Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/34352e3233352e3134302e302f32322d3232203d3e203237393437.roa
File:                     34352e3233352e3134302e302f32322d3232203d3e203237393437.roa (raw, json)
Hash identifier:          QhKUVBCaRYIHzMWST3gH9CSaPLTJ6GoQCKD3S9b7G/4=
Subject key identifier:   23:AE:9F:B4:0C:D7:4C:2D:ED:19:85:46:5B:94:1E:CD:64:65:BC:21
Certificate issuer:       /CN=851D006BBDF702AC914FD79F2055A11E9699775D
Certificate serial:       7446ACB0F49F07BE52521F3A77F6AF49D2AE6C09
Authority key identifier: 85:1D:00:6B:BD:F7:02:AC:91:4F:D7:9F:20:55:A1:1E:96:99:77:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/34352e3233352e3134302e302f32322d3232203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 17:53:15 +0000
ROA not before:           Tue 05 Mar 2024 17:48:15 +0000
ROA not after:            Tue 04 Mar 2025 17:53:15 +0000
asID:                     27947
IP address blocks:        45.235.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:46:ac:b0:f4:9f:07:be:52:52:1f:3a:77:f6:af:49:d2:ae:6c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851D006BBDF702AC914FD79F2055A11E9699775D
        Validity
            Not Before: Mar  5 17:48:15 2024 GMT
            Not After : Mar  4 17:53:15 2025 GMT
        Subject: CN=23AE9FB40CD74C2DED1985465B941ECD6465BC21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cb:e7:2e:14:1a:46:e4:34:7b:a5:be:21:eb:
                    a6:09:3c:4a:d6:0d:34:17:f2:bf:fd:41:91:c5:0e:
                    f6:d1:b3:4c:b6:36:49:4d:13:c5:b8:07:3d:18:8a:
                    24:cc:55:5f:f5:3d:57:2a:0a:02:3a:48:1f:b4:34:
                    41:b6:4a:32:be:60:78:3d:31:05:f0:38:25:59:a7:
                    ec:9a:75:9b:70:7b:f0:b4:27:7d:e9:bf:c4:6a:6e:
                    0c:cd:53:1a:a7:95:46:d1:ea:67:4c:bc:41:20:95:
                    14:7d:c2:c3:6e:84:de:68:66:3a:dd:94:fd:53:59:
                    21:d0:77:c2:ed:88:88:00:bb:2e:19:f7:e1:88:bc:
                    23:cc:ec:f5:50:d6:9b:46:75:aa:1e:87:d7:eb:5b:
                    96:44:ad:6d:a9:4f:3f:4d:bd:7b:32:60:02:5e:22:
                    0b:e9:d9:be:09:71:61:45:ec:4e:e6:59:95:2d:e6:
                    32:87:50:1f:0d:dd:53:67:18:36:08:1e:9c:38:98:
                    9b:6a:9d:04:fb:87:06:bc:1f:4a:72:f3:d6:19:19:
                    7e:b5:7c:f0:d5:97:04:06:d3:49:a4:f0:fe:4b:d7:
                    d0:b9:14:b6:42:6f:77:6a:c9:f3:b8:89:ff:2d:88:
                    e5:e4:d3:48:8a:05:82:5b:18:be:cb:26:73:81:57:
                    01:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AE:9F:B4:0C:D7:4C:2D:ED:19:85:46:5B:94:1E:CD:64:65:BC:21
            X509v3 Authority Key Identifier:
                keyid:85:1D:00:6B:BD:F7:02:AC:91:4F:D7:9F:20:55:A1:1E:96:99:77:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/34352e3233352e3134302e302f32322d3232203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:6c:7a:b3:db:ee:c1:74:8b:bd:6a:ed:22:9f:e6:99:81:33:
