Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232302e302f32322d3232203d3e20323636383139.roa
File:                     34352e3233372e3232302e302f32322d3232203d3e20323636383139.roa (raw, json)
Hash identifier:          VSfFAvvAwA0OwzzYqTK0U63gp9JHCiX73FA4RB1/PWw=
Subject key identifier:   7C:DC:0D:E0:0A:72:C9:62:EE:82:57:92:5F:7B:83:93:15:A0:3D:73
Certificate issuer:       /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial:       4597ECAA5AE1DF0868971460213F3DA11D02296F
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232302e302f32322d3232203d3e20323636383139.roa
Signing time:             Tue 05 Mar 2024 18:00:06 +0000
ROA not before:           Tue 05 Mar 2024 17:55:06 +0000
ROA not after:            Tue 04 Mar 2025 18:00:06 +0000
asID:                     266819
IP address blocks:        45.237.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
                          rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:97:ec:aa:5a:e1:df:08:68:97:14:60:21:3f:3d:a1:1d:02:29:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
        Validity
            Not Before: Mar  5 17:55:06 2024 GMT
            Not After : Mar  4 18:00:06 2025 GMT
        Subject: CN=7CDC0DE00A72C962EE8257925F7B839315A03D73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8a:bb:42:70:00:0b:13:e7:68:3d:2d:5e:a8:
                    b4:9d:4a:69:e5:c2:56:f8:e5:06:5d:fa:15:6d:d0:
                    77:44:fa:e9:e3:c2:5b:eb:e1:c7:97:26:86:c2:7f:
                    16:45:9f:95:47:28:bb:11:ca:16:7c:27:7e:f2:a5:
                    1f:4c:f4:38:4d:23:83:10:8e:2a:85:a3:29:20:4a:
                    9a:d1:f2:48:4a:7c:e1:8d:c0:99:06:bc:71:f2:0a:
                    84:e6:39:5d:ac:60:b2:6c:3a:7b:bb:06:21:d2:94:
                    45:2c:41:ce:54:93:54:60:4e:63:23:1a:80:b5:ac:
                    39:2a:61:b0:09:e6:93:44:bf:9f:21:53:63:83:73:
                    54:72:0a:bb:cf:ff:15:93:c5:b5:1f:26:36:a2:32:
                    e7:c6:f0:6c:7b:ab:d5:66:a2:34:95:36:97:8f:c3:
                    ec:9e:76:4b:35:51:eb:7c:13:e7:b5:d1:98:d1:34:
                    b9:af:be:c7:e0:ba:54:a8:58:b6:7c:d6:5f:5c:36:
                    e1:0a:d0:9b:a3:23:26:c4:62:cd:a2:41:5b:24:b9:
                    93:90:3e:76:82:11:cc:29:92:9b:c2:32:b2:8e:1c:
                    70:a3:f7:ff:a0:a5:99:52:6e:c8:ac:cb:6c:97:92:
                    1b:97:db:05:0c:d3:c6:b5:08:a6:15:fc:32:04:93:
                    4a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DC:0D:E0:0A:72:C9:62:EE:82:57:92:5F:7B:83:93:15:A0:3D:73
            X509v3 Authority Key Identifier:
                keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232302e302f32322d3232203d3e20323636383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:52:8e:88:bf:8b:39:a0:e2:75:78:2e:44:33:81:26:02:10:
         5c:bc:af:87:76:88:4d:95:fc:e1:39:bd:49:68:05:45:87:97:
         c9:e8:69:ef:e4:72:2d:ca:5b:e6:e9:bc:9c:5e:fb:82:ea:f9:
         cd:33:95:f9:8a:5c:1f:92:9e:93:f1:14:2e:5e:f3:7c:3e:29:
         1a:c2:9f:74:52:9f:44:2a:4a:b3:9e:0f:fe:a9:c9:f9:be:3e:
         91:f4:c7:5a:b3:7f:c0:79:b4:23:80:ce:45:fa:93:23:b3:f4:
         88:de:c6:61:fc:1c:e4:05:c2:cc:2c:38:5d:a7:4d:5b:63:52:
         23:9f:04:8f:34:73:8f:21:16:c8:d2:b5:7e:fb:9f:24:86:6c:
         6e:31:ee:8b:61:4e:84:da:03:be:67:f4:12:9e:22:c6:53:5b:
         8c:d2:95:7c:e4:b8:c8:90:60:54:53:22:2a:95:41:64:79:10:
         ec:77:8e:a6:5d:a1:f0:0f:c0:b5:53:f8:fe:27:5f:f0:41:67:
         56:4c:2a:66:9e:7a:cf:a1:b9:f5:ba:65:c6:07:21:58:bb:52:
         c9:5c:5c:75:65:08:93:43:60:67:f1:ec:53:26:1b:be:83:f6:
         6f:66:46:9f:f0:34:f5:59:40:97:93:e1:cb:7b:b3:3c:c5:80:
         75:0b:28:b3
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIURZfsqlrh3wholxRgIT89oR0CKW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUEyMzM4QjY2NjMyRDgyM0Y3NzA3MjEyNTExMkI1QkYx
RjcyMTc2OTAeFw0yNDAzMDUxNzU1MDZaFw0yNTAzMDQxODAwMDZaMDMxMTAvBgNV
BAMTKDdDREMwREUwMEE3MkM5NjJFRTgyNTc5MjVGN0I4MzkzMTVBMDNENzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdirtCcAALE+doPS1eqLSdSmnl
wlb45QZd+hVt0HdE+unjwlvr4ceXJobCfxZFn5VHKLsRyhZ8J37ypR9M9DhNI4MQ
jiqFoykgSprR8khKfOGNwJkGvHHyCoTmOV2sYLJsOnu7BiHSlEUsQc5Uk1RgTmMj
GoC1rDkqYbAJ5pNEv58hU2ODc1RyCrvP/xWTxbUfJjaiMufG8Gx7q9VmojSVNpeP
w+yedks1Uet8E+e10ZjRNLmvvsfgulSoWLZ81l9cNuEK0JujIybEYs2iQVskuZOQ
PnaCEcwpkpvCMrKOHHCj9/+gpZlSbsisy2yXkhuX2wUM08a1CKYV/DIEk0rBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUfNwN4ApyyWLugleSX3uDkxWgPXMwHwYDVR0j
BBgwFoAUqiM4tmYy2CP3cHISURK1vx9yF2kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODZBODdDMDI2MEY3ODcwOTU0QzAxNjQ4RDNFMjk3MzIz
OUQwMzM2OTRBQTQwRDk4NzIzNTI1RjIxMTYyRDc4LzAvQUEyMzM4QjY2NjMyRDgy
M0Y3NzA3MjEyNTExMkI1QkYxRjcyMTc2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTIzMzhCNjY2MzJEODIzRjc3
MDcyMTI1MTEyQjVCRjFGNzIxNzY5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg2QTg3QzAyNjBGNzg3MDk1NEMwMTY0OEQzRTI5NzMyMzlEMDMzNjk0
QUE0MEQ5ODcyMzUyNUYyMTE2MkQ3OC8wLzM0MzUyZTMyMzMzNzJlMzIzMjMwMmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM2MzgzMTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLe3c
MA0GCSqGSIb3DQEBCwUAA4IBAQA8Uo6Iv4s5oOJ1eC5EM4EmAhBcvK+HdohNlfzh
Ob1JaAVFh5fJ6Gnv5HItylvm6bycXvuC6vnNM5X5ilwfkp6T8RQuXvN8Pikawp90
Up9EKkqzng/+qcn5vj6R9Mdas3/AebQjgM5F+pMjs/SI3sZh/BzkBcLMLDhdp01b
Y1IjnwSPNHOPIRbI0rV++58khmxuMe6LYU6E2gO+Z/QSniLGU1uM0pV85LjIkGBU
UyIqlUFkeRDsd46mXaHwD8C1U/j+J1/wQWdWTCpmnnrPobn1umXGByFYu1LJXFx1
ZQiTQ2Bn8exTJhu+g/ZvZkaf8DT1WUCXk+HLe7M8xYB1Cyiz
-----END CERTIFICATE-----
Generated at Sat Jun 1 04:06:53 2024 by rpki-client on console-ams.rpki-client.org