Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/34352e3136372e3135382e302f32342d3234203d3e20323633313537.roa
File:                     34352e3136372e3135382e302f32342d3234203d3e20323633313537.roa (raw, json)
Hash identifier:          3un30dI3HzTJMUgmIyGdI0pBaNPdVomHuMofsErhAyQ=
Subject key identifier:   57:E2:71:DD:76:90:68:AE:C5:0A:B5:B1:3F:DC:A5:70:99:A6:09:F4
Certificate issuer:       /CN=097FC81A5EA49A88FF4BBF238B0B99886A82A6A4
Certificate serial:       502B6CC145590F0C63466B4B195DCA577707F697
Authority key identifier: 09:7F:C8:1A:5E:A4:9A:88:FF:4B:BF:23:8B:0B:99:88:6A:82:A6:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/34352e3136372e3135382e302f32342d3234203d3e20323633313537.roa
Signing time:             Tue 05 Mar 2024 17:50:18 +0000
ROA not before:           Tue 05 Mar 2024 17:45:18 +0000
ROA not after:            Tue 04 Mar 2025 17:50:18 +0000
asID:                     263157
IP address blocks:        45.167.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2b:6c:c1:45:59:0f:0c:63:46:6b:4b:19:5d:ca:57:77:07:f6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097FC81A5EA49A88FF4BBF238B0B99886A82A6A4
        Validity
            Not Before: Mar  5 17:45:18 2024 GMT
            Not After : Mar  4 17:50:18 2025 GMT
        Subject: CN=57E271DD769068AEC50AB5B13FDCA57099A609F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5c:6e:29:da:ea:90:6e:80:5d:4e:2d:fd:58:
                    62:42:cd:2e:0d:14:3a:7d:45:99:52:a5:dc:f9:f9:
                    d1:20:47:a9:c7:9d:50:92:c5:d3:ad:3c:eb:49:18:
                    e8:69:60:18:d4:8e:54:e0:40:f6:cf:49:d1:b8:ca:
                    d9:fb:5c:36:3c:87:92:41:fd:41:44:0f:39:d8:e6:
                    02:15:e7:68:25:46:35:4b:a0:2a:13:94:9b:56:47:
                    b9:4e:9e:b7:0b:e9:7c:31:18:bc:c8:55:ef:18:2a:
                    ae:ff:9c:94:2b:b4:1d:7f:be:8d:aa:18:f3:15:b7:
                    8e:dc:2c:11:c9:2d:cc:de:b5:5a:8d:b5:4a:71:0f:
                    37:97:b4:e8:0f:cf:f4:a7:50:7b:78:90:55:ee:c3:
                    57:b8:38:7f:0b:02:64:b2:5c:f0:0c:fa:a9:55:9b:
                    c9:62:f3:bb:8b:1d:b7:b2:40:08:90:6f:81:3c:2a:
                    fc:8e:18:e3:9c:d3:7f:ad:6b:e4:eb:6e:d5:68:f0:
                    5b:b0:01:8f:93:d8:b2:0b:a2:6b:b3:d5:ed:37:58:
                    a5:26:44:25:5f:99:af:02:ae:d0:b7:2d:0f:38:7b:
                    4e:e1:e0:15:90:5a:13:76:a9:c7:af:d2:0e:99:c9:
                    ea:a8:16:36:19:98:24:11:e7:24:6f:73:f8:27:87:
                    62:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E2:71:DD:76:90:68:AE:C5:0A:B5:B1:3F:DC:A5:70:99:A6:09:F4
            X509v3 Authority Key Identifier:
                keyid:09:7F:C8:1A:5E:A4:9A:88:FF:4B:BF:23:8B:0B:99:88:6A:82:A6:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/34352e3136372e3135382e302f32342d3234203d3e20323633313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:c3:49:c3:a5:8b:81:04:f0:39:0f:cd:bb:7f:07:85:f9:8d:
