Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3138362e3130342e302f32342d3234203d3e20323635363834.roa
File:                     34352e3138362e3130342e302f32342d3234203d3e20323635363834.roa (raw, json)
Hash identifier:          aItei30Bk5SdS4D/xywM1JWQfsGcgCGdd4D8+GHmufI=
Subject key identifier:   F5:EE:02:C2:18:EC:45:3A:25:E5:89:14:92:B3:B2:C0:8B:B8:AB:8E
Certificate issuer:       /CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
Certificate serial:       06800F9EB94C040DC38E2F064535EA4AC7149846
Authority key identifier: F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3138362e3130342e302f32342d3234203d3e20323635363834.roa
Signing time:             Thu 21 Mar 2024 19:15:01 +0000
ROA not before:           Thu 21 Mar 2024 19:10:01 +0000
ROA not after:            Thu 20 Mar 2025 19:15:01 +0000
asID:                     265684
IP address blocks:        45.186.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:80:0f:9e:b9:4c:04:0d:c3:8e:2f:06:45:35:ea:4a:c7:14:98:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
        Validity
            Not Before: Mar 21 19:10:01 2024 GMT
            Not After : Mar 20 19:15:01 2025 GMT
        Subject: CN=F5EE02C218EC453A25E5891492B3B2C08BB8AB8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c3:d6:61:97:cd:e1:6a:52:03:35:64:d3:c4:
                    08:e2:84:7e:95:8f:4d:42:38:c8:3a:00:d5:6a:9f:
                    49:06:7c:da:4f:02:39:20:b1:af:b9:f4:c2:da:96:
                    63:ff:05:73:6b:1b:62:3c:58:36:18:84:de:dd:4a:
                    f2:99:dd:22:f8:0c:c7:1e:e5:5c:7d:69:10:37:ca:
                    ff:27:ae:41:49:c0:a4:84:d0:22:6e:6a:99:ae:54:
                    2a:27:c1:84:3a:83:67:9f:cf:25:f1:8e:14:8b:94:
                    f4:bd:91:a6:60:4b:cb:cc:15:11:8e:b4:7f:9c:06:
                    1b:e4:55:02:52:18:e4:f2:84:6b:19:b9:70:7a:b9:
                    8d:e0:95:32:da:fb:ed:9f:51:6c:b9:a8:94:fc:70:
                    4e:27:15:75:a4:61:ec:03:f1:e8:a0:b6:b3:3c:4d:
                    9d:fc:11:5f:ea:cd:4c:bb:87:f3:f3:4b:a3:ec:1e:
                    83:9f:24:09:b8:8d:4a:