Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/34352e3138362e32342e302f32322d3232203d3e20323639383134.roa
File:                     34352e3138362e32342e302f32322d3232203d3e20323639383134.roa (raw, json)
Hash identifier:          jfSsJmO1mgCi/SITw8S/p4uAYYxad2fBwjgPnbQK4Js=
Subject key identifier:   B3:94:69:7E:73:78:AB:1C:84:25:DA:22:04:BD:63:40:9A:45:1C:89
Certificate issuer:       /CN=8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7
Certificate serial:       42A4C801E9B2AF7972223A96B045E0A10AA47A45
Authority key identifier: 8D:A8:22:00:D0:E6:AB:11:C8:4B:B7:FA:99:D7:B0:53:0B:02:D3:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/34352e3138362e32342e302f32322d3232203d3e20323639383134.roa
Signing time:             Tue 05 Mar 2024 17:52:58 +0000
ROA not before:           Tue 05 Mar 2024 17:47:58 +0000
ROA not after:            Tue 04 Mar 2025 17:52:58 +0000
asID:                     269814
IP address blocks:        45.186.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a4:c8:01:e9:b2:af:79:72:22:3a:96:b0:45:e0:a1:0a:a4:7a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7
        Validity
            Not Before: Mar  5 17:47:58 2024 GMT
            Not After : Mar  4 17:52:58 2025 GMT
        Subject: CN=B394697E7378AB1C8425DA2204BD63409A451C89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:69:c2:a5:38:0f:0d:a6:2f:5e:b6:36:5c:d7:
                    be:85:d8:35:46:14:2b:cf:59:f4:15:73:14:37:47:
                    1b:b5:3e:8d:f4:6d:06:23:8b:ff:71:e5:2d:8f:46:
                    8d:15:19:67:12:30:b1:5b:8d:c4:a6:45:09:4b:7a:
                    eb:2b:b9:4f:05:0e:bb:bf:dc:72:03:d5:58:79:11:
                    50:b8:4e:a8:c3:14:bd:b0:96:8d:05:2e:53:e6:e8:
                    5c:80:f9:f6:62:76:da:c2:83:82:b3:5f:fb:a8:ed:
                    07:69:1f:66:99:c4:85:01:4f:79:70:3d:ec:8f:f0:
                    a9:22:a3:49:d2:24:d8:53:50:54:5b:1d:99:e7:70:
                    dd:32:6f:c2:00:2e:c1:45:4a:25:95:ef:d9:9b:60:
                    8b:a7:7b:3c:3c:45:c4:95:fc:80:70:5f:e1:00:fe:
                    e9:c2:63:c2:23:47:18:a1:8b:ba:a8:d5:92:7f:4a:
                    b9:07:68:b0:6f:bd:be:44:90:71:84:e3:58:c5:2b:
                    3e:6e:d6:b2:5f:45:31:9b:d7:c4:0e:e8:3c:d6:4f:
                    19:78:4b:0f:e9:2f:3a:f8:d3:6d:c4:c8:0b:b6:39:
                    bd:2f:ba:10:05:82:fd:73:af:06:8c:ad:23:46:ef:
                    15:12:a2:ec:15:e2:8c:f8:54:a7:04:c8:64:e7:36:
                    df:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:94:69:7E:73:78:AB:1C:84:25:DA:22:04:BD:63:40:9A:45:1C:89
            X509v3 Authority Key Identifier:
                keyid:8D:A8:22:00:D0:E6:AB:11:C8:4B:B7:FA:99:D7:B0:53:0B:02:D3:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/34352e3138362e32342e302f32322d3232203d3e20323639383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:49:f1:ad:a2:56:6d:df:8d:f3:20:4d:bb:ca:e9:c3:31:79:
         d3:d6:af:e1:4f:1d:0f:5d:f5:ea:e7:b7:ec:40:ec:87:9f:79:
         c4:56:5c:1f:b1:cd:64:b8:9a:b9:68:c3:23:ec:a2:a8:ad:f4:
         93:04:52:53:ca:9e:bf:c8:9f:ef:c5:2f:48:8c:90:bd:02:e7:
         31:9c:fb:f1:59:52:d0:3a:da:c9:06:fa:7a:07:f2:b7:64:3b:
         be:1b:89:02:a2:c0:99:b9:ce:06:04:a6:1d:b9:96:fd:0e:75:
         20:6c:8a:4a:74:3d:4f:22:2c:b5:ea:3f:b2:37:0f:f6:90:8e:
         68:b8:95:da:be:c5:8b:85:47:b5:7c:5d:df:13:6e:37:c5:5d:
         78:ba:cd:6f:a4:60:37:0d:27:a1:1f:29:74:03:10:4a:51:df:
         a2:ec:c3:af:1d:8b:0a:bd:6c:ae:d6:47:2a:3e:38:49:cf:0d:
         a4:4c:92:dd:f9:9d:ec:98:e4:22:ad:68:3d:15:95:78:d4:39:
         23:d2:5a:da:ee:ad:7a:64:51:05:68:2c:0c:2c:fb:a8:f6:09:
         bc:f8:3d:74:b6:48:e0:cb:26:cc:00:7f:34:09:53:1f:92:86:
         6f:0c:63:b0:e0:94:e5:48:03:97:c7:a1:30:a8:7f:55:68:ce:
         c2:7e:70:91
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQqTIAemyr3lyIjqWsEXgoQqkekUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERBODIyMDBEMEU2QUIxMUM4NEJCN0ZBOTlEN0IwNTMw
QjAyRDNGNzAeFw0yNDAzMDUxNzQ3NThaFw0yNTAzMDQxNzUyNThaMDMxMTAvBgNV
BAMTKEIzOTQ2OTdFNzM3OEFCMUM4NDI1REEyMjA0QkQ2MzQwOUE0NTFDODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgacKlOA8Npi9etjZc176F2DVG
FCvPWfQVcxQ3Rxu1Po30bQYji/9x5S2PRo0VGWcSMLFbjcSmRQlLeusruU8FDru/
3HID1Vh5EVC4TqjDFL2wlo0FLlPm6FyA+fZidtrCg4KzX/uo7QdpH2aZxIUBT3lw
PeyP8Kkio0nSJNhTUFRbHZnncN0yb8IALsFFSiWV79mbYIunezw8RcSV/IBwX+EA
/unCY8IjRxihi7qo1ZJ/SrkHaLBvvb5EkHGE41jFKz5u1rJfRTGb18QO6DzWTxl4
Sw/pLzr4023EyAu2Ob0vuhAFgv1zrwaMrSNG7xUSouwV4oz4VKcEyGTnNt/xAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUs5RpfnN4qxyEJdoiBL1jQJpFHIkwHwYDVR0j
BBgwFoAUjagiANDmqxHIS7f6mdewUwsC0/cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QUJERkY4QUMxRjUyRUIwM0Y0RjIxMjAyMDREMzNERjA2
MTdDQkQxMUFGN0Q5NjFBRUNBNkM2NkM3QkRFRTEwLzAvOERBODIyMDBEMEU2QUIx
MUM4NEJCN0ZBOTlEN0IwNTMwQjAyRDNGNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84REE4MjIwMEQwRTZBQjExQzg0
QkI3RkE5OUQ3QjA1MzBCMDJEM0Y3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEFCREZGOEFDMUY1MkVCMDNGNEYyMTIwMjA0RDMzREYwNjE3Q0JEMTFB
RjdEOTYxQUVDQTZDNjZDN0JERUUxMC8wLzM0MzUyZTMxMzgzNjJlMzIzNDJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzOTM4MzEzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi26GDAN
BgkqhkiG9w0BAQsFAAOCAQEAM0nxraJWbd+N8yBNu8rpwzF509av4U8dD1316ue3
7EDsh595xFZcH7HNZLiauWjDI+yiqK30kwRSU8qev8if78UvSIyQvQLnMZz78VlS
0DrayQb6egfyt2Q7vhuJAqLAmbnOBgSmHbmW/Q51IGyKSnQ9TyIsteo/sjcP9pCO
aLiV2r7Fi4VHtXxd3xNuN8VdeLrNb6RgNw0noR8pdAMQSlHfouzDrx2LCr1srtZH
Kj44Sc8NpEyS3fmd7JjkIq1oPRWVeNQ5I9Ja2u6temRRBWgsDCz7qPYJvPg9dLZI
4MsmzAB/NAlTH5KGbwxjsOCU5UgDl8ehMKh/VWjOwn5wkQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org