Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/34352e3136352e3136382e302f32322d3234203d3e20323635373033.roa
File:                     34352e3136352e3136382e302f32322d3234203d3e20323635373033.roa (raw, json)
Hash identifier:          VjeYWuNAiyMOxVEOim+6iWUt3n8bUFLf5TpgFEYf1tA=
Subject key identifier:   33:52:A0:32:9A:C0:DD:9C:1B:A3:5E:D4:D4:F7:66:79:60:7C:E1:4B
Certificate issuer:       /CN=AABC402EE2FAF415F9D03091D83BA93DC6107FEC
Certificate serial:       4522E5E93EA19A100E2FC4F038FEA884DAEE8E22
Authority key identifier: AA:BC:40:2E:E2:FA:F4:15:F9:D0:30:91:D8:3B:A9:3D:C6:10:7F:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/34352e3136352e3136382e302f32322d3234203d3e20323635373033.roa
Signing time:             Tue 05 Mar 2024 17:58:47 +0000
ROA not before:           Tue 05 Mar 2024 17:53:47 +0000
ROA not after:            Tue 04 Mar 2025 17:58:47 +0000
asID:                     265703
IP address blocks:        45.165.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:22:e5:e9:3e:a1:9a:10:0e:2f:c4:f0:38:fe:a8:84:da:ee:8e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AABC402EE2FAF415F9D03091D83BA93DC6107FEC
        Validity
            Not Before: Mar  5 17:53:47 2024 GMT
            Not After : Mar  4 17:58:47 2025 GMT
        Subject: CN=3352A0329AC0DD9C1BA35ED4D4F76679607CE14B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:4e:2e:56:78:d2:6f:84:9d:e8:2a:b3:81:
                    a0:44:23:76:4e:8a:b0:2a:77:9f:d2:69:71:ad:81:
                    5f:86:4a:4d:e5:aa:e3:05:d5:58:67:ce:d0:b7:fc:
                    e1:ef:49:57:f1:93:c9:90:54:bf:3b:c7:3d:f2:7e:
                    cc:d7:0c:d4:c7:f2:ae:3c:6c:e9:f4:d6:bc:d6:73:
                    70:ab:de:fa:f0:2d:38:78:e2:07:b7:9f:99:dc:c2:
                    d0:58:ef:3c:63:6d:13:2b:bd:0d:9a:65:c6:e8:dc:
                    c8:f2:b2:e1:28:8f:ab:8b:f1:6a:44:cc:4a:d9:f3:
                    fc:0f:a5:7a:0e:1a:04:8e:c3:d8:22:3f:f2:1d:63:
                    ef:ad:bc:1d:54:0a:4b:08:f5:6b:3b:07:74:4a:b0:
                    3d:9f:1a:28:df:ad:d7:a8:de:98:df:ae:a9:31:41:
                    d1:58:e0:98:68:af:cd:0c:9e:6f:d2:d3:be:80:af:
                    47:a8:0b:2f:15:e0:63:68:f4:52:0c:3a:38:8e:01:
                    4f:d1:51:74:50:12:4e:d6:93:68:01:93:6f:96:99:
                    8f:54:16:a1:e8:73:2b:a6:52:a5:8d:6e:38:16:ef:
                    1d:dd:07:54:10:e1:3c:31:94:ec:f9:4f:72:37:49:
                    96:e4:c7:bc:b4:fa:c5:8a:8b:5a:13:38:fb:ba:f8:
                    0e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:52:A0:32:9A:C0:DD:9C:1B:A3:5E:D4:D4:F7:66:79:60:7C:E1:4B
            X509v3 Authority Key Identifier:
                keyid:AA:BC:40:2E:E2:FA:F4:15:F9:D0:30:91:D8:3B:A9:3D:C6:10:7F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/34352e3136352e3136382e302f32322d3234203d3e20323635373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:c0:7d:6e:59:91:c8:23:da:3d:e6:a5:ac:ca:4d:f0:52:d1:
         8d:9a:20:c9:bb:d4:e6:c3:f5:12:c3:ff:ca:df:66:ca:8a:c8:
         a6:69:78:63:5e:8b:40:1f:f6:3b:ef:5a:bf:8c:c1:e4:41:68:
         82:92:b2:88:dd:c9:7c:a3:ef:81:10:54:93:3e:b7:05:1a:db:
         ee:bf:60:d4:12:a4:55:bc:9b:2d:57:7c:fd:5c:02:90:6e:7c:
         d0:be:d8:04:f5:6a:97:f6:ba:60:ef:7d:e7:f1:79:7a:c9:e3:
         7f:d5:5d:2c:7c:22:f2:5c:ae:d4:9a:32:8c:75:7e:3d:2d:c2:
         07:dc:b7:2b:64:02:46:a5:1a:af:84:b6:4b:2d:49:ee:f4:a8:
         25:b3:91:46:f3:8d:02:f6:ce:a6:96:2d:7d:b6:00:1a:42:40:
         74:ab:a2:70:4a:85:a6:6d:d8:9c:f0:af:33:0d:7a:96:19:df:
         c1:90:da:d4:46:af:1c:d1:b6:86:24:0e:35:89:8d:d1:88:3f:
         fa:90:fd:9d:77:c2:cc:d0:a8:0f:8f:ea:03:ba:e6:02:57:c5:
         32:09:4a:23:bb:84:fb:04:c0:bf:51:aa:f5:18:b5:14:2f:1f:
         4f:77:68:41:94:d7:bd:71:be:73:e6:0a:16:07:7a:c9:be:cc:
         e6:3d:17:37
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIURSLl6T6hmhAOL8TwOP6ohNrujiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFCQzQwMkVFMkZBRjQxNUY5RDAzMDkxRDgzQkE5M0RD
NjEwN0ZFQzAeFw0yNDAzMDUxNzUzNDdaFw0yNTAzMDQxNzU4NDdaMDMxMTAvBgNV
BAMTKDMzNTJBMDMyOUFDMEREOUMxQkEzNUVENEQ0Rjc2Njc5NjA3Q0UxNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDMk4uVnjSb4Sd6CqzgaBEI3ZO
irAqd5/SaXGtgV+GSk3lquMF1VhnztC3/OHvSVfxk8mQVL87xz3yfszXDNTH8q48
bOn01rzWc3Cr3vrwLTh44ge3n5ncwtBY7zxjbRMrvQ2aZcbo3MjysuEoj6uL8WpE
zErZ8/wPpXoOGgSOw9giP/IdY++tvB1UCksI9Ws7B3RKsD2fGijfrdeo3pjfrqkx
QdFY4Jhor80Mnm/S076Ar0eoCy8V4GNo9FIMOjiOAU/RUXRQEk7Wk2gBk2+WmY9U
FqHocyumUqWNbjgW7x3dB1QQ4TwxlOz5T3I3SZbkx7y0+sWKi1oTOPu6+A79AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUM1KgMprA3Zwbo17U1PdmeWB84UswHwYDVR0j
BBgwFoAUqrxALuL69BX50DCR2DupPcYQf+wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OTMzQUFFN0M3OEI4RDY5OTRENTE0OTgwREIwMzc0QUYy
ODE2RTEzMEU1OUUzNTZFMTNBMEE3ODcxNDg1NkFBLzAvQUFCQzQwMkVFMkZBRjQx
NUY5RDAzMDkxRDgzQkE5M0RDNjEwN0ZFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQUJDNDAyRUUyRkFGNDE1RjlE
MDMwOTFEODNCQTkzREM2MTA3RkVDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODkzM0FBRTdDNzhCOEQ2OTk0RDUxNDk4MERCMDM3NEFGMjgxNkUxMzBF
NTlFMzU2RTEzQTBBNzg3MTQ4NTZBQS8wLzM0MzUyZTMxMzYzNTJlMzEzNjM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzczMDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLaWo
MA0GCSqGSIb3DQEBCwUAA4IBAQC8wH1uWZHII9o95qWsyk3wUtGNmiDJu9Tmw/US
w//K32bKisimaXhjXotAH/Y771q/jMHkQWiCkrKI3cl8o++BEFSTPrcFGtvuv2DU
EqRVvJstV3z9XAKQbnzQvtgE9WqX9rpg733n8Xl6yeN/1V0sfCLyXK7UmjKMdX49
LcIH3LcrZAJGpRqvhLZLLUnu9Kgls5FG840C9s6mli19tgAaQkB0q6JwSoWmbdic
8K8zDXqWGd/BkNrURq8c0baGJA41iY3RiD/6kP2dd8LM0KgPj+oDuuYCV8UyCUoj
u4T7BMC/Uar1GLUULx9Pd2hBlNe9cb5z5goWB3rJvszmPRc3
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org