Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/34352e3138392e3131362e302f32332d3234203d3e20323733313333.roa
File:                     34352e3138392e3131362e302f32332d3234203d3e20323733313333.roa (raw, json)
Hash identifier:          dZlJR7ThoeP5/i9rYf9bQ3KrHrHWRHsAay2u8hNCr/I=
Subject key identifier:   9D:4E:CC:98:88:56:DB:41:83:C1:0A:87:A9:B7:13:E6:4B:3A:BD:42
Certificate issuer:       /CN=07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC
Certificate serial:       2B20D78E11701CD9F99F8F4347D3D9BFDCC49EE7
Authority key identifier: 07:CC:AF:A3:BE:AB:3D:5E:20:F9:9F:25:E8:3A:28:8F:4B:4D:48:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/34352e3138392e3131362e302f32332d3234203d3e20323733313333.roa
Signing time:             Tue 30 Apr 2024 16:50:00 +0000
ROA not before:           Tue 30 Apr 2024 16:45:00 +0000
ROA not after:            Tue 29 Apr 2025 16:50:00 +0000
asID:                     273133
IP address blocks:        45.189.116.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:20:d7:8e:11:70:1c:d9:f9:9f:8f:43:47:d3:d9:bf:dc:c4:9e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC
        Validity
            Not Before: Apr 30 16:45:00 2024 GMT
            Not After : Apr 29 16:50:00 2025 GMT
        Subject: CN=9D4ECC988856DB4183C10A87A9B713E64B3ABD42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:58:c5:51:8e:fd:6b:fa:51:3b:06:eb:50:80:
                    c0:93:bb:ec:e9:b6:78:d5:1b:bd:e4:01:af:f7:62:
                    0d:f7:03:af:f6:20:ff:e9:63:d9:16:69:80:08:89:
                    b8:a0:35:29:2e:e0:c4:e6:92:39:5d:6c:5f:a0:10:
                    ff:4a:b0:dd:31:07:73:a4:db:6f:f6:75:55:d8:dd:
                    43:eb:70:fb:8d:55:f4:e9:26:46:45:47:ad:e5:db:
                    ff:77:ab:23:12:40:8c:bd:ff:50:5f:ec:d4:de:96:
                    ca:5f:7a:f9:d4:df:73:02:5d:1a:e9:3e:a5:9d:3c:
                    8f:39:09:e8:43:34:1a:6d:18:ed:c3:09:b5:fc:1b:
                    ad:be:22:42:c1:4d:91:bb:ff:e0:7e:bf:b2:98:76:
                    f7:72:2b:9c:cd:54:92:82:e3:fc:9b:91:b3:20:78:
                    0e:c4:a6:e6:e6:d6:0b:63:17:10:f8:83:c4:1d:7e:
                    65:44:80:ea:6e:66:2d:46:c2:22:71:41:6f:a9:f2:
                    27:db:84:52:96:56:26:28:e3:33:2c:bf:6c:3d:f0:
                    d0:70:e4:c9:91:9b:cc:50:f0:9e:c1:cd:73:9f:21:
                    13:ac:e2:fe:cb:45:28:14:86:b8:c0:7d:4c:ce:b0:
                    3f:b7:8f:3f:f9:af:aa:cb:56:24:ca:f5:52:70:8b:
                    9e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4E:CC:98:88:56:DB:41:83:C1:0A:87:A9:B7:13:E6:4B:3A:BD:42
            X509v3 Authority Key Identifier:
                keyid:07:CC:AF:A3:BE:AB:3D:5E:20:F9:9F:25:E8:3A:28:8F:4B:4D:48:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/34352e3138392e3131362e302f32332d3234203d3e20323733313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:77:d0:45:9e:95:36:a5:70:85:69:83:1e:55:89:57:3f:0f:
