Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/34352e3137322e3137392e302f32342d3234203d3e20323732393337.roa
File:                     34352e3137322e3137392e302f32342d3234203d3e20323732393337.roa (raw, json)
Hash identifier:          mjDBIij7kWzhYtHRRNGLrVjhFQxmlLq84ZvMZE9F448=
Subject key identifier:   66:BE:E2:3A:6F:A5:DA:05:82:72:60:40:12:7B:C0:07:DD:9C:59:98
Certificate issuer:       /CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863
Certificate serial:       234ED15D01FF4B25C494084E816BB35B4BCC5524
Authority key identifier: 70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/34352e3137322e3137392e302f32342d3234203d3e20323732393337.roa
Signing time:             Tue 29 Oct 2024 22:55:00 +0000
ROA not before:           Tue 29 Oct 2024 22:50:00 +0000
ROA not after:            Tue 28 Oct 2025 22:55:00 +0000
asID:                     272937
IP address blocks:        45.172.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4e:d1:5d:01:ff:4b:25:c4:94:08:4e:81:6b:b3:5b:4b:cc:55:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863
        Validity
            Not Before: Oct 29 22:50:00 2024 GMT
            Not After : Oct 28 22:55:00 2025 GMT
        Subject: CN=66BEE23A6FA5DA0582726040127BC007DD9C5998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f4:3c:c5:f9:8f:c8:93:cd:1c:c1:59:a9:9b:
                    b4:52:91:d0:73:4b:99:08:ce:24:7d:08:d7:42:57:
                    56:43:f2:3c:26:2f:cf:8f:df:a1:71:c0:d7:c6:da:
                    34:e2:66:47:2c:99:7e:a1:71:5c:0d:ba:eb:a6:cd:
                    e2:cd:c4:70:24:ae:d4:10:47:fe:b0:66:c3:5a:f8:
                    2a:1d:b0:d8:bd:e0:b8:d1:d9:ea:8c:8f:27:0c:f3:
                    4e:b5:d0:25:aa:58:fe:5c:b8:8e:16:30:d3:62:7b:
                    ab:62:d3:49:94:86:db:ba:18:79:23:ea:85:8e:04:
                    6c:af:ae:a6:e1:28:90:b6:c9:ad:42:42:8a:05:60:
                    df:35:4b:d9:94:4b:c2:63:26:2b:a6:9d:3e:f6:4b:
                    6b:2a:74:c8:89:02:2c:12:37:b4:60:d8:14:cd:08:
                    58:de:eb:e8:a7:ce:2c:a3:84:d8:51:57:d9:79:93:
                    de:d7:bd:7c:ea:36:09:40:bd:01:fa:b4:ea:ce:d4:
                    59:9a:1b:a6:1d:2b:79:8d:84:b0:6a:64:48:55:03:
                    48:c5:1b:7c:55:88:a0:86:56:c0:5b:19:f7:7f:4f:
                    49:b4:12:fd:a7:8e:db:a0:83:95:a0:56:61:c9:e1:
                    2e:f6:88:f7:61:a6:73:38:f8:72:aa:27:60:4a:0e:
                    7e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BE:E2:3A:6F:A5:DA:05:82:72:60:40:12:7B:C0:07:DD:9C:59:98
            X509v3 Authority Key Identifier:
                keyid:70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/34352e3137322e3137392e302f32342d3234203d3e20323732393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:af:c5:9d:f5:91:3e:62:09:2b:fd:79:b6:a9:4d:60:c9:ac:
         1b:19:f9:ad:ca:5e:64:08:64:8b:5e:52:2f:b4:e5:8d:a5:40:
         d3:3e:88:54:63:f4:48:29:83:45:83:1f:59:4a:42:7a:cf:91:
         10:0c:9b:6f:80:a5:eb:65:c3:14:63:3d:6f:d0:1f:07:2e:3c:
         25:af:f2:1a:c2:de:c9:03:c4:02:e6:40:94:4e:b3:df:6e:fc:
         51:f3:c4:7e:dc:1e:d9:2a:9e:72:b9:c8:3a:0d:ab:4f:ab:f7:
         f1:ef:d9:7d:cd:9f:2e:b3:ab:fa:9d:de:1f:a8:cf:02:75:81:
         b8:d9:d4:a6:53:7a:6a:5c:c8:35:a9:44:f4:d9:1c:42:71:28:
         e0:7b:b8:79:21:e0:75:86:9b:4d:ce:93:a8:9b:cf:c6:82:85:
         52:f3:22:4a:21:8e:bf:a1:9f:9b:c7:86:4e:4f:f0:e5:bd:66:
         9d:23:9c:e6:0a:5b:cb:14:5d:17:6a:bc:20:62:58:35:59:cd:
         12:5f:1d:eb:09:ea:b0:54:d6:75:2b:39:bb:03:c3:82:9f:c4:
         b4:84:25:f0:81:ce:87:bc:97:7c:88:53:08:15:2c:52:99:d2:
         c0:d1:cd:20:dd:72:6a:07:04:86:89:b7:bd:83:e2:9e:e6:ef:
         b8:38:1a:1c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUI07RXQH/SyXElAhOgWuzW0vMVSQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBBQTZFMDRDNTc2NEIyNkI0ODg3RUYxNjc1QjJFOUM0
RUY4NDg2MzAeFw0yNDEwMjkyMjUwMDBaFw0yNTEwMjgyMjU1MDBaMDMxMTAvBgNV
BAMTKDY2QkVFMjNBNkZBNURBMDU4MjcyNjA0MDEyN0JDMDA3REQ5QzU5OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY9DzF+Y/Ik80cwVmpm7RSkdBz
S5kIziR9CNdCV1ZD8jwmL8+P36FxwNfG2jTiZkcsmX6hcVwNuuumzeLNxHAkrtQQ
R/6wZsNa+CodsNi94LjR2eqMjycM80610CWqWP5cuI4WMNNie6ti00mUhtu6GHkj
6oWOBGyvrqbhKJC2ya1CQooFYN81S9mUS8JjJiumnT72S2sqdMiJAiwSN7Rg2BTN
CFje6+inziyjhNhRV9l5k97XvXzqNglAvQH6tOrO1FmaG6YdK3mNhLBqZEhVA0jF
G3xViKCGVsBbGfd/T0m0Ev2njtugg5WgVmHJ4S72iPdhpnM4+HKqJ2BKDn4XAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUZr7iOm+l2gWCcmBAEnvAB92cWZgwHwYDVR0j
BBgwFoAUcKpuBMV2Sya0iH7xZ1sunE74SGMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MUY1NjdGRURFNzlFNTFBMUFDNTMwMjdFN0QyQUZGMjEw
Mzc5RUI0NEYwRjQyQjI1M0VENDQ2NTE1MkUzM0ZELzAvNzBBQTZFMDRDNTc2NEIy
NkI0ODg3RUYxNjc1QjJFOUM0RUY4NDg2My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MEFBNkUwNEM1NzY0QjI2QjQ4
ODdFRjE2NzVCMkU5QzRFRjg0ODYzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTFGNTY3RkVERTc5RTUxQTFBQzUzMDI3RTdEMkFGRjIxMDM3OUVCNDRG
MEY0MkIyNTNFRDQ0NjUxNTJFMzNGRC8wLzM0MzUyZTMxMzczMjJlMzEzNzM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzkzMzM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALayz
MA0GCSqGSIb3DQEBCwUAA4IBAQAxr8Wd9ZE+Ygkr/Xm2qU1gyawbGfmtyl5kCGSL
XlIvtOWNpUDTPohUY/RIKYNFgx9ZSkJ6z5EQDJtvgKXrZcMUYz1v0B8HLjwlr/Ia
wt7JA8QC5kCUTrPfbvxR88R+3B7ZKp5yucg6DatPq/fx79l9zZ8us6v6nd4fqM8C
dYG42dSmU3pqXMg1qUT02RxCcSjge7h5IeB1hptNzpOom8/GgoVS8yJKIY6/oZ+b
x4ZOT/DlvWadI5zmClvLFF0XarwgYlg1Wc0SXx3rCeqwVNZ1Kzm7A8OCn8S0hCXw
gc6HvJd8iFMIFSxSmdLA0c0g3XJqBwSGibe9g+Ke5u+4OBoc
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:31 2024 by rpki-client on console-fra.rpki-client.org