         51:0b:57:f6:3a:ca:b9:57:72:e7:15:a0:56:64:81:a3:ec:ef:
         e1:63:74:8a:83:a4:a8:73:fc:48:ff:6c:60:43:4e:65:55:bb:
         85:25:bc:a8:50:9b:ba:5e:77:68:95:97:9b:65:b9:8f:e1:a9:
         ae:88:c7:65:bc:28:32:29:a8:a1:a2:eb:01:75:e3:57:c7:80:
         77:bb:68:34:fd:b0:0f:0d:ce:f4:63:74:d7:2d:05:28:a8:c8:
         41:f4:3e:53:9e:f7:51:69:0d:8b:0e:44:87:1b:70:63:a8:e0:
         1f:b9:8c:44:3d:9d:c4:11:a8:0a:a6:bc:da:da:09:05:07:85:
         1c:3e:73:5f:e1:af:4c:68:20:0f:fb:9d:c8:7a:1d:ea:05:7f:
         2b:c7:15:55:b8:9c:22:b7:93:5e:e3:bb:df:04:3d:84:fc:af:
         2e:b8:f9:d4:d0:fe:17:ad:a7:3a:29:43:34:32:95:d7:ff:3d:
         76:20:32:f5:7b:6c:0d:d2:2f:0f:54:16:9d:1e:1a:b5:f3:ac:
         98:72:97:b8:92:1d:75:37:3a:50:8a:1e:a4:de:f8:a7:47:56:
         97:10:4f:8e:cc:88:c6:3a:ee:6f:55:a1:a7:1b:72:ed:dc:ae:
         aa:3c:cb:58
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUCtswUVZDwxjRmtLGV3KV3cH9pcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3RkM4MUE1RUE0OUE4OEZGNEJCRjIzOEIwQjk5ODg2
QTgyQTZBNDAeFw0yNDAzMDUxNzQ1MThaFw0yNTAzMDQxNzUwMThaMDMxMTAvBgNV
BAMTKDU3RTI3MURENzY5MDY4QUVDNTBBQjVCMTNGRENBNTcwOTlBNjA5RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHXG4p2uqQboBdTi39WGJCzS4N
FDp9RZlSpdz5+dEgR6nHnVCSxdOtPOtJGOhpYBjUjlTgQPbPSdG4ytn7XDY8h5JB
/UFEDznY5gIV52glRjVLoCoTlJtWR7lOnrcL6XwxGLzIVe8YKq7/nJQrtB1/vo2q
GPMVt47cLBHJLczetVqNtUpxDzeXtOgPz/SnUHt4kFXuw1e4OH8LAmSyXPAM+qlV
m8li87uLHbeyQAiQb4E8KvyOGOOc03+ta+TrbtVo8FuwAY+T2LILomuz1e03WKUm
RCVfma8CrtC3LQ84e07h4BWQWhN2qcev0g6ZyeqoFjYZmCQR5yRvc/gnh2IBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUV+Jx3XaQaK7FCrWxP9ylcJmmCfQwHwYDVR0j
BBgwFoAUCX/IGl6kmoj/S78jiwuZiGqCpqQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85Qzk5MjMxNTgwQkQ2OUI5NUY4NTI3MkQxMzczNENDODRE
OUVDNjVBMzlBQjkzNEY0ODUyQTYxRUFGOTc1NjA2LzAvMDk3RkM4MUE1RUE0OUE4
OEZGNEJCRjIzOEIwQjk5ODg2QTgyQTZBNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOTdGQzgxQTVFQTQ5QTg4RkY0
QkJGMjM4QjBCOTk4ODZBODJBNkE0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUM5OTIzMTU4MEJENjlCOTVGODUyNzJEMTM3MzRDQzg0RDlFQzY1QTM5
QUI5MzRGNDg1MkE2MUVBRjk3NTYwNi8wLzM0MzUyZTMxMzYzNzJlMzEzNTM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzEzNTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALaee
MA0GCSqGSIb3DQEBCwUAA4IBAQA4w0nDpYuBBPA5D827fweF+Y1RC1f2Osq5V3Ln
FaBWZIGj7O/hY3SKg6Soc/xI/2xgQ05lVbuFJbyoUJu6XndolZebZbmP4amuiMdl
vCgyKaihousBdeNXx4B3u2g0/bAPDc70Y3TXLQUoqMhB9D5TnvdRaQ2LDkSHG3Bj
qOAfuYxEPZ3EEagKprza2gkFB4UcPnNf4a9MaCAP+53Ieh3qBX8rxxVVuJwit5Ne
47vfBD2E/K8uuPnU0P4Xrac6KUM0MpXX/z12IDL1e2wN0i8PVBadHhq186yYcpe4
kh11NzpQih6k3vinR1aXEE+OzIjGOu5vVaGnG3Lt3K6qPMtY
-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:06 2024 by rpki-client on console-ams.rpki-client.org