Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F47BBCCFB114D4619070EC863970F69B505ABEF7ABA384515C8F18511C08550/0/34352e3138352e3136302e302f32322d3234203d3e20323634363638.roa
File:                     34352e3138352e3136302e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          yVRKYrYqzRyCLzLctfVj2LSF5TeipWucj97hLTQ06NI=
Subject key identifier:   C9:53:88:DE:1B:9F:BA:60:63:10:3F:C9:33:CF:43:D1:C0:1C:E2:08
Certificate issuer:       /CN=E66B2921E0AE3454998A8F324E220CC276959514
Certificate serial:       6F2CFE77B6846CF9F13558522CB503078E0079BB
Authority key identifier: E6:6B:29:21:E0:AE:34:54:99:8A:8F:32:4E:22:0C:C2:76:95:95:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E66B2921E0AE3454998A8F324E220CC276959514.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F47BBCCFB114D4619070EC863970F69B505ABEF7ABA384515C8F18511C08550/0/34352e3138352e3136302e302f32322d3234203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 18:03:21 +0000
ROA not before:           Tue 05 Mar 2024 17:58:21 +0000
ROA not after:            Tue 04 Mar 2025 18:03:21 +0000
asID:                     264668
IP address blocks:        45.185.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F47BBCCFB114D4619070EC863970F69B505ABEF7ABA384515C8F18511C08550/0/E66B2921E0AE3454998A8F324E220CC276959514.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F47BBCCFB114D4619070EC863970F69B505ABEF7ABA384515C8F18511C08550/0/E66B2921E0AE3454998A8F324E220CC276959514.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E66B2921E0AE3454998A8F324E220CC276959514.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2c:fe:77:b6:84:6c:f9:f1:35:58:52:2c:b5:03:07:8e:00:79:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E66B2921E0AE3454998A8F324E220CC276959514
        Validity
            Not Before: Mar  5 17:58:21 2024 GMT
            Not After : Mar  4 18:03:21 2025 GMT
        Subject: CN=C95388DE1B9FBA6063103FC933CF43D1C01CE208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:17:a3:12:70:38:c3:c9:58:e7:61:63:92:
                    2e:99:4e:65:2e:7b:da:fe:06:65:e2:b7:dd:c1:65:
                    37:e6:51:f8:dc:54:eb:46:56:f9:c9:34:6e:b6:c0:
                    b9:13:12:81:f0:e5:5c:d7:24:33:22:0e:97:08:eb:
                    1d:ba:78:b2:4f:c1:b8:19:33:ee:3c:29:3b:db:cd:
                    2d:f8:e3:c6:72:4f:57:35:fc:dd:73:b2:3c:f9:50:
                    ea:88:ef:86:51:be:e6:86:c6:83:88:d3:43:54:1b:
                    b2:d2:63:69:45:d5:40:a6:43:0d:8b:48:76:57:85:
                    ba:f4:d1:be:05:b3:87:e3:12:75:b9:34:ed:90:d1:
                    42:9e:c1:d8:25:12:3d:e1:77:5f:7b:69:10:a0:6e:
                    8d:22:91:c8:0e:14:1c:1d:f8:0f:c9:7b:46:75:2f:
                    e2:a5:03:55:6c:53:bf:a0:9e:a1:70:30:8f:b7:06:
                    0a:cd:1b:9c:6f:ba:49:e3:79:45:85:26:b7:39:31:
                    1f:27:f0:9a:0b:ae:82:82:23:9e:8a:9f:05:da:0b:
                    ef:98:c0:07:b4:5e:6b:dd:8c:94:bb:98:99:c0:16:
                    8a:76:fe:12:6e:e6:24:cb:f3:b0:85:d1:80:1b:12:
                    ae:66:0b:26:57:3b:8b:6b:6e:c2:76:6b:c6:63:d4:
                    34:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:53:88:DE:1B:9F:BA:60:63:10:3F:C9:33:CF:43:D1:C0:1C:E2:08
            X509v3 Authority Key Identifier:
                keyid:E6:6B:29:21:E0:AE:34:54:99:8A:8F:32:4E:22:0C:C2:76:95:95:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F47BBCCFB114D4619070EC863970F69B505ABEF7ABA384515C8F18511C08550/0/E66B2921E0AE3454998A8F324E220CC276959514.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E66B2921E0AE3454998A8F324E220CC276959514.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F47BBCCFB114D4619070EC863970F69B505ABEF7ABA384515C8F18511C08550/0/34352e3138352e3136302e302f32322d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         dd:fe:11:15:14:c7:c1:1e:d0:46:6a:a2:da:06:ab:a5:5e:48:
         45:c7:62:75:ee:bc:f7:a5:38:6d:58:f6:b6:7d:cd:fb:9f:d3:
         3d:69:f7:2e:95:29:22:92:e9:a5:c5:1c:b4:53:4b:c0:1f:67:
         af:8c:77:cb:e1:1d:5f:0b:94:fb:cf:eb:e4:8a:79:92:42:87:
         6c:d5:c8:90:3c:aa:44:b8:6e:2b:bd:ca:15:2a:ba:8f:be:1d:
         68:38:1a:fd:ad:b5:c6:69:9c:3a:7f:38:79:9c:72:d2:6f:48:
         bf:5c:dd:ac:90:89:64:87:76:dd:c9:24:85:7d:fb:f9:66:3c:
         fb:66:c5:ac:61:42:d0:57:1c:b4:ef:e7:7f:15:f6:d6:38:9e:
         c1:ce:d6:03:df:ec:37:c1:b3:44:3e:7d:1b:d1:ec:18:72:35:
         b6:2a:eb:54:04:81:4f:17:f0:09:06:3b:38:b5:b4:60:f6:ca:
         46:a4:9a:4e:7b:ed:7e:3b:4a:38:7a:4b:f4:ea:a8:21:4d:ca:
         51:2f:a6:78:95:65:0a:7e:55:e8:c1:3c:c8:e1:6b:cf:f1:24:
         b7:65:11:99:05:cf:dc:87:3a:d4:e8:c9:c9:35:98:91:5b:f1:
         62:46:7b:96:35:30:63:23:f5:c7:25:1e:7b:9b:af:89:34:0e:
         a9:50:4b:e7
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbyz+d7aEbPnxNVhSLLUDB44AebswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY2QjI5MjFFMEFFMzQ1NDk5OEE4RjMyNEUyMjBDQzI3
Njk1OTUxNDAeFw0yNDAzMDUxNzU4MjFaFw0yNTAzMDQxODAzMjFaMDMxMTAvBgNV
BAMTKEM5NTM4OERFMUI5RkJBNjA2MzEwM0ZDOTMzQ0Y0M0QxQzAxQ0UyMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6RejEnA4w8lY52Fjki6ZTmUu
e9r+BmXit93BZTfmUfjcVOtGVvnJNG62wLkTEoHw5VzXJDMiDpcI6x26eLJPwbgZ
M+48KTvbzS3448ZyT1c1/N1zsjz5UOqI74ZRvuaGxoOI00NUG7LSY2lF1UCmQw2L
SHZXhbr00b4Fs4fjEnW5NO2Q0UKewdglEj3hd197aRCgbo0ikcgOFBwd+A/Je0Z1
L+KlA1VsU7+gnqFwMI+3BgrNG5xvuknjeUWFJrc5MR8n8JoLroKCI56KnwXaC++Y
wAe0XmvdjJS7mJnAFop2/hJu5iTL87CF0YAbEq5mCyZXO4trbsJ2a8Zj1DRtAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUyVOI3hufumBjED/JM89D0cAc4ggwHwYDVR0j
BBgwFoAU5mspIeCuNFSZio8yTiIMwnaVlRQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RjQ3QkJDQ0ZCMTE0RDQ2MTkwNzBFQzg2Mzk3MEY2OUI1
MDVBQkVGN0FCQTM4NDUxNUM4RjE4NTExQzA4NTUwLzAvRTY2QjI5MjFFMEFFMzQ1
NDk5OEE4RjMyNEUyMjBDQzI3Njk1OTUxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNjZCMjkyMUUwQUUzNDU0OTk4
QThGMzI0RTIyMENDMjc2OTU5NTE0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0Y0N0JCQ0NGQjExNEQ0NjE5MDcwRUM4NjM5NzBGNjlCNTA1QUJFRjdB
QkEzODQ1MTVDOEYxODUxMUMwODU1MC8wLzM0MzUyZTMxMzgzNTJlMzEzNjMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0MzYzNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLbmg
MA0GCSqGSIb3DQEBCwUAA4IBAQDd/hEVFMfBHtBGaqLaBqulXkhFx2J17rz3pTht
WPa2fc37n9M9afculSkikumlxRy0U0vAH2evjHfL4R1fC5T7z+vkinmSQods1ciQ
PKpEuG4rvcoVKrqPvh1oOBr9rbXGaZw6fzh5nHLSb0i/XN2skIlkh3bdySSFffv5
Zjz7ZsWsYULQVxy07+d/FfbWOJ7BztYD3+w3wbNEPn0b0ewYcjW2KutUBIFPF/AJ
Bjs4tbRg9spGpJpOe+1+O0o4ekv06qghTcpRL6Z4lWUKflXowTzI4WvP8SS3ZRGZ
Bc/chzrU6MnJNZiRW/FiRnuWNTBjI/XHJR57m6+JNA6pUEvn
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org