Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99934E1E439A30E0877155EEA434E1D4AFB8782E07220C443A7411A27838BA8F/0/34352e3138302e32312e302f32342d3234203d3e20323733303435.roa
File:                     34352e3138302e32312e302f32342d3234203d3e20323733303435.roa (raw, json)
Hash identifier:          ykCvlJpGJdB1pzO6Boz8AGc+GxGqXz9boicFOVymTgg=
Subject key identifier:   36:99:27:28:C8:2E:3F:93:AC:82:51:9A:18:0C:E0:03:5D:F9:ED:1A
Certificate issuer:       /CN=9977AC7085D10316B3F0DDA34A29E5C210EB7335
Certificate serial:       24A7856ECF330C3BF5A77CF58D9223BFC540552B
Authority key identifier: 99:77:AC:70:85:D1:03:16:B3:F0:DD:A3:4A:29:E5:C2:10:EB:73:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9977AC7085D10316B3F0DDA34A29E5C210EB7335.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99934E1E439A30E0877155EEA434E1D4AFB8782E07220C443A7411A27838BA8F/0/34352e3138302e32312e302f32342d3234203d3e20323733303435.roa
Signing time:             Tue 05 Mar 2024 17:55:15 +0000
ROA not before:           Tue 05 Mar 2024 17:50:15 +0000
ROA not after:            Tue 04 Mar 2025 17:55:15 +0000
asID:                     273045
IP address blocks:        45.180.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/99934E1E439A30E0877155EEA434E1D4AFB8782E07220C443A7411A27838BA8F/0/9977AC7085D10316B3F0DDA34A29E5C210EB7335.crl
                          rsync://repository.lacnic.net/rpki/lacnic/99934E1E439A30E0877155EEA434E1D4AFB8782E07220C443A7411A27838BA8F/0/9977AC7085D10316B3F0DDA34A29E5C210EB7335.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9977AC7085D10316B3F0DDA34A29E5C210EB7335.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a7:85:6e:cf:33:0c:3b:f5:a7:7c:f5:8d:92:23:bf:c5:40:55:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9977AC7085D10316B3F0DDA34A29E5C210EB7335
        Validity
            Not Before: Mar  5 17:50:15 2024 GMT
            Not After : Mar  4 17:55:15 2025 GMT
        Subject: CN=36992728C82E3F93AC82519A180CE0035DF9ED1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:60:8e:e9:83:dd:bb:f5:3c:a2:f9:98:66:05:
                    42:f1:c2:94:09:87:5b:c5:08:5f:73:cf:f6:4e:c8:
                    d5:d2:f5:fc:32:ce:57:27:48:39:b2:7d:b6:57:44:
                    b4:dc:c6:6e:09:cc:48:00:79:99:2a:c9:be:28:02:
                    ac:2e:44:20:c5:8f:86:52:64:26:96:13:47:17:e1:
                    76:c7:91:de:bd:e0:ee:08:25:aa:26:ef:95:19:f4:
                    a6:51:f7:c8:09:53:c0:b3:b5:fe:f6:26:4a:67:17:
                    63:00:a5:94:e1:c2:ad:fe:4e:5a:d4:3b:2f:fa:41:
                    22:6f:ba:64:9b:fb:ae:6b:c6:4e:de:f7:21:7d:8e:
                    f4:9b:a3:d3:ba:73:6b:36:6b:fb:26:5e:b0:3c:cd:
                    ae:1f:ee:fe:8c:d8:55:bd:a8:48:b3:3d:1e:0e:36:
                    44:84:ed:d1:6c:90:cb:4e:67:91:6d:51:9e:79:54:
                    0a:82:d9:5f:96:7e:12:33:a6:7c:a9:27:32:ad:7a:
                    42:69:27:dd:09:68:6f:16:60:e8:d4:12:ff:5b:00:
                    d7:d0:90:5f:45:84:5c:4b:9c:a2:cd:48:a0:3a:ca:
                    b2:f3:74:4e:d8:10:1a:01:69:7b:10:c9:7d:87:25:
                    2e:55:ff:cf:fe:40:09:07:47:bc:47:b1:37:49:7a:
                    24:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:99:27:28:C8:2E:3F:93:AC:82:51:9A:18:0C:E0:03:5D:F9:ED:1A
            X509v3 Authority Key Identifier:
