Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/34352e3138362e32362e302f32342d3234203d3e20323639383134.roa
File:                     34352e3138362e32362e302f32342d3234203d3e20323639383134.roa (raw, json)
Hash identifier:          3vew8gR1XYrTTTuHCr+12cCnqQ8V1o+tHetpNmMpEME=
Subject key identifier:   BF:30:32:EA:6F:71:7F:64:01:C2:C1:B1:87:54:38:02:D0:22:C1:38
Certificate issuer:       /CN=8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7
Certificate serial:       03431937D5D1C58482321FD1195AEDF4F67AE365
Authority key identifier: 8D:A8:22:00:D0:E6:AB:11:C8:4B:B7:FA:99:D7:B0:53:0B:02:D3:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/34352e3138362e32362e302f32342d3234203d3e20323639383134.roa
Signing time:             Tue 05 Mar 2024 17:52:56 +0000
ROA not before:           Tue 05 Mar 2024 17:47:56 +0000
ROA not after:            Tue 04 Mar 2025 17:52:56 +0000
asID:                     269814
IP address blocks:        45.186.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:43:19:37:d5:d1:c5:84:82:32:1f:d1:19:5a:ed:f4:f6:7a:e3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7
        Validity
            Not Before: Mar  5 17:47:56 2024 GMT
            Not After : Mar  4 17:52:56 2025 GMT
        Subject: CN=BF3032EA6F717F6401C2C1B187543802D022C138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:de:e6:30:59:29:38:78:c9:af:f4:f5:bd:1d:
                    b0:29:9f:1a:ab:83:77:02:c1:2e:94:7f:fb:fc:6e:
                    5d:8a:e7:a5:5e:04:a0:0c:d8:5b:58:d4:8a:9e:97:
                    fe:04:41:8d:d3:d3:b2:e9:bb:77:ea:66:f4:8a:09:
                    ac:ba:72:46:5b:b6:5d:c0:55:ef:2f:9d:a4:25:a4:
                    86:bc:0c:d4:1c:58:d7:a2:4a:eb:1a:b1:de:a9:4d:
                    d7:bd:29:59:62:bd:df:68:53:c4:6d:54:81:29:4b:
                    45:32:02:3b:bd:b0:90:49:91:6b:bc:7e:db:34:df:
                    3d:46:1e:cc:d1:36:24:69:07:ed:de:fe:f8:1f:8c:
                    61:d8:5a:da:f7:69:92:33:06:a2:ac:a1:0c:1b:bf:
                    bf:b5:81:90:49:6c:4d:c6:35:ed:43:72:a4:7c:58:
                    98:6f:02:ec:4d:74:29:3d:aa:5c:5a:d3:56:c2:fb:
                    8d:25:58:d7:2b:35:c0:1b:50:54:b0:8e:92:08:5b:
                    5a:6d:59:a3:00:34:e5:c2:80:00:27:2c:46:d5:f5:
                    56:d2:25:ba:36:93:f6:7d:6f:32:3c:9e:4d:58:82:
                    f7:d5:39:22:2c:b2:93:ac:ab:3a:62:7d:19:3d:63:
                    3b:10:48:8c:ce:d8:9b:b1:9a:35:a0:21:ad:81:12:
                    33:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:30:32:EA:6F:71:7F:64:01:C2:C1:B1:87:54:38:02:D0:22:C1:38
            X509v3 Authority Key Identifier:
                keyid:8D:A8:22:00:D0:E6:AB:11:C8:4B:B7:FA:99:D7:B0:53:0B:02:D3:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/34352e3138362e32362e302f32342d3234203d3e20323639383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:8e:20:10:38:e2:50:25:81:69:19:59:e4:4b:06:c5:9a:7f:
         7e:36:f3:c5:32:31:e6:05:30:22:f5:0c:8d:3b:cc:03:9a:37:
         cc:65:51:50:86:69:3c:c3:a3:00:41:89:89:94:92:bf:53:59:
         41:89:2f:85:30:a2:b9:54:fd:80:dd:b9:ea:58:2c:8d:2c:22:
         1a:d9:11:18:63:1f:c6:10:6e:78:67:27:c7:90:11:3b:23:67:
         d6:db:75:7a:b7:44:6c:1a:e1:70:a7:43:3c:d0:3a:6f:cc:b7:
         8e:91:b7:dd:1e:f3:14:e7:d0:aa:df:cc:67:41:d8:15:48:53:
         20:26:99:6c:78:79:47:b4:cf:b3:95:de:d5:40:2f:ee:b4:4d:
         e4:cc:1f:3b:f5:bc:5c:83:09:73:14:79:64:74:1b:1f:68:3c:
         f6:8a:69:47:f7:58:55:f9:a6:c2:a8:f0:54:a0:b0:20:2c:94:
         03:1c:52:6f:85:73:53:1c:e7:59:2c:1b:d8:95:f4:b2:d0:ed:
         13:e0:a1:a3:79:58:96:f4:0b:d3:46:5b:e4:aa:f1:4b:46:72:
         a6:f9:0c:de:2f:db:76:a4:c7:0f:62:54:aa:a6:ec:2b:9f:9c:
         c2:3f:9f:38:75:da:a5:21:b2:d0:15:13:b6:70:34:ba:ac:2e:
         b7:db:76:1a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUA0MZN9XRxYSCMh/RGVrt9PZ642UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERBODIyMDBEMEU2QUIxMUM4NEJCN0ZBOTlEN0IwNTMw
QjAyRDNGNzAeFw0yNDAzMDUxNzQ3NTZaFw0yNTAzMDQxNzUyNTZaMDMxMTAvBgNV
BAMTKEJGMzAzMkVBNkY3MTdGNjQwMUMyQzFCMTg3NTQzODAyRDAyMkMxMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw3uYwWSk4eMmv9PW9HbApnxqr
g3cCwS6Uf/v8bl2K56VeBKAM2FtY1Iqel/4EQY3T07Lpu3fqZvSKCay6ckZbtl3A
Ve8vnaQlpIa8DNQcWNeiSusasd6pTde9KVlivd9oU8RtVIEpS0UyAju9sJBJkWu8
fts03z1GHszRNiRpB+3e/vgfjGHYWtr3aZIzBqKsoQwbv7+1gZBJbE3GNe1DcqR8
WJhvAuxNdCk9qlxa01bC+40lWNcrNcAbUFSwjpIIW1ptWaMANOXCgAAnLEbV9VbS
Jbo2k/Z9bzI8nk1YgvfVOSIsspOsqzpifRk9YzsQSIzO2JuxmjWgIa2BEjODAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUvzAy6m9xf2QBwsGxh1Q4AtAiwTgwHwYDVR0j
BBgwFoAUjagiANDmqxHIS7f6mdewUwsC0/cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QUJERkY4QUMxRjUyRUIwM0Y0RjIxMjAyMDREMzNERjA2
MTdDQkQxMUFGN0Q5NjFBRUNBNkM2NkM3QkRFRTEwLzAvOERBODIyMDBEMEU2QUIx
MUM4NEJCN0ZBOTlEN0IwNTMwQjAyRDNGNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84REE4MjIwMEQwRTZBQjExQzg0
QkI3RkE5OUQ3QjA1MzBCMDJEM0Y3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEFCREZGOEFDMUY1MkVCMDNGNEYyMTIwMjA0RDMzREYwNjE3Q0JEMTFB
RjdEOTYxQUVDQTZDNjZDN0JERUUxMC8wLzM0MzUyZTMxMzgzNjJlMzIzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTM4MzEzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC26GjAN
BgkqhkiG9w0BAQsFAAOCAQEAJ44gEDjiUCWBaRlZ5EsGxZp/fjbzxTIx5gUwIvUM
jTvMA5o3zGVRUIZpPMOjAEGJiZSSv1NZQYkvhTCiuVT9gN256lgsjSwiGtkRGGMf
xhBueGcnx5AROyNn1tt1erdEbBrhcKdDPNA6b8y3jpG33R7zFOfQqt/MZ0HYFUhT
ICaZbHh5R7TPs5Xe1UAv7rRN5MwfO/W8XIMJcxR5ZHQbH2g89oppR/dYVfmmwqjw
VKCwICyUAxxSb4VzUxznWSwb2JX0stDtE+Cho3lYlvQL00Zb5KrxS0ZypvkM3i/b
dqTHD2JUqqbsK5+cwj+fOHXapSGy0BUTtnA0uqwut9t2Gg==
-----END CERTIFICATE-----
Generated at Fri May 17 10:57:46 2024 by rpki-client on console-ams.rpki-client.org