Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/34352e3232362e35392e302f32342d3234203d3e20323633313730.roa
File:                     34352e3232362e35392e302f32342d3234203d3e20323633313730.roa (raw, json)
Hash identifier:          fCPD+2rc2eda/dEX3toKEoDmfSrTmNxX7gt8gaus4v0=
Subject key identifier:   17:C7:7A:72:19:36:C7:D4:BB:7E:AB:8B:DC:51:C7:52:70:4A:B1:AB
Certificate issuer:       /CN=4C07ED76182959652B8E9E133053015F589BFC7F
Certificate serial:       33C4107264E76B54D69B5F48AAEAF145F5DE3712
Authority key identifier: 4C:07:ED:76:18:29:59:65:2B:8E:9E:13:30:53:01:5F:58:9B:FC:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C07ED76182959652B8E9E133053015F589BFC7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/34352e3232362e35392e302f32342d3234203d3e20323633313730.roa
Signing time:             Fri 05 Jul 2024 03:45:00 +0000
ROA not before:           Fri 05 Jul 2024 03:40:00 +0000
ROA not after:            Fri 04 Jul 2025 03:45:00 +0000
asID:                     263170
IP address blocks:        45.226.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/4C07ED76182959652B8E9E133053015F589BFC7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/4C07ED76182959652B8E9E133053015F589BFC7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C07ED76182959652B8E9E133053015F589BFC7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c4:10:72:64:e7:6b:54:d6:9b:5f:48:aa:ea:f1:45:f5:de:37:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C07ED76182959652B8E9E133053015F589BFC7F
        Validity
            Not Before: Jul  5 03:40:00 2024 GMT
            Not After : Jul  4 03:45:00 2025 GMT
        Subject: CN=17C77A721936C7D4BB7EAB8BDC51C752704AB1AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c6:3f:75:f1:e4:63:14:f2:27:0a:1c:ba:54:
                    3e:58:d0:ee:8e:dc:cd:d1:7e:f6:28:4c:fb:54:bf:
                    c2:5b:3a:ef:68:8b:5c:42:0f:93:c4:50:2d:11:fa:
                    74:e1:3c:18:37:26:2b:bc:2c:a9:d4:5c:a7:e6:68:
                    17:fe:4e:13:27:34:d8:ae:f8:4d:aa:6d:4d:85:e5:
                    cd:02:cf:d6:7e:54:72:96:f3:f7:c0:97:78:ad:cf:
                    37:25:75:33:c5:50:33:18:f2:5a:31:b2:9f:d2:c5:
                    bc:27:c4:1b:40:dd:9d:97:12:27:16:8a:07:fc:07:
                    83:e4:99:59:3e:96:5d:23:10:03:6e:c7:b6:47:c2:
                    18:c9:fa:e5:07:b8:69:58:38:82:fc:15:38:45:6a:
                    65:02:ca:66:6f:67:01:cf:56:d6:7f:5c:f3:ee:2d:
                    89:2c:29:43:57:2c:a4:53:f3:07:b0:a8:f7:50:f0:
                    14:91:42:8d:f9:0f:73:77:ba:83:8a:20:5e:ee:01:
                    b5:57:8c:5d:25:f2:6b:3e:24:db:f8:12:50:fa:92:
                    a6:f9:3b:41:10:14:4b:86:fa:75:94:55:11:13:5d:
                    d6:9a:57:c2:e9:41:f4:04:d3:eb:ff:54:0a:bf:34:
                    6f:ef:bf:e4:b9:42:e1:bc:cd:35:97:5a:5b:f7:e3:
                    4f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C7:7A:72:19:36:C7:D4:BB:7E:AB:8B:DC:51:C7:52:70:4A:B1:AB
            X509v3 Authority Key Identifier:
                keyid:4C:07:ED:76:18:29:59:65:2B:8E:9E:13:30:53:01:5F:58:9B:FC:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/4C07ED76182959652B8E9E133053015F589BFC7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C07ED76182959652B8E9E133053015F589BFC7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/34352e3232362e35392e302f32342d3234203d3e20323633313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:fc:19:f0:52:a0:a1:8c:bc:8a:7e:fd:24:ef:9e:01:e4:c6:
         c8:5a:96:bc:45:98:9a:09:96:51:c8:5b:8e:b4:26:ea:66:11:
         87:54:4f:be:51:ae:f2:d9:08:bb:5d:0a:6b:1a:87:81:9f:be:
         9f:de:0a:3e:53:97:c6:68:a1:04:8d:65:62:45:c4:a1:1e:5b:
         5e:2e:e3:57:c9:2f:2b:a7:76:a6:e6:1f:e0:1f:93:45:dc:05:
         34:3c:95:ca:86:63:7b:ed:fe:34:1f:f2:e4:6c:f6:cc:43:b4:
         52:40:59:6f:0e:8d:85:9b:d7:db:d9:9f:f1:5c:4b:e7:80:0a:
         6a:99:1f:82:5d:f8:09:27:4d:b7:78:7f:82:1c:c6:c6:ac:3d:
         2a:49:8b:14:0b:a8:ce:fd:a0:29:84:34:3b:0b:cc:5b:f9:ae:
         60:bf:e1:17:22:21:bb:29:56:54:8d:96:42:8a:4c:8b:d7:b6:
         65:21:f0:0c:47:64:05:f2:9e:0b:3b:62:f7:9e:19:74:b9:7e:
         94:f6:63:d7:94:d8:b8:f0:bc:d6:6f:93:bc:c1:e4:fa:29:be:
         ec:ab:eb:37:f6:30:40:97:7f:a2:59:ca:d0:7a:b4:2e:4a:08:
         9f:bf:ba:7e:12:ad:eb:37:fc:9f:d0:39:d8:13:c1:1d:5d:a2:
         ed:da:82:ff
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUM8QQcmTna1TWm19IqurxRfXeNxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMwN0VENzYxODI5NTk2NTJCOEU5RTEzMzA1MzAxNUY1
ODlCRkM3RjAeFw0yNDA3MDUwMzQwMDBaFw0yNTA3MDQwMzQ1MDBaMDMxMTAvBgNV
BAMTKDE3Qzc3QTcyMTkzNkM3RDRCQjdFQUI4QkRDNTFDNzUyNzA0QUIxQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPxj918eRjFPInChy6VD5Y0O6O
3M3RfvYoTPtUv8JbOu9oi1xCD5PEUC0R+nThPBg3Jiu8LKnUXKfmaBf+ThMnNNiu
+E2qbU2F5c0Cz9Z+VHKW8/fAl3itzzcldTPFUDMY8loxsp/SxbwnxBtA3Z2XEicW
igf8B4PkmVk+ll0jEANux7ZHwhjJ+uUHuGlYOIL8FThFamUCymZvZwHPVtZ/XPPu
LYksKUNXLKRT8wewqPdQ8BSRQo35D3N3uoOKIF7uAbVXjF0l8ms+JNv4ElD6kqb5
O0EQFEuG+nWUVRETXdaaV8LpQfQE0+v/VAq/NG/vv+S5QuG8zTWXWlv3408hAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUF8d6chk2x9S7fquL3FHHUnBKsaswHwYDVR0j
BBgwFoAUTAftdhgpWWUrjp4TMFMBX1ib/H8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OEQyRkMxRjBCODUyN0I3OTI2NENEM0NEREMxMDcyNkNC
MzBBMzk5MTYwQkI0MDQ0QUQ5MEJENjZFMTBCOTFELzAvNEMwN0VENzYxODI5NTk2
NTJCOEU5RTEzMzA1MzAxNUY1ODlCRkM3Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QzA3RUQ3NjE4Mjk1OTY1MkI4
RTlFMTMzMDUzMDE1RjU4OUJGQzdGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODhEMkZDMUYwQjg1MjdCNzkyNjRDRDNDRERDMTA3MjZDQjMwQTM5OTE2
MEJCNDA0NEFEOTBCRDY2RTEwQjkxRC8wLzM0MzUyZTMyMzIzNjJlMzUzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzMxMzczMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3iOzAN
BgkqhkiG9w0BAQsFAAOCAQEAWPwZ8FKgoYy8in79JO+eAeTGyFqWvEWYmgmWUchb
jrQm6mYRh1RPvlGu8tkIu10KaxqHgZ++n94KPlOXxmihBI1lYkXEoR5bXi7jV8kv
K6d2puYf4B+TRdwFNDyVyoZje+3+NB/y5Gz2zEO0UkBZbw6NhZvX29mf8VxL54AK
apkfgl34CSdNt3h/ghzGxqw9KkmLFAuozv2gKYQ0OwvMW/muYL/hFyIhuylWVI2W
QopMi9e2ZSHwDEdkBfKeCzti954ZdLl+lPZj15TYuPC81m+TvMHk+im+7KvrN/Yw
QJd/olnK0Hq0LkoIn7+6fhKt6zf8n9A52BPBHV2i7dqC/w==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:20 2025 by rpki-client