Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99934E1E439A30E0877155EEA434E1D4AFB8782E07220C443A7411A27838BA8F/0/34352e3138322e3138392e302f32342d3234203d3e20323733303435.roa
File:                     34352e3138322e3138392e302f32342d3234203d3e20323733303435.roa (raw, json)
Hash identifier:          6J21cD8pyBggK3tLNwmuiMYhqD5HsejlWp/5sMQCeGo=
Subject key identifier:   A2:18:8F:54:F3:20:FF:C9:39:98:61:36:CA:8D:FD:83:34:23:D4:39
Certificate issuer:       /CN=9977AC7085D10316B3F0DDA34A29E5C210EB7335
Certificate serial:       646B7DC4AF194D76B6339DF64E46C9E1D871696E
Authority key identifier: 99:77:AC:70:85:D1:03:16:B3:F0:DD:A3:4A:29:E5:C2:10:EB:73:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9977AC7085D10316B3F0DDA34A29E5C210EB7335.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99934E1E439A30E0877155EEA434E1D4AFB8782E07220C443A7411A27838BA8F/0/34352e3138322e3138392e302f32342d3234203d3e20323733303435.roa
Signing time:             Tue 05 Mar 2024 17:55:15 +0000
ROA not before:           Tue 05 Mar 2024 17:50:15 +0000
ROA not after:            Tue 04 Mar 2025 17:55:15 +0000
asID:                     273045
IP address blocks:        45.182.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/99934E1E439A30E0877155EEA434E1D4AFB8782E07220C443A7411A27838BA8F/0/9977AC7085D10316B3F0DDA34A29E5C210EB7335.crl
                          rsync://repository.lacnic.net/rpki/lacnic/99934E1E439A30E0877155EEA434E1D4AFB8782E07220C443A7411A27838BA8F/0/9977AC7085D10316B3F0DDA34A29E5C210EB7335.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9977AC7085D10316B3F0DDA34A29E5C210EB7335.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:6b:7d:c4:af:19:4d:76:b6:33:9d:f6:4e:46:c9:e1:d8:71:69:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9977AC7085D10316B3F0DDA34A29E5C210EB7335
        Validity
            Not Before: Mar  5 17:50:15 2024 GMT
            Not After : Mar  4 17:55:15 2025 GMT
        Subject: CN=A2188F54F320FFC939986136CA8DFD833423D439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:97:08:96:83:96:85:74:76:78:f5:21:54:61:
                    ba:85:e3:0f:7e:64:f6:60:6a:86:d3:50:70:10:4d:
                    e3:3a:e9:ed:c7:cb:14:66:0d:53:a5:47:ec:80:d5:
                    41:dc:bf:56:be:83:e0:de:79:a0:d2:d0:12:8d:91:
                    cb:96:3a:6c:e7:7b:9e:9f:aa:07:df:e1:98:2c:0a:
                    15:59:65:b1:e6:9f:ba:8f:cb:08:81:74:1c:26:24:
                    5b:8c:b8:a5:5c:75:3e:10:e6:98:1d:10:99:01:97:
                    c4:2c:0c:52:40:eb:c0:60:02:14:f1:a7:d3:d1:19:
                    f8:fd:07:03:44:08:32:0d:36:e6:9d:b3:56:21:c2:
                    73:dc:c8:76:d8:fe:10:b5:81:2c:54:64:49:5c:27:
                    77:5a:c0:97:c7:6c:a8:ec:3a:16:3f:b6:4a:f7:55:
                    1a:33:52:54:8b:ae:e4:da:b5:6c:b7:e1:85:12:56:
                    e5:ed:da:92:2e:35:af:9c:e6:12:89:06:30:28:ad:
                    af:6a:aa:a6:88:23:cc:fa:e7:60:92:88:bb:06:38:
                    cd:23:0e:88:fe:4e:9a:48:ec:66:18:47:4a:5f:86:
                    bd:b7:1f:6c:f5:30:54:3a:15:f3:eb:f9:00:a6:db:
                    e2:86:7b:87:0a:93:c0:40:e7:6d:37:2e:b3:7e:92:
                    df:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:18:8F:54:F3:20:FF:C9:39:98:61:36:CA:8D:FD:83:34:23:D4:39
            X509v3 Authority Key Identifier:
                keyid:99:77:AC:70:85:D1:03:16:B3:F0:DD:A3:4A:29:E5:C2:10:EB:73:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99934E1E439A30E0877155EEA434E1D4AFB8782E07220C443A7411A27838BA8F/0/9977AC7085D10316B3F0DDA34A29E5C210EB7335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9977AC7085D10316B3F0DDA34A29E5C210EB7335.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99934E1E439A30E0877155EEA434E1D4AFB8782E07220C443A7411A27838BA8F/0/34352e3138322e3138392e302f32342d3234203d3e20323733303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:84:0d:b7:bf:f0:b6:04:27:98:e6:a5:d5:5d:f3:54:88:9b:
         2e:c5:de:35:1f:fc:b4:8d:e2:90:c2:2a:94:80:3f:5a:86:b7:
         00:6e:f4:74:9e:07:c6:42:9c:bb:c0:e8:9e:69:47:86:39:bb:
         7b:83:3a:a7:f3:57:10:9d:59:39:af:70:75:cb:81:96:26:e1:
         e1:86:37:d5:92:0d:e4:63:e1:1d:f6:f4:d9:20:a6:7b:d6:75:
         14:42:c4:63:ce:6c:28:fb:ff:cf:31:a7:a9:20:6b:5b:96:9f:
         05:df:46:0b:6b:94:b4:9a:27:f2:91:64:0a:16:65:5e:fd:fe:
         62:51:60:c6:2e:48:08:ab:4f:1d:33:59:e0:5e:f4:29:fa:28:
         c5:b1:1f:2e:b2:e2:a1:15:cd:07:98:77:b3:37:7b:f1:31:b6:
         0a:ee:2f:10:f8:aa:d2:0c:49:dc:73:ce:aa:9b:7d:c3:9b:e6:
         da:1e:5e:5c:c4:d0:1d:85:38:5e:f6:bf:18:b7:38:33:b4:42:
         23:07:1f:89:53:90:c2:c5:b7:dd:c1:0d:b3:ae:36:9f:8f:3a:
         4c:b8:02:fa:d8:82:1e:94:26:72:8c:30:d9:16:25:ef:df:90:
         e5:56:e7:fd:28:bb:86:2a:a0:dd:4c:b3:15:af:84:0d:9a:91:
         cb:ca:6d:7a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZGt9xK8ZTXa2M532TkbJ4dhxaW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk3N0FDNzA4NUQxMDMxNkIzRjBEREEzNEEyOUU1QzIx
MEVCNzMzNTAeFw0yNDAzMDUxNzUwMTVaFw0yNTAzMDQxNzU1MTVaMDMxMTAvBgNV
BAMTKEEyMTg4RjU0RjMyMEZGQzkzOTk4NjEzNkNBOERGRDgzMzQyM0Q0MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDflwiWg5aFdHZ49SFUYbqF4w9+
ZPZgaobTUHAQTeM66e3HyxRmDVOlR+yA1UHcv1a+g+DeeaDS0BKNkcuWOmzne56f
qgff4ZgsChVZZbHmn7qPywiBdBwmJFuMuKVcdT4Q5pgdEJkBl8QsDFJA68BgAhTx
p9PRGfj9BwNECDINNuads1YhwnPcyHbY/hC1gSxUZElcJ3dawJfHbKjsOhY/tkr3
VRozUlSLruTatWy34YUSVuXt2pIuNa+c5hKJBjAora9qqqaII8z652CSiLsGOM0j
Doj+TppI7GYYR0pfhr23H2z1MFQ6FfPr+QCm2+KGe4cKk8BA5203LrN+kt/VAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUohiPVPMg/8k5mGE2yo39gzQj1DkwHwYDVR0j
BBgwFoAUmXescIXRAxaz8N2jSinlwhDrczUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85OTkzNEUxRTQzOUEzMEUwODc3MTU1RUVBNDM0RTFENEFG
Qjg3ODJFMDcyMjBDNDQzQTc0MTFBMjc4MzhCQThGLzAvOTk3N0FDNzA4NUQxMDMx
NkIzRjBEREEzNEEyOUU1QzIxMEVCNzMzNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OTc3QUM3MDg1RDEwMzE2QjNG
MEREQTM0QTI5RTVDMjEwRUI3MzM1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTk5MzRFMUU0MzlBMzBFMDg3NzE1NUVFQTQzNEUxRDRBRkI4NzgyRTA3
MjIwQzQ0M0E3NDExQTI3ODM4QkE4Ri8wLzM0MzUyZTMxMzgzMjJlMzEzODM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzAzNDM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALba9
MA0GCSqGSIb3DQEBCwUAA4IBAQDBhA23v/C2BCeY5qXVXfNUiJsuxd41H/y0jeKQ
wiqUgD9ahrcAbvR0ngfGQpy7wOieaUeGObt7gzqn81cQnVk5r3B1y4GWJuHhhjfV
kg3kY+Ed9vTZIKZ71nUUQsRjzmwo+//PMaepIGtblp8F30YLa5S0mifykWQKFmVe
/f5iUWDGLkgIq08dM1ngXvQp+ijFsR8usuKhFc0HmHezN3vxMbYK7i8Q+KrSDEnc
c86qm33Dm+baHl5cxNAdhThe9r8YtzgztEIjBx+JU5DCxbfdwQ2zrjafjzpMuAL6
2IIelCZyjDDZFiXv35DlVuf9KLuGKqDdTLMVr4QNmpHLym16
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org