Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/34352e3138332e36302e302f32322d3234203d3e20323639373633.roa
File:                     34352e3138332e36302e302f32322d3234203d3e20323639373633.roa (raw, json)
Hash identifier:          sSe/wQHlJSRjr+tbgPQcd6/p8rCsjGWeGuP4LJMWre8=
Subject key identifier:   DB:4A:93:40:AA:1D:56:C2:F4:63:4B:CF:41:D3:0D:51:0E:9E:08:FD
Certificate issuer:       /CN=352876AA3B7BD34529C4806D306052CF8D3D5515
Certificate serial:       15BECF6C733C977E63F662D118BF453DF38F3399
Authority key identifier: 35:28:76:AA:3B:7B:D3:45:29:C4:80:6D:30:60:52:CF:8D:3D:55:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/352876AA3B7BD34529C4806D306052CF8D3D5515.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/34352e3138332e36302e302f32322d3234203d3e20323639373633.roa
Signing time:             Tue 05 Mar 2024 17:43:43 +0000
ROA not before:           Tue 05 Mar 2024 17:38:43 +0000
ROA not after:            Tue 04 Mar 2025 17:43:43 +0000
asID:                     269763
IP address blocks:        45.183.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.crl
                          rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/352876AA3B7BD34529C4806D306052CF8D3D5515.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:be:cf:6c:73:3c:97:7e:63:f6:62:d1:18:bf:45:3d:f3:8f:33:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=352876AA3B7BD34529C4806D306052CF8D3D5515
        Validity
            Not Before: Mar  5 17:38:43 2024 GMT
            Not After : Mar  4 17:43:43 2025 GMT
        Subject: CN=DB4A9340AA1D56C2F4634BCF41D30D510E9E08FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3b:73:2d:8a:dc:5d:35:9b:cb:e2:b5:12:4f:
                    44:00:1f:13:56:95:fa:cc:1c:8b:1e:8e:ec:89:66:
                    ff:cb:42:0b:6b:c1:df:46:9f:84:04:a4:0d:fb:ec:
                    90:54:7f:e9:f4:c1:9c:22:35:4c:82:88:1d:fb:1c:
                    25:cb:f1:a6:46:32:ee:52:4f:8b:16:c3:c9:5f:aa:
                    fa:e2:81:3d:dd:fc:f2:e9:e6:1a:e3:5f:1d:41:35:
                    d2:9f:8b:d2:ff:6d:05:8e:72:03:9f:51:71:2e:45:
                    0c:39:f1:64:71:51:bc:cf:da:18:19:7b:32:44:80:
                    c2:93:42:26:70:de:26:ca:0d:b7:25:e6:e5:ff:82:
                    87:4d:5a:25:ee:3f:77:d3:8c:8e:45:78:20:db:25:
                    ca:ab:0b:32:cc:db:a5:a9:dd:8e:b3:32:0c:86:ad:
                    0c:ac:2d:55:f0:d3:b4:b1:03:35:da:b7:8a:0f:47:
                    74:27:97:b1:90:22:a6:e4:a9:07:d7:41:6e:a1:bf:
                    87:33:08:76:df:3a:70:46:4a:05:2b:2f:5e:e9:e5:
                    08:18:b2:97:83:f4:a3:f6:81:5b:6e:5f:42:67:28:
                    65:92:4f:30:77:d1:6b:3d:07:ce:73:8a:82:12:24:
                    0c:76:01:de:a0:8e:9f:90:e1:0c:c1:ac:3f:6f:95:
                    2e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4A:93:40:AA:1D:56:C2:F4:63:4B:CF:41:D3:0D:51:0E:9E:08:FD
            X509v3 Authority Key Identifier:
