Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/34352e3232352e3232342e302f32322d3234203d3e20323635383535.roa
File:                     34352e3232352e3232342e302f32322d3234203d3e20323635383535.roa (raw, json)
Hash identifier:          jRl2QUXgjmQYEgCnqKpOBFUfpKuhPotZiT0pLM2ENMs=
Subject key identifier:   EB:0D:C1:1A:5D:91:41:59:6A:5B:C7:4C:B8:AB:F4:47:3C:DC:D0:EC
Certificate issuer:       /CN=F341739AE08457A031B734E9D432A5F3E22893FE
Certificate serial:       63D85A68485721FCA8841B904EF9449E4BE61CBA
Authority key identifier: F3:41:73:9A:E0:84:57:A0:31:B7:34:E9:D4:32:A5:F3:E2:28:93:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F341739AE08457A031B734E9D432A5F3E22893FE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/34352e3232352e3232342e302f32322d3234203d3e20323635383535.roa
Signing time:             Tue 05 Mar 2024 17:54:56 +0000
ROA not before:           Tue 05 Mar 2024 17:49:56 +0000
ROA not after:            Tue 04 Mar 2025 17:54:56 +0000
asID:                     265855
IP address blocks:        45.225.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/F341739AE08457A031B734E9D432A5F3E22893FE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/F341739AE08457A031B734E9D432A5F3E22893FE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F341739AE08457A031B734E9D432A5F3E22893FE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d8:5a:68:48:57:21:fc:a8:84:1b:90:4e:f9:44:9e:4b:e6:1c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F341739AE08457A031B734E9D432A5F3E22893FE
        Validity
            Not Before: Mar  5 17:49:56 2024 GMT
            Not After : Mar  4 17:54:56 2025 GMT
        Subject: CN=EB0DC11A5D9141596A5BC74CB8ABF4473CDCD0EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:cd:39:83:1d:cb:f0:f0:65:a4:37:f2:f4:
                    25:60:03:f4:a6:dd:3b:22:ae:ce:80:d4:4c:a7:f9:
                    ce:d2:af:ac:e9:af:cf:be:c6:e7:57:e3:ff:4f:ff:
                    80:0e:72:5e:d0:56:6b:3c:5e:1a:c1:df:b9:6c:87:
                    7f:1b:3b:48:9d:6e:09:30:4b:b9:33:87:59:63:4d:
                    75:bb:0f:57:d7:32:88:ce:b2:69:35:fd:2f:0c:28:
                    9f:ea:5b:ee:54:9b:98:35:ba:58:33:1e:47:a9:76:
                    ef:c6:f0:33:bc:16:86:98:be:c0:b6:bb:33:c3:f2:
                    95:82:26:f9:bf:52:f5:10:aa:0a:3c:73:7d:1f:06:
                    f0:a4:32:82:2f:b5:62:c0:cd:e2:b8:ae:4d:28:8c:
                    49:34:9e:d9:b7:86:76:e6:11:b8:bd:d2:46:b3:2a:
                    a6:f2:cd:27:16:a1:6a:f0:d3:3f:da:68:39:ef:e7:
                    76:15:4d:4d:2f:1f:53:16:b9:ba:8c:bf:dd:d9:39:
                    60:b6:80:72:93:ac:37:5b:2b:c7:de:28:97:e6:53:
                    99:bc:ff:fb:90:67:7c:8d:c4:07:4d:05:36:1c:d8:
                    3e:ad:b1:57:16:8f:2e:53:1b:93:ba:95:82:e9:83:
                    2a:bf:de:95:ba:52:42:23:53:0c:5f:a6:cb:1e:95:
                    2d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0D:C1:1A:5D:91:41:59:6A:5B:C7:4C:B8:AB:F4:47:3C:DC:D0:EC
            X509v3 Authority Key Identifier:
                keyid:F3:41:73:9A:E0:84:57:A0:31:B7:34:E9:D4:32:A5:F3:E2:28:93:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/F341739AE08457A031B734E9D432A5F3E22893FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F341739AE08457A031B734E9D432A5F3E22893FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/34352e3232352e3232342e302f32322d3234203d3e20323635383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:87:62:47:0f:4f:35:a9:1a:6c:3f:e8:5a:d6:1c:7c:1e:07:
         67:6f:45:ee:0a:e7:eb:1f:83:39:e1:07:86:5a:e1:98:e7:d6:
         c5:ac:f9:5b:d2:7d:15:ec:07:dc:53:5b:f2:0e:72:48:7c:32:
         29:8e:7f:25:36:e5:61:f7:ad:e1:2f:b1:71:b0:ec:48:3c:62:
         6b:a6:d8:6e:ee:5b:d5:05:bb:2a:c3:9b:ab:4e:fe:5e:e9:6f:
         7f:58:7b:7a:68:59:c2:e2:a5:27:eb:45:1c:62:64:0e:dd:89:
         ac:1b:56:60:63:d0:50:00:70:fe:00:f1:ae:ce:e0:8c:61:6e:
         19:26:30:18:4b:17:90:3c:98:77:05:bf:42:6d:a2:e5:bf:98:
         8f:64:d7:45:2c:9d:ca:5f:08:8c:94:29:76:bd:46:cb:89:f8:
         2f:e6:24:5d:89:ce:de:13:dc:56:c5:12:40:58:9c:7f:b9:96:
         57:d7:42:89:03:07:ad:f9:1d:c8:44:66:e2:54:66:76:49:53:
         40:ec:72:0a:bd:2c:2a:21:ba:dd:ac:ca:d3:4f:93:b1:85:3c:
         e3:e1:4f:b1:e3:30:83:87:2d:a2:fd:45:85:4b:c1:3c:e8:7b:
         fb:04:c0:a3:f5:49:b9:eb:1f:86:da:31:e6:39:b6:b2:f2:0f:
         30:46:2c:96
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUY9haaEhXIfyohBuQTvlEnkvmHLowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM0MTczOUFFMDg0NTdBMDMxQjczNEU5RDQzMkE1RjNF
MjI4OTNGRTAeFw0yNDAzMDUxNzQ5NTZaFw0yNTAzMDQxNzU0NTZaMDMxMTAvBgNV
BAMTKEVCMERDMTFBNUQ5MTQxNTk2QTVCQzc0Q0I4QUJGNDQ3M0NEQ0QwRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu5c05gx3L8PBlpDfy9CVgA/Sm
3Tsirs6A1Eyn+c7Sr6zpr8++xudX4/9P/4AOcl7QVms8XhrB37lsh38bO0idbgkw
S7kzh1ljTXW7D1fXMojOsmk1/S8MKJ/qW+5Um5g1ulgzHkepdu/G8DO8FoaYvsC2
uzPD8pWCJvm/UvUQqgo8c30fBvCkMoIvtWLAzeK4rk0ojEk0ntm3hnbmEbi90kaz
KqbyzScWoWrw0z/aaDnv53YVTU0vH1MWubqMv93ZOWC2gHKTrDdbK8feKJfmU5m8
//uQZ3yNxAdNBTYc2D6tsVcWjy5TG5O6lYLpgyq/3pW6UkIjUwxfpsselS2RAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU6w3BGl2RQVlqW8dMuKv0Rzzc0OwwHwYDVR0j
BBgwFoAU80FzmuCEV6AxtzTp1DKl8+Iok/4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RUQ4NEFENjM4QUZBMEU2QUE5MUFBNjlGRDQ5QzYwNDNF
OTAxMEQ1OUNBMTQ3N0VDNUU0MjIyMDczRDc2NDJBLzAvRjM0MTczOUFFMDg0NTdB
MDMxQjczNEU5RDQzMkE1RjNFMjI4OTNGRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMzQxNzM5QUUwODQ1N0EwMzFC
NzM0RTlENDMyQTVGM0UyMjg5M0ZFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUVEODRBRDYzOEFGQTBFNkFBOTFBQTY5RkQ0OUM2MDQzRTkwMTBENTlD
QTE0NzdFQzVFNDIyMjA3M0Q3NjQyQS8wLzM0MzUyZTMyMzIzNTJlMzIzMjM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzgzNTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLeHg
MA0GCSqGSIb3DQEBCwUAA4IBAQBnh2JHD081qRpsP+ha1hx8Hgdnb0XuCufrH4M5
4QeGWuGY59bFrPlb0n0V7AfcU1vyDnJIfDIpjn8lNuVh963hL7FxsOxIPGJrpthu
7lvVBbsqw5urTv5e6W9/WHt6aFnC4qUn60UcYmQO3YmsG1ZgY9BQAHD+APGuzuCM
YW4ZJjAYSxeQPJh3Bb9CbaLlv5iPZNdFLJ3KXwiMlCl2vUbLifgv5iRdic7eE9xW
xRJAWJx/uZZX10KJAwet+R3IRGbiVGZ2SVNA7HIKvSwqIbrdrMrTT5OxhTzj4U+x
4zCDhy2i/UWFS8E86Hv7BMCj9Um56x+G2jHmObay8g8wRiyW
-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:32 2024 by rpki-client on console-fra.rpki-client.org