Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/34352e3232362e33322e302f32322d3234203d3e20323635383830.roa
File:                     34352e3232362e33322e302f32322d3234203d3e20323635383830.roa (raw, json)
Hash identifier:          2epb6+sixLwWekqKA70jY1Ib+rIaKEtVxHYxKG3S+U4=
Subject key identifier:   97:90:E1:A5:45:DE:05:E0:D7:5C:29:FB:D6:DB:86:93:5A:B7:41:A3
Certificate issuer:       /CN=C57552E18AFFC85D99468F027EAFCED31C5F6EA4
Certificate serial:       2E1CF1C16C5C227C087C8F91BD23C001D7702689
Authority key identifier: C5:75:52:E1:8A:FF:C8:5D:99:46:8F:02:7E:AF:CE:D3:1C:5F:6E:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/34352e3232362e33322e302f32322d3234203d3e20323635383830.roa
Signing time:             Mon 07 Oct 2024 18:00:40 +0000
ROA not before:           Mon 07 Oct 2024 17:55:40 +0000
ROA not after:            Mon 06 Oct 2025 18:00:40 +0000
asID:                     265880
IP address blocks:        45.226.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:1c:f1:c1:6c:5c:22:7c:08:7c:8f:91:bd:23:c0:01:d7:70:26:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C57552E18AFFC85D99468F027EAFCED31C5F6EA4
        Validity
            Not Before: Oct  7 17:55:40 2024 GMT
            Not After : Oct  6 18:00:40 2025 GMT
        Subject: CN=9790E1A545DE05E0D75C29FBD6DB86935AB741A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:33:9a:16:3c:b8:6c:50:2b:ad:61:69:d1:09:
                    93:63:95:ec:21:46:a9:23:b1:f4:e7:b1:8c:7b:c4:
                    9e:26:52:80:f9:78:b3:f2:4b:e5:80:d6:53:43:38:
                    3d:97:b0:5c:db:e7:6d:a4:a9:d9:fc:75:98:31:a0:
                    26:a0:d8:3b:77:84:75:db:f5:df:05:40:72:fc:d5:
                    b2:41:43:58:2f:6f:fc:c9:37:c3:62:44:a3:c2:7b:
                    c9:4d:71:a8:d4:92:f0:69:e3:9e:b0:9d:1b:6d:af:
                    50:7e:8a:b2:59:47:2b:62:cd:cd:5c:f5:e9:81:8f:
                    30:fa:f7:73:2b:9f:2d:4e:ad:b2:04:0a:dd:ed:5c:
                    f2:13:af:d9:0a:c0:5d:68:9a:56:eb:b2:55:49:eb:
                    8d:b0:df:87:58:86:ed:94:b0:78:5a:1b:80:ce:f0:
                    cf:a7:da:0c:5a:2a:a1:81:83:2c:0e:83:65:6d:06:
                    37:09:17:93:a8:0d:6d:eb:4b:bf:65:e9:f7:0b:7f:
                    f7:41:a2:ea:2e:03:af:a4:3f:ba:be:0a:13:03:f8:
                    54:9b:87:32:97:f6:da:14:81:2f:98:b3:27:28:dc:
                    78:fa:b2:fa:05:e4:12:5e:39:49:4b:4e:e5:b8:0e:
                    c3:76:31:bd:af:4a:ce:cb:fd:f2:1b:85:69:ce:16:
                    79:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:90:E1:A5:45:DE:05:E0:D7:5C:29:FB:D6:DB:86:93:5A:B7:41:A3
            X509v3 Authority Key Identifier:
                keyid:C5:75:52:E1:8A:FF:C8:5D:99:46:8F:02:7E:AF:CE:D3:1C:5F:6E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/34352e3232362e33322e302f32322d3234203d3e20323635383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:18:1f:35:82:f4:a5:04:7f:c8:09:a3:d2:30:77:fb:31:69:
         fa:c2:9a:a8:30:04:03:8b:79:aa:92:ca:e8:bf:29:5f:40:a5:
         f1:75:3c:d0:8a:bc:1a:e6:56:e2:f9:9b:e7:5a:a8:8c:51:e4:
         8b:83:fa:8d:16:91:92:eb:34:d7:a9:51:54:95:bc:96:8a:0d:
         1f:6f:0d:2b:67:38:7e:29:62:93:8c:e7:60:87:43:f3:1d:9d:
         ef:58:cd:e1:c9:36:aa:7a:40:75:65:01:c3:6d:d9:72:e7:c8:
         af:c8:7e:76:78:92:86:15:f1:68:49:33:8f:74:0b:41:47:6d:
         2f:49:9e:71:58:54:6f:22:5d:9f:b5:f3:55:6e:e1:6d:0e:84:
         72:d8:ec:22:1e:20:98:08:c2:c3:4e:cb:ab:89:e0:c1:92:2d:
         5a:42:fe:3b:3e:78:2c:44:bd:ad:a9:35:8f:fe:c3:99:0c:4a:
         ac:dc:f3:9d:18:b9:01:3a:18:3a:db:53:50:e7:3f:de:06:d6:
         77:de:e8:0d:63:f3:a6:3c:92:55:e0:8d:3e:e0:db:52:f2:85:
         f0:22:c5:19:7b:6a:97:83:ba:83:a7:9b:25:a9:3b:2d:c8:39:
         b5:6b:59:9b:47:30:ef:7b:8b:05:a2:e2:91:9c:ec:e2:12:f7:
         c1:8c:5d:db
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULhzxwWxcInwIfI+RvSPAAddwJokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzU3NTUyRTE4QUZGQzg1RDk5NDY4RjAyN0VBRkNFRDMx
QzVGNkVBNDAeFw0yNDEwMDcxNzU1NDBaFw0yNTEwMDYxODAwNDBaMDMxMTAvBgNV
BAMTKDk3OTBFMUE1NDVERTA1RTBENzVDMjlGQkQ2REI4NjkzNUFCNzQxQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6M5oWPLhsUCutYWnRCZNjlewh
RqkjsfTnsYx7xJ4mUoD5eLPyS+WA1lNDOD2XsFzb522kqdn8dZgxoCag2Dt3hHXb
9d8FQHL81bJBQ1gvb/zJN8NiRKPCe8lNcajUkvBp456wnRttr1B+irJZRytizc1c
9emBjzD693Mrny1OrbIECt3tXPITr9kKwF1omlbrslVJ642w34dYhu2UsHhaG4DO
8M+n2gxaKqGBgywOg2VtBjcJF5OoDW3rS79l6fcLf/dBououA6+kP7q+ChMD+FSb
hzKX9toUgS+Ysyco3Hj6svoF5BJeOUlLTuW4DsN2Mb2vSs7L/fIbhWnOFnnTAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUl5DhpUXeBeDXXCn71tuGk1q3QaMwHwYDVR0j
BBgwFoAUxXVS4Yr/yF2ZRo8Cfq/O0xxfbqQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RDQyQjdDNkI0MjYzNjc0NkQzRjFDREUxNDcwRThBRDIw
MjcyRjUzMzNFNDI5NkNERDI0OTlGRDkzODU3ODZGLzAvQzU3NTUyRTE4QUZGQzg1
RDk5NDY4RjAyN0VBRkNFRDMxQzVGNkVBNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNTc1NTJFMThBRkZDODVEOTk0
NjhGMDI3RUFGQ0VEMzFDNUY2RUE0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEQ0MkI3QzZCNDI2MzY3NDZEM0YxQ0RFMTQ3MEU4QUQyMDI3MkY1MzMz
RTQyOTZDREQyNDk5RkQ5Mzg1Nzg2Ri8wLzM0MzUyZTMyMzIzNjJlMzMzMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNTM4MzgzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3iIDAN
BgkqhkiG9w0BAQsFAAOCAQEAzRgfNYL0pQR/yAmj0jB3+zFp+sKaqDAEA4t5qpLK
6L8pX0Cl8XU80Iq8GuZW4vmb51qojFHki4P6jRaRkus016lRVJW8looNH28NK2c4
filik4znYIdD8x2d71jN4ck2qnpAdWUBw23ZcufIr8h+dniShhXxaEkzj3QLQUdt
L0mecVhUbyJdn7XzVW7hbQ6EctjsIh4gmAjCw07Lq4ngwZItWkL+Oz54LES9rak1
j/7DmQxKrNzznRi5AToYOttTUOc/3gbWd97oDWPzpjySVeCNPuDbUvKF8CLFGXtq
l4O6g6ebJak7Lcg5tWtZm0cw73uLBaLikZzs4hL3wYxd2w==
-----END CERTIFICATE-----
Generated at Tue Nov 19 23:45:59 2024 by rpki-client on console-fra.rpki-client.org