         8d:1e:8b:5a:0b:5a:2c:ef:2a:5c:f5:e2:97:0a:3e:90:ab:1d:
         35:1e:00:c8:ab:88:50:4e:53:82:36:0e:de:2f:6a:83:5d:91:
         cb:72:f7:0f:95:a6:4d:02:7b:48:3a:f4:23:90:3a:20:aa:ff:
         60:29:10:f0:bf:ee:bb:0a:0f:9a:3d:54:c2:af:8c:03:3e:f3:
         7f:57:0d:07:01:41:56:89:e9:e6:18:b3:3e:35:02:7e:8f:c2:
         59:d8:0e:66:5a:2c:36:ea:dd:e8:ab:90:c1:c0:92:e2:d6:11:
         7b:c4:40:a5:47:7b:f5:2c:d8:b2:7e:f4:5a:ce:d2:62:bc:e6:
         c3:63:12:4c:05:f7:df:1d:dc:1b:fb:da:2a:ca:b8:96:99:de:
         39:3a:d7:27:81:0d:f5:12:9d:59:e9:bb:34:26:70:70:e7:c5:
         f2:ad:b2:e8:05:dd:dc:cd:44:56:39:ba:e1:0a:10:5b:e8:24:
         6b:b3:be:ab:6e:76:7f:72:6f:30:0e:44:af:77:a5:12:af:50:
         45:54:38:70:48:0d:2d:73:b1:5d:10:b4:7d:4a:d5:4e:9b:45:
         65:1d:99:88:c3:e6:fd:ae:b0:b6:3d:08:ec:45:cd:f3:fb:0c:
         8a:a9:82:77
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKyDXjhFwHNn5n49DR9PZv9zEnucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdDQ0FGQTNCRUFCM0Q1RTIwRjk5RjI1RTgzQTI4OEY0
QjRENDhGQzAeFw0yNDA0MzAxNjQ1MDBaFw0yNTA0MjkxNjUwMDBaMDMxMTAvBgNV
BAMTKDlENEVDQzk4ODg1NkRCNDE4M0MxMEE4N0E5QjcxM0U2NEIzQUJENDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+WMVRjv1r+lE7ButQgMCTu+zp
tnjVG73kAa/3Yg33A6/2IP/pY9kWaYAIibigNSku4MTmkjldbF+gEP9KsN0xB3Ok
22/2dVXY3UPrcPuNVfTpJkZFR63l2/93qyMSQIy9/1Bf7NTelspfevnU33MCXRrp
PqWdPI85CehDNBptGO3DCbX8G62+IkLBTZG7/+B+v7KYdvdyK5zNVJKC4/ybkbMg
eA7Epubm1gtjFxD4g8QdfmVEgOpuZi1GwiJxQW+p8ifbhFKWViYo4zMsv2w98NBw
5MmRm8xQ8J7BzXOfIROs4v7LRSgUhrjAfUzOsD+3jz/5r6rLViTK9VJwi54PAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUnU7MmIhW20GDwQqHqbcT5ks6vUIwHwYDVR0j
BBgwFoAUB8yvo76rPV4g+Z8l6Dooj0tNSPwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RUNFRTFFMTE1MkZBMDY3Q0FFODhCM0M1NTJENkQzMEY2
QUNDRDBFRkM3NjM2MTBFNkFBNzlFRkNGNDRCNkY3LzAvMDdDQ0FGQTNCRUFCM0Q1
RTIwRjk5RjI1RTgzQTI4OEY0QjRENDhGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wN0NDQUZBM0JFQUIzRDVFMjBG
OTlGMjVFODNBMjg4RjRCNEQ0OEZDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0VDRUUxRTExNTJGQTA2N0NBRTg4QjNDNTUyRDZEMzBGNkFDQ0QwRUZD
NzYzNjEwRTZBQTc5RUZDRjQ0QjZGNy8wLzM0MzUyZTMxMzgzOTJlMzEzMTM2MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzMzMzEzMzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLb10
MA0GCSqGSIb3DQEBCwUAA4IBAQBhd9BFnpU2pXCFaYMeVYlXPw+NHotaC1os7ypc
9eKXCj6Qqx01HgDIq4hQTlOCNg7eL2qDXZHLcvcPlaZNAntIOvQjkDogqv9gKRDw
v+67Cg+aPVTCr4wDPvN/Vw0HAUFWienmGLM+NQJ+j8JZ2A5mWiw26t3oq5DBwJLi
1hF7xEClR3v1LNiyfvRaztJivObDYxJMBfffHdwb+9oqyriWmd45OtcngQ31Ep1Z
6bs0JnBw58XyrbLoBd3czURWObrhChBb6CRrs76rbnZ/cm8wDkSvd6USr1BFVDhw
SA0tc7FdELR9StVOm0VlHZmIw+b9rrC2PQjsRc3z+wyKqYJ3
-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:43 2024 by rpki-client on console-fra.rpki-client.org