Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/766506B0E1BE55793114D7A55CE065B3F144AACB131F6E44522A772A199DA6B9/0/34352e3137382e3139322e302f32322d3234203d3e20323637393030.roa
File:                     34352e3137382e3139322e302f32322d3234203d3e20323637393030.roa (raw, json)
Hash identifier:          mw8dmmCLchpfWmx4cI9ybnwOXra2suEnbbeXqH6wFR0=
Subject key identifier:   4F:3D:45:A0:7D:96:E7:E5:8A:F2:4B:24:61:8D:D3:79:DB:40:E8:89
Certificate issuer:       /CN=0918EDFA09C0F51BF9F8F32C7D833032AED84DC7
Certificate serial:       420094766AF74247AE05BAC87FC61AE7E68189BF
Authority key identifier: 09:18:ED:FA:09:C0:F5:1B:F9:F8:F3:2C:7D:83:30:32:AE:D8:4D:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0918EDFA09C0F51BF9F8F32C7D833032AED84DC7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/766506B0E1BE55793114D7A55CE065B3F144AACB131F6E44522A772A199DA6B9/0/34352e3137382e3139322e302f32322d3234203d3e20323637393030.roa
Signing time:             Tue 05 Mar 2024 18:05:15 +0000
ROA not before:           Tue 05 Mar 2024 18:00:15 +0000
ROA not after:            Tue 04 Mar 2025 18:05:15 +0000
asID:                     267900
IP address blocks:        45.178.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/766506B0E1BE55793114D7A55CE065B3F144AACB131F6E44522A772A199DA6B9/0/0918EDFA09C0F51BF9F8F32C7D833032AED84DC7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/766506B0E1BE55793114D7A55CE065B3F144AACB131F6E44522A772A199DA6B9/0/0918EDFA09C0F51BF9F8F32C7D833032AED84DC7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0918EDFA09C0F51BF9F8F32C7D833032AED84DC7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:00:94:76:6a:f7:42:47:ae:05:ba:c8:7f:c6:1a:e7:e6:81:89:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0918EDFA09C0F51BF9F8F32C7D833032AED84DC7
        Validity
            Not Before: Mar  5 18:00:15 2024 GMT
            Not After : Mar  4 18:05:15 2025 GMT
        Subject: CN=4F3D45A07D96E7E58AF24B24618DD379DB40E889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:18:5e:2e:7f:43:17:cf:d3:b8:4e:c2:ed:23:
                    a3:25:32:65:c2:bf:73:fb:99:5f:d5:de:1b:a1:c8:
                    5a:00:1d:b9:4f:d0:04:39:4a:77:63:49:db:3b:78:
                    31:38:52:26:6f:a6:8b:97:7a:4e:96:19:ce:d8:5d:
                    47:33:a3:bb:4e:ed:e2:2e:64:6d:d9:2d:be:56:28:
                    dc:98:98:ae:12:65:33:8b:48:e8:cf:50:40:1c:bd:
                    f0:cd:4a:d6:1d:a1:f1:5f:68:29:a8:d2:a4:53:79:
                    0d:db:10:54:da:e6:79:1a:1e:3c:d5:57:94:ac:bf:
                    1d:8f:3c:59:dc:94:43:53:76:70:6f:94:88:db:16:
                    bd:57:c8:54:94:68:f3:d7:95:16:01:17:66:ff:45:
                    9e:d8:62:dc:3a:56:5b:3c:e5:1d:79:bb:b4:40:85:
                    86:f1:f2:7b:84:ba:cc:0d:e9:d0:bc:1a:7c:75:b8:
                    b1:15:09:95:be:e6:ff:aa:d1:eb:2a:08:f7:58:02:
                    fd:44:77:76:d1:34:4d:1c:d1:fe:81:cf:c2:c2:67:
                    c8:e5:d7:e5:04:2a:b5:68:e0:d0:e0:42:8c:76:85:
                    ad:71:06:3e:cd:00:63:93:0e:60:74:2f:34:91:29:
                    61:4c:0e:72:18:14:5d:db:1a:a2:df:46:f1:fc:2c:
                    c0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3D:45:A0:7D:96:E7:E5:8A:F2:4B:24:61:8D:D3:79:DB:40:E8:89
            X509v3 Authority Key Identifier:
