Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/34352e3138392e3138392e302f32342d3234203d3e20323732393739.roa
File:                     34352e3138392e3138392e302f32342d3234203d3e20323732393739.roa (raw, json)
Hash identifier:          9jyy14xJ1z7vmrs7O0AEAi0VyMUn7yJ+ILwA7CpEK7M=
Subject key identifier:   E3:BD:DF:9A:34:5A:F5:62:CB:A0:E7:29:76:44:54:19:9B:7E:59:8A
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       04CC9A8A769DDE05D6E8B0A06E805070588F8964
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/34352e3138392e3138392e302f32342d3234203d3e20323732393739.roa
Signing time:             Thu 30 May 2024 18:35:00 +0000
ROA not before:           Thu 30 May 2024 18:30:00 +0000
ROA not after:            Thu 29 May 2025 18:35:00 +0000
asID:                     272979
IP address blocks:        45.189.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:cc:9a:8a:76:9d:de:05:d6:e8:b0:a0:6e:80:50:70:58:8f:89:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: May 30 18:30:00 2024 GMT
            Not After : May 29 18:35:00 2025 GMT
        Subject: CN=E3BDDF9A345AF562CBA0E729764454199B7E598A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3b:d7:ca:02:b1:c8:7e:4f:53:6d:d9:eb:e7:
                    d8:3c:6c:3d:af:a3:8d:f6:a9:9e:d9:63:d8:ec:44:
                    c1:ec:a7:60:9d:1e:81:6d:ed:a9:32:61:ca:52:12:
                    ac:e8:2d:80:45:67:9f:d7:c3:d1:64:fb:a9:98:b3:
                    55:b2:d5:d7:96:b0:73:ee:26:6d:2d:29:0c:23:87:
                    38:73:9c:a7:2b:48:0a:d6:5d:da:bf:42:54:83:a0:
                    cf:0a:00:00:f1:ee:10:4b:da:77:03:3d:7f:a2:e0:
                    c3:fb:22:77:dd:88:68:a1:4a:5e:fa:40:57:9d:56:
                    e7:1f:a5:a7:0a:a4:af:93:7c:b7:8f:57:18:c5:e5:
                    5d:08:37:df:69:2b:f0:de:28:96:30:b9:94:0a:da:
                    62:a0:0c:06:bd:5c:cc:50:10:d9:09:ca:63:5e:c0:
                    46:96:90:bc:40:cd:b3:98:83:bf:a7:52:3b:fc:84:
                    dd:64:ac:dd:14:8e:36:ff:48:9c:ec:5e:82:ee:c7:
                    be:be:67:3d:7d:51:33:62:25:fa:25:3b:b1:be:a5:
                    a8:d2:cb:d0:2c:03:9f:85:0c:4d:06:f0:15:dc:ce:
                    24:8e:ec:e7:56:dc:3d:a8:ca:87:75:d7:ed:d7:35:
                    c5:42:c6:69:11:ea:5e:41:a3:d7:3b:06:c9:b4:52:
                    6e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BD:DF:9A:34:5A:F5:62:CB:A0:E7:29:76:44:54:19:9B:7E:59:8A
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/34352e3138392e3138392e302f32342d3234203d3e20323732393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:54:44:e7:3b:5b:04:ad:6a:b6:3b:fd:85:d1:6e:b5:af:cb:
         5c:66:8f:12:8f:56:75:f9:ed:a2:9a:0e:70:ad:17:58:26:f3:
         5f:d7:5d:26:3c:57:80:5c:bb:ae:13:5a:8e:cf:de:1b:c3:f6:
         70:90:88:d8:87:99:e2:40:aa:e0:07:16:89:0a:ff:05:1b:7b:
         41:ac:69:bd:63:c0:32:8e:97:28:cd:0d:fe:5e:36:fa:ea:51:
         81:ce:ba:da:d6:97:47:e1:c6:ff:9f:dd:4b:8d:b3:e4:d6:5a:
         0d:34:18:46:57:59:36:fa:8a:fd:c3:47:50:bc:88:14:96:15:
         a5:88:93:c9:ee:c5:57:cb:ed:5b:a3:35:d9:ef:42:73:2c:0a:
         98:23:18:ef:bd:20:f9:f6:cb:5a:61:cf:65:13:cc:9f:53:f6:
         b6:32:b9:92:5b:5f:d0:f0:26:43:92:2c:66:f3:66:e4:74:b0:
         2a:1e:03:05:0d:85:41:9f:9f:ca:13:87:07:5d:b7:10:bf:51:
         19:7c:68:76:73:f2:bf:fc:45:1b:4d:07:8d:a4:b7:15:d7:76:
         92:ba:6d:ae:2f:ab:c6:77:15:b7:59:14:e1:72:bc:47:02:6a:
         4c:f1:ec:0b:94:7c:45:8a:f6:e9:55:8f:84:48:13:22:ad:e4:
         44:26:ed:ab
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUBMyainad3gXW6LCgboBQcFiPiWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE
MjFGQzE5NTAeFw0yNDA1MzAxODMwMDBaFw0yNTA1MjkxODM1MDBaMDMxMTAvBgNV
BAMTKEUzQkRERjlBMzQ1QUY1NjJDQkEwRTcyOTc2NDQ1NDE5OUI3RTU5OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKO9fKArHIfk9Tbdnr59g8bD2v
o432qZ7ZY9jsRMHsp2CdHoFt7akyYcpSEqzoLYBFZ5/Xw9Fk+6mYs1Wy1deWsHPu
Jm0tKQwjhzhznKcrSArWXdq/QlSDoM8KAADx7hBL2ncDPX+i4MP7InfdiGihSl76
QFedVucfpacKpK+TfLePVxjF5V0IN99pK/DeKJYwuZQK2mKgDAa9XMxQENkJymNe
wEaWkLxAzbOYg7+nUjv8hN1krN0Ujjb/SJzsXoLux76+Zz19UTNiJfolO7G+pajS
y9AsA5+FDE0G8BXcziSO7OdW3D2oyod11+3XNcVCxmkR6l5Bo9c7Bsm0Um5vAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU473fmjRa9WLLoOcpdkRUGZt+WYowHwYDVR0j
BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0
NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE
NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE
MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw
NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzM0MzUyZTMxMzgzOTJlMzEzODM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzkzNzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALb29
MA0GCSqGSIb3DQEBCwUAA4IBAQC6VETnO1sErWq2O/2F0W61r8tcZo8Sj1Z1+e2i
mg5wrRdYJvNf110mPFeAXLuuE1qOz94bw/ZwkIjYh5niQKrgBxaJCv8FG3tBrGm9
Y8AyjpcozQ3+Xjb66lGBzrra1pdH4cb/n91LjbPk1loNNBhGV1k2+or9w0dQvIgU
lhWliJPJ7sVXy+1bozXZ70JzLAqYIxjvvSD59staYc9lE8yfU/a2MrmSW1/Q8CZD
kixm82bkdLAqHgMFDYVBn5/KE4cHXbcQv1EZfGh2c/K//EUbTQeNpLcV13aSum2u
L6vGdxW3WRThcrxHAmpM8ewLlHxFivbpVY+ESBMireREJu2r
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:41 2024 by rpki-client on console-fra.rpki-client.org