Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/742A7E7E1B3A5D5AF5651EA91DE5F7FC8125FBCDB237BF0D5BD1AC541D58389B/0/34352e3137372e36382e302f32322d3234203d3e203238313030.roa
File:                     34352e3137372e36382e302f32322d3234203d3e203238313030.roa (raw, json)
Hash identifier:          wxOBuY8+kUW/nUNuck0Bzfvoae6WtSAm8+HE9nGFvcs=
Subject key identifier:   99:B3:8A:7D:76:54:10:E4:36:F1:18:41:79:FD:89:00:B1:88:C2:6D
Certificate issuer:       /CN=A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723
Certificate serial:       1282DC04F91E1E2741D02CB84DAA4E2C95A1FF06
Authority key identifier: A7:CF:F9:4D:CC:B1:CF:71:C2:7C:4C:2F:3A:5B:36:2B:02:9C:07:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/742A7E7E1B3A5D5AF5651EA91DE5F7FC8125FBCDB237BF0D5BD1AC541D58389B/0/34352e3137372e36382e302f32322d3234203d3e203238313030.roa
Signing time:             Tue 05 Mar 2024 17:40:44 +0000
ROA not before:           Tue 05 Mar 2024 17:35:44 +0000
ROA not after:            Tue 04 Mar 2025 17:40:44 +0000
asID:                     28100
IP address blocks:        45.177.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/742A7E7E1B3A5D5AF5651EA91DE5F7FC8125FBCDB237BF0D5BD1AC541D58389B/0/A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723.crl
                          rsync://repository.lacnic.net/rpki/lacnic/742A7E7E1B3A5D5AF5651EA91DE5F7FC8125FBCDB237BF0D5BD1AC541D58389B/0/A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:82:dc:04:f9:1e:1e:27:41:d0:2c:b8:4d:aa:4e:2c:95:a1:ff:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723
        Validity
            Not Before: Mar  5 17:35:44 2024 GMT
            Not After : Mar  4 17:40:44 2025 GMT
        Subject: CN=99B38A7D765410E436F1184179FD8900B188C26D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a5:99:5a:26:b3:96:d9:87:eb:1f:7a:35:42:
                    42:aa:f7:91:e4:6f:17:7b:91:a3:df:55:1b:49:6c:
                    f5:4d:ae:eb:a7:2f:0f:d1:95:c6:0d:5f:3d:e1:d7:
                    96:26:21:30:50:9a:11:a2:a3:fc:82:0d:ce:28:74:
                    45:45:b1:7c:a0:55:56:e5:51:b9:e0:9f:81:cd:77:
                    12:04:d0:c1:e0:6f:c5:ba:9a:8c:87:5f:f2:4d:62:
                    a9:66:e1:06:c3:b4:ec:e1:13:26:5f:9c:78:3e:32:
                    52:34:77:2f:2b:c3:dc:52:38:3b:0d:3d:1c:de:bc:
                    b1:a4:2f:6b:31:16:27:05:72:e5:d9:df:27:b4:cf:
                    03:21:b1:73:11:38:66:c8:27:57:90:3b:c5:4c:58:
                    29:dc:7f:5d:de:3d:38:64:25:e6:94:5b:b8:7b:61:
                    ca:db:d4:1f:f5:bd:e8:33:43:fa:f0:28:a4:70:85:
                    e7:a0:2d:b5:5b:b8:54:ac:a4:d7:5e:a4:ff:78:d4:
                    5e:cb:10:1a:12:2d:fc:f3:ba:3e:d8:ce:64:71:0f:
                    7c:2b:fd:bf:ec:c9:ef:fe:88:9a:41:50:c6:6b:c9:
                    80:39:0f:d4:46:c8:36:b4:2a:63:72:90:a6:24:b7:
                    85:b5:2a:e4:fb:fe:81:ed:61:4d:cd:95:72:04:0e:
                    cb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B3:8A:7D:76:54:10:E4:36:F1:18:41:79:FD:89:00:B1:88:C2:6D
            X509v3 Authority Key Identifier:
                keyid:A7:CF:F9:4D:CC:B1:CF:71:C2:7C:4C:2F:3A:5B:36:2B:02:9C:07:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/742A7E7E1B3A5D5AF5651EA91DE5F7FC8125FBCDB237BF0D5BD1AC541D58389B/0/A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/742A7E7E1B3A5D5AF5651EA91DE5F7FC8125FBCDB237BF0D5BD1AC541D58389B/0/34352e3137372e36382e302f32322d3234203d3e203238313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:b4:d0:3e:f8:84:62:78:5e:9a:bc:a2:57:49:d8:fb:6d:91:
         79:cd:f0:bf:7a:24:5d:b5:63:17:ee:6f:dd:79:db:af:97:75:
         71:85:40:90:f6:ea:fa:ab:4f:97:16:73:99:ec:82:ed:d3:d2:
         d2:e7:cc:41:9b:4c:48:7a:84:9e:7b:96:a2:8a:52:4b:93:ac:
         31:fa:1d:b5:ba:c6:8a:15:a0:93:1f:7c:b1:68:36:16:b9:f4:
         e7:f9:9a:1a:a6:7f:ba:83:a6:94:fa:c9:dd:4e:62:f1:42:ce:
         9b:11:3d:61:af:53:15:13:7f:32:9a:68:b7:82:c4:db:e8:15:
         0e:5e:65:ad:be:ec:a3:80:0c:ad:1d:4c:1e:19:73:89:d0:8a:
         a1:ea:0d:5e:f6:d9:7f:d3:ee:a9:29:42:b2:dc:6f:51:b0:83:
         eb:36:f0:24:fa:e2:bc:db:c4:a3:77:f0:7f:30:76:56:51:08:
         26:19:41:34:43:bd:28:b2:5f:8d:57:3d:fd:fa:01:0a:b2:75:
         42:75:78:40:54:77:af:66:6e:82:4e:aa:f9:7a:cb:4d:bb:d4:
         0f:23:45:b3:1c:55:3a:55:a9:70:00:47:3b:bb:d4:3d:9a:b2:
         ea:69:c1:07:55:b4:85:32:24:51:17:e8:4b:9e:77:01:bc:ba:
         c1:95:c7:8a
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUEoLcBPkeHidB0Cy4TapOLJWh/wYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdDRkY5NERDQ0IxQ0Y3MUMyN0M0QzJGM0E1QjM2MkIw
MjlDMDcyMzAeFw0yNDAzMDUxNzM1NDRaFw0yNTAzMDQxNzQwNDRaMDMxMTAvBgNV
BAMTKDk5QjM4QTdENzY1NDEwRTQzNkYxMTg0MTc5RkQ4OTAwQjE4OEMyNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxpZlaJrOW2YfrH3o1QkKq95Hk
bxd7kaPfVRtJbPVNruunLw/RlcYNXz3h15YmITBQmhGio/yCDc4odEVFsXygVVbl
Ubngn4HNdxIE0MHgb8W6moyHX/JNYqlm4QbDtOzhEyZfnHg+MlI0dy8rw9xSODsN
PRzevLGkL2sxFicFcuXZ3ye0zwMhsXMROGbIJ1eQO8VMWCncf13ePThkJeaUW7h7
Ycrb1B/1vegzQ/rwKKRwheegLbVbuFSspNdepP941F7LEBoSLfzzuj7YzmRxD3wr
/b/sye/+iJpBUMZryYA5D9RGyDa0KmNykKYkt4W1KuT7/oHtYU3NlXIEDsvRAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUmbOKfXZUEOQ28RhBef2JALGIwm0wHwYDVR0j
BBgwFoAUp8/5Tcyxz3HCfEwvOls2KwKcByMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NDJBN0U3RTFCM0E1RDVBRjU2NTFFQTkxREU1RjdGQzgx
MjVGQkNEQjIzN0JGMEQ1QkQxQUM1NDFENTgzODlCLzAvQTdDRkY5NERDQ0IxQ0Y3
MUMyN0M0QzJGM0E1QjM2MkIwMjlDMDcyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BN0NGRjk0RENDQjFDRjcxQzI3
QzRDMkYzQTVCMzYyQjAyOUMwNzIzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzQyQTdFN0UxQjNBNUQ1QUY1NjUxRUE5MURFNUY3RkM4MTI1RkJDREIy
MzdCRjBENUJEMUFDNTQxRDU4Mzg5Qi8wLzM0MzUyZTMxMzczNzJlMzYzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzgzMTMwMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItsUQwDQYJ
KoZIhvcNAQELBQADggEBAMO00D74hGJ4Xpq8oldJ2PttkXnN8L96JF21Yxfub915
26+XdXGFQJD26vqrT5cWc5nsgu3T0tLnzEGbTEh6hJ57lqKKUkuTrDH6HbW6xooV
oJMffLFoNha59Of5mhqmf7qDppT6yd1OYvFCzpsRPWGvUxUTfzKaaLeCxNvoFQ5e
Za2+7KOADK0dTB4Zc4nQiqHqDV722X/T7qkpQrLcb1Gwg+s28CT64rzbxKN38H8w
dlZRCCYZQTRDvSiyX41XPf36AQqydUJ1eEBUd69mboJOqvl6y0271A8jRbMcVTpV
qXAARzu71D2asuppwQdVtIUyJFEX6EuedwG8usGVx4o=
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:22 2024 by rpki-client on console-ams.rpki-client.org