02:80:9d:1e:4f:82:32:55:1b:8c:fe:8d:
         bb:2d:79:97:76:c4:91:1a:7e:85:45:fd:c4:f3:03:0a:d2:82:
         01:25:85:2f:d4:cb:00:33:b1:95:3c:e5:5f:b6:69:c2:8e:64:
         fd:fd:98:b4
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFZWtHOqT0U+4GVGOcrjLF/ugODgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDNzRGNTI3NzUyMUEyNTE3QzQyRDVBMkRFMTE3MzhG
MjY0N0NGMjAeFw0yNDAzMDUxNzQ0MTFaFw0yNTAzMDQxNzQ5MTFaMDMxMTAvBgNV
BAMTKDU5NTMyNzM3QzhCRjVDQTkxMzc4OTM2OURDOUFGOUJGNDFBQTBBQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9KpRqYhgkRSh5qMMNqrnM9/LQ
JItyOHPWTQrMN3ecwgY8zITIYXAi2LTknmpQfUBVgSjeoi+4+79Cms0htYBjFxmg
rLISRkiICRufRtWs3MJSIFbRsXTJ3OAA1ujx9G9OMq4NgfcINSLzYWMTKxxMl75l
6raMZAITV5arc9mDmH3Nj9EDxEPXMzTpGK4hZOzT/mGiDRdteFLbH/Cm801OKLKN
XeboRDwAivT4DJ0cWNe0hkEdvd+2fr5c2OfnmpYCpFy1n91d/Hio3+L9EkilnIXH
Yk7ga/P6keLC3wWuGPwuW3C0w5pOAiSDmrc3r0panLRMoUhjLCUySAC5ADhlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUWVMnN8i/XKkTeJNp3Jr5v0GqCrcwHwYDVR0j
BBgwFoAUsMdPUndSGiUXxC1aLeEXOPJkfPIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MTJBRTEzNkE1NDk5MTcwMEYyM0ZCNUJCMUQ5RTU0MjE5
QUMxRTU1MzAzQ0E2Qzg2REM5QThEMTgxMTg0MTg3LzAvQjBDNzRGNTI3NzUyMUEy
NTE3QzQyRDVBMkRFMTE3MzhGMjY0N0NGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMEM3NEY1Mjc3NTIxQTI1MTdD
NDJENUEyREUxMTczOEYyNjQ3Q0YyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDEyQUUxMzZBNTQ5OTE3MDBGMjNGQjVCQjFEOUU1NDIxOUFDMUU1NTMw
M0NBNkM4NkRDOUE4RDE4MTE4NDE4Ny8wLzM0MzUyZTMxMzgzNTJlMzIzMjMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzNDMxMzEzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi253DAN
BgkqhkiG9w0BAQsFAAOCAQEARJJLnyB75gf+FW7hlzma+PVn6i70vmLcAaSv1Vnn
LntQcCwG5ycGyXaQRVhBaEywrp+1nFKp09mZRN+Y/lGZCjqmFmdSXyYf9IcPwl2O
uPIbgz9GF/jFaSRaqsbNYgFyCARaq6jbqyw9oKrqYPrsjUgav1PeQloxSRDygjx0
rBZRbylsjwHAtdeoZpFlMHLDaleqKItylKJPqLvNrYGfbNvHjzGh4yWd+JYESzeC
FiNA2NxnrmTjRo7EzJcAJk1WEeHxKINIbFR6EZ8AAoCdHk+CMlUbjP6Nuy15l3bE
kRp+hUX9xPMDCtKCASWFL9TLADOxlTzlX7Zpwo5k/f2YtA==
-----END CERTIFICATE-----
Generated at Sun May 5 02:31:49 2024 by rpki-client on console-fra.rpki-client.org