Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/34352e3137332e34302e302f32322d3234203d3e20323637383032.roa
File:                     34352e3137332e34302e302f32322d3234203d3e20323637383032.roa (raw, json)
Hash identifier:          0CWB9+AbdKysGuAhoovAlqKrCEV/m6MLKMRsyf4mzvQ=
Subject key identifier:   3E:4C:2F:D0:84:32:AF:44:31:56:EC:FD:B8:56:D1:A3:CB:57:DC:85
Certificate issuer:       /CN=F759E6E90D87109CB242AF1806550668309A19C8
Certificate serial:       27D46D6BABE5261BAEB41F69BCF640CF1584A84D
Authority key identifier: F7:59:E6:E9:0D:87:10:9C:B2:42:AF:18:06:55:06:68:30:9A:19:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F759E6E90D87109CB242AF1806550668309A19C8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/34352e3137332e34302e302f32322d3234203d3e20323637383032.roa
Signing time:             Tue 05 Mar 2024 18:03:58 +0000
ROA not before:           Tue 05 Mar 2024 17:58:58 +0000
ROA not after:            Tue 04 Mar 2025 18:03:58 +0000
asID:                     267802
IP address blocks:        45.173.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/F759E6E90D87109CB242AF1806550668309A19C8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/F759E6E90D87109CB242AF1806550668309A19C8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F759E6E90D87109CB242AF1806550668309A19C8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d4:6d:6b:ab:e5:26:1b:ae:b4:1f:69:bc:f6:40:cf:15:84:a8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F759E6E90D87109CB242AF1806550668309A19C8
        Validity
            Not Before: Mar  5 17:58:58 2024 GMT
            Not After : Mar  4 18:03:58 2025 GMT
        Subject: CN=3E4C2FD08432AF443156ECFDB856D1A3CB57DC85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a6:4e:08:da:af:9b:a2:fe:24:78:48:ec:7f:
                    f3:0e:a5:08:6b:f0:5f:97:94:23:75:8f:bf:84:3c:
                    0e:fd:02:7b:08:f1:ef:3e:4e:21:9a:53:84:3d:aa:
                    16:40:4f:d1:93:8e:60:06:e3:d2:f2:a7:ef:b9:5e:
                    ed:8e:ef:3a:67:03:b0:3a:68:e7:12:b6:27:f8:8e:
                    60:1d:21:43:84:3f:e6:f5:b4:8b:09:59:59:3d:56:
                    92:e4:5d:c1:8f:f4:3c:f8:71:ee:e5:12:d8:40:99:
                    fd:de:fe:62:b3:27:47:61:0e:f0:92:bf:ec:f1:65:
                    16:22:5f:97:1b:d1:b6:24:11:19:01:c7:0c:a6:bd:
                    e0:9c:96:b9:df:34:f1:5a:6b:16:be:c3:bd:71:50:
                    4d:d6:e3:8a:d8:1e:93:66:4c:24:9e:dd:21:6a:3b:
                    3a:b6:90:64:c2:02:62:e0:74:09:6a:2f:91:3b:7e:
                    fa:25:c3:dc:c5:9a:45:e5:fe:4d:6c:44:a7:66:01:
                    75:29:cb:c7:f0:a8:41:d0:d5:a4:ed:35:51:7b:dd:
                    0a:0d:66:93:7d:86:5e:c3:95:a9:6c:12:9d:2a:16:
                    d5:b0:b4:3d:dc:7e:48:6c:25:f8:99:b4:6a:04:48:
                    c3:43:f0:5a:51:52:81:df:39:c7:2c:63:82:2d:78:
                    62:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4C:2F:D0:84:32:AF:44:31:56:EC:FD:B8:56:D1:A3:CB:57:DC:85
            X509v3 Authority Key Identifier:
