Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/34352e3139312e3139342e302f32342d3234203d3e20323732383738.roa
File:                     34352e3139312e3139342e302f32342d3234203d3e20323732383738.roa (raw, json)
Hash identifier:          ppQW22Nu/nzf4wGOfLMyqD8HjGC2vqlY6p+/5vNYB1c=
Subject key identifier:   C1:7E:01:95:79:DC:7E:BD:C6:20:25:7E:67:B2:FF:3A:57:A4:1E:B1
Certificate issuer:       /CN=889D0E05D0237E6BC68731B7798A1D62FA3AE791
Certificate serial:       715351F70297348C58F238892848286086E9F141
Authority key identifier: 88:9D:0E:05:D0:23:7E:6B:C6:87:31:B7:79:8A:1D:62:FA:3A:E7:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/34352e3139312e3139342e302f32342d3234203d3e20323732383738.roa
Signing time:             Tue 05 Mar 2024 18:23:07 +0000
ROA not before:           Tue 05 Mar 2024 18:18:07 +0000
ROA not after:            Tue 04 Mar 2025 18:23:07 +0000
asID:                     272878
IP address blocks:        45.191.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:53:51:f7:02:97:34:8c:58:f2:38:89:28:48:28:60:86:e9:f1:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=889D0E05D0237E6BC68731B7798A1D62FA3AE791
        Validity
            Not Before: Mar  5 18:18:07 2024 GMT
            Not After : Mar  4 18:23:07 2025 GMT
        Subject: CN=C17E019579DC7EBDC620257E67B2FF3A57A41EB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:39:95:f2:f9:dc:11:2e:d9:f3:bb:59:d0:62:
                    3b:a8:9d:45:fa:57:80:06:00:94:3a:28:ed:14:74:
                    16:24:95:7b:7a:e6:9c:03:b3:14:61:a0:02:8c:d7:
                    f8:56:84:e8:46:10:1b:3f:a9:13:4f:19:42:b6:ce:
                    30:5f:e7:15:85:14:8b:57:4c:44:1a:60:57:29:37:
                    83:17:9d:0e:a3:db:33:84:06:53:ed:e4:d2:39:39:
                    0f:9b:c6:0f:d7:bf:e2:72:69:7a:88:11:ed:13:83:
                    df:45:30:ea:4e:b4:8f:ac:2a:4c:ee:19:2f:f2:e1:
                    d9:e2:82:92:25:56:a9:5b:9c:0d:ff:6e:db:4b:a2:
                    bf:24:3e:a1:ec:d2:be:d0:9d:42:b3:2f:91:14:1b:
                    79:53:a1:5b:31:7b:7d:c1:d8:61:c8:76:4e:b1:87:
                    77:ad:50:5f:23:84:9f:0f:7e:de:1c:08:b1:7d:51:
                    1c:24:08:d4:f2:28:c8:00:8c:5c:d5:1f:a6:98:df:
                    7e:07:28:2b:2f:01:dd:cb:29:1d:83:4d:a0:26:61:
                    12:ef:e4:d6:54:26:f7:f5:57:05:b9:89:bb:de:54:
                    5e:fa:37:5e:44:2e:8f:d4:c7:f8:16:23:ef:ce:a8:
                    32:06:b8:fe:f3:8b:06:d1:ec:5e:f7:b0:46:dd:70:
                    e6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7E:01:95:79:DC:7E:BD:C6:20:25:7E:67:B2:FF:3A:57:A4:1E:B1
            X509v3 Authority Key Identifier:
                keyid:88:9D:0E:05:D0:23:7E:6B:C6:87:31:B7:79:8A:1D:62:FA:3A:E7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/34352e3139312e3139342e302f32342d3234203d3e20323732383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:10:75:e5:48:d1:90:f2:e6:7e:2e:ff:4c:f2:f2:7b:73:a4:
