Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/34352e3136372e3136382e302f32322d3232203d3e20323637373338.roa
File:                     34352e3136372e3136382e302f32322d3232203d3e20323637373338.roa (raw, json)
Hash identifier:          5NNRMBI3BoGKVRRTfCTflFAZX32JFjAfR8oigvWA7L4=
Subject key identifier:   53:33:29:99:5F:E3:0B:A7:D0:07:39:0D:AB:12:73:6A:31:E3:3A:3A
Certificate issuer:       /CN=8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1
Certificate serial:       65F603D08C359C5EDDFE98B2CF1174BD6FDB5BD2
Authority key identifier: 87:31:93:4F:50:EF:F6:B6:DB:AA:4D:FB:4F:70:98:49:DE:02:FF:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/34352e3136372e3136382e302f32322d3232203d3e20323637373338.roa
Signing time:             Tue 05 Mar 2024 18:05:16 +0000
ROA not before:           Tue 05 Mar 2024 18:00:16 +0000
ROA not after:            Tue 04 Mar 2025 18:05:16 +0000
asID:                     267738
IP address blocks:        45.167.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f6:03:d0:8c:35:9c:5e:dd:fe:98:b2:cf:11:74:bd:6f:db:5b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1
        Validity
            Not Before: Mar  5 18:00:16 2024 GMT
            Not After : Mar  4 18:05:16 2025 GMT
        Subject: CN=533329995FE30BA7D007390DAB12736A31E33A3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3e:07:af:86:92:bc:04:0b:17:db:cf:19:3d:
                    16:5a:c3:be:74:26:01:7f:da:92:35:2e:20:80:61:
                    15:be:35:d4:24:8f:40:74:e0:3a:ff:cf:4e:e3:63:
                    37:70:e8:1a:7b:56:78:dc:98:d4:f8:35:7e:43:71:
                    5e:1f:84:18:18:1b:5f:8c:ec:a7:b7:58:47:a3:3d:
                    1b:d2:62:37:ec:6c:bc:ac:e6:97:e2:1d:7b:c2:38:
                    eb:a1:ac:26:4d:df:2f:42:2b:41:5a:12:0c:05:53:
                    09:3b:c9:91:6a:d6:44:ea:ef:4b:c5:81:b4:47:e9:
                    0c:40:0f:d3:33:c8:20:7c:9d:e6:c5:8c:6c:58:af:
                    fa:ca:18:6b:d6:f6:fa:20:c3:ce:2c:97:6a:7b:42:
                    6f:4e:30:0f:52:77:eb:53:d2:12:9f:85:6b:05:5b:
                    49:91:11:df:84:93:8b:eb:4d:72:6a:18:78:74:c2:
                    d4:70:de:23:4a:f4:7a:7a:06:7c:fb:60:10:3a:3a:
                    dc:60:3d:a0:9a:73:23:9d:bc:5f:a6:9d:f6:31:06:
                    e5:ae:d2:81:3a:02:70:df:9f:06:04:ac:96:0c:e2:
                    e0:d9:b4:6b:5b:89:3f:4d:c0:d1:24:c0:85:54:de:
                    9f:fd:78:52:6a:09:e7:77:de:4e:97:ec:97:e7:2a:
                    ab:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:33:29:99:5F:E3:0B:A7:D0:07:39:0D:AB:12:73:6A:31:E3:3A:3A
            X509v3 Authority Key Identifier:
                keyid:87:31:93:4F:50:EF:F6:B6:DB:AA:4D:FB:4F:70:98:49:DE:02:FF:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/34352e3136372e3136382e302f32322d3232203d3e20323637373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:91:38:ab:22:e0:46:44:e2:ae:69:1b:8c:7b:0f:cd:1e:85:
