Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/34352e3138352e3138342e302f32332d3234203d3e20323639383037.roa
File:                     34352e3138352e3138342e302f32332d3234203d3e20323639383037.roa (raw, json)
Hash identifier:          Q7eelzlsI8h3xlO3kKfvP9dy0CeKYSdatnRpev4sbbc=
Subject key identifier:   24:F6:C4:CA:D5:8D:72:14:9E:DA:B3:9F:7B:5A:64:5A:DC:5C:CB:3D
Certificate issuer:       /CN=F68803BAD715CA869FCCE393884E6C602582BFF4
Certificate serial:       5CCA45D79BE103B48505D8F19D6664C62F2200E2
Authority key identifier: F6:88:03:BA:D7:15:CA:86:9F:CC:E3:93:88:4E:6C:60:25:82:BF:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68803BAD715CA869FCCE393884E6C602582BFF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/34352e3138352e3138342e302f32332d3234203d3e20323639383037.roa
Signing time:             Tue 05 Mar 2024 17:51:44 +0000
ROA not before:           Tue 05 Mar 2024 17:46:44 +0000
ROA not after:            Tue 04 Mar 2025 17:51:44 +0000
asID:                     269807
IP address blocks:        45.185.184.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/F68803BAD715CA869FCCE393884E6C602582BFF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/F68803BAD715CA869FCCE393884E6C602582BFF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68803BAD715CA869FCCE393884E6C602582BFF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ca:45:d7:9b:e1:03:b4:85:05:d8:f1:9d:66:64:c6:2f:22:00:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F68803BAD715CA869FCCE393884E6C602582BFF4
        Validity
            Not Before: Mar  5 17:46:44 2024 GMT
            Not After : Mar  4 17:51:44 2025 GMT
        Subject: CN=24F6C4CAD58D72149EDAB39F7B5A645ADC5CCB3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:aa:d0:fa:47:d2:02:8e:8b:34:7d:76:5a:fa:
                    24:0c:0e:38:f0:24:c5:34:a8:11:fd:73:a1:ce:fb:
                    21:91:ad:2b:d4:f7:f3:90:72:1a:6d:6d:58:66:3f:
                    da:90:df:1a:ff:f6:e9:c2:24:54:56:00:24:ad:41:
                    36:a4:5c:91:bc:34:c8:23:c7:51:72:d4:0f:ad:e3:
                    1a:86:0b:1e:e7:52:1a:9f:e5:50:b8:e1:72:47:76:
                    e0:ec:cc:43:ce:49:31:33:6a:1a:1e:75:0f:cf:40:
                    ec:f5:e5:10:a0:ee:e1:ee:24:39:cb:ff:e7:ed:8a:
                    f1:84:6f:07:65:fa:a0:b7:d3:0d:ed:54:36:48:11:
                    97:74:bb:42:8b:fb:c6:fe:89:55:03:9a:23:69:a8:
                    3d:03:14:18:92:f7:c0:fa:08:c8:5d:da:50:8c:0f:
                    3c:90:a1:32:f6:37:dc:3a:b3:7a:2e:e9:01:b1:16:
                    68:13:3f:4c:a5:aa:c0:e2:d3:52:ee:c6:9f:31:62:
                    08:eb:4f:b5:cd:64:50:8f:61:41:ad:8f:ef:4d:84:
                    57:50:f8:4c:95:cb:04:ae:b9:89:17:fd:44:01:46:
                    fe:58:44:99:dd:e2:00:8e:30:c4:35:bb:17:e9:7e:
                    12:6a:9c:5c:e8:43:4a:54:ee:31:cb:6a:3e:44:55:
                    c0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F6:C4:CA:D5:8D:72:14:9E:DA:B3:9F:7B:5A:64:5A:DC:5C:CB:3D
            X509v3 Authority Key Identifier:
                keyid:F6:88:03:BA:D7:15:CA:86:9F:CC:E3:93:88:4E:6C:60:25:82:BF:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/F68803BAD715CA869FCCE393884E6C602582BFF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68803BAD715CA869FCCE393884E6C602582BFF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/34352e3138352e3138342e302f32332d3234203d3e20323639383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:1f:c9:d1:b5:41:df:f7:a4:0a:36:73:3b:85:5c:08:c6:b6:
         fd:c5:58:64:ed:be:98:69:fa:42:52:d8:cd:6a:a1:b7:b1:84:
         4a:ce:bf:b5:c8:0a:1c:fd:46:f5:f0:43:2c:94:d0:36:fb:2b:
         2d:9f:71:2e:c4:bf:e7:b8:ac:de:83:22:fb:ec:a1:36:6d:72:
         01:da:a9:29:1a:01:6c:86:d8:5e:76:2e:cf:31:4f:ca:6b:db:
         ff:80:47:78:d9:f3:6f:56:17:56:32:03:ed:a7:04:06:4a:11:
         cb:c4:34:60:9c:96:cf:52:97:03:ff:9a:26:a5:22:8a:64:f5:
         1e:d4:74:70:b7:51:c0:62:a8:b2:a2:e0:f4:ce:63:1e:12:47:
         d9:74:f7:88:b7:c1:aa:75:b7:97:9a:1c:49:01:53:4e:a5:cd:
         4c:53:46:8c:b4:cc:b5:ad:40:82:c5:56:c8:d9:3d:b9:b7:0d:
         cd:33:bc:52:a3:24:54:2d:cf:78:fe:df:47:af:71:26:2f:ec:
         bb:6a:cc:5a:2a:b2:f2:dd:46:5e:ea:ce:18:0e:99:a8:76:25:
         ac:47:56:f5:7b:a3:2c:90:86:5b:b5:35:5c:fe:0c:25:08:bf:
         c7:2c:15:79:18:2e:cc:18:43:c5:29:03:74:27:45:8b:c8:30:
         21:d5:91:76
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXMpF15vhA7SFBdjxnWZkxi8iAOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY4ODAzQkFENzE1Q0E4NjlGQ0NFMzkzODg0RTZDNjAy
NTgyQkZGNDAeFw0yNDAzMDUxNzQ2NDRaFw0yNTAzMDQxNzUxNDRaMDMxMTAvBgNV
BAMTKDI0RjZDNENBRDU4RDcyMTQ5RURBQjM5RjdCNUE2NDVBREM1Q0NCM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChqtD6R9ICjos0fXZa+iQMDjjw
JMU0qBH9c6HO+yGRrSvU9/OQchptbVhmP9qQ3xr/9unCJFRWACStQTakXJG8NMgj
x1Fy1A+t4xqGCx7nUhqf5VC44XJHduDszEPOSTEzahoedQ/PQOz15RCg7uHuJDnL
/+ftivGEbwdl+qC30w3tVDZIEZd0u0KL+8b+iVUDmiNpqD0DFBiS98D6CMhd2lCM
DzyQoTL2N9w6s3ou6QGxFmgTP0ylqsDi01Luxp8xYgjrT7XNZFCPYUGtj+9NhFdQ
+EyVywSuuYkX/UQBRv5YRJnd4gCOMMQ1uxfpfhJqnFzoQ0pU7jHLaj5EVcAbAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUJPbEytWNchSe2rOfe1pkWtxcyz0wHwYDVR0j
BBgwFoAU9ogDutcVyoafzOOTiE5sYCWCv/QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NEIzNkFGOTQ4QjNFNkQ1MUFCNjg3RjBDRTE1QThGRTVD
QjhDOTc3RDBFMkJFRUI0Mjg1MEIxREU1RjhGQTgzLzAvRjY4ODAzQkFENzE1Q0E4
NjlGQ0NFMzkzODg0RTZDNjAyNTgyQkZGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNjg4MDNCQUQ3MTVDQTg2OUZD
Q0UzOTM4ODRFNkM2MDI1ODJCRkY0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTRCMzZBRjk0OEIzRTZENTFBQjY4N0YwQ0UxNUE4RkU1Q0I4Qzk3N0Qw
RTJCRUVCNDI4NTBCMURFNUY4RkE4My8wLzM0MzUyZTMxMzgzNTJlMzEzODM0MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM5MzgzMDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLbm4
MA0GCSqGSIb3DQEBCwUAA4IBAQCkH8nRtUHf96QKNnM7hVwIxrb9xVhk7b6YafpC
UtjNaqG3sYRKzr+1yAoc/Ub18EMslNA2+ystn3EuxL/nuKzegyL77KE2bXIB2qkp
GgFshthedi7PMU/Ka9v/gEd42fNvVhdWMgPtpwQGShHLxDRgnJbPUpcD/5ompSKK
ZPUe1HRwt1HAYqiyouD0zmMeEkfZdPeIt8GqdbeXmhxJAVNOpc1MU0aMtMy1rUCC
xVbI2T25tw3NM7xSoyRULc94/t9Hr3EmL+y7asxaKrLy3UZe6s4YDpmodiWsR1b1
e6MskIZbtTVc/gwlCL/HLBV5GC7MGEPFKQN0J0WLyDAh1ZF2
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:34 2024 by rpki-client on console-fra.rpki-client.org