Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/34352e3136322e3132362e302f32342d3234203d3e20323637363931.roa
File:                     34352e3136322e3132362e302f32342d3234203d3e20323637363931.roa (raw, json)
Hash identifier:          QJxqQO4Zd66ePpB/yAMe2GTEnUEkSzSitQh7SDsDefM=
Subject key identifier:   B7:3D:63:FA:C7:1F:DF:CF:64:73:C5:89:EC:35:F7:D3:9F:1A:78:46
Certificate issuer:       /CN=64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3
Certificate serial:       19500025E0AAEEAFED765161509157DAD14E7F53
Authority key identifier: 64:A6:B1:C6:C8:83:A1:69:4B:4E:88:ED:11:BD:2A:96:CB:EE:E0:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/34352e3136322e3132362e302f32342d3234203d3e20323637363931.roa
Signing time:             Tue 05 Mar 2024 17:44:16 +0000
ROA not before:           Tue 05 Mar 2024 17:39:16 +0000
ROA not after:            Tue 04 Mar 2025 17:44:16 +0000
asID:                     267691
IP address blocks:        45.162.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Jun 2024 10:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:50:00:25:e0:aa:ee:af:ed:76:51:61:50:91:57:da:d1:4e:7f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3
        Validity
            Not Before: Mar  5 17:39:16 2024 GMT
            Not After : Mar  4 17:44:16 2025 GMT
        Subject: CN=B73D63FAC71FDFCF6473C589EC35F7D39F1A7846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e0:70:ef:00:36:cb:b3:08:a0:b6:5f:84:55:
                    84:90:cb:fb:58:e9:d1:6f:90:81:e4:38:76:20:ca:
                    33:58:8f:6f:c6:93:67:da:3a:50:ca:e7:df:3e:2e:
                    a2:2f:89:c1:9b:75:30:09:a9:11:0c:22:17:42:0a:
                    26:b0:ff:2f:6e:44:a6:2f:00:8b:c7:74:af:1b:fc:
                    cf:c4:b9:de:1a:a8:d4:be:26:24:b3:f9:60:d8:c6:
                    85:e4:3b:2b:58:aa:d5:15:72:75:8f:d8:30:33:cf:
                    80:4f:49:74:a4:9a:39:39:51:19:5d:75:c7:49:bf:
                    07:70:50:1b:22:e7:91:03:98:50:4e:ca:8a:23:cd:
                    f7:63:25:d9:4e:60:96:78:1d:5c:19:9f:b5:03:4e:
                    ad:a8:39:49:7e:ec:0b:23:04:20:b8:ac:aa:0f:c0:
                    79:44:1f:bf:c7:9a:bc:31:a8:e7:94:4b:58:39:a9:
                    40:3e:9b:dd:dd:43:5e:6f:34:bb:0a:85:62:53:96:
                    2d:10:e3:b8:99:cd:42:75:f0:ca:22:36:67:fc:92:
                    82:98:36:e4:8e:65:db:3b:ea:c7:92:3f:a1:7b:f8:
                    ab:45:64:73:09:69:2f:69:f5:e3:6e:24:08:d0:b5:
                    e8:69:cc:75:0c:b7:21:cc:ba:d1:92:02:d2:7b:e2:
                    b7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3D:63:FA:C7:1F:DF:CF:64:73:C5:89:EC:35:F7:D3:9F:1A:78:46
            X509v3 Authority Key Identifier:
                keyid:64:A6:B1:C6:C8:83:A1:69:4B:4E:88:ED:11:BD:2A:96:CB:EE:E0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/34352e3136322e3132362e302f32342d3234203d3e20323637363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:28:dc:d9:17:6b:cf:b4:99:12:30:c5:4c:fc:31:97:de:6e:
         17:fc:ae:fc:95:62:09:a7:17:bf:f7:80:3e:41:f9:19:e8:fb:
         f5:03:b7:07:01:ab:8a:fe:53:9a:15:1e:79:3f:ff:b4:65:6e:
         9e:b6:c3:47:ee:a0:4e:4a:7e:73:e2:83:fe:7b:f1:2b:0d:fa:
         75:9e:7e:5e:b7:05:9f:32:2a:52:02:d4:2f:cc:ae:d3:48:38:
         4a:25:8c:b5:37:db:04:73:bd:c2:56:c4:e5:52:e8:21:ad:80:
         df:b2:f9:dc:2d:58:07:72:a1:76:46:69:fe:ce:e5:8a:ae:5c:
         38:01:f7:80:17:34:18:65:0e:f8:1a:db:c6:10:ae:81:dc:fe:
         22:bf:05:79:b2:81:2b:19:03:22:84:ed:9e:e8:b6:ff:60:a1:
         00:8d:26:4b:3e:38:91:1b:5b:2d:90:76:ea:87:df:1b:40:a7:
         a9:c5:34:1f:4d:c8:5f:4e:9c:67:d0:c3:fa:b9:44:d6:e9:4e:
         96:31:1e:5c:c3:3a:0c:70:70:57:1d:f5:a6:63:2a:59:e0:7b:
         4f:ce:38:84:f7:8d:a4:b9:b1:57:bf:09:2c:80:90:17:b4:be:
         7a:f9:8f:96:70:15:e6:f0:8c:98:3c:2a:1c:17:dc:3f:ac:01:
         80:b7:fa:10
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUGVAAJeCq7q/tdlFhUJFX2tFOf1MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRBNkIxQzZDODgzQTE2OTRCNEU4OEVEMTFCRDJBOTZD
QkVFRTBDMzAeFw0yNDAzMDUxNzM5MTZaFw0yNTAzMDQxNzQ0MTZaMDMxMTAvBgNV
BAMTKEI3M0Q2M0ZBQzcxRkRGQ0Y2NDczQzU4OUVDMzVGN0QzOUYxQTc4NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw4HDvADbLswigtl+EVYSQy/tY
6dFvkIHkOHYgyjNYj2/Gk2faOlDK598+LqIvicGbdTAJqREMIhdCCiaw/y9uRKYv
AIvHdK8b/M/Eud4aqNS+JiSz+WDYxoXkOytYqtUVcnWP2DAzz4BPSXSkmjk5URld
dcdJvwdwUBsi55EDmFBOyoojzfdjJdlOYJZ4HVwZn7UDTq2oOUl+7AsjBCC4rKoP
wHlEH7/HmrwxqOeUS1g5qUA+m93dQ15vNLsKhWJTli0Q47iZzUJ18MoiNmf8koKY
NuSOZds76seSP6F7+KtFZHMJaS9p9eNuJAjQtehpzHUMtyHMutGSAtJ74rfNAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUtz1j+scf389kc8WJ7DX3058aeEYwHwYDVR0j
BBgwFoAUZKaxxsiDoWlLTojtEb0qlsvu4MMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NjI2QTBBMTIzRUQ0MTREM0YzNDk3NUI5RkUzRjM1NEZD
RDc2NUVFRDNDN0UyRTYwRERDQkIyN0UyMTY5ODhDLzAvNjRBNkIxQzZDODgzQTE2
OTRCNEU4OEVEMTFCRDJBOTZDQkVFRTBDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NEE2QjFDNkM4ODNBMTY5NEI0
RTg4RUQxMUJEMkE5NkNCRUVFMEMzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDYyNkEwQTEyM0VENDE0RDNGMzQ5NzVCOUZFM0YzNTRGQ0Q3NjVFRUQz
QzdFMkU2MEREQ0JCMjdFMjE2OTg4Qy8wLzM0MzUyZTMxMzYzMjJlMzEzMjM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzYzOTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALaJ+
MA0GCSqGSIb3DQEBCwUAA4IBAQAVKNzZF2vPtJkSMMVM/DGX3m4X/K78lWIJpxe/
94A+QfkZ6Pv1A7cHAauK/lOaFR55P/+0ZW6etsNH7qBOSn5z4oP+e/ErDfp1nn5e
twWfMipSAtQvzK7TSDhKJYy1N9sEc73CVsTlUughrYDfsvncLVgHcqF2Rmn+zuWK
rlw4AfeAFzQYZQ74GtvGEK6B3P4ivwV5soErGQMihO2e6Lb/YKEAjSZLPjiRG1st
kHbqh98bQKepxTQfTchfTpxn0MP6uUTW6U6WMR5cwzoMcHBXHfWmYypZ4HtPzjiE
942kubFXvwksgJAXtL56+Y+WcBXm8IyYPCocF9w/rAGAt/oQ
-----END CERTIFICATE-----
Generated at Fri Jun 14 16:47:21 2024 by rpki-client on console-fra.rpki-client.org