Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/78CC196DF7FC60A3814CB002629D4A6E5AA715E5B023B00D87C7E5F07C384741/0/34352e3232372e33322e302f32322d3234203d3e20323635383739.roa
File:                     34352e3232372e33322e302f32322d3234203d3e20323635383739.roa (raw, json)
Hash identifier:          xOFvmMcqy1jd+TofW+Ze15cOJOMFk8+HUgphzkvtbLY=
Subject key identifier:   DD:03:94:C6:AC:E0:A6:98:10:FD:2F:39:DE:23:E6:64:F7:B8:0A:47
Certificate issuer:       /CN=0177C6B60623D01833350D5E67FA2F411729EA87
Certificate serial:       5868EC5DB1267FC585F402DC36F0127BE2EB69B2
Authority key identifier: 01:77:C6:B6:06:23:D0:18:33:35:0D:5E:67:FA:2F:41:17:29:EA:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0177C6B60623D01833350D5E67FA2F411729EA87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/78CC196DF7FC60A3814CB002629D4A6E5AA715E5B023B00D87C7E5F07C384741/0/34352e3232372e33322e302f32322d3234203d3e20323635383739.roa
Signing time:             Tue 05 Mar 2024 17:59:51 +0000
ROA not before:           Tue 05 Mar 2024 17:54:51 +0000
ROA not after:            Tue 04 Mar 2025 17:59:51 +0000
asID:                     265879
IP address blocks:        45.227.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/78CC196DF7FC60A3814CB002629D4A6E5AA715E5B023B00D87C7E5F07C384741/0/0177C6B60623D01833350D5E67FA2F411729EA87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/78CC196DF7FC60A3814CB002629D4A6E5AA715E5B023B00D87C7E5F07C384741/0/0177C6B60623D01833350D5E67FA2F411729EA87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0177C6B60623D01833350D5E67FA2F411729EA87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:68:ec:5d:b1:26:7f:c5:85:f4:02:dc:36:f0:12:7b:e2:eb:69:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0177C6B60623D01833350D5E67FA2F411729EA87
        Validity
            Not Before: Mar  5 17:54:51 2024 GMT
            Not After : Mar  4 17:59:51 2025 GMT
        Subject: CN=DD0394C6ACE0A69810FD2F39DE23E664F7B80A47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e1:64:72:a5:0c:83:7c:91:86:d4:5c:59:94:
                    79:3c:13:e1:3d:3a:95:01:35:60:1d:40:94:ce:b8:
                    fb:25:9c:ea:6f:2a:38:f8:51:0e:36:aa:38:19:2c:
                    82:bc:60:56:48:50:06:d4:fa:91:1b:69:e8:f2:08:
                    87:df:00:44:30:2e:0b:fb:e8:6e:78:9c:11:46:d4:
                    87:87:f2:0b:33:03:7f:e5:23:75:19:9c:25:70:42:
                    a0:e8:f4:13:b9:f2:45:0f:24:b9:34:11:1a:9e:a9:
                    78:e9:b0:83:90:19:12:f1:04:84:e0:cb:af:9d:cb:
                    da:ab:4b:1e:d4:14:7e:c8:7e:3b:ee:bd:37:8b:0d:
                    cc:1e:38:8e:79:5d:a6:2e:9f:ba:bf:85:0b:70:d3:
                    bd:87:b5:68:aa:bc:7b:5e:b5:84:86:7e:89:4c:50:
                    0c:a5:db:12:b0:b7:aa:5b:50:a9:48:dc:b7:4d:bd:
                    3c:7a:a0:b2:a7:68:d1:8f:4e:1c:7c:59:f2:3b:19:
                    67:5c:30:9a:ac:19:1a:ff:88:fd:fd:f6:35:54:dc:
                    a0:54:ed:40:85:84:7e:25:7b:42:32:e1:9e:22:8a:
                    fa:fe:b3:1c:bf:64:c3:08:dd:d7:5f:d0:c8:af:08:
                    7b:90:c2:a6:00:aa:d0:b6:f0:b3:45:b9:87:fe:29:
                    37:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:03:94:C6:AC:E0:A6:98:10:FD:2F:39:DE:23:E6:64:F7:B8:0A:47
            X509v3 Authority Key Identifier:
