Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/34352e36352e3138382e302f32322d3234203d3e20323636383533.roa
File:                     34352e36352e3138382e302f32322d3234203d3e20323636383533.roa (raw, json)
Hash identifier:          YPo4kkcDj1vqMZa0Ao7SK47jpjDE5Ma3f91+xlbG3GM=
Subject key identifier:   C8:FF:64:B4:21:82:87:7D:FD:F1:3C:25:77:3C:03:CB:B6:87:FA:0B
Certificate issuer:       /CN=AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B
Certificate serial:       5AFC6B39FE2741421CD3D02AB6DAE8AF5A449620
Authority key identifier: AB:80:66:3E:BC:1B:B5:44:C5:5B:4C:E0:0C:58:BC:03:8F:2B:BB:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/34352e36352e3138382e302f32322d3234203d3e20323636383533.roa
Signing time:             Tue 05 Mar 2024 18:11:37 +0000
ROA not before:           Tue 05 Mar 2024 18:06:37 +0000
ROA not after:            Tue 04 Mar 2025 18:11:37 +0000
asID:                     266853
IP address blocks:        45.65.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 01:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:fc:6b:39:fe:27:41:42:1c:d3:d0:2a:b6:da:e8:af:5a:44:96:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B
        Validity
            Not Before: Mar  5 18:06:37 2024 GMT
            Not After : Mar  4 18:11:37 2025 GMT
        Subject: CN=C8FF64B42182877DFDF13C25773C03CBB687FA0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:96:cb:9c:3b:d2:82:fa:21:55:ca:f1:d1:c3:
                    83:4f:a4:d2:19:e4:00:70:4e:5a:c7:af:d7:91:56:
                    21:c6:71:59:6a:69:47:a9:bf:ee:80:98:d9:c4:e4:
                    e5:15:1b:41:64:39:b2:15:25:f2:f5:3d:33:69:f5:
                    4f:2e:5e:dd:a7:0d:f6:3a:ac:1d:a3:a5:b3:02:3c:
                    57:af:bd:4e:00:e5:c2:88:82:77:b9:4a:ed:d4:11:
                    16:77:f0:30:63:35:f3:30:1f:e1:a7:23:84:27:71:
                    42:ff:ca:0b:36:5a:a2:25:fd:95:2e:6c:4c:67:4d:
                    0c:ab:91:0f:53:d1:5a:c5:73:27:f0:31:14:f1:dd:
                    18:24:f9:7b:3a:86:5e:98:18:1f:f5:8c:54:c5:21:
                    43:5f:b2:31:69:48:da:11:77:64:83:9b:60:e5:4e:
                    b7:d2:34:02:4f:18:19:c4:3a:c1:a7:c4:85:c9:58:
                    b6:6b:dc:b2:a6:20:49:7f:1b:2c:95:03:2e:b0:3b:
                    d8:a6:8c:7f:42:eb:61:69:63:dc:05:9a:18:11:96:
                    47:bd:63:ff:4a:dc:13:94:0f:d1:ab:7d:7e:21:5f:
                    39:31:5e:3c:18:fb:06:49:ad:23:16:ed:d9:2b:9f:
                    2a:bc:e0:b9:3d:d4:af:f7:bd:11:53:b6:11:08:ee:
                    1b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FF:64:B4:21:82:87:7D:FD:F1:3C:25:77:3C:03:CB:B6:87:FA:0B
            X509v3 Authority Key Identifier:
                keyid:AB:80:66:3E:BC:1B:B5:44:C5:5B:4C:E0:0C:58:BC:03:8F:2B:BB:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/34352e36352e3138382e302f32322d3234203d3e20323636383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:7e:09:65:11:55:cb:77:ed:30:56:43:ae:96:d2:fb:f2:08:
         b1:29:65:4c:a8:32:73:a7:7f:9c:b9:8b:a3:fd:83:b0:ae:b0:
         ed:11:bc:95:02:6b:d6:91:cd:20:7d:d4:3f:8c:b6:2b:54:3b:
         b8:00:5c:b3:6b:2a:38:e4:94:bd:33:ca:23:ae:06:ef:b6:bd:
         e5:31:6c:64:14:1d:9b:67:87:13:e0:a8:51:e1:d5:93:e3:d5:
         a8:5e:97:67:ff:92:a9:d0:04:3d:78:b1:92:f6:29:6f:ae:31:
         2a:a0:0b:b0:69:84:40:b6:d1:0f:49:62:f9:86:86:75:ec:76:
         98:19:94:30:a3:10:52:f4:91:5e:65:53:ca:e9:df:1b:9c:f8:
         91:06:8f:33:2a:5d:41:2c:c5:63:3b:e3:8e:9f:7e:79:65:56:
         06:97:6c:6c:80:16:23:19:a3:2b:11:14:8b:00:57:3d:5c:e6:
         44:5d:a4:83:f7:ba:4c:2b:27:9d:9b:73:f3:4b:c5:50:b9:1b:
         4f:91:c2:fb:96:61:2c:01:a8:ea:b1:99:08:ad:49:a1:a2:a4:
         4b:38:09:49:b4:97:84:59:4f:e0:c2:de:b3:af:b9:7b:e9:5e:
         9a:e0:e1:45:1c:78:e0:7c:cf:0b:ed:7a:c5:66:39:36:f9:04:
         de:71:1c:0c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWvxrOf4nQUIc09Aqttror1pEliAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI4MDY2M0VCQzFCQjU0NEM1NUI0Q0UwMEM1OEJDMDM4
RjJCQkI2QjAeFw0yNDAzMDUxODA2MzdaFw0yNTAzMDQxODExMzdaMDMxMTAvBgNV
BAMTKEM4RkY2NEI0MjE4Mjg3N0RGREYxM0MyNTc3M0MwM0NCQjY4N0ZBMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjlsucO9KC+iFVyvHRw4NPpNIZ
5ABwTlrHr9eRViHGcVlqaUepv+6AmNnE5OUVG0FkObIVJfL1PTNp9U8uXt2nDfY6
rB2jpbMCPFevvU4A5cKIgne5Su3UERZ38DBjNfMwH+GnI4QncUL/ygs2WqIl/ZUu
bExnTQyrkQ9T0VrFcyfwMRTx3Rgk+Xs6hl6YGB/1jFTFIUNfsjFpSNoRd2SDm2Dl
TrfSNAJPGBnEOsGnxIXJWLZr3LKmIEl/GyyVAy6wO9imjH9C62FpY9wFmhgRlke9
Y/9K3BOUD9GrfX4hXzkxXjwY+wZJrSMW7dkrnyq84Lk91K/3vRFTthEI7hvTAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUyP9ktCGCh3398TwldzwDy7aH+gswHwYDVR0j
BBgwFoAUq4BmPrwbtUTFW0zgDFi8A48ru2swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MzJEQzhDNjdCNjUzRDI2QTA0QTk3MzQwQjk4NEUyODNC
NTFCNjQ4ODI2NDQ1NjFCNDc1MTU3MDZGNDk5OTcwLzAvQUI4MDY2M0VCQzFCQjU0
NEM1NUI0Q0UwMEM1OEJDMDM4RjJCQkI2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQjgwNjYzRUJDMUJCNTQ0QzU1
QjRDRTAwQzU4QkMwMzhGMkJCQjZCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDMyREM4QzY3QjY1M0QyNkEwNEE5NzM0MEI5ODRFMjgzQjUxQjY0ODgy
NjQ0NTYxQjQ3NTE1NzA2RjQ5OTk3MC8wLzM0MzUyZTM2MzUyZTMxMzgzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM4MzUzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1BvDAN
BgkqhkiG9w0BAQsFAAOCAQEAq34JZRFVy3ftMFZDrpbS+/IIsSllTKgyc6d/nLmL
o/2DsK6w7RG8lQJr1pHNIH3UP4y2K1Q7uABcs2sqOOSUvTPKI64G77a95TFsZBQd
m2eHE+CoUeHVk+PVqF6XZ/+SqdAEPXixkvYpb64xKqALsGmEQLbRD0li+YaGdex2
mBmUMKMQUvSRXmVTyunfG5z4kQaPMypdQSzFYzvjjp9+eWVWBpdsbIAWIxmjKxEU
iwBXPVzmRF2kg/e6TCsnnZtz80vFULkbT5HC+5ZhLAGo6rGZCK1JoaKkSzgJSbSX
hFlP4MLes6+5e+lemuDhRRx44HzPC+16xWY5NvkE3nEcDA==
-----END CERTIFICATE-----
Generated at Sun Nov 24 14:55:04 2024 by rpki-client on console-fra.rpki-client.org