                keyid:09:18:ED:FA:09:C0:F5:1B:F9:F8:F3:2C:7D:83:30:32:AE:D8:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/766506B0E1BE55793114D7A55CE065B3F144AACB131F6E44522A772A199DA6B9/0/0918EDFA09C0F51BF9F8F32C7D833032AED84DC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0918EDFA09C0F51BF9F8F32C7D833032AED84DC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/766506B0E1BE55793114D7A55CE065B3F144AACB131F6E44522A772A199DA6B9/0/34352e3137382e3139322e302f32322d3234203d3e20323637393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:ac:92:b3:0f:3c:5d:19:43:a0:e2:94:32:c4:d4:47:03:e2:
         ac:34:98:b4:29:28:d1:85:5c:78:8f:29:8c:8a:0b:90:e9:cf:
         12:ac:08:d9:18:02:7d:28:a5:2e:2a:5b:fa:36:e4:52:0f:ad:
         f7:5a:be:fe:6b:0c:93:07:80:3e:05:c1:df:96:80:5c:ad:78:
         f6:73:68:f6:71:05:99:72:de:1f:be:5b:3a:e0:a7:a7:5c:40:
         ed:54:7a:e6:a3:9b:12:4a:9d:17:bb:5a:3c:9e:ac:8b:24:14:
         3c:26:3c:63:0c:2e:78:cd:8e:64:8e:90:93:ce:6c:fb:56:2e:
         53:ce:e5:3c:c1:75:81:7a:9b:5f:d7:63:2a:37:1a:cf:dd:59:
         a5:54:c3:23:0d:51:43:57:f3:1f:dc:d1:44:17:9c:46:5e:5d:
         cb:8e:d4:41:50:35:86:5e:a1:15:97:c0:f5:1d:db:83:e6:36:
         ee:ea:84:72:20:d2:40:0c:8e:05:e4:23:96:4b:41:de:70:cd:
         60:02:ef:75:e0:54:0f:5b:a5:7f:d5:2c:e4:39:c2:f8:44:f5:
         24:df:29:e1:f1:e4:0b:40:ab:02:47:40:1f:a6:91:73:b4:55:
         09:56:e2:bc:20:c6:d5:d7:c5:31:29:79:62:49:d6:78:18:9f:
         9f:6a:e5:fe
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQgCUdmr3QkeuBbrIf8Ya5+aBib8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDkxOEVERkEwOUMwRjUxQkY5RjhGMzJDN0Q4MzMwMzJB
RUQ4NERDNzAeFw0yNDAzMDUxODAwMTVaFw0yNTAzMDQxODA1MTVaMDMxMTAvBgNV
BAMTKDRGM0Q0NUEwN0Q5NkU3RTU4QUYyNEIyNDYxOEREMzc5REI0MEU4ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfGF4uf0MXz9O4TsLtI6MlMmXC
v3P7mV/V3huhyFoAHblP0AQ5SndjSds7eDE4UiZvpouXek6WGc7YXUczo7tO7eIu
ZG3ZLb5WKNyYmK4SZTOLSOjPUEAcvfDNStYdofFfaCmo0qRTeQ3bEFTa5nkaHjzV
V5Ssvx2PPFnclENTdnBvlIjbFr1XyFSUaPPXlRYBF2b/RZ7YYtw6Vls85R15u7RA
hYbx8nuEuswN6dC8Gnx1uLEVCZW+5v+q0esqCPdYAv1Ed3bRNE0c0f6Bz8LCZ8jl
1+UEKrVo4NDgQox2ha1xBj7NAGOTDmB0LzSRKWFMDnIYFF3bGqLfRvH8LMBTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUTz1FoH2W5+WK8kskYY3TedtA6IkwHwYDVR0j
BBgwFoAUCRjt+gnA9Rv5+PMsfYMwMq7YTccwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NjY1MDZCMEUxQkU1NTc5MzExNEQ3QTU1Q0UwNjVCM0Yx
NDRBQUNCMTMxRjZFNDQ1MjJBNzcyQTE5OURBNkI5LzAvMDkxOEVERkEwOUMwRjUx
QkY5RjhGMzJDN0Q4MzMwMzJBRUQ4NERDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOTE4RURGQTA5QzBGNTFCRjlG
OEYzMkM3RDgzMzAzMkFFRDg0REM3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzY2NTA2QjBFMUJFNTU3OTMxMTREN0E1NUNFMDY1QjNGMTQ0QUFDQjEz
MUY2RTQ0NTIyQTc3MkExOTlEQTZCOS8wLzM0MzUyZTMxMzczODJlMzEzOTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3MzkzMDMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLbLA
MA0GCSqGSIb3DQEBCwUAA4IBAQBOrJKzDzxdGUOg4pQyxNRHA+KsNJi0KSjRhVx4
jymMiguQ6c8SrAjZGAJ9KKUuKlv6NuRSD633Wr7+awyTB4A+BcHfloBcrXj2c2j2
cQWZct4fvls64KenXEDtVHrmo5sSSp0Xu1o8nqyLJBQ8JjxjDC54zY5kjpCTzmz7
Vi5TzuU8wXWBeptf12MqNxrP3VmlVMMjDVFDV/Mf3NFEF5xGXl3LjtRBUDWGXqEV
l8D1HduD5jbu6oRyINJADI4F5COWS0HecM1gAu914FQPW6V/1SzkOcL4RPUk3ynh
8eQLQKsCR0AfppFztFUJVuK8IMbV18UxKXliSdZ4GJ+fauX+
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:51 2024 by rpki-client on console-ams.rpki-client.org