Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e34352e302f32342d3234203d3e203238303735.roa
File:                     3139382e31322e34352e302f32342d3234203d3e203238303735.roa (raw, json)
Hash identifier:          xeeFZ2hgsYxMke4NsDNOeOia2+NfMCvSLWz2Ksz9wiE=
Subject key identifier:   9E:D9:3B:C4:B7:86:79:A9:CE:F1:21:EE:02:A3:AA:23:F4:0A:82:CF
Certificate issuer:       /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial:       23C1CF6CFC44CDCE07F20C1786E906AC096338BA
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e34352e302f32342d3234203d3e203238303735.roa
Signing time:             Thu 21 Mar 2024 15:30:00 +0000
ROA not before:           Thu 21 Mar 2024 15:25:00 +0000
ROA not after:            Thu 20 Mar 2025 15:30:00 +0000
asID:                     28075
IP address blocks:        198.12.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c1:cf:6c:fc:44:cd:ce:07:f2:0c:17:86:e9:06:ac:09:63:38:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
        Validity
            Not Before: Mar 21 15:25:00 2024 GMT
            Not After : Mar 20 15:30:00 2025 GMT
        Subject: CN=9ED93BC4B78679A9CEF121EE02A3AA23F40A82CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:42:b3:ea:12:cf:68:58:5d:43:61:65:12:13:
                    02:8b:ff:6c:76:26:0c:04:58:68:a1:62:ea:f6:63:
                    68:01:15:87:be:cc:cd:2c:94:cb:83:da:93:71:a6:
                    30:5f:b2:28:5a:84:28:e0:d7:7f:bc:bb:53:cb:1e:
                    e8:ed:e3:56:4a:81:6e:21:57:9f:1f:81:ef:a8:33:
                    f5:a8:89:44:05:b5:d7:5f:4a:37:ca:b4:15:75:8d:
                    c4:26:e2:09:00:7d:18:3d:50:7e:dc:f7:33:0a:b6:
                    dd:a4:38:7a:77:93:0d:f9:76:66:01:94:ad:2a:b2:
                    25:c3:0f:ec:1c:eb:cb:48:ff:26:63:b0:05:6b:42:
                    8d:af:33:b9:c7:4d:56:f7:40:c0:76:98:7e:7a:bf:
                    6b:6f:ef:c9:8d:01:fa:25:c6:77:48:6d:71:d9:4d:
                    04:96:73:3c:d4:05:1e:b2:52:b2:d4:df:d3:ec:1d:
                    5f:b6:94:cf:53:a6:89:b3:36:5a:e4:e5:e7:9b:6c:
                    46:51:14:dd:d2:2d:54:da:fb:fe:81:b5:e0:3d:96:
                    06:ea:bf:3b:0b:ad:02:ce:dc:50:21:2d:89:af:c4:
                    59:01:13:eb:ff:2a:45:c6:41:0c:09:00:7f:dd:97:
                    48:80:00:a4:58:e0:13:22:83:88:1d:d3:62:0b:b7:
                    f3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D9:3B:C4:B7:86:79:A9:CE:F1:21:EE:02:A3:AA:23:F4:0A:82:CF
            X509v3 Authority Key Identifier:
                keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e34352e302f32342d3234203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.12.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:9d:f5:0b:73:f5:64:9f:01:e1:96:ae:d8:38:d1:87:01:48:
         75:b1:aa:7a:08:44:1a:7d:e5:dc:8e:99:69:4b:ee:ec:6e:e7:
         be:6a:4f:2c:94:53:46:33:6b:f0:84:63:0c:54:38:d7:24:5c:
         de:ee:0c:b8:a5:ce:6f:59:ff:dc:9e:ec:b7:62:b8:bf:47:6f:
         de:5d:11:db:5f:3f:de:38:ef:f6:37:bb:54:41:52:79:36:9d:
         f2:0a:3b:f1:72:a4:39:d7:e9:87:a9:47:31:03:22:4f:44:e5:
         c5:ba:3e:ef:a6:1d:1a:f5:44:f0:bd:80:bd:63:b4:a7:35:a7:
         fc:9e:0b:06:c1:fd:a0:9a:68:c9:ba:f1:a5:d5:43:73:f8:b7:
         0a:c0:fa:6b:aa:e2:64:0e:93:cf:94:8e:5f:06:8d:3a:a6:09:
         8d:6d:b9:39:ca:fe:aa:3f:db:5d:32:81:ba:97:84:5c:d2:5c:
         2b:a2:ad:c9:70:cc:88:ac:76:45:c6:aa:6e:c4:53:99:9a:49:
         0e:57:31:c6:f9:b8:c7:94:ce:eb:17:9e:4b:72:5e:f1:58:7d:
         0b:36:50:38:9b:9a:63:92:bc:68:19:a8:d6:bf:68:8f:b4:bb:
         9d:6b:e8:a4:b5:66:d4:e4:ca:e5:15:e4:24:10:ae:64:58:a4:
         39:24:2c:4f
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUI8HPbPxEzc4H8gwXhukGrAljOLowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NDN0RGQjJDN0M5RkNGMkYxMTQwNjE0NzZFQ0I4N0I1
NzNBNEUxODAeFw0yNDAzMjExNTI1MDBaFw0yNTAzMjAxNTMwMDBaMDMxMTAvBgNV
BAMTKDlFRDkzQkM0Qjc4Njc5QTlDRUYxMjFFRTAyQTNBQTIzRjQwQTgyQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUQrPqEs9oWF1DYWUSEwKL/2x2
JgwEWGihYur2Y2gBFYe+zM0slMuD2pNxpjBfsihahCjg13+8u1PLHujt41ZKgW4h
V58fge+oM/WoiUQFtddfSjfKtBV1jcQm4gkAfRg9UH7c9zMKtt2kOHp3kw35dmYB
lK0qsiXDD+wc68tI/yZjsAVrQo2vM7nHTVb3QMB2mH56v2tv78mNAfolxndIbXHZ
TQSWczzUBR6yUrLU39PsHV+2lM9TpomzNlrk5eebbEZRFN3SLVTa+/6BteA9lgbq
vzsLrQLO3FAhLYmvxFkBE+v/KkXGQQwJAH/dl0iAAKRY4BMig4gd02ILt/PZAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUntk7xLeGeanO8SHuAqOqI/QKgs8wHwYDVR0j
BBgwFoAUzMffssfJ/PLxFAYUduy4e1c6ThgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QjQ0OEIyRjk5Rjc1MERFRTRGQjM4MjBCRkRFRUE1QzA3
MEFDNzhBQzFEREVBRTRCQTVCNDcyQjU4MERBMjY0LzAvQ0NDN0RGQjJDN0M5RkNG
MkYxMTQwNjE0NzZFQ0I4N0I1NzNBNEUxOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQ0M3REZCMkM3QzlGQ0YyRjEx
NDA2MTQ3NkVDQjg3QjU3M0E0RTE4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkI0NDhCMkY5OUY3NTBERUU0RkIzODIwQkZERUVBNUMwNzBBQzc4QUMx
RERFQUU0QkE1QjQ3MkI1ODBEQTI2NC8wLzMxMzkzODJlMzEzMjJlMzQzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMDM3MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADGDC0wDQYJ
KoZIhvcNAQELBQADggEBAGWd9Qtz9WSfAeGWrtg40YcBSHWxqnoIRBp95dyOmWlL
7uxu575qTyyUU0Yza/CEYwxUONckXN7uDLilzm9Z/9ye7LdiuL9Hb95dEdtfP944
7/Y3u1RBUnk2nfIKO/FypDnX6YepRzEDIk9E5cW6Pu+mHRr1RPC9gL1jtKc1p/ye
CwbB/aCaaMm68aXVQ3P4twrA+muq4mQOk8+Ujl8GjTqmCY1tuTnK/qo/210ygbqX
hFzSXCuirclwzIisdkXGqm7EU5maSQ5XMcb5uMeUzusXnktyXvFYfQs2UDibmmOS
vGgZqNa/aI+0u51r6KS1ZtTkyuUV5CQQrmRYpDkkLE8=
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:49 2024 by rpki-client on console-ams.rpki-client.org