Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/34352e3233342e33322e302f32322d3234203d3e20323636373639.roa
File:                     34352e3233342e33322e302f32322d3234203d3e20323636373639.roa (raw, json)
Hash identifier:          ol3mB/0JV9EoS4fzePl1LbYFtYPhJ8LDudVD0BmggSc=
Subject key identifier:   07:6A:F9:F2:96:30:3F:B8:17:FD:9B:14:A7:CE:71:70:73:F0:05:EC
Certificate issuer:       /CN=1F892BE2BF480CEC044B44BE95FB21F16BB4734C
Certificate serial:       14AF6128B17E12AB1C63F79BF81DF158CBB53933
Authority key identifier: 1F:89:2B:E2:BF:48:0C:EC:04:4B:44:BE:95:FB:21:F1:6B:B4:73:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/34352e3233342e33322e302f32322d3234203d3e20323636373639.roa
Signing time:             Tue 05 Mar 2024 18:18:33 +0000
ROA not before:           Tue 05 Mar 2024 18:13:33 +0000
ROA not after:            Tue 04 Mar 2025 18:18:33 +0000
asID:                     266769
IP address blocks:        45.234.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:af:61:28:b1:7e:12:ab:1c:63:f7:9b:f8:1d:f1:58:cb:b5:39:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F892BE2BF480CEC044B44BE95FB21F16BB4734C
        Validity
            Not Before: Mar  5 18:13:33 2024 GMT
            Not After : Mar  4 18:18:33 2025 GMT
        Subject: CN=076AF9F296303FB817FD9B14A7CE717073F005EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:e2:e9:40:00:53:21:e9:76:21:2f:b3:f0:
                    42:ee:91:95:86:93:eb:87:2d:3c:80:0d:f9:6a:f3:
                    ca:2d:50:d1:c4:24:91:79:55:c3:6b:ea:bc:72:fb:
                    20:da:0b:59:71:00:a2:0c:e8:66:fa:0e:8b:76:3d:
                    81:68:35:d7:14:ae:85:85:0f:c2:96:97:25:81:75:
                    dd:a1:f4:a5:e0:77:22:84:db:19:c6:84:4d:80:22:
                    e3:86:fb:f9:8d:9f:d4:bd:33:e6:fe:40:f0:29:7a:
                    e3:4a:c3:9b:a7:da:e3:be:d8:7b:a3:4d:a2:17:ba:
                    21:7b:93:64:77:74:7f:de:d5:b7:36:78:cc:e0:1b:
                    71:18:84:ac:71:60:17:18:72:ab:d3:49:a7:5e:b2:
                    a9:b4:76:41:52:3d:be:1a:58:8a:f1:b0:eb:c7:57:
                    8a:fc:4f:d4:f1:cf:23:88:26:a9:0c:c4:88:5f:80:
                    32:f2:a4:8a:a3:ef:1f:05:37:ea:f5:16:97:e2:65:
                    2f:10:e3:1e:b8:83:d2:8f:2a:cc:68:44:f4:46:53:
                    3c:a5:88:41:2b:b5:00:7c:f8:df:bf:c5:de:d3:f7:
                    a6:61:08:9b:aa:ff:82:d6:84:57:9d:d5:5a:9b:c0:
                    6b:d7:24:b3:c5:b4:7a:fd:ad:4c:13:89:0c:a4:1e:
                    35:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6A:F9:F2:96:30:3F:B8:17:FD:9B:14:A7:CE:71:70:73:F0:05:EC
            X509v3 Authority Key Identifier:
                keyid:1F:89:2B:E2:BF:48:0C:EC:04:4B:44:BE:95:FB:21:F1:6B:B4:73:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/34352e3233342e33322e302f32322d3234203d3e20323636373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:91:19:57:dd:cd:47:a4:81:04:9d:8e:83:38:3c:0b:dc:65:
         4a:e8:42:bb:db:83:ed:29:2c:cb:04:19:52:d4:68:e9:74:46:
         5d:ad:de:71:2a:bc:04:9f:be:e7:fe:b3:79:58:1e:e4:0c:d0:
         d3:1a:b8:76:0b:b4:ab:05:5c:3e:2e:d2:3a:47:4a:ef:2e:49:
         a7:a9:90:17:80:27:df:45:12:e2:92:78:7d:a0:2f:39:a3:26:
         c1:c4:c9:90:28:b6:cd:d0:3f:af:fa:48:54:51:da:e7:ef:4b:
         5e:d6:bd:85:02:d4:f3:46:9c:5e:2f:76:cd:06:9c:90:29:e8:
         88:e4:36:42:c1:90:c1:2e:42:9e:fe:f3:62:d2:fc:f9:39:39:
         97:14:12:ae:36:5b:36:9e:95:18:59:9c:e8:a5:8d:72:01:a0:
         93:da:ad:f7:f2:e8:d4:6a:ce:8d:55:84:6c:59:ed:b5:cf:74:
         12:fd:76:54:ee:4e:59:cf:2c:e5:0c:ee:82:01:d7:85:da:3b:
         db:04:17:8e:d0:d8:68:45:3f:d7:f0:d4:87:04:05:19:9e:31:
         7e:23:33:ff:b4:e7:40:e7:ee:20:79:b9:ee:37:32:f3:fb:55:
         9a:89:4f:83:91:eb:85:a8:85:70:b5:19:e8:cd:ef:51:97:d4:
         2d:03:2e:a8
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFK9hKLF+EqscY/eb+B3xWMu1OTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY4OTJCRTJCRjQ4MENFQzA0NEI0NEJFOTVGQjIxRjE2
QkI0NzM0QzAeFw0yNDAzMDUxODEzMzNaFw0yNTAzMDQxODE4MzNaMDMxMTAvBgNV
BAMTKDA3NkFGOUYyOTYzMDNGQjgxN0ZEOUIxNEE3Q0U3MTcwNzNGMDA1RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ceLpQABTIel2IS+z8ELukZWG
k+uHLTyADflq88otUNHEJJF5VcNr6rxy+yDaC1lxAKIM6Gb6Dot2PYFoNdcUroWF
D8KWlyWBdd2h9KXgdyKE2xnGhE2AIuOG+/mNn9S9M+b+QPApeuNKw5un2uO+2Huj
TaIXuiF7k2R3dH/e1bc2eMzgG3EYhKxxYBcYcqvTSadesqm0dkFSPb4aWIrxsOvH
V4r8T9TxzyOIJqkMxIhfgDLypIqj7x8FN+r1FpfiZS8Q4x64g9KPKsxoRPRGUzyl
iEErtQB8+N+/xd7T96ZhCJuq/4LWhFed1VqbwGvXJLPFtHr9rUwTiQykHjWnAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUB2r58pYwP7gX/ZsUp85xcHPwBewwHwYDVR0j
BBgwFoAUH4kr4r9IDOwES0S+lfsh8Wu0c0wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QzNBNDkwNzkxOTM2REYyQTA1QzhEMjVCMUU3MzlFQTk0
MTUyOTRCMkYwOTNBRkEyQzc0NjA3NjYxQjUzM0ZBLzAvMUY4OTJCRTJCRjQ4MENF
QzA0NEI0NEJFOTVGQjIxRjE2QkI0NzM0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjg5MkJFMkJGNDgwQ0VDMDQ0
QjQ0QkU5NUZCMjFGMTZCQjQ3MzRDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEMzQTQ5MDc5MTkzNkRGMkEwNUM4RDI1QjFFNzM5RUE5NDE1Mjk0QjJG
MDkzQUZBMkM3NDYwNzY2MUI1MzNGQS8wLzM0MzUyZTMyMzMzNDJlMzMzMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM3MzYzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3qIDAN
BgkqhkiG9w0BAQsFAAOCAQEAeZEZV93NR6SBBJ2Ogzg8C9xlSuhCu9uD7SksywQZ
UtRo6XRGXa3ecSq8BJ++5/6zeVge5AzQ0xq4dgu0qwVcPi7SOkdK7y5Jp6mQF4An
30US4pJ4faAvOaMmwcTJkCi2zdA/r/pIVFHa5+9LXta9hQLU80acXi92zQackCno
iOQ2QsGQwS5Cnv7zYtL8+Tk5lxQSrjZbNp6VGFmc6KWNcgGgk9qt9/Lo1GrOjVWE
bFnttc90Ev12VO5OWc8s5QzuggHXhdo72wQXjtDYaEU/1/DUhwQFGZ4xfiMz/7Tn
QOfuIHm57jcy8/tVmolPg5HrhaiFcLUZ6M3vUZfULQMuqA==
-----END CERTIFICATE-----
Generated at Thu May 2 22:27:31 2024 by rpki-client on console-ams.rpki-client.org