                keyid:01:77:C6:B6:06:23:D0:18:33:35:0D:5E:67:FA:2F:41:17:29:EA:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/78CC196DF7FC60A3814CB002629D4A6E5AA715E5B023B00D87C7E5F07C384741/0/0177C6B60623D01833350D5E67FA2F411729EA87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0177C6B60623D01833350D5E67FA2F411729EA87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/78CC196DF7FC60A3814CB002629D4A6E5AA715E5B023B00D87C7E5F07C384741/0/34352e3232372e33322e302f32322d3234203d3e20323635383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:87:12:05:ac:17:89:27:2b:37:aa:f5:50:3c:9b:85:fe:63:
         92:41:b8:96:c3:b5:20:5d:29:6e:9a:67:1a:d3:86:68:a8:50:
         f7:eb:ee:26:a0:39:cd:6e:c9:66:6a:c5:b9:fe:23:5b:fc:e1:
         a6:3b:97:1c:44:73:1d:68:02:de:9f:ea:11:5b:29:87:dc:47:
         11:e5:91:60:64:2f:97:80:16:84:1a:e0:86:45:ea:73:76:da:
         6f:d5:f7:96:50:86:55:24:92:35:10:b9:5c:c6:85:9c:b1:0c:
         81:ab:6e:f4:5f:a3:d0:b5:cb:5c:87:82:aa:b5:83:b3:e7:03:
         67:60:ca:52:9a:1e:f0:d7:75:3b:23:2c:fa:9e:cf:05:4d:75:
         c7:31:94:98:b2:f7:40:6d:70:9a:8e:77:f2:bf:17:69:1c:64:
         28:a8:1d:5a:47:b0:1c:59:29:2f:37:1b:47:4f:44:ca:0b:d2:
         6d:61:a0:e3:15:df:e4:18:ef:8c:69:b6:14:3c:c8:37:2d:0b:
         17:8c:44:24:e6:4e:a3:f1:63:ca:85:94:d4:05:2a:14:ca:bb:
         75:19:81:3e:c3:57:06:70:f8:a4:08:95:48:20:01:a2:f9:e4:
         bc:9e:61:24:05:9e:8d:89:78:f4:e7:7b:43:c3:9b:4c:7d:64:
         2a:00:78:e7
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWGjsXbEmf8WF9ALcNvASe+LrabIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE3N0M2QjYwNjIzRDAxODMzMzUwRDVFNjdGQTJGNDEx
NzI5RUE4NzAeFw0yNDAzMDUxNzU0NTFaFw0yNTAzMDQxNzU5NTFaMDMxMTAvBgNV
BAMTKEREMDM5NEM2QUNFMEE2OTgxMEZEMkYzOURFMjNFNjY0RjdCODBBNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU4WRypQyDfJGG1FxZlHk8E+E9
OpUBNWAdQJTOuPslnOpvKjj4UQ42qjgZLIK8YFZIUAbU+pEbaejyCIffAEQwLgv7
6G54nBFG1IeH8gszA3/lI3UZnCVwQqDo9BO58kUPJLk0ERqeqXjpsIOQGRLxBITg
y6+dy9qrSx7UFH7IfjvuvTeLDcweOI55XaYun7q/hQtw072HtWiqvHtetYSGfolM
UAyl2xKwt6pbUKlI3LdNvTx6oLKnaNGPThx8WfI7GWdcMJqsGRr/iP399jVU3KBU
7UCFhH4le0Iy4Z4iivr+sxy/ZMMI3ddf0MivCHuQwqYAqtC28LNFuYf+KTcrAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU3QOUxqzgppgQ/S853iPmZPe4CkcwHwYDVR0j
BBgwFoAUAXfGtgYj0BgzNQ1eZ/ovQRcp6ocwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83OENDMTk2REY3RkM2MEEzODE0Q0IwMDI2MjlENEE2RTVB
QTcxNUU1QjAyM0IwMEQ4N0M3RTVGMDdDMzg0NzQxLzAvMDE3N0M2QjYwNjIzRDAx
ODMzMzUwRDVFNjdGQTJGNDExNzI5RUE4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMTc3QzZCNjA2MjNEMDE4MzMz
NTBENUU2N0ZBMkY0MTE3MjlFQTg3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzhDQzE5NkRGN0ZDNjBBMzgxNENCMDAyNjI5RDRBNkU1QUE3MTVFNUIw
MjNCMDBEODdDN0U1RjA3QzM4NDc0MS8wLzM0MzUyZTMyMzIzNzJlMzMzMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNTM4MzczOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3jIDAN
BgkqhkiG9w0BAQsFAAOCAQEAgocSBawXiScrN6r1UDybhf5jkkG4lsO1IF0pbppn
GtOGaKhQ9+vuJqA5zW7JZmrFuf4jW/zhpjuXHERzHWgC3p/qEVsph9xHEeWRYGQv
l4AWhBrghkXqc3bab9X3llCGVSSSNRC5XMaFnLEMgatu9F+j0LXLXIeCqrWDs+cD
Z2DKUpoe8Nd1OyMs+p7PBU11xzGUmLL3QG1wmo538r8XaRxkKKgdWkewHFkpLzcb
R09EygvSbWGg4xXf5BjvjGm2FDzINy0LF4xEJOZOo/FjyoWU1AUqFMq7dRmBPsNX
BnD4pAiVSCABovnkvJ5hJAWejYl49Od7Q8ObTH1kKgB45w==
-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:43 2024 by rpki-client on console-fra.rpki-client.org