Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/34352e36382e36302e302f32332d3234203d3e20323733323432.roa
File:                     34352e36382e36302e302f32332d3234203d3e20323733323432.roa (raw, json)
Hash identifier:          ums4WrSANjwNeqm7Kc/lVFOrNxAtaw/BkK6O3dIDk1E=
Subject key identifier:   70:C7:48:9E:89:6A:EA:70:0C:48:91:11:16:11:8D:EF:DF:CD:7D:9D
Certificate issuer:       /CN=06C08D44AF888E8F97E6E20DF100F0BE283ADADD
Certificate serial:       4A70A2F5FA8E25F00171BDD4285A8632C21E2271
Authority key identifier: 06:C0:8D:44:AF:88:8E:8F:97:E6:E2:0D:F1:00:F0:BE:28:3A:DA:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/34352e36382e36302e302f32332d3234203d3e20323733323432.roa
Signing time:             Fri 10 May 2024 17:25:01 +0000
ROA not before:           Fri 10 May 2024 17:20:01 +0000
ROA not after:            Fri 09 May 2025 17:25:01 +0000
asID:                     273242
IP address blocks:        45.68.60.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:70:a2:f5:fa:8e:25:f0:01:71:bd:d4:28:5a:86:32:c2:1e:22:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06C08D44AF888E8F97E6E20DF100F0BE283ADADD
        Validity
            Not Before: May 10 17:20:01 2024 GMT
            Not After : May  9 17:25:01 2025 GMT
        Subject: CN=70C7489E896AEA700C48911116118DEFDFCD7D9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:89:71:b1:d0:0f:f0:16:50:1e:36:c5:35:62:
                    82:9b:c9:6b:a0:71:0f:0f:31:d1:8d:ce:f1:1c:26:
                    d9:2f:4b:eb:0d:f8:d2:ae:7a:eb:27:dc:92:c7:b1:
                    5b:d8:d3:8a:f2:46:93:ad:14:c6:e5:8b:15:e8:2a:
                    12:d7:5d:f1:df:6f:18:68:fc:fa:c0:2c:a0:39:4b:
                    f0:6a:fa:c1:9b:f1:19:c5:c4:c3:4a:ed:93:ea:ba:
                    6d:66:53:37:df:10:d4:49:f9:94:eb:8a:c7:2c:a2:
                    08:de:c5:56:8b:8c:65:73:74:66:53:b2:ea:5e:8f:
                    17:18:52:1e:73:ff:65:d3:f1:b7:c8:5d:24:d1:a8:
                    2a:46:15:03:a9:6c:b2:e4:69:65:9d:2b:95:66:d6:
                    9c:9a:31:4d:b4:57:af:d7:b5:57:1b:5d:ec:32:2a:
                    c5:6c:41:ec:d5:a2:f1:75:fe:1c:ad:31:45:7f:4e:
                    ee:ad:af:08:00:3a:30:12:4e:7b:9f:b4:7f:37:79:
                    df:fc:8f:a7:2a:13:76:2c:ec:0a:eb:2c:c2:02:01:
                    58:73:8b:99:c1:4a:ca:b1:8e:6b:34:cb:63:18:70:
                    25:64:17:d6:35:c5:20:1e:c0:5b:e5:70:52:65:ff:
                    6e:c0:f2:92:0a:29:32:69:bf:cc:65:e0:99:e9:af:
                    8f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C7:48:9E:89:6A:EA:70:0C:48:91:11:16:11:8D:EF:DF:CD:7D:9D
            X509v3 Authority Key Identifier:
                keyid:06:C0:8D:44:AF:88:8E:8F:97:E6:E2:0D:F1:00:F0:BE:28:3A:DA:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/34352e36382e36302e302f32332d3234203d3e20323733323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:d2:54:6c:e0:fb:75:bf:59:0a:5e:00:d1:78:3a:ae:04:5d:
         74:92:52:3c:95:cc:73:a7:63:4a:52:d6:f7:45:7c:1e:23:9b:
         0a:d0:e8:50:f4:b3:22:71:7f:89:05:db:2a:0e:0c:0d:db:93:
         87:2f:be:55:97:5c:bf:5d:35:65:72:66:8d:d8:f5:2f:89:b9:
         29:65:02:5a:b6:13:86:70:cb:4e:38:f1:05:f5:de:9a:07:68:
         3f:1d:02:43:41:32:1c:24:ed:ae:08:a9:7e:0d:35:74:79:ac:
         1f:dd:76:eb:22:44:3a:87:d2:9f:e0:51:18:33:f0:0f:ed:98:
         41:ac:b8:88:37:48:73:81:11:a5:b0:d9:72:26:74:c5:30:b5:
         48:ad:f5:9a:a5:78:09:06:ce:4b:a0:c2:a6:24:6a:12:f2:38:
         fa:8e:74:a9:57:19:a3:79:0d:16:b6:cc:29:58:99:f2:88:d4:
         e4:c7:48:26:3c:98:0f:57:0a:3e:b9:fe:85:7f:60:83:bf:59:
         4c:d2:c8:9b:8f:5d:d3:81:e6:fd:7d:43:af:3e:eb:f9:71:6c:
         91:d8:9c:65:a6:f8:f4:91:2f:4a:82:1f:3c:91:76:81:38:80:
         e1:aa:6b:a9:ed:6e:a1:af:7a:13:89:81:c6:b2:94:de:32:7b:
         09:4e:8a:37
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUSnCi9fqOJfABcb3UKFqGMsIeInEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZDMDhENDRBRjg4OEU4Rjk3RTZFMjBERjEwMEYwQkUy
ODNBREFERDAeFw0yNDA1MTAxNzIwMDFaFw0yNTA1MDkxNzI1MDFaMDMxMTAvBgNV
BAMTKDcwQzc0ODlFODk2QUVBNzAwQzQ4OTExMTE2MTE4REVGREZDRDdEOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYiXGx0A/wFlAeNsU1YoKbyWug
cQ8PMdGNzvEcJtkvS+sN+NKueusn3JLHsVvY04ryRpOtFMblixXoKhLXXfHfbxho
/PrALKA5S/Bq+sGb8RnFxMNK7ZPqum1mUzffENRJ+ZTriscsogjexVaLjGVzdGZT
supejxcYUh5z/2XT8bfIXSTRqCpGFQOpbLLkaWWdK5Vm1pyaMU20V6/XtVcbXewy
KsVsQezVovF1/hytMUV/Tu6trwgAOjASTnuftH83ed/8j6cqE3Ys7ArrLMICAVhz
i5nBSsqxjms0y2MYcCVkF9Y1xSAewFvlcFJl/27A8pIKKTJpv8xl4Jnpr49PAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUcMdInolq6nAMSJERFhGN79/NfZ0wHwYDVR0j
BBgwFoAUBsCNRK+Ijo+X5uIN8QDwvig62t0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MEM3QjgyRDc1MUMwMTIxQjFERjQ4M0ZDRTUyRjgwNzJB
MEE1MDBDQTJGMjI4QjRGREUzNUQ4RTg0MkM1QzZELzAvMDZDMDhENDRBRjg4OEU4
Rjk3RTZFMjBERjEwMEYwQkUyODNBREFERC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNkMwOEQ0NEFGODg4RThGOTdF
NkUyMERGMTAwRjBCRTI4M0FEQURELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTBDN0I4MkQ3NTFDMDEyMUIxREY0ODNGQ0U1MkY4MDcyQTBBNTAwQ0Ey
RjIyOEI0RkRFMzVEOEU4NDJDNUM2RC8wLzM0MzUyZTM2MzgyZTM2MzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMjM3MzMzMjM0MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEtRDwwDQYJ
KoZIhvcNAQELBQADggEBAKvSVGzg+3W/WQpeANF4Oq4EXXSSUjyVzHOnY0pS1vdF
fB4jmwrQ6FD0syJxf4kF2yoODA3bk4cvvlWXXL9dNWVyZo3Y9S+JuSllAlq2E4Zw
y0448QX13poHaD8dAkNBMhwk7a4IqX4NNXR5rB/ddusiRDqH0p/gURgz8A/tmEGs
uIg3SHOBEaWw2XImdMUwtUit9ZqleAkGzkugwqYkahLyOPqOdKlXGaN5DRa2zClY
mfKI1OTHSCY8mA9XCj65/oV/YIO/WUzSyJuPXdOB5v19Q68+6/lxbJHYnGWm+PSR
L0qCHzyRdoE4gOGqa6ntbqGvehOJgcaylN4yewlOijc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:05 2024 by rpki-client on console-fra.rpki-client.org