Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/593A0AC384B6524026144AF30E6CD0DEB1929BC9B633AB2D7A50789DDC57DE87/0/34352e3139312e3232342e302f32322d3234203d3e20323639383930.roa
File:                     34352e3139312e3232342e302f32322d3234203d3e20323639383930.roa (raw, json)
Hash identifier:          H//r+lJhn7mYz8j9+ALdvGKoBvQANNo+fc6oFl8zWUM=
Subject key identifier:   BF:A4:68:70:CC:DB:B4:EE:3C:2F:0B:5D:1A:56:43:3D:82:14:61:97
Certificate issuer:       /CN=EE2AF6BD214244A36B40F5A96F06C91DF5169792
Certificate serial:       0E811B804CFE5AB569FFB8D3919DCFE137E71685
Authority key identifier: EE:2A:F6:BD:21:42:44:A3:6B:40:F5:A9:6F:06:C9:1D:F5:16:97:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE2AF6BD214244A36B40F5A96F06C91DF5169792.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/593A0AC384B6524026144AF30E6CD0DEB1929BC9B633AB2D7A50789DDC57DE87/0/34352e3139312e3232342e302f32322d3234203d3e20323639383930.roa
Signing time:             Tue 05 Mar 2024 18:06:39 +0000
ROA not before:           Tue 05 Mar 2024 18:01:39 +0000
ROA not after:            Tue 04 Mar 2025 18:06:39 +0000
asID:                     269890
IP address blocks:        45.191.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/593A0AC384B6524026144AF30E6CD0DEB1929BC9B633AB2D7A50789DDC57DE87/0/EE2AF6BD214244A36B40F5A96F06C91DF5169792.crl
                          rsync://repository.lacnic.net/rpki/lacnic/593A0AC384B6524026144AF30E6CD0DEB1929BC9B633AB2D7A50789DDC57DE87/0/EE2AF6BD214244A36B40F5A96F06C91DF5169792.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE2AF6BD214244A36B40F5A96F06C91DF5169792.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:81:1b:80:4c:fe:5a:b5:69:ff:b8:d3:91:9d:cf:e1:37:e7:16:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE2AF6BD214244A36B40F5A96F06C91DF5169792
        Validity
            Not Before: Mar  5 18:01:39 2024 GMT
            Not After : Mar  4 18:06:39 2025 GMT
        Subject: CN=BFA46870CCDBB4EE3C2F0B5D1A56433D82146197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f9:ce:32:12:6c:90:72:41:2b:9c:78:76:0c:
                    9b:85:8b:06:f7:f3:ce:9e:fb:96:48:55:25:18:3b:
                    7c:a9:b6:fb:11:57:a8:fc:a0:e5:02:62:41:18:1a:
                    16:84:32:eb:ea:27:92:78:e9:00:09:04:b4:89:88:
                    92:4e:ea:ed:15:50:9f:42:8e:12:e3:e7:af:48:6e:
                    d7:f6:f6:07:e9:64:54:be:fb:de:60:52:85:42:a9:
                    97:fc:75:d0:b1:db:7b:44:50:2a:27:99:c5:8a:f2:
                    d5:db:a4:8f:05:fa:4c:80:5d:3b:45:f7:55:b0:cd:
                    c5:f1:d0:55:9f:cf:1a:fe:57:85:67:a6:d1:fc:f6:
                    0f:1a:61:36:b8:7f:a6:05:71:79:2f:3f:01:07:8b:
                    39:8b:91:a0:75:c9:31:e5:b0:84:fa:47:33:c5:c0:
                    60:b3:4a:9a:ac:56:a2:f0:df:c4:f9:97:da:e6:9f:
                    35:28:11:6a:48:61:51:fe:2e:12:98:6d:19:ae:9d:
                    90:a9:6b:6c:8b:f6:a5:d1:f5:52:5e:31:e4:83:a6:
                    16:81:21:48:ce:ad:15:6b:50:e1:e5:2d:ac:54:28:
                    c6:9a:bb:fd:ca:33:f3:56:40:92:ff:9f:5e:ce:2a:
                    ac:78:ce:b1:1f:5e:b4:1e:c6:30:c0:16:bd:bd:f2:
                    e5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A4:68:70:CC:DB:B4:EE:3C:2F:0B:5D:1A:56:43:3D:82:14:61:97
            X509v3 Authority Key Identifier:
                keyid:EE:2A:F6:BD:21:42:44:A3:6B:40:F5:A9:6F:06:C9:1D:F5:16:97:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/593A0AC384B6524026144AF30E6CD0DEB1929BC9B633AB2D7A50789DDC57DE87/0/EE2AF6BD214244A36B40F5A96F06C91DF5169792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE2AF6BD214244A36B40F5A96F06C91DF5169792.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/593A0AC384B6524026144AF30E6CD0DEB1929BC9B633AB2D7A50789DDC57DE87/0/34352e3139312e3232342e302f32322d3234203d3e20323639383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:02:5d:f5:f3:60:fe:4e:c1:77:d6:ae:ea:84:85:80:9c:02:
         29:ca:a4:55:91:7f:53:5d:8a:45:f5:98:66:8e:d9:59:89:22:
         f7:bc:52:92:a4:c4:41:39:ce:b6:8c:63:73:95:3a:1f:85:16:
         88:f9:77:fd:54:be:d0:ad:c4:c9:35:48:7a:e1:37:6d:2f:68:
         1a:3a:02:6f:c9:ab:0b:91:72:9d:67:9d:1b:ba:77:79:00:32:
         0d:dd:8d:11:d6:40:8f:de:03:48:4a:6b:ec:bd:1f:eb:09:ea:
         28:9b:a9:3c:27:66:dc:77:ef:0c:46:c6:14:23:67:5b:b2:7f:
         25:a0:03:7b:a7:cd:17:78:91:f3:47:78:0b:33:1a:d7:65:4c:
         9e:45:5e:f4:49:95:cd:ee:f3:5a:cd:6a:92:19:52:60:d1:33:
         fd:e5:2e:92:82:29:3a:ef:0e:78:e5:26:b3:4f:46:7f:e3:af:
         da:f4:6d:cc:06:a0:fb:8d:20:b5:06:a1:8b:dc:a6:d6:61:83:
         2e:4d:7a:01:95:c8:82:63:b8:51:61:c9:d4:75:8f:07:83:80:
         e7:b2:10:f5:d0:b6:cd:4d:bd:11:4e:ed:22:20:d1:b7:51:cb:
         87:9a:9b:67:c3:05:db:50:7a:86:48:9f:94:a3:ba:94:f8:ad:
         43:b6:bc:89
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUDoEbgEz+WrVp/7jTkZ3P4TfnFoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUUyQUY2QkQyMTQyNDRBMzZCNDBGNUE5NkYwNkM5MURG
NTE2OTc5MjAeFw0yNDAzMDUxODAxMzlaFw0yNTAzMDQxODA2MzlaMDMxMTAvBgNV
BAMTKEJGQTQ2ODcwQ0NEQkI0RUUzQzJGMEI1RDFBNTY0MzNEODIxNDYxOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO+c4yEmyQckErnHh2DJuFiwb3
886e+5ZIVSUYO3yptvsRV6j8oOUCYkEYGhaEMuvqJ5J46QAJBLSJiJJO6u0VUJ9C
jhLj569Ibtf29gfpZFS++95gUoVCqZf8ddCx23tEUConmcWK8tXbpI8F+kyAXTtF
91WwzcXx0FWfzxr+V4VnptH89g8aYTa4f6YFcXkvPwEHizmLkaB1yTHlsIT6RzPF
wGCzSpqsVqLw38T5l9rmnzUoEWpIYVH+LhKYbRmunZCpa2yL9qXR9VJeMeSDphaB
IUjOrRVrUOHlLaxUKMaau/3KM/NWQJL/n17OKqx4zrEfXrQexjDAFr298uUHAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUv6RocMzbtO48LwtdGlZDPYIUYZcwHwYDVR0j
BBgwFoAU7ir2vSFCRKNrQPWpbwbJHfUWl5IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OTNBMEFDMzg0QjY1MjQwMjYxNDRBRjMwRTZDRDBERUIx
OTI5QkM5QjYzM0FCMkQ3QTUwNzg5RERDNTdERTg3LzAvRUUyQUY2QkQyMTQyNDRB
MzZCNDBGNUE5NkYwNkM5MURGNTE2OTc5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRTJBRjZCRDIxNDI0NEEzNkI0
MEY1QTk2RjA2QzkxREY1MTY5NzkyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTkzQTBBQzM4NEI2NTI0MDI2MTQ0QUYzMEU2Q0QwREVCMTkyOUJDOUI2
MzNBQjJEN0E1MDc4OUREQzU3REU4Ny8wLzM0MzUyZTMxMzkzMTJlMzIzMjM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5MzgzOTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLb/g
MA0GCSqGSIb3DQEBCwUAA4IBAQBWAl3182D+TsF31q7qhIWAnAIpyqRVkX9TXYpF
9ZhmjtlZiSL3vFKSpMRBOc62jGNzlTofhRaI+Xf9VL7QrcTJNUh64TdtL2gaOgJv
yasLkXKdZ50bund5ADIN3Y0R1kCP3gNISmvsvR/rCeoom6k8J2bcd+8MRsYUI2db
sn8loAN7p80XeJHzR3gLMxrXZUyeRV70SZXN7vNazWqSGVJg0TP95S6Sgik67w54
5SazT0Z/46/a9G3MBqD7jSC1BqGL3KbWYYMuTXoBlciCY7hRYcnUdY8Hg4DnshD1
0LbNTb0RTu0iING3UcuHmptnwwXbUHqGSJ+Uo7qU+K1DtryJ
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org