Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D3305C5D5B3CB7388ADA7678ECFBF561BF353F73851CA67485BD909533A6084/0/34352e3233312e3232342e302f32322d3234203d3e20323636373335.roa
File:                     34352e3233312e3232342e302f32322d3234203d3e20323636373335.roa (raw, json)
Hash identifier:          EzVqVsUXlu5kQYuzHBZ5va91MiZT4UFglTxi4cdx+YI=
Subject key identifier:   BA:1E:A5:37:25:06:93:CB:DD:E8:25:22:D8:7A:22:56:26:85:CC:A5
Certificate issuer:       /CN=1B0F0F43ADFB6665EE40662998FE2F940C303C66
Certificate serial:       71873A2D273332D6F71C7740CC3E2C66C3F1C5EB
Authority key identifier: 1B:0F:0F:43:AD:FB:66:65:EE:40:66:29:98:FE:2F:94:0C:30:3C:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F0F43ADFB6665EE40662998FE2F940C303C66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D3305C5D5B3CB7388ADA7678ECFBF561BF353F73851CA67485BD909533A6084/0/34352e3233312e3232342e302f32322d3234203d3e20323636373335.roa
Signing time:             Tue 05 Mar 2024 18:10:55 +0000
ROA not before:           Tue 05 Mar 2024 18:05:55 +0000
ROA not after:            Tue 04 Mar 2025 18:10:55 +0000
asID:                     266735
IP address blocks:        45.231.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D3305C5D5B3CB7388ADA7678ECFBF561BF353F73851CA67485BD909533A6084/0/1B0F0F43ADFB6665EE40662998FE2F940C303C66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D3305C5D5B3CB7388ADA7678ECFBF561BF353F73851CA67485BD909533A6084/0/1B0F0F43ADFB6665EE40662998FE2F940C303C66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F0F43ADFB6665EE40662998FE2F940C303C66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:87:3a:2d:27:33:32:d6:f7:1c:77:40:cc:3e:2c:66:c3:f1:c5:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B0F0F43ADFB6665EE40662998FE2F940C303C66
        Validity
            Not Before: Mar  5 18:05:55 2024 GMT
            Not After : Mar  4 18:10:55 2025 GMT
        Subject: CN=BA1EA537250693CBDDE82522D87A22562685CCA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:45:cc:23:3d:3d:63:71:44:02:13:cf:b5:07:
                    2d:b6:2d:d5:51:d4:60:cc:1c:3f:96:78:95:55:41:
                    82:81:2a:cc:3c:42:df:16:f3:97:1a:dc:eb:a4:2d:
                    56:0d:6d:98:29:2e:8f:e9:48:0e:bd:93:78:24:d2:
                    d3:02:cf:c5:b2:db:0c:fc:6a:88:83:93:ce:fb:c7:
                    e3:2e:fb:a4:a2:3c:11:57:84:1b:2c:f1:f9:18:c4:
                    f4:08:20:88:58:58:a3:74:b8:d3:32:38:53:81:ae:
                    07:ee:07:7c:7a:45:4d:58:2f:c3:87:f5:07:92:c0:
                    9c:06:0e:8f:91:fc:1c:a4:46:1e:d4:9b:87:63:0c:
                    90:5b:70:89:bc:c8:bc:0a:e3:8d:1d:38:bc:5d:9f:
                    49:0f:2e:3a:84:3e:65:12:45:e3:02:41:4a:20:96:
                    5d:59:33:89:98:3b:d6:94:5b:d6:70:ff:2b:56:92:
                    e8:91:65:39:3f:f5:64:3e:13:12:e6:ef:e1:de:19:
                    9e:3c:16:6d:fb:c3:39:14:ee:47:17:33:a9:1e:51:
                    ea:0e:cd:7a:7e:f2:33:57:e1:bd:0f:ed:ac:d0:5c:
                    72:f9:4f:a8:8f:e1:b4:a4:fc:f8:54:8c:5e:3e:66:
                    b4:7c:a8:2c:51:70:19:bb:4c:a0:7b:27:1f:60:d9:
                    db:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1E:A5:37:25:06:93:CB:DD:E8:25:22:D8:7A:22:56:26:85:CC:A5
            X509v3 Authority Key Identifier:
                keyid:1B:0F:0F:43:AD:FB:66:65:EE:40:66:29:98:FE:2F:94:0C:30:3C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D3305C5D5B3CB7388ADA7678ECFBF561BF353F73851CA67485BD909533A6084/0/1B0F0F43ADFB6665EE40662998FE2F940C303C66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F0F43ADFB6665EE40662998FE2F940C303C66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D3305C5D5B3CB7388ADA7678ECFBF561BF353F73851CA67485BD909533A6084/0/34352e3233312e3232342e302f32322d3234203d3e20323636373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:d7:1a:33:ba:62:ad:98:ba:ee:2c:f8:40:6a:41:6c:b9:70:
         bd:fa:29:e3:3b:ae:63:28:27:58:f1:af:b3:d9:80:6f:01:f6:
         cb:8d:f7:16:e8:77:ff:bb:d0:50:c5:7a:65:43:6c:e3:98:46:
         16:2d:9c:eb:a8:4d:6a:ee:63:72:5f:6b:63:dd:53:83:4e:08:
         65:db:28:cf:90:cf:6d:79:f0:d7:52:f7:ff:39:68:b3:7f:a3:
         c1:f7:5a:89:f6:d5:3e:1c:ef:b6:55:36:83:29:cf:cb:08:7a:
         92:e2:e5:3a:e3:6e:e1:ba:a4:e2:95:f1:6a:5a:90:93:d2:7c:
         35:0e:ff:9c:f7:4e:84:37:03:85:9b:3a:0a:40:80:76:77:a7:
         c2:88:99:76:7c:96:20:19:ec:2b:b8:18:b8:d0:6f:a6:fc:18:
         cd:ca:fa:a7:e3:1c:d2:2c:fb:72:5d:e8:cb:1e:39:c8:01:84:
         16:6a:41:5b:99:8e:8a:17:dd:65:3c:76:04:42:b5:e6:31:49:
         f2:d7:f4:40:37:b5:9e:46:11:6f:1d:71:e6:62:a0:ab:00:4d:
         61:1d:1a:56:b8:f2:e7:3c:ea:5e:c8:cb:e5:26:89:6a:4d:db:
         56:c0:12:b6:4f:e3:d7:c8:d8:73:4b:11:3c:5d:dd:f9:a7:8f:
         4e:a1:64:16
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcYc6LSczMtb3HHdAzD4sZsPxxeswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIwRjBGNDNBREZCNjY2NUVFNDA2NjI5OThGRTJGOTQw
QzMwM0M2NjAeFw0yNDAzMDUxODA1NTVaFw0yNTAzMDQxODEwNTVaMDMxMTAvBgNV
BAMTKEJBMUVBNTM3MjUwNjkzQ0JEREU4MjUyMkQ4N0EyMjU2MjY4NUNDQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuRcwjPT1jcUQCE8+1By22LdVR
1GDMHD+WeJVVQYKBKsw8Qt8W85ca3OukLVYNbZgpLo/pSA69k3gk0tMCz8Wy2wz8
aoiDk877x+Mu+6SiPBFXhBss8fkYxPQIIIhYWKN0uNMyOFOBrgfuB3x6RU1YL8OH
9QeSwJwGDo+R/BykRh7Um4djDJBbcIm8yLwK440dOLxdn0kPLjqEPmUSReMCQUog
ll1ZM4mYO9aUW9Zw/ytWkuiRZTk/9WQ+ExLm7+HeGZ48Fm37wzkU7kcXM6keUeoO
zXp+8jNX4b0P7azQXHL5T6iP4bSk/PhUjF4+ZrR8qCxRcBm7TKB7Jx9g2dsVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUuh6lNyUGk8vd6CUi2HoiViaFzKUwHwYDVR0j
BBgwFoAUGw8PQ637ZmXuQGYpmP4vlAwwPGYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RDMzMDVDNUQ1QjNDQjczODhBREE3Njc4RUNGQkY1NjFC
RjM1M0Y3Mzg1MUNBNjc0ODVCRDkwOTUzM0E2MDg0LzAvMUIwRjBGNDNBREZCNjY2
NUVFNDA2NjI5OThGRTJGOTQwQzMwM0M2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjBGMEY0M0FERkI2NjY1RUU0
MDY2Mjk5OEZFMkY5NDBDMzAzQzY2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEQzMzA1QzVENUIzQ0I3Mzg4QURBNzY3OEVDRkJGNTYxQkYzNTNGNzM4
NTFDQTY3NDg1QkQ5MDk1MzNBNjA4NC8wLzM0MzUyZTMyMzMzMTJlMzIzMjM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2MzczMzM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLefg
MA0GCSqGSIb3DQEBCwUAA4IBAQCi1xozumKtmLruLPhAakFsuXC9+injO65jKCdY
8a+z2YBvAfbLjfcW6Hf/u9BQxXplQ2zjmEYWLZzrqE1q7mNyX2tj3VODTghl2yjP
kM9tefDXUvf/OWizf6PB91qJ9tU+HO+2VTaDKc/LCHqS4uU6427huqTilfFqWpCT
0nw1Dv+c906ENwOFmzoKQIB2d6fCiJl2fJYgGewruBi40G+m/BjNyvqn4xzSLPty
XejLHjnIAYQWakFbmY6KF91lPHYEQrXmMUny1/RAN7WeRhFvHXHmYqCrAE1hHRpW
uPLnPOpeyMvlJolqTdtWwBK2T+PXyNhzSxE8Xd35p49OoWQW
-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:45 2024 by rpki-client on console-fra.rpki-client.org