         b5:73:50:b8:6b:5d:9e:33:60:70:b1:6f:61:a3:78:46:7c:e7:
         95:24:6a:d0:5c:50:52:b7:ae:fc:62:d1:68:09:33:11:c4:eb:
         84:89:0d:92:3e:8e:b6:0c:b3:19:fc:22:43:29:19:ad:10:15:
         6b:d9:93:96:18:b6:d2:08:08:3a:db:cd:e2:be:31:8a:57:21:
         1f:3d:02:64:9b:1d:6d:81:f8:e9:ba:f1:bf:b9:f7:f9:27:14:
         fd:0c:4e:26:8b:84:a4:77:8e:ca:f3:45:9d:7b:08:82:ac:bd:
         2b:92:31:e6:a7:ce:07:62:2f:ec:f0:11:d0:86:a0:7c:7e:ff:
         8c:b8:04:f6:64:5a:7d:9a:c8:5f:82:ad:e8:34:52:c0:0f:5b:
         cb:1e:62:bb:50:a9:f2:1c:e8:57:6c:e8:7e:05:76:24:77:a2:
         07:58:9b:f5:78:7b:8f:97:62:57:a0:39:ed:d4:c4:e4:f0:ab:
         b3:6a:84:48:16:6d:6a:a6:0b:ac:88:22:47:12:ea:57:6d:88:
         e1:fc:23:81:54:e4:6e:cb:b7:0e:92:8a:27:ff:0a:9c:46:ea:
         48:a1:fd:78:a5:26:b7:0e:34:9d:f2:f3:c7:8f:59:75:b4:45:
         4b:c1:e8:b9
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZfYD0Iw1nF7d/piyzxF0vW/bW9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODczMTkzNEY1MEVGRjZCNkRCQUE0REZCNEY3MDk4NDlE
RTAyRkZCMTAeFw0yNDAzMDUxODAwMTZaFw0yNTAzMDQxODA1MTZaMDMxMTAvBgNV
BAMTKDUzMzMyOTk5NUZFMzBCQTdEMDA3MzkwREFCMTI3MzZBMzFFMzNBM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaPgevhpK8BAsX288ZPRZaw750
JgF/2pI1LiCAYRW+NdQkj0B04Dr/z07jYzdw6Bp7VnjcmNT4NX5DcV4fhBgYG1+M
7Ke3WEejPRvSYjfsbLys5pfiHXvCOOuhrCZN3y9CK0FaEgwFUwk7yZFq1kTq70vF
gbRH6QxAD9MzyCB8nebFjGxYr/rKGGvW9vogw84sl2p7Qm9OMA9Sd+tT0hKfhWsF
W0mREd+Ek4vrTXJqGHh0wtRw3iNK9Hp6Bnz7YBA6OtxgPaCacyOdvF+mnfYxBuWu
0oE6AnDfnwYErJYM4uDZtGtbiT9NwNEkwIVU3p/9eFJqCed33k6X7JfnKquFAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUUzMpmV/jC6fQBzkNqxJzajHjOjowHwYDVR0j
BBgwFoAUhzGTT1Dv9rbbqk37T3CYSd4C/7EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RUQ4MUUzQzQxRUM4NDJBMkRDQ0EwMUYzRjI3QzNEMzAz
RkU5QUI5MjU0MEI5QTAyNUM5MDE1RDA2QTU5OTA2LzAvODczMTkzNEY1MEVGRjZC
NkRCQUE0REZCNEY3MDk4NDlERTAyRkZCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NzMxOTM0RjUwRUZGNkI2REJB
QTRERkI0RjcwOTg0OURFMDJGRkIxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUVEODFFM0M0MUVDODQyQTJEQ0NBMDFGM0YyN0MzRDMwM0ZFOUFCOTI1
NDBCOUEwMjVDOTAxNUQwNkE1OTkwNi8wLzM0MzUyZTMxMzYzNzJlMzEzNjM4MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM3MzczMzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLaeo
MA0GCSqGSIb3DQEBCwUAA4IBAQAzkTirIuBGROKuaRuMew/NHoW1c1C4a12eM2Bw
sW9ho3hGfOeVJGrQXFBSt678YtFoCTMRxOuEiQ2SPo62DLMZ/CJDKRmtEBVr2ZOW
GLbSCAg6283ivjGKVyEfPQJkmx1tgfjpuvG/uff5JxT9DE4mi4Skd47K80WdewiC
rL0rkjHmp84HYi/s8BHQhqB8fv+MuAT2ZFp9mshfgq3oNFLAD1vLHmK7UKnyHOhX
bOh+BXYkd6IHWJv1eHuPl2JXoDnt1MTk8KuzaoRIFm1qpgusiCJHEupXbYjh/COB
VORuy7cOkoon/wqcRupIof14pSa3DjSd8vPHj1l1tEVLwei5
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org