         bc:19:d4:d3:34:52:07:3f:82:3e:71:8a:28:f6:41:47:c5:71:
         6e:18:f7:14:c9:6e:e7:e1:a2:2b:74:a4:06:a5:96:fb:c0:40:
         15:8c:dc:66:40:22:d3:e2:3c:79:01:58:d9:c6:e6:dc:47:34:
         aa:97:80:44:10:77:58:24:17:8a:92:30:39:d0:1a:54:c1:18:
         42:b8:86:e8:59:55:f2:dd:6f:c6:90:42:c3:fe:e0:22:80:68:
         94:6c:be:b1:f4:7e:17:15:c8:5a:ce:5a:d7:3a:57:0e:4b:95:
         77:71:0e:fc:07:f3:b3:3f:3c:cf:60:f0:0e:4c:4f:fd:22:3e:
         d5:3f:d4:f8:d2:1a:c1:a3:33:81:a6:ac:f4:98:a3:66:6d:3c:
         b0:9b:8d:79:6a:67:8d:be:ef:02:b1:ef:36:ef:82:b0:6c:04:
         a0:3e:45:ab:12:25:33:20:e7:35:57:20:3f:1d:77:96:71:6e:
         e3:d5:d3:11:6c:d9:a3:b1:be:5c:08:de:63:e2:03:81:50:ea:
         ba:95:30:e9:3d:4e:4b:0b:db:3c:05:91:14:3d:17:8f:79:90:
         5e:34:bc:98:d9:b7:3f:92:bf:7a:4e:f9:a9:34:be:db:d5:a3:
         2f:5e:49:93
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdEassPSfB75SUh86d/avSdKubAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUxRDAwNkJCREY3MDJBQzkxNEZENzlGMjA1NUExMUU5
Njk5Nzc1RDAeFw0yNDAzMDUxNzQ4MTVaFw0yNTAzMDQxNzUzMTVaMDMxMTAvBgNV
BAMTKDIzQUU5RkI0MENENzRDMkRFRDE5ODU0NjVCOTQxRUNENjQ2NUJDMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCay+cuFBpG5DR7pb4h66YJPErW
DTQX8r/9QZHFDvbRs0y2NklNE8W4Bz0YiiTMVV/1PVcqCgI6SB+0NEG2SjK+YHg9
MQXwOCVZp+yadZtwe/C0J33pv8RqbgzNUxqnlUbR6mdMvEEglRR9wsNuhN5oZjrd
lP1TWSHQd8LtiIgAuy4Z9+GIvCPM7PVQ1ptGdaoeh9frW5ZErW2pTz9NvXsyYAJe
Igvp2b4JcWFF7E7mWZUt5jKHUB8N3VNnGDYIHpw4mJtqnQT7hwa8H0py89YZGX61
fPDVlwQG00mk8P5L19C5FLZCb3dqyfO4if8tiOXk00iKBYJbGL7LJnOBVwEPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUI66ftAzXTC3tGYVGW5QezWRlvCEwHwYDVR0j
BBgwFoAUhR0Aa733AqyRT9efIFWhHpaZd10wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjQyQzBBNTk0NEUyNDU2RjEyQUJCNThFMkZFMEFDMUU1
REQ0MUQzMzA2MjA1RTQ5NzRFREZFOEVFRjdENjlFLzAvODUxRDAwNkJCREY3MDJB
QzkxNEZENzlGMjA1NUExMUU5Njk5Nzc1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTFEMDA2QkJERjcwMkFDOTE0
RkQ3OUYyMDU1QTExRTk2OTk3NzVELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI0MkMwQTU5NDRFMjQ1NkYxMkFCQjU4RTJGRTBBQzFFNURENDFEMzMw
NjIwNUU0OTc0RURGRThFRUY3RDY5RS8wLzM0MzUyZTMyMzMzNTJlMzEzNDMwMmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzM5MzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3rjDAN
BgkqhkiG9w0BAQsFAAOCAQEAEWx6s9vuwXSLvWrtIp/mmYEzvBnU0zRSBz+CPnGK
KPZBR8Vxbhj3FMlu5+GiK3SkBqWW+8BAFYzcZkAi0+I8eQFY2cbm3Ec0qpeARBB3
WCQXipIwOdAaVMEYQriG6FlV8t1vxpBCw/7gIoBolGy+sfR+FxXIWs5a1zpXDkuV
d3EO/Afzsz88z2DwDkxP/SI+1T/U+NIawaMzgaas9JijZm08sJuNeWpnjb7vArHv
Nu+CsGwEoD5FqxIlMyDnNVcgPx13lnFu49XTEWzZo7G+XAjeY+IDgVDqupUw6T1O
SwvbPAWRFD0Xj3mQXjS8mNm3P5K/ek75qTS+29WjL15Jkw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:00 2024 by rpki-client on console-ams.rpki-client.org