Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7C0AC67D7A820808C266570DD77E8A9DAD954E5D03B9E26A488AEB222173FB36/0/34352e3137332e36302e302f32322d3234203d3e20323634373432.roa
File:                     34352e3137332e36302e302f32322d3234203d3e20323634373432.roa (raw, json)
Hash identifier:          Ms7MqZFaB37RRxaHwsdiRSpsUom7ApBd/Fn8VJRIWqA=
Subject key identifier:   50:43:83:84:D7:AF:96:CF:21:7D:27:3D:A5:66:A3:AC:75:CC:CE:68
Certificate issuer:       /CN=A5B5107F078EB56DD750A4838A5974EC7B109038
Certificate serial:       5AC385D893EAF89B531AC8765C32E91F6E5FADAF
Authority key identifier: A5:B5:10:7F:07:8E:B5:6D:D7:50:A4:83:8A:59:74:EC:7B:10:90:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5B5107F078EB56DD750A4838A5974EC7B109038.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7C0AC67D7A820808C266570DD77E8A9DAD954E5D03B9E26A488AEB222173FB36/0/34352e3137332e36302e302f32322d3234203d3e20323634373432.roa
Signing time:             Tue 05 Mar 2024 18:18:38 +0000
ROA not before:           Tue 05 Mar 2024 18:13:38 +0000
ROA not after:            Tue 04 Mar 2025 18:18:38 +0000
asID:                     264742
IP address blocks:        45.173.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7C0AC67D7A820808C266570DD77E8A9DAD954E5D03B9E26A488AEB222173FB36/0/A5B5107F078EB56DD750A4838A5974EC7B109038.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7C0AC67D7A820808C266570DD77E8A9DAD954E5D03B9E26A488AEB222173FB36/0/A5B5107F078EB56DD750A4838A5974EC7B109038.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5B5107F078EB56DD750A4838A5974EC7B109038.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c3:85:d8:93:ea:f8:9b:53:1a:c8:76:5c:32:e9:1f:6e:5f:ad:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B5107F078EB56DD750A4838A5974EC7B109038
        Validity
            Not Before: Mar  5 18:13:38 2024 GMT
            Not After : Mar  4 18:18:38 2025 GMT
        Subject: CN=50438384D7AF96CF217D273DA566A3AC75CCCE68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:64:0c:7a:21:9d:e8:5d:ca:9b:eb:55:77:
                    4c:84:42:fa:44:9a:3a:97:dd:a5:e8:77:bc:66:32:
                    9c:60:b5:9e:40:4d:ea:a1:6e:c4:0c:05:cf:87:6b:
                    b3:bc:5b:2b:7e:b7:65:0c:3e:57:9b:e6:f4:09:40:
                    cf:f8:97:be:d9:c4:c7:8c:49:43:5e:57:bf:9e:95:
                    63:10:4d:78:de:3b:75:1f:02:39:5a:b1:64:33:57:
                    89:bd:2a:3b:f2:2c:0a:8b:80:23:87:22:39:54:78:
                    e6:10:02:ad:c5:73:40:18:55:ca:f8:a7:da:58:f8:
                    da:4c:06:fb:21:59:9f:63:7f:e0:dd:92:10:af:ca:
                    f2:58:3b:9b:66:9c:20:0b:62:1a:62:02:64:6f:c7:
                    3d:5d:f3:c1:22:75:c5:29:58:9b:6c:63:b5:14:3b:
                    06:6b:21:44:f3:c8:c1:c7:02:47:be:23:ff:2b:1c:
                    f3:2d:9d:51:71:86:83:4d:0a:a6:72:3a:75:0d:dd:
                    18:0f:85:82:a9:b6:3f:31:03:cb:08:0c:52:00:89:
                    91:84:d4:9f:77:f1:f6:23:bf:be:95:50:6c:89:33:
                    8a:21:5b:08:1a:57:a9:f7:31:75:a2:5c:17:49:af:
                    0e:db:60:a7:bd:59:61:4e:89:06:80:66:98:0e:a4:
                    8b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:43:83:84:D7:AF:96:CF:21:7D:27:3D:A5:66:A3:AC:75:CC:CE:68
            X509v3 Authority Key Identifier:
                keyid:A5:B5:10:7F:07:8E:B5:6D:D7:50:A4:83:8A:59:74:EC:7B:10:90:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7C0AC67D7A820808C266570DD77E8A9DAD954E5D03B9E26A488AEB222173FB36/0/A5B5107F078EB56DD750A4838A5974EC7B109038.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5B5107F078EB56DD750A4838A5974EC7B109038.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7C0AC67D7A820808C266570DD77E8A9DAD954E5D03B9E26A488AEB222173FB36/0/34352e3137332e36302e302f32322d3234203d3e20323634373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:6c:18:5a:ca:00:e5:d8:39:38:e7:51:52:6e:2e:e3:d4:f1:
         ab:8b:f4:41:6a:21:49:b1:30:0d:dd:9f:ac:de:92:b0:cb:7a:
         47:bb:9b:21:26:16:bf:9b:10:ac:4e:10:72:5c:58:5a:68:69:
         6f:7e:b0:0a:84:fd:f0:74:53:67:b0:91:c4:58:03:59:84:c0:
         96:12:c5:1c:29:4d:5a:e6:98:23:a3:2e:3c:5f:1d:f7:54:14:
         a5:54:cf:0d:d4:47:44:90:69:5e:aa:ce:11:dc:5e:9a:7d:33:
         37:c3:eb:c9:7e:11:02:4f:35:22:7a:fd:f5:72:d9:72:9a:ed:
         10:c3:7a:b0:73:e0:8a:fb:8d:e5:0d:ab:f2:1e:50:2c:a5:9d:
         2c:bd:c1:34:1d:14:6b:f9:7b:d4:4f:11:66:e6:cb:cb:af:3b:
         53:18:be:87:f9:04:f8:c7:86:b6:c4:d9:85:11:3e:05:7b:19:
         4a:d1:b1:b9:83:40:67:9a:5c:54:a8:f0:db:40:b0:4e:09:0e:
         42:d0:b8:6c:84:4d:c3:35:6a:76:82:e6:d1:f0:d8:15:56:57:
         8a:f6:ae:79:3d:0d:af:20:08:69:7e:71:42:8d:f4:a9:4c:63:
         50:b9:a6:de:15:7f:93:78:5d:80:51:d0:7b:8d:80:cb:0b:92:
         dc:a0:5d:88
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWsOF2JPq+JtTGsh2XDLpH25fra8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVCNTEwN0YwNzhFQjU2REQ3NTBBNDgzOEE1OTc0RUM3
QjEwOTAzODAeFw0yNDAzMDUxODEzMzhaFw0yNTAzMDQxODE4MzhaMDMxMTAvBgNV
BAMTKDUwNDM4Mzg0RDdBRjk2Q0YyMTdEMjczREE1NjZBM0FDNzVDQ0NFNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKn2QMeiGd6F3Km+tVd0yEQvpE
mjqX3aXod7xmMpxgtZ5ATeqhbsQMBc+Ha7O8Wyt+t2UMPleb5vQJQM/4l77ZxMeM
SUNeV7+elWMQTXjeO3UfAjlasWQzV4m9KjvyLAqLgCOHIjlUeOYQAq3Fc0AYVcr4
p9pY+NpMBvshWZ9jf+DdkhCvyvJYO5tmnCALYhpiAmRvxz1d88EidcUpWJtsY7UU
OwZrIUTzyMHHAke+I/8rHPMtnVFxhoNNCqZyOnUN3RgPhYKptj8xA8sIDFIAiZGE
1J938fYjv76VUGyJM4ohWwgaV6n3MXWiXBdJrw7bYKe9WWFOiQaAZpgOpItzAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUUEODhNevls8hfSc9pWajrHXMzmgwHwYDVR0j
BBgwFoAUpbUQfweOtW3XUKSDill07HsQkDgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QzBBQzY3RDdBODIwODA4QzI2NjU3MERENzdFOEE5REFE
OTU0RTVEMDNCOUUyNkE0ODhBRUIyMjIxNzNGQjM2LzAvQTVCNTEwN0YwNzhFQjU2
REQ3NTBBNDgzOEE1OTc0RUM3QjEwOTAzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNUI1MTA3RjA3OEVCNTZERDc1
MEE0ODM4QTU5NzRFQzdCMTA5MDM4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0MwQUM2N0Q3QTgyMDgwOEMyNjY1NzBERDc3RThBOURBRDk1NEU1RDAz
QjlFMjZBNDg4QUVCMjIyMTczRkIzNi8wLzM0MzUyZTMxMzczMzJlMzYzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNDM3MzQzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2tPDAN
BgkqhkiG9w0BAQsFAAOCAQEAAGwYWsoA5dg5OOdRUm4u49Txq4v0QWohSbEwDd2f
rN6SsMt6R7ubISYWv5sQrE4QclxYWmhpb36wCoT98HRTZ7CRxFgDWYTAlhLFHClN
WuaYI6MuPF8d91QUpVTPDdRHRJBpXqrOEdxemn0zN8PryX4RAk81Inr99XLZcprt
EMN6sHPgivuN5Q2r8h5QLKWdLL3BNB0Ua/l71E8RZubLy687Uxi+h/kE+MeGtsTZ
hRE+BXsZStGxuYNAZ5pcVKjw20CwTgkOQtC4bIRNwzVqdoLm0fDYFVZXivaueT0N
ryAIaX5xQo30qUxjULmm3hV/k3hdgFHQe42AywuS3KBdiA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:54 2024 by rpki-client on console-ams.rpki-client.org