Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/34352e3232362e3137352e302f32342d3234203d3e203532333238.roa
File:                     34352e3232362e3137352e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          J1DYM/UTyp7DfJ6uSmftU8I++hrU49DYg+SlA78YAbs=
Subject key identifier:   96:80:C7:C2:B5:90:88:6A:3E:E6:5E:ED:00:92:82:78:FF:23:D5:66
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       36566EF9AD19FA3A2F0F4B8E9A1861E2277BE201
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/34352e3232362e3137352e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:33 +0000
ROA not before:           Tue 05 Mar 2024 17:39:33 +0000
ROA not after:            Tue 04 Mar 2025 17:44:33 +0000
asID:                     52328
IP address blocks:        45.226.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:56:6e:f9:ad:19:fa:3a:2f:0f:4b:8e:9a:18:61:e2:27:7b:e2:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:33 2024 GMT
            Not After : Mar  4 17:44:33 2025 GMT
        Subject: CN=9680C7C2B590886A3EE65EED00928278FF23D566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e7:16:bd:03:61:ad:7f:ff:95:8f:50:95:db:
                    9c:28:be:61:03:57:d2:19:65:3b:f3:c7:25:56:02:
                    53:ff:87:54:71:c2:7e:71:01:2e:87:64:44:aa:e5:
                    2d:4b:42:ae:7d:b7:02:d6:dd:0b:67:31:b1:17:06:
                    24:f3:39:09:41:5f:af:cb:ac:2f:40:13:a9:e6:9f:
                    06:5b:35:c4:31:9a:9d:a4:02:e5:1e:52:6f:12:ba:
                    fe:f1:f9:b7:2e:41:58:de:fb:7b:55:91:15:d1:71:
                    13:d6:92:70:33:c1:1b:9d:10:5f:a7:34:3a:9e:fa:
                    c0:f7:b4:27:ac:ec:38:bb:c4:dd:b7:69:ea:57:fe:
                    46:bf:01:40:b6:fb:fb:63:98:39:cf:4e:35:f5:6d:
                    b9:86:63:96:64:af:8a:c8:17:70:b6:f4:fb:80:11:
                    7e:66:db:a6:3e:67:be:30:46:bb:bb:1a:11:9e:cb:
                    fb:a9:d3:cb:50:c0:59:a0:63:04:bd:ef:a6:24:1d:
                    2f:8e:d7:a2:af:9a:92:4a:b4:27:e3:62:9e:3d:54:
                    bc:83:e8:1c:34:13:b3:5b:04:f8:ce:87:85:75:51:
                    a7:19:fb:5d:75:d2:b0:b7:7e:64:16:eb:fe:e8:89:
                    e7:82:87:e0:fd:b1:6c:4c:0f:35:f4:17:56:fd:52:
                    c8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:80:C7:C2:B5:90:88:6A:3E:E6:5E:ED:00:92:82:78:FF:23:D5:66
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/34352e3232362e3137352e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:e1:94:4e:26:95:8c:d0:f4:82:24:66:5e:08:d5:91:69:c4:
         49:c0:f9:2b:6e:26:a7:5a:0f:4d:44:60:0a:d5:02:b6:eb:02:
         f9:63:48:16:c4:01:67:92:88:7d:2b:b0:83:4a:3f:4b:6f:00:
         50:6a:d0:d4:8d:fe:72:de:9a:99:a2:0b:e6:8e:52:c4:e5:2b:
         8b:3a:33:2e:a8:db:02:22:8f:2d:83:60:a6:81:2d:ac:63:fb:
         25:fc:10:82:d6:75:5f:8f:5e:fc:77:f8:56:e4:1f:26:07:a5:
         1e:af:27:2b:c5:fe:d5:23:d5:12:c9:6f:aa:b5:00:72:14:05:
         9d:ad:25:df:77:90:15:f8:60:b1:d2:2c:9f:64:76:09:6d:a1:
         29:88:b7:67:b6:09:6f:7f:01:20:13:12:d2:9c:1f:c8:1c:c4:
         e6:9d:b8:e3:77:6a:d3:4f:db:80:da:28:f5:e8:29:d5:69:b1:
         ba:a2:6d:ff:74:8e:51:24:1a:cf:17:c1:04:7e:79:6b:86:9d:
         b2:47:12:67:6b:56:7b:c8:63:51:e0:af:d6:2b:b9:df:27:3b:
         5b:f3:ef:c1:7c:94:a0:31:5c:86:a4:fb:dd:ea:fb:ba:18:b2:
         f3:b1:1b:35:0c:dc:a0:a1:c5:3f:a4:d1:ee:04:f3:49:a3:c8:
         c3:6c:43:c6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNlZu+a0Z+jovD0uOmhhh4id74gEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNCRUUyQkMzREJGNDFFNTU5NDA4OTkxMjhFRUExQTM4
REQwNzc4RjAeFw0yNDAzMDUxNzM5MzNaFw0yNTAzMDQxNzQ0MzNaMDMxMTAvBgNV
BAMTKDk2ODBDN0MyQjU5MDg4NkEzRUU2NUVFRDAwOTI4Mjc4RkYyM0Q1NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX5xa9A2Gtf/+Vj1CV25wovmED
V9IZZTvzxyVWAlP/h1Rxwn5xAS6HZESq5S1LQq59twLW3QtnMbEXBiTzOQlBX6/L
rC9AE6nmnwZbNcQxmp2kAuUeUm8Suv7x+bcuQVje+3tVkRXRcRPWknAzwRudEF+n
NDqe+sD3tCes7Di7xN23aepX/ka/AUC2+/tjmDnPTjX1bbmGY5Zkr4rIF3C29PuA
EX5m26Y+Z74wRru7GhGey/up08tQwFmgYwS976YkHS+O16KvmpJKtCfjYp49VLyD
6Bw0E7NbBPjOh4V1UacZ+1110rC3fmQW6/7oieeCh+D9sWxMDzX0F1b9UsiXAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUloDHwrWQiGo+5l7tAJKCeP8j1WYwHwYDVR0j
BBgwFoAU077ivD2/QeVZQImRKO6ho43Qd48wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85M0ZDRURCOUY2RTJDNDZBM0Y4MkIxNEQ1MEFFOEYzMzRB
QzY0Mjg3MTMxRjFGRjQ3NUFCNjRFQjdGOTZFMTBELzAvRDNCRUUyQkMzREJGNDFF
NTU5NDA4OTkxMjhFRUExQTM4REQwNzc4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EM0JFRTJCQzNEQkY0MUU1NTk0
MDg5OTEyOEVFQTFBMzhERDA3NzhGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTNGQ0VEQjlGNkUyQzQ2QTNGODJCMTRENTBBRThGMzM0QUM2NDI4NzEz
MUYxRkY0NzVBQjY0RUI3Rjk2RTEwRC8wLzM0MzUyZTMyMzIzNjJlMzEzNzM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3irzAN
BgkqhkiG9w0BAQsFAAOCAQEAf+GUTiaVjND0giRmXgjVkWnEScD5K24mp1oPTURg
CtUCtusC+WNIFsQBZ5KIfSuwg0o/S28AUGrQ1I3+ct6amaIL5o5SxOUrizozLqjb
AiKPLYNgpoEtrGP7JfwQgtZ1X49e/Hf4VuQfJgelHq8nK8X+1SPVEslvqrUAchQF
na0l33eQFfhgsdIsn2R2CW2hKYi3Z7YJb38BIBMS0pwfyBzE5p2443dq00/bgNoo
9egp1WmxuqJt/3SOUSQazxfBBH55a4adskcSZ2tWe8hjUeCv1iu53yc7W/PvwXyU
oDFchqT73er7uhiy87EbNQzcoKHFP6TR7gTzSaPIw2xDxg==
-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:53 2024 by rpki-client on console-fra.rpki-client.org