Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/34352e3137322e3232342e302f32322d3234203d3e20323637383330.roa
File:                     34352e3137322e3232342e302f32322d3234203d3e20323637383330.roa (raw, json)
Hash identifier:          0xQbbrjS0P40Ej26EJkAxQLbaPT/4UWW/TsP5CctLlc=
Subject key identifier:   D0:B0:74:C5:DB:A3:98:F5:63:48:CE:A2:25:29:76:66:BF:4F:DD:B8
Certificate issuer:       /CN=949854C65FB68A162199F9EB159DEF051D92FBE6
Certificate serial:       04EC48CF861378C9F1FB598C18A92325A1C5737E
Authority key identifier: 94:98:54:C6:5F:B6:8A:16:21:99:F9:EB:15:9D:EF:05:1D:92:FB:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949854C65FB68A162199F9EB159DEF051D92FBE6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/34352e3137322e3232342e302f32322d3234203d3e20323637383330.roa
Signing time:             Tue 05 Mar 2024 18:18:11 +0000
ROA not before:           Tue 05 Mar 2024 18:13:11 +0000
ROA not after:            Tue 04 Mar 2025 18:18:11 +0000
asID:                     267830
IP address blocks:        45.172.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/949854C65FB68A162199F9EB159DEF051D92FBE6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/949854C65FB68A162199F9EB159DEF051D92FBE6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949854C65FB68A162199F9EB159DEF051D92FBE6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ec:48:cf:86:13:78:c9:f1:fb:59:8c:18:a9:23:25:a1:c5:73:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949854C65FB68A162199F9EB159DEF051D92FBE6
        Validity
            Not Before: Mar  5 18:13:11 2024 GMT
            Not After : Mar  4 18:18:11 2025 GMT
        Subject: CN=D0B074C5DBA398F56348CEA225297666BF4FDDB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1e:50:03:93:54:a8:66:a6:b5:db:d2:71:a8:
                    05:ea:80:86:cd:1d:91:b8:3e:a2:b6:7a:13:89:80:
                    72:33:ec:c2:2b:12:11:3d:56:76:5d:89:4d:a7:8a:
                    21:27:de:bd:49:3f:5d:10:04:9d:14:84:66:b0:99:
                    28:f1:8a:e6:cb:d6:28:53:bf:08:cb:30:1f:69:d6:
                    0f:5c:dc:ab:ec:9f:84:0f:2f:e7:a3:50:cb:22:d1:
                    17:65:ee:04:aa:d1:ba:f4:6c:d4:21:bc:a2:11:bb:
                    f0:80:b5:6b:dd:52:9d:da:68:12:b2:dd:e6:8e:0d:
                    b9:63:02:65:1c:40:f6:85:64:2b:3f:26:22:e3:2c:
                    9e:25:c1:38:cd:28:ce:5c:2e:1b:ec:06:d8:57:50:
                    61:16:a8:89:f1:10:4d:81:ba:c4:87:24:d4:f2:56:
                    6d:26:73:d7:ff:7c:44:7e:9e:d9:f6:c2:e3:2b:b8:
                    4e:32:66:7d:56:18:3f:14:34:2c:cd:98:b4:79:62:
                    7f:54:b8:31:f1:d2:ae:54:2d:b1:10:cc:dc:6c:b2:
                    ac:b1:8e:99:be:a1:0e:97:3c:d0:62:30:01:64:0c:
                    76:38:1d:04:fd:b3:fe:10:bb:4f:43:ce:34:0d:5d:
                    8e:ed:dc:17:62:9a:ea:f0:29:ed:58:4f:ae:9f:9f:
                    82:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B0:74:C5:DB:A3:98:F5:63:48:CE:A2:25:29:76:66:BF:4F:DD:B8
            X509v3 Authority Key Identifier:
                keyid:94:98:54:C6:5F:B6:8A:16:21:99:F9:EB:15:9D:EF:05:1D:92:FB:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/949854C65FB68A162199F9EB159DEF051D92FBE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949854C65FB68A162199F9EB159DEF051D92FBE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/843A3AA866138E8A4C9F53BACA9425C2E05F7D6457381AC53270C91C6753715F/0/34352e3137322e3232342e302f32322d3234203d3e20323637383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:8d:bf:1d:e7:95:89:a1:0f:7c:fb:57:c1:aa:df:fa:32:fe:
         ba:eb:a5:00:06:02:41:51:3d:4e:a9:a7:d6:07:fe:e1:c4:6c:
         27:99:0a:31:66:83:0b:09:b9:0c:c5:c6:7a:00:f4:7b:0e:30:
         97:36:d8:17:33:0a:a7:9a:53:08:8a:2e:38:c4:3f:b5:45:c1:
         ca:a9:71:d7:18:08:9b:09:f2:1c:3a:a9:64:30:0b:4d:7a:64:
         12:dd:fd:d1:c4:a0:93:fd:c5:eb:4b:2a:61:5d:27:13:d6:93:
         9a:0a:39:b4:c5:76:ec:99:0e:57:27:18:00:a8:51:00:7a:f9:
         25:77:aa:5e:83:fc:8c:96:d8:0f:b0:e4:5e:bb:2e:0c:98:c6:
         d6:0d:ba:62:4a:6c:80:3e:be:d9:dd:e6:20:b3:72:f3:6d:28:
         7e:41:13:e7:75:7a:20:04:d6:68:98:c1:05:4c:d8:79:56:d2:
         d2:a6:ca:21:c6:9f:0e:15:62:a1:c7:ec:1f:a6:f3:57:a9:98:
         6e:0d:cc:09:5d:2a:8a:ca:b9:78:ce:83:2e:a7:17:51:68:b4:
         2f:fb:97:05:2e:5c:59:fe:0b:16:5a:44:77:a6:67:b2:cd:9a:
         f5:8e:08:d7:9d:8d:e1:aa:1c:a9:ec:31:ae:98:1c:79:7f:31:
         5b:6c:e0:d2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUBOxIz4YTeMnx+1mMGKkjJaHFc34wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ5ODU0QzY1RkI2OEExNjIxOTlGOUVCMTU5REVGMDUx
RDkyRkJFNjAeFw0yNDAzMDUxODEzMTFaFw0yNTAzMDQxODE4MTFaMDMxMTAvBgNV
BAMTKEQwQjA3NEM1REJBMzk4RjU2MzQ4Q0VBMjI1Mjk3NjY2QkY0RkREQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdHlADk1SoZqa129JxqAXqgIbN
HZG4PqK2ehOJgHIz7MIrEhE9VnZdiU2niiEn3r1JP10QBJ0UhGawmSjxiubL1ihT
vwjLMB9p1g9c3Kvsn4QPL+ejUMsi0Rdl7gSq0br0bNQhvKIRu/CAtWvdUp3aaBKy
3eaODbljAmUcQPaFZCs/JiLjLJ4lwTjNKM5cLhvsBthXUGEWqInxEE2BusSHJNTy
Vm0mc9f/fER+ntn2wuMruE4yZn1WGD8UNCzNmLR5Yn9UuDHx0q5ULbEQzNxssqyx
jpm+oQ6XPNBiMAFkDHY4HQT9s/4Qu09DzjQNXY7t3BdimurwKe1YT66fn4LLAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU0LB0xdujmPVjSM6iJSl2Zr9P3bgwHwYDVR0j
BBgwFoAUlJhUxl+2ihYhmfnrFZ3vBR2S++YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NDNBM0FBODY2MTM4RThBNEM5RjUzQkFDQTk0MjVDMkUw
NUY3RDY0NTczODFBQzUzMjcwQzkxQzY3NTM3MTVGLzAvOTQ5ODU0QzY1RkI2OEEx
NjIxOTlGOUVCMTU5REVGMDUxRDkyRkJFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NDk4NTRDNjVGQjY4QTE2MjE5
OUY5RUIxNTlERUYwNTFEOTJGQkU2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODQzQTNBQTg2NjEzOEU4QTRDOUY1M0JBQ0E5NDI1QzJFMDVGN0Q2NDU3
MzgxQUM1MzI3MEM5MUM2NzUzNzE1Ri8wLzM0MzUyZTMxMzczMjJlMzIzMjM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3MzgzMzMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLazg
MA0GCSqGSIb3DQEBCwUAA4IBAQBYjb8d55WJoQ98+1fBqt/6Mv6666UABgJBUT1O
qafWB/7hxGwnmQoxZoMLCbkMxcZ6APR7DjCXNtgXMwqnmlMIii44xD+1RcHKqXHX
GAibCfIcOqlkMAtNemQS3f3RxKCT/cXrSyphXScT1pOaCjm0xXbsmQ5XJxgAqFEA
evkld6peg/yMltgPsOReuy4MmMbWDbpiSmyAPr7Z3eYgs3LzbSh+QRPndXogBNZo
mMEFTNh5VtLSpsohxp8OFWKhx+wfpvNXqZhuDcwJXSqKyrl4zoMupxdRaLQv+5cF
LlxZ/gsWWkR3pmeyzZr1jgjXnY3hqhyp7DGumBx5fzFbbODS
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org