                keyid:99:77:AC:70:85:D1:03:16:B3:F0:DD:A3:4A:29:E5:C2:10:EB:73:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99934E1E439A30E0877155EEA434E1D4AFB8782E07220C443A7411A27838BA8F/0/9977AC7085D10316B3F0DDA34A29E5C210EB7335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9977AC7085D10316B3F0DDA34A29E5C210EB7335.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99934E1E439A30E0877155EEA434E1D4AFB8782E07220C443A7411A27838BA8F/0/34352e3138302e32312e302f32342d3234203d3e20323733303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:a5:f3:c5:97:ba:53:1e:84:49:6c:f9:dc:d2:aa:ee:74:3f:
         5a:87:95:77:91:4b:49:32:7e:9c:7d:2b:bf:1e:92:8e:bb:54:
         37:cb:da:f3:40:60:48:71:56:93:f0:d4:a8:52:dc:63:e5:02:
         2d:be:39:63:9c:f7:1a:51:00:51:c1:4b:c0:b3:8d:2d:0d:46:
         c6:79:bb:5d:7a:26:57:d5:89:80:bb:e9:a0:30:cb:7c:26:bb:
         19:86:7e:b1:21:0a:f6:51:5a:b7:c7:c2:a7:60:72:18:16:83:
         27:f9:51:8c:41:df:47:38:5a:73:51:4b:b8:d0:40:3b:df:e7:
         a7:43:2a:ef:37:0f:3c:55:29:43:eb:80:95:b4:9f:53:46:a9:
         8c:b6:63:96:36:19:06:d6:ad:9d:15:fb:e7:37:85:cc:b7:32:
         d1:55:ee:50:65:6f:2d:3f:1e:6d:24:01:33:0e:bc:b5:ce:84:
         10:9a:98:3c:01:b8:d8:15:7a:1a:18:94:04:de:e7:db:4a:81:
         83:0f:3e:19:cc:99:2d:b0:b0:32:6b:4a:4a:f1:8b:f8:dd:67:
         75:21:0a:d6:41:ec:1d:06:79:f9:c9:dd:ee:58:b0:06:0b:60:
         46:36:bb:f1:10:eb:41:03:19:a3:2f:41:03:4f:f3:e2:09:53:
         42:8d:86:bc
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJKeFbs8zDDv1p3z1jZIjv8VAVSswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk3N0FDNzA4NUQxMDMxNkIzRjBEREEzNEEyOUU1QzIx
MEVCNzMzNTAeFw0yNDAzMDUxNzUwMTVaFw0yNTAzMDQxNzU1MTVaMDMxMTAvBgNV
BAMTKDM2OTkyNzI4QzgyRTNGOTNBQzgyNTE5QTE4MENFMDAzNURGOUVEMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBYI7pg9279Tyi+ZhmBULxwpQJ
h1vFCF9zz/ZOyNXS9fwyzlcnSDmyfbZXRLTcxm4JzEgAeZkqyb4oAqwuRCDFj4ZS
ZCaWE0cX4XbHkd694O4IJaom75UZ9KZR98gJU8Cztf72JkpnF2MApZThwq3+TlrU
Oy/6QSJvumSb+65rxk7e9yF9jvSbo9O6c2s2a/smXrA8za4f7v6M2FW9qEizPR4O
NkSE7dFskMtOZ5FtUZ55VAqC2V+WfhIzpnypJzKtekJpJ90JaG8WYOjUEv9bANfQ
kF9FhFxLnKLNSKA6yrLzdE7YEBoBaXsQyX2HJS5V/8/+QAkHR7xHsTdJeiTbAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUNpknKMguP5OsglGaGAzgA1357RowHwYDVR0j
BBgwFoAUmXescIXRAxaz8N2jSinlwhDrczUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85OTkzNEUxRTQzOUEzMEUwODc3MTU1RUVBNDM0RTFENEFG
Qjg3ODJFMDcyMjBDNDQzQTc0MTFBMjc4MzhCQThGLzAvOTk3N0FDNzA4NUQxMDMx
NkIzRjBEREEzNEEyOUU1QzIxMEVCNzMzNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OTc3QUM3MDg1RDEwMzE2QjNG
MEREQTM0QTI5RTVDMjEwRUI3MzM1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTk5MzRFMUU0MzlBMzBFMDg3NzE1NUVFQTQzNEUxRDRBRkI4NzgyRTA3
MjIwQzQ0M0E3NDExQTI3ODM4QkE4Ri8wLzM0MzUyZTMxMzgzMDJlMzIzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMzMwMzQzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC20FTAN
BgkqhkiG9w0BAQsFAAOCAQEAAKXzxZe6Ux6ESWz53NKq7nQ/WoeVd5FLSTJ+nH0r
vx6SjrtUN8va80BgSHFWk/DUqFLcY+UCLb45Y5z3GlEAUcFLwLONLQ1Gxnm7XXom
V9WJgLvpoDDLfCa7GYZ+sSEK9lFat8fCp2ByGBaDJ/lRjEHfRzhac1FLuNBAO9/n
p0Mq7zcPPFUpQ+uAlbSfU0apjLZjljYZBtatnRX75zeFzLcy0VXuUGVvLT8ebSQB
Mw68tc6EEJqYPAG42BV6GhiUBN7n20qBgw8+GcyZLbCwMmtKSvGL+N1ndSEK1kHs
HQZ5+cnd7liwBgtgRja78RDrQQMZoy9BA0/z4glTQo2GvA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:51 2024 by rpki-client on console-fra.rpki-client.org