         d3:0b:43:84:d7:84:a4:ca:aa:42:2b:b1:46:c5:c7:b8:85:5f:
         f1:9f:47:54:df:38:e9:7e:7c:62:d3:cb:34:96:ea:e0:24:95:
         12:0c:98:44:de:23:fd:b6:a1:c6:d9:b4:91:87:9a:c6:50:7a:
         65:41:b4:db:8e:71:1a:44:4e:d4:cc:ba:a9:f3:2b:04:e3:1c:
         a7:89:e4:03:fe:c3:ab:b9:e5:28:63:9f:f2:77:5f:40:4b:2d:
         0c:49:7d:93:8c:b5:60:43:63:47:60:c8:be:24:8a:b4:75:1c:
         90:c0:59:e9:a4:35:f2:bd:ce:e5:22:3a:75:69:33:ae:a1:15:
         f7:81:bd:a7:b4:1b:b5:7f:19:d6:57:2a:c9:d5:20:fd:cd:29:
         9e:6e:f3:14:9a:3b:40:f5:e0:e4:8f:b7:4e:78:ce:5c:0f:af:
         dc:91:ff:76:22:09:69:a7:10:9f:bd:d6:0f:82:8e:b9:5c:48:
         54:a8:55:1a:2a:27:71:cc:c3:a3:dd:03:f9:81:7f:63:ef:72:
         e4:17:e8:5f:61:3c:7b:15:7a:37:70:05:a5:4e:02:6d:1a:56:
         b0:81:c7:b1:eb:43:fe:c1:2d:f6:b4:d3:cc:a5:4c:ad:85:51:
         1c:b3:28:c0
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcVNR9wKXNIxY8jiJKEgoYIbp8UEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg5RDBFMDVEMDIzN0U2QkM2ODczMUI3Nzk4QTFENjJG
QTNBRTc5MTAeFw0yNDAzMDUxODE4MDdaFw0yNTAzMDQxODIzMDdaMDMxMTAvBgNV
BAMTKEMxN0UwMTk1NzlEQzdFQkRDNjIwMjU3RTY3QjJGRjNBNTdBNDFFQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYOZXy+dwRLtnzu1nQYjuonUX6
V4AGAJQ6KO0UdBYklXt65pwDsxRhoAKM1/hWhOhGEBs/qRNPGUK2zjBf5xWFFItX
TEQaYFcpN4MXnQ6j2zOEBlPt5NI5OQ+bxg/Xv+JyaXqIEe0Tg99FMOpOtI+sKkzu
GS/y4dnigpIlVqlbnA3/bttLor8kPqHs0r7QnUKzL5EUG3lToVsxe33B2GHIdk6x
h3etUF8jhJ8Pft4cCLF9URwkCNTyKMgAjFzVH6aY334HKCsvAd3LKR2DTaAmYRLv
5NZUJvf1VwW5ibveVF76N15ELo/Ux/gWI+/OqDIGuP7ziwbR7F73sEbdcOb5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUwX4BlXncfr3GICV+Z7L/OlekHrEwHwYDVR0j
BBgwFoAUiJ0OBdAjfmvGhzG3eYodYvo655EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NTIxQzE1QzE0RTRDNjM2OTlCMTYyQjY0RTg2RTRCQ0Qx
NzAyMjFGRjEzRjYyQTVENkQxQjREQkI3ODQwOEMyLzAvODg5RDBFMDVEMDIzN0U2
QkM2ODczMUI3Nzk4QTFENjJGQTNBRTc5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84ODlEMEUwNUQwMjM3RTZCQzY4
NzMxQjc3OThBMUQ2MkZBM0FFNzkxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTUyMUMxNUMxNEU0QzYzNjk5QjE2MkI2NEU4NkU0QkNEMTcwMjIxRkYx
M0Y2MkE1RDZEMUI0REJCNzg0MDhDMi8wLzM0MzUyZTMxMzkzMTJlMzEzOTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzgzNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALb/C
MA0GCSqGSIb3DQEBCwUAA4IBAQBgEHXlSNGQ8uZ+Lv9M8vJ7c6TTC0OE14SkyqpC
K7FGxce4hV/xn0dU3zjpfnxi08s0lurgJJUSDJhE3iP9tqHG2bSRh5rGUHplQbTb
jnEaRE7UzLqp8ysE4xynieQD/sOrueUoY5/yd19ASy0MSX2TjLVgQ2NHYMi+JIq0
dRyQwFnppDXyvc7lIjp1aTOuoRX3gb2ntBu1fxnWVyrJ1SD9zSmebvMUmjtA9eDk
j7dOeM5cD6/ckf92IglppxCfvdYPgo65XEhUqFUaKidxzMOj3QP5gX9j73LkF+hf
YTx7FXo3cAWlTgJtGlawgcex60P+wS32tNPMpUythVEcsyjA
-----END CERTIFICATE-----
Generated at Mon Jun 24 21:21:41 2024 by rpki-client on console-ams.rpki-client.org