                keyid:F7:59:E6:E9:0D:87:10:9C:B2:42:AF:18:06:55:06:68:30:9A:19:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/F759E6E90D87109CB242AF1806550668309A19C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F759E6E90D87109CB242AF1806550668309A19C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/34352e3137332e34302e302f32322d3234203d3e20323637383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:2d:22:a6:f8:cd:5b:6c:4d:1b:ab:33:ca:9f:7b:6c:f4:3f:
         fd:58:66:b8:48:61:7f:6d:91:93:24:dc:b8:94:4a:5b:cb:60:
         3c:38:89:52:49:2f:c9:88:53:21:ca:dc:86:e9:62:5c:22:2d:
         1b:51:e8:58:0c:6f:84:92:fa:be:04:e6:43:3a:6a:91:4f:71:
         90:43:47:fa:f2:c7:4c:e3:c2:84:ff:92:c9:00:25:88:70:e7:
         dc:ac:f3:2b:db:61:6d:a9:db:7e:14:16:28:ad:0c:83:f3:20:
         30:29:b3:d3:2c:40:cf:05:93:77:96:fa:ae:79:de:71:f8:da:
         f1:c7:ec:c2:1b:72:15:96:e2:be:d0:e1:68:26:a6:e9:b1:6a:
         f3:17:34:ac:9d:89:ba:80:72:dd:3e:75:84:12:6b:4e:7a:4e:
         a1:67:9a:5c:fb:49:46:15:d1:00:70:8a:61:b8:0b:4e:2a:a1:
         67:80:a8:b4:e9:dc:ef:2c:d5:3c:15:e1:3e:17:c2:19:f9:c0:
         83:90:aa:f1:33:47:2a:3b:c2:ea:b3:8b:29:63:64:1a:a9:42:
         ef:b0:02:53:37:52:69:2a:61:70:25:91:20:52:92:68:ec:a0:
         e5:41:ce:08:fb:bc:8d:ef:f6:31:56:45:ab:d3:50:88:b0:a3:
         37:28:02:36
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJ9Rta6vlJhuutB9pvPZAzxWEqE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc1OUU2RTkwRDg3MTA5Q0IyNDJBRjE4MDY1NTA2Njgz
MDlBMTlDODAeFw0yNDAzMDUxNzU4NThaFw0yNTAzMDQxODAzNThaMDMxMTAvBgNV
BAMTKDNFNEMyRkQwODQzMkFGNDQzMTU2RUNGREI4NTZEMUEzQ0I1N0RDODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCypk4I2q+bov4keEjsf/MOpQhr
8F+XlCN1j7+EPA79AnsI8e8+TiGaU4Q9qhZAT9GTjmAG49Lyp++5Xu2O7zpnA7A6
aOcStif4jmAdIUOEP+b1tIsJWVk9VpLkXcGP9Dz4ce7lEthAmf3e/mKzJ0dhDvCS
v+zxZRYiX5cb0bYkERkBxwymveCclrnfNPFaaxa+w71xUE3W44rYHpNmTCSe3SFq
Ozq2kGTCAmLgdAlqL5E7fvolw9zFmkXl/k1sRKdmAXUpy8fwqEHQ1aTtNVF73QoN
ZpN9hl7DlalsEp0qFtWwtD3cfkhsJfiZtGoESMND8FpRUoHfOccsY4IteGJlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUPkwv0IQyr0QxVuz9uFbRo8tX3IUwHwYDVR0j
BBgwFoAU91nm6Q2HEJyyQq8YBlUGaDCaGcgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83N0I2OENEMzAwQjM4NDZBRDBGNkEyODYzQTYwQ0Y4Mjcy
QkEwREEyMzdCQjI4MzlDNTVFMUY4OEIzNkQ0RDU4LzAvRjc1OUU2RTkwRDg3MTA5
Q0IyNDJBRjE4MDY1NTA2NjgzMDlBMTlDOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNzU5RTZFOTBEODcxMDlDQjI0
MkFGMTgwNjU1MDY2ODMwOUExOUM4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzdCNjhDRDMwMEIzODQ2QUQwRjZBMjg2M0E2MENGODI3MkJBMERBMjM3
QkIyODM5QzU1RTFGODhCMzZENEQ1OC8wLzM0MzUyZTMxMzczMzJlMzQzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNzM4MzAzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2tKDAN
BgkqhkiG9w0BAQsFAAOCAQEAAi0ipvjNW2xNG6szyp97bPQ//VhmuEhhf22RkyTc
uJRKW8tgPDiJUkkvyYhTIcrchuliXCItG1HoWAxvhJL6vgTmQzpqkU9xkENH+vLH
TOPChP+SyQAliHDn3KzzK9thbanbfhQWKK0Mg/MgMCmz0yxAzwWTd5b6rnnecfja
8cfswhtyFZbivtDhaCam6bFq8xc0rJ2JuoBy3T51hBJrTnpOoWeaXPtJRhXRAHCK
YbgLTiqhZ4CotOnc7yzVPBXhPhfCGfnAg5Cq8TNHKjvC6rOLKWNkGqlC77ACUzdS
aSphcCWRIFKSaOyg5UHOCPu8je/2MVZFq9NQiLCjNygCNg==
-----END CERTIFICATE-----
Generated at Wed May 1 10:32:20 2024 by rpki-client on console-fra.rpki-client.org