Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/34352e3136392e3134342e302f32322d3234203d3e20323731373935.roa
File:                     34352e3136392e3134342e302f32322d3234203d3e20323731373935.roa (raw, json)
Hash identifier:          gVHW+Q7dfSEnu7goDBvRVhn8GoXVuIihc73nau+0r0o=
Subject key identifier:   94:13:D6:C7:AA:4B:80:C8:24:35:95:35:3C:50:69:BB:24:F8:79:F6
Certificate issuer:       /CN=DD2D25C642478D5D4DCAB0135DBBD87109D394CC
Certificate serial:       544E1FF76FD4B7C10034E5112019DDB81DBCA140
Authority key identifier: DD:2D:25:C6:42:47:8D:5D:4D:CA:B0:13:5D:BB:D8:71:09:D3:94:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/34352e3136392e3134342e302f32322d3234203d3e20323731373935.roa
Signing time:             Wed 01 May 2024 22:15:00 +0000
ROA not before:           Wed 01 May 2024 22:10:00 +0000
ROA not after:            Wed 30 Apr 2025 22:15:00 +0000
asID:                     271795
IP address blocks:        45.169.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:4e:1f:f7:6f:d4:b7:c1:00:34:e5:11:20:19:dd:b8:1d:bc:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD2D25C642478D5D4DCAB0135DBBD87109D394CC
        Validity
            Not Before: May  1 22:10:00 2024 GMT
            Not After : Apr 30 22:15:00 2025 GMT
        Subject: CN=9413D6C7AA4B80C8243595353C5069BB24F879F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e4:1d:60:ab:08:24:6f:bc:6d:08:24:7b:27:
                    ad:81:37:80:98:d9:d0:96:45:f9:cc:79:a3:09:e8:
                    f4:ba:3c:67:04:2d:8e:90:9d:ce:2b:b0:2e:b1:9f:
                    ab:1a:de:94:bd:a3:23:cd:6b:1b:a7:f4:6f:35:97:
                    db:31:f5:dc:22:07:ac:f4:a2:4c:78:6b:46:92:93:
                    cd:b1:09:68:fe:02:a4:b0:92:bb:eb:bc:4e:c6:f4:
                    cf:98:bf:85:f6:b1:6a:68:80:31:ab:52:5e:ab:70:
                    70:fb:87:3e:13:27:7b:ae:eb:88:be:90:bc:c5:d7:
                    35:15:09:36:09:9a:42:13:d9:ad:50:04:4a:b2:49:
                    e1:bf:1e:a0:f1:e1:74:bb:54:41:6c:8a:1f:97:4b:
                    45:44:6a:32:34:f5:80:ec:06:38:b3:37:01:ee:30:
                    fe:36:73:7a:78:ad:dd:cb:2b:2e:da:6f:79:ea:55:
                    4c:60:80:37:55:be:f9:c4:bb:b7:e6:41:ed:3c:cb:
                    5b:a4:ce:87:b5:3d:6f:a4:e3:45:7a:5f:09:31:3b:
                    84:48:b0:90:12:c9:a4:27:90:ce:e9:20:d1:7e:3b:
                    8b:ef:62:dc:b4:3c:3f:02:b4:2b:9b:ab:1c:29:d3:
                    b4:b6:1b:eb:b7:65:cf:42:6c:bb:5c:f7:e3:86:10:
                    33:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:13:D6:C7:AA:4B:80:C8:24:35:95:35:3C:50:69:BB:24:F8:79:F6
            X509v3 Authority Key Identifier:
                keyid:DD:2D:25:C6:42:47:8D:5D:4D:CA:B0:13:5D:BB:D8:71:09:D3:94:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/34352e3136392e3134342e302f32322d3234203d3e20323731373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:62:7e:57:20:57:24:cb:df:3e:9b:fc:0d:15:84:4f:f4:c0:
         3f:43:3c:94:fc:05:07:93:f6:e2:1a:2f:97:2a:fe:f7:a6:6a:
         b3:d1:c6:68:58:31:89:ff:78:0c:4f:45:84:0d:9a:ca:9a:aa:
         da:09:b1:d8:07:1d:53:54:9f:2f:2d:3b:bd:52:5f:2b:be:52:
         60:7b:db:c9:d3:88:d8:92:d6:0d:6f:f9:e5:84:cf:0c:4b:a5:
         05:87:1f:67:5c:4f:bb:e2:32:8c:1b:13:7a:00:9e:92:dc:53:
         4c:67:23:fa:51:9a:9c:7b:e6:26:9d:53:4b:87:58:43:6d:55:
         55:55:53:bb:49:10:45:dd:64:b2:39:de:2c:3c:84:5f:7d:21:
         57:f3:a4:16:e7:5a:79:7e:e1:5a:87:d1:e8:d2:0d:82:eb:31:
         82:f7:05:dc:c8:3c:ec:e2:ce:fb:44:f5:bb:c6:02:c9:e4:24:
         48:22:d3:f9:59:07:7b:79:7e:f3:f7:27:0e:1d:03:05:7f:e1:
         dd:69:34:40:ea:bb:16:dd:78:b9:c6:41:43:01:6c:9b:64:76:
         22:77:25:17:e8:0b:55:86:53:89:11:63:05:28:db:a6:4b:7a:
         51:79:5e:06:93:94:42:8e:34:b4:90:f6:b2:6b:b7:77:a2:80:
         74:05:f4:68
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUVE4f92/Ut8EANOURIBnduB28oUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQyRDI1QzY0MjQ3OEQ1RDREQ0FCMDEzNURCQkQ4NzEw
OUQzOTRDQzAeFw0yNDA1MDEyMjEwMDBaFw0yNTA0MzAyMjE1MDBaMDMxMTAvBgNV
BAMTKDk0MTNENkM3QUE0QjgwQzgyNDM1OTUzNTNDNTA2OUJCMjRGODc5RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM5B1gqwgkb7xtCCR7J62BN4CY
2dCWRfnMeaMJ6PS6PGcELY6Qnc4rsC6xn6sa3pS9oyPNaxun9G81l9sx9dwiB6z0
okx4a0aSk82xCWj+AqSwkrvrvE7G9M+Yv4X2sWpogDGrUl6rcHD7hz4TJ3uu64i+
kLzF1zUVCTYJmkIT2a1QBEqySeG/HqDx4XS7VEFsih+XS0VEajI09YDsBjizNwHu
MP42c3p4rd3LKy7ab3nqVUxggDdVvvnEu7fmQe08y1ukzoe1PW+k40V6XwkxO4RI
sJASyaQnkM7pINF+O4vvYty0PD8CtCubqxwp07S2G+u3Zc9CbLtc9+OGEDNtAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUlBPWx6pLgMgkNZU1PFBpuyT4efYwHwYDVR0j
BBgwFoAU3S0lxkJHjV1NyrATXbvYcQnTlMwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NDAwMkVCM0VDMkJCRTQzODQyNTFBQjJFNEYyMTFFRjdE
RDA3RTdGM0E5MjdFMzU2Qjc5QzQ1OTM4NTk4RjY0LzAvREQyRDI1QzY0MjQ3OEQ1
RDREQ0FCMDEzNURCQkQ4NzEwOUQzOTRDQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERDJEMjVDNjQyNDc4RDVENERD
QUIwMTM1REJCRDg3MTA5RDM5NENDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTQwMDJFQjNFQzJCQkU0Mzg0MjUxQUIyRTRGMjExRUY3REQwN0U3RjNB
OTI3RTM1NkI3OUM0NTkzODU5OEY2NC8wLzM0MzUyZTMxMzYzOTJlMzEzNDM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMxMzczOTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLamQ
MA0GCSqGSIb3DQEBCwUAA4IBAQA0Yn5XIFcky98+m/wNFYRP9MA/QzyU/AUHk/bi
Gi+XKv73pmqz0cZoWDGJ/3gMT0WEDZrKmqraCbHYBx1TVJ8vLTu9Ul8rvlJge9vJ
04jYktYNb/nlhM8MS6UFhx9nXE+74jKMGxN6AJ6S3FNMZyP6UZqce+YmnVNLh1hD
bVVVVVO7SRBF3WSyOd4sPIRffSFX86QW51p5fuFah9Ho0g2C6zGC9wXcyDzs4s77
RPW7xgLJ5CRIItP5WQd7eX7z9ycOHQMFf+HdaTRA6rsW3Xi5xkFDAWybZHYidyUX
6AtVhlOJEWMFKNumS3pReV4Gk5RCjjS0kPaya7d3ooB0BfRo
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:35:35 2024 by rpki-client on console-ams.rpki-client.org