                keyid:35:28:76:AA:3B:7B:D3:45:29:C4:80:6D:30:60:52:CF:8D:3D:55:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/352876AA3B7BD34529C4806D306052CF8D3D5515.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/34352e3138332e36302e302f32322d3234203d3e20323639373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:5f:59:30:01:33:95:40:00:32:70:a0:ae:65:df:ba:1d:61:
         71:da:e7:03:52:0a:2a:62:48:4c:50:ff:88:45:14:59:b7:90:
         80:31:49:2c:f9:c6:e5:f0:29:b3:f7:d9:bf:7b:3d:72:01:e7:
         f0:0b:40:52:18:de:f5:d3:9f:33:1d:66:c9:ec:5b:20:02:6e:
         a0:ff:b7:f6:12:98:93:fa:71:11:f2:eb:b7:35:b3:07:a6:82:
         b3:2a:74:55:5a:71:f6:6f:53:5c:76:b8:88:27:a1:e3:92:3e:
         03:4a:79:93:1f:39:69:2f:7a:64:5c:d3:96:fa:f6:e6:e2:65:
         6c:d9:35:b4:c9:23:fc:b3:3f:5f:05:aa:8b:b8:de:39:05:73:
         f6:92:b0:a0:7b:23:6f:a5:fd:b6:a6:75:a1:cb:03:33:6c:bc:
         0b:2d:2a:98:c5:ea:15:a5:b2:ae:87:de:63:3b:8f:d4:03:b5:
         42:9d:df:16:5d:40:b5:de:61:2b:9d:92:63:d4:a9:d9:ac:d3:
         07:72:31:a1:78:8e:42:e7:aa:f3:f3:ad:dc:5c:bf:fb:d1:9f:
         9c:24:ce:5a:d8:ee:48:a9:00:28:fb:97:ae:9e:56:f7:34:01:
         07:5d:56:c3:42:67:39:7e:0f:ad:14:a0:0b:48:d0:d5:b4:67:
         b2:03:22:5e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFb7PbHM8l35j9mLRGL9FPfOPM5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUyODc2QUEzQjdCRDM0NTI5QzQ4MDZEMzA2MDUyQ0Y4
RDNENTUxNTAeFw0yNDAzMDUxNzM4NDNaFw0yNTAzMDQxNzQzNDNaMDMxMTAvBgNV
BAMTKERCNEE5MzQwQUExRDU2QzJGNDYzNEJDRjQxRDMwRDUxMEU5RTA4RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaO3MtitxdNZvL4rUST0QAHxNW
lfrMHIsejuyJZv/LQgtrwd9Gn4QEpA377JBUf+n0wZwiNUyCiB37HCXL8aZGMu5S
T4sWw8lfqvrigT3d/PLp5hrjXx1BNdKfi9L/bQWOcgOfUXEuRQw58WRxUbzP2hgZ
ezJEgMKTQiZw3ibKDbcl5uX/godNWiXuP3fTjI5FeCDbJcqrCzLM26Wp3Y6zMgyG
rQysLVXw07SxAzXat4oPR3Qnl7GQIqbkqQfXQW6hv4czCHbfOnBGSgUrL17p5QgY
speD9KP2gVtuX0JnKGWSTzB30Ws9B85zioISJAx2Ad6gjp+Q4QzBrD9vlS5bAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU20qTQKodVsL0Y0vPQdMNUQ6eCP0wHwYDVR0j
BBgwFoAUNSh2qjt700UpxIBtMGBSz409VRUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDhCMUMwOTYyRDJCRTJGNjc4MDUwMEYyMzY0OTVBNzg0
NUY0MzNEM0FDNzg0NDkyOTkyQzI5Qzg4MDQ2MUY1LzAvMzUyODc2QUEzQjdCRDM0
NTI5QzQ4MDZEMzA2MDUyQ0Y4RDNENTUxNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNTI4NzZBQTNCN0JEMzQ1MjlD
NDgwNkQzMDYwNTJDRjhEM0Q1NTE1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ4QjFDMDk2MkQyQkUyRjY3ODA1MDBGMjM2NDk1QTc4NDVGNDMzRDNB
Qzc4NDQ5Mjk5MkMyOUM4ODA0NjFGNS8wLzM0MzUyZTMxMzgzMzJlMzYzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzOTM3MzYzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi23PDAN
BgkqhkiG9w0BAQsFAAOCAQEACV9ZMAEzlUAAMnCgrmXfuh1hcdrnA1IKKmJITFD/
iEUUWbeQgDFJLPnG5fAps/fZv3s9cgHn8AtAUhje9dOfMx1myexbIAJuoP+39hKY
k/pxEfLrtzWzB6aCsyp0VVpx9m9TXHa4iCeh45I+A0p5kx85aS96ZFzTlvr25uJl
bNk1tMkj/LM/XwWqi7jeOQVz9pKwoHsjb6X9tqZ1ocsDM2y8Cy0qmMXqFaWyrofe
YzuP1AO1Qp3fFl1Atd5hK52SY9Sp2azTB3IxoXiOQueq8/Ot3Fy/+9GfnCTOWtju
SKkAKPuXrp5W9zQBB11Ww0JnOX4PrRSgC0jQ1bRnsgMiXg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org