Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A23BF4BFB6A36CCD41850705D347E6DC581FD7F0237467C503F5EA7745C3DF2/0/34352e3233392e33362e302f32322d3234203d3e20323635383136.roa
File:                     34352e3233392e33362e302f32322d3234203d3e20323635383136.roa (raw, json)
Hash identifier:          cCbZXrPeM1IPcaLDV9KVcQT1eGd2myDxsV9c4+F7CUs=
Subject key identifier:   5F:BB:65:BA:3D:2E:EA:BD:3A:04:68:E9:4E:FA:4D:3D:C5:27:20:65
Certificate issuer:       /CN=013C9FDB572F82FEBA26C5CBCA4321F421C02091
Certificate serial:       418A5ECF00C797196235DDD28C6C6EE53F56F371
Authority key identifier: 01:3C:9F:DB:57:2F:82:FE:BA:26:C5:CB:CA:43:21:F4:21:C0:20:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/013C9FDB572F82FEBA26C5CBCA4321F421C02091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A23BF4BFB6A36CCD41850705D347E6DC581FD7F0237467C503F5EA7745C3DF2/0/34352e3233392e33362e302f32322d3234203d3e20323635383136.roa
Signing time:             Tue 05 Mar 2024 17:57:22 +0000
ROA not before:           Tue 05 Mar 2024 17:52:22 +0000
ROA not after:            Tue 04 Mar 2025 17:57:22 +0000
asID:                     265816
IP address blocks:        45.239.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A23BF4BFB6A36CCD41850705D347E6DC581FD7F0237467C503F5EA7745C3DF2/0/013C9FDB572F82FEBA26C5CBCA4321F421C02091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A23BF4BFB6A36CCD41850705D347E6DC581FD7F0237467C503F5EA7745C3DF2/0/013C9FDB572F82FEBA26C5CBCA4321F421C02091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/013C9FDB572F82FEBA26C5CBCA4321F421C02091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8a:5e:cf:00:c7:97:19:62:35:dd:d2:8c:6c:6e:e5:3f:56:f3:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=013C9FDB572F82FEBA26C5CBCA4321F421C02091
        Validity
            Not Before: Mar  5 17:52:22 2024 GMT
            Not After : Mar  4 17:57:22 2025 GMT
        Subject: CN=5FBB65BA3D2EEABD3A0468E94EFA4D3DC5272065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:23:33:9e:3f:ff:0e:c5:30:34:48:1a:97:7c:
                    41:ec:71:4c:d0:98:e7:f4:17:5b:41:8a:44:66:76:
                    21:ee:b3:fd:0a:b7:c7:1a:8b:41:6c:e8:8c:0e:b9:
                    a3:7b:ad:bd:a8:c6:30:a3:56:84:99:45:37:43:11:
                    26:c4:b9:fa:32:91:73:4d:f1:c3:4d:a6:97:65:b3:
                    e0:cd:ef:59:56:a8:9b:6a:91:40:86:f9:b1:a5:ef:
                    0d:42:14:68:64:59:26:67:d8:b7:e0:45:01:aa:49:
                    59:cc:2f:55:96:94:ac:aa:22:3a:00:31:7d:5c:06:
                    b4:41:2f:93:e1:d6:4a:76:62:75:e5:7d:82:30:07:
                    bb:e2:4b:57:d6:78:2a:e1:85:fe:97:a3:15:4b:bb:
                    d6:bb:36:a7:7e:25:d7:b0:1d:f2:8c:bf:e3:9a:89:
                    8d:a5:c0:cd:39:a6:0f:0c:28:46:cf:f0:88:e5:5b:
                    9b:b9:fc:f9:45:53:10:5f:a6:7f:cb:c3:d3:5f:5d:
                    75:53:aa:bb:f6:24:82:61:8c:87:95:ab:6f:66:da:
                    02:3c:08:e6:f8:37:e8:bd:22:83:c8:fc:d0:ce:bc:
                    a6:17:68:ca:ac:cd:4d:09:11:de:a0:8c:17:14:c5:
                    af:c4:92:fb:ec:14:3c:7b:ab:33:1f:e8:a5:18:ed:
                    63:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BB:65:BA:3D:2E:EA:BD:3A:04:68:E9:4E:FA:4D:3D:C5:27:20:65
            X509v3 Authority Key Identifier:
                keyid:01:3C:9F:DB:57:2F:82:FE:BA:26:C5:CB:CA:43:21:F4:21:C0:20:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A23BF4BFB6A36CCD41850705D347E6DC581FD7F0237467C503F5EA7745C3DF2/0/013C9FDB572F82FEBA26C5CBCA4321F421C02091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/013C9FDB572F82FEBA26C5CBCA4321F421C02091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A23BF4BFB6A36CCD41850705D347E6DC581FD7F0237467C503F5EA7745C3DF2/0/34352e3233392e33362e302f32322d3234203d3e20323635383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:eb:d6:40:5d:e8:39:60:89:93:a4:b7:24:3b:72:0c:60:d1:
         66:ba:b4:4c:e8:8c:17:d7:fb:1c:3a:86:ec:37:2b:da:b6:f8:
         b5:e5:3e:b2:56:4d:a2:81:1e:5b:71:10:89:b4:69:5a:58:c3:
         f4:73:bf:8f:be:eb:e0:d8:ef:44:ee:d1:02:bc:24:cd:62:ee:
         74:49:f2:70:3f:3f:43:94:31:d8:94:58:5b:5f:d2:f8:8b:41:
         4b:58:f1:2a:23:cc:c1:63:90:e9:8e:c3:87:5d:e9:31:b6:fa:
         02:85:ea:cf:af:0c:46:66:5b:ed:a9:5f:12:97:b4:bc:25:96:
         1a:d5:21:88:6c:c5:6c:1c:8c:66:c5:6c:e4:d1:98:2c:e4:5d:
         be:e0:2b:b8:e1:13:41:f8:98:52:ed:c6:bd:dc:e9:10:bb:33:
         ea:f8:4e:d6:10:f7:7b:14:6c:73:45:ee:f2:6b:74:8c:58:80:
         bb:02:55:b9:6b:35:79:89:8d:9b:d1:50:7e:29:ea:1a:15:70:
         42:e9:62:6e:79:c5:9f:66:aa:3f:e0:c7:32:24:b8:df:95:4d:
         d7:32:b6:21:bd:b3:22:20:22:1e:41:42:20:25:4c:b3:b8:d0:
         1c:bc:af:e6:5b:35:dc:fa:21:92:c6:62:fa:a6:93:5a:ca:39:
         55:1e:0e:2c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQYpezwDHlxliNd3SjGxu5T9W83EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEzQzlGREI1NzJGODJGRUJBMjZDNUNCQ0E0MzIxRjQy
MUMwMjA5MTAeFw0yNDAzMDUxNzUyMjJaFw0yNTAzMDQxNzU3MjJaMDMxMTAvBgNV
BAMTKDVGQkI2NUJBM0QyRUVBQkQzQTA0NjhFOTRFRkE0RDNEQzUyNzIwNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZIzOeP/8OxTA0SBqXfEHscUzQ
mOf0F1tBikRmdiHus/0Kt8cai0Fs6IwOuaN7rb2oxjCjVoSZRTdDESbEufoykXNN
8cNNppdls+DN71lWqJtqkUCG+bGl7w1CFGhkWSZn2LfgRQGqSVnML1WWlKyqIjoA
MX1cBrRBL5Ph1kp2YnXlfYIwB7viS1fWeCrhhf6XoxVLu9a7Nqd+JdewHfKMv+Oa
iY2lwM05pg8MKEbP8IjlW5u5/PlFUxBfpn/Lw9NfXXVTqrv2JIJhjIeVq29m2gI8
COb4N+i9IoPI/NDOvKYXaMqszU0JEd6gjBcUxa/EkvvsFDx7qzMf6KUY7WPRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUX7tluj0u6r06BGjpTvpNPcUnIGUwHwYDVR0j
BBgwFoAUATyf21cvgv66JsXLykMh9CHAIJEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QTIzQkY0QkZCNkEzNkNDRDQxODUwNzA1RDM0N0U2REM1
ODFGRDdGMDIzNzQ2N0M1MDNGNUVBNzc0NUMzREYyLzAvMDEzQzlGREI1NzJGODJG
RUJBMjZDNUNCQ0E0MzIxRjQyMUMwMjA5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMTNDOUZEQjU3MkY4MkZFQkEy
NkM1Q0JDQTQzMjFGNDIxQzAyMDkxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0EyM0JGNEJGQjZBMzZDQ0Q0MTg1MDcwNUQzNDdFNkRDNTgxRkQ3RjAy
Mzc0NjdDNTAzRjVFQTc3NDVDM0RGMi8wLzM0MzUyZTMyMzMzOTJlMzMzNjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNTM4MzEzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3vJDAN
BgkqhkiG9w0BAQsFAAOCAQEAXevWQF3oOWCJk6S3JDtyDGDRZrq0TOiMF9f7HDqG
7Dcr2rb4teU+slZNooEeW3EQibRpWljD9HO/j77r4NjvRO7RArwkzWLudEnycD8/
Q5Qx2JRYW1/S+ItBS1jxKiPMwWOQ6Y7Dh13pMbb6AoXqz68MRmZb7alfEpe0vCWW
GtUhiGzFbByMZsVs5NGYLORdvuAruOETQfiYUu3GvdzpELsz6vhO1hD3exRsc0Xu
8mt0jFiAuwJVuWs1eYmNm9FQfinqGhVwQulibnnFn2aqP+DHMiS435VN1zK2Ib2z
IiAiHkFCICVMs7jQHLyv5ls13PohksZi+qaTWso5VR4OLA==
-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org