Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/34352e36382e36362e302f32342d3234203d3e2030.roa
File:                     34352e36382e36362e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          B2j1L1yTlrbRpjuMuMJBQdRPeNdrfmWeJR9r6ng8ZYQ=
Subject key identifier:   45:80:9A:DC:0C:64:18:30:52:C2:29:08:BC:EF:77:5F:0A:96:A1:B9
Certificate issuer:       /CN=42088D6FEC3FD14B71DEDB78860C90D825571466
Certificate serial:       0F1A5A1A984ECB3BEE7A9C29EA9D7CEAFCDCEC2C
Authority key identifier: 42:08:8D:6F:EC:3F:D1:4B:71:DE:DB:78:86:0C:90:D8:25:57:14:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/34352e36382e36362e302f32342d3234203d3e2030.roa
Signing time:             Mon 04 Nov 2024 20:50:01 +0000
ROA not before:           Mon 04 Nov 2024 20:45:01 +0000
ROA not after:            Mon 03 Nov 2025 20:50:01 +0000
asID:                     0
IP address blocks:        45.68.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1a:5a:1a:98:4e:cb:3b:ee:7a:9c:29:ea:9d:7c:ea:fc:dc:ec:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42088D6FEC3FD14B71DEDB78860C90D825571466
        Validity
            Not Before: Nov  4 20:45:01 2024 GMT
            Not After : Nov  3 20:50:01 2025 GMT
        Subject: CN=45809ADC0C64183052C22908BCEF775F0A96A1B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4a:0a:a9:1a:11:21:2a:27:3c:21:52:31:cf:
                    dd:00:23:85:7c:7a:b1:d5:26:ba:29:69:c3:a2:f3:
                    9f:5e:5d:f1:63:be:da:73:17:16:f7:55:60:dc:10:
                    33:ec:e8:55:4c:43:5f:4b:07:9f:ca:12:80:53:25:
                    45:0d:e6:ce:4e:d8:0a:6d:06:91:59:a4:d6:d0:32:
                    f6:f7:32:28:2f:18:68:06:29:e8:33:4a:fc:e3:96:
                    8d:de:83:59:41:e7:b7:ba:21:75:a1:c5:a8:93:20:
                    3e:f6:a4:50:3b:94:43:fc:f0:15:3b:ef:f4:ad:56:
                    4f:81:f2:0e:ba:32:93:44:0f:49:8f:1d:6e:2f:c2:
                    7b:f7:ff:99:53:c3:5c:ca:a8:03:2a:7c:fd:71:6f:
                    cc:fc:05:03:ee:92:0f:c8:bc:35:f6:5f:07:ae:1f:
                    71:4b:c5:ca:bb:46:64:88:f0:49:a9:1f:32:69:4c:
                    fe:1b:06:f4:52:2b:83:b6:07:e8:6a:d7:9b:08:f0:
                    6d:fa:93:5c:4d:77:48:e0:4f:e6:36:6d:0c:02:fc:
                    fd:78:e5:5c:bd:dc:34:9d:44:f6:a9:e6:d9:f0:11:
                    57:ca:cb:f3:ad:75:5e:e9:e8:d9:df:64:d0:0e:d7:
                    42:dc:fc:4e:b5:dd:77:64:04:e5:bb:14:c6:75:eb:
                    15:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:80:9A:DC:0C:64:18:30:52:C2:29:08:BC:EF:77:5F:0A:96:A1:B9
            X509v3 Authority Key Identifier:
                keyid:42:08:8D:6F:EC:3F:D1:4B:71:DE:DB:78:86:0C:90:D8:25:57:14:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/34352e36382e36362e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:db:ae:13:84:8f:18:d4:81:c4:63:0e:c1:26:3b:ed:6c:8e:
         ac:d3:77:c4:96:ff:d6:59:6d:2e:ab:c6:d2:e5:69:b7:40:0c:
         c9:04:a5:f9:a1:c2:2c:67:c5:ea:d7:76:1c:2f:6d:74:3c:28:
         b8:d0:b1:e3:14:ae:64:cf:4f:5c:1d:66:2a:6a:45:f7:93:70:
         6a:6d:5f:fd:ea:55:b5:de:f9:42:43:9a:c7:7b:a8:9b:dd:a7:
         b0:1b:a9:af:ee:b7:c1:08:ae:b3:3e:e2:90:c2:c5:57:81:13:
         1a:74:98:8c:75:61:e8:a7:da:e5:56:b7:ac:05:ba:b0:50:39:
         33:39:23:38:bc:fb:34:bf:c0:89:42:76:d8:5a:5e:22:1f:c9:
         e1:2c:3e:0a:d3:81:19:fe:22:1c:e3:fe:07:0e:e7:4d:ec:5f:
         01:ab:e7:4a:ba:d1:80:aa:05:04:e6:44:64:68:86:8f:50:93:
         e8:0e:b2:bb:13:c8:55:10:98:19:25:b2:f8:26:f3:8e:c5:89:
         96:62:05:dd:c3:95:ab:c3:cf:3f:eb:5c:91:8e:5a:74:91:18:
         aa:d2:79:28:91:e0:2d:46:60:b6:3d:f4:ab:c7:f7:0c:77:83:
         28:c5:f5:2c:9b:6b:0c:50:bd:77:f6:cb:c7:cc:2c:f1:75:1e:
         ee:d7:72:94
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUDxpaGphOyzvuepwp6p186vzc7CwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwODhENkZFQzNGRDE0QjcxREVEQjc4ODYwQzkwRDgy
NTU3MTQ2NjAeFw0yNDExMDQyMDQ1MDFaFw0yNTExMDMyMDUwMDFaMDMxMTAvBgNV
BAMTKDQ1ODA5QURDMEM2NDE4MzA1MkMyMjkwOEJDRUY3NzVGMEE5NkExQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMSgqpGhEhKic8IVIxz90AI4V8
erHVJropacOi859eXfFjvtpzFxb3VWDcEDPs6FVMQ19LB5/KEoBTJUUN5s5O2Apt
BpFZpNbQMvb3MigvGGgGKegzSvzjlo3eg1lB57e6IXWhxaiTID72pFA7lEP88BU7
7/StVk+B8g66MpNED0mPHW4vwnv3/5lTw1zKqAMqfP1xb8z8BQPukg/IvDX2Xweu
H3FLxcq7RmSI8EmpHzJpTP4bBvRSK4O2B+hq15sI8G36k1xNd0jgT+Y2bQwC/P14
5Vy93DSdRPap5tnwEVfKy/OtdV7p6NnfZNAO10Lc/E613XdkBOW7FMZ16xWBAgMB
AAGjggK8MIICuDAdBgNVHQ4EFgQURYCa3AxkGDBSwikIvO93XwqWobkwHwYDVR0j
BBgwFoAUQgiNb+w/0Utx3tt4hgyQ2CVXFGYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RTgyMUU2QjA3NTRGMkI0Q0U0NzUyMUYyMUUzRTczQ0I3
QUEyMjU4MEI5NUY5QzcyN0FCNjc2MEYyNUE1MDI4LzAvNDIwODhENkZFQzNGRDE0
QjcxREVEQjc4ODYwQzkwRDgyNTU3MTQ2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MjA4OEQ2RkVDM0ZEMTRCNzFE
RURCNzg4NjBDOTBEODI1NTcxNDY2LmNlcjCBuwYIKwYBBQUHAQsEga4wgaswgagG
CCsGAQUFBzALhoGbcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUU4MjFFNkIwNzU0RjJCNENFNDc1MjFGMjFFM0U3M0NCN0FBMjI1ODBC
OTVGOUM3MjdBQjY3NjBGMjVBNTAyOC8wLzM0MzUyZTM2MzgyZTM2MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1EQjANBgkqhkiG9w0BAQsF
AAOCAQEAhtuuE4SPGNSBxGMOwSY77WyOrNN3xJb/1lltLqvG0uVpt0AMyQSl+aHC
LGfF6td2HC9tdDwouNCx4xSuZM9PXB1mKmpF95Nwam1f/epVtd75QkOax3uom92n
sBupr+63wQiusz7ikMLFV4ETGnSYjHVh6Kfa5Va3rAW6sFA5MzkjOLz7NL/AiUJ2
2FpeIh/J4Sw+CtOBGf4iHOP+Bw7nTexfAavnSrrRgKoFBOZEZGiGj1CT6A6yuxPI
VRCYGSWy+CbzjsWJlmIF3cOVq8PPP+tckY5adJEYqtJ5KJHgLUZgtj30q8f3DHeD
KMX1LJtrDFC9d/bLx8ws8XUe7tdylA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:53 2024 by rpki-client on console-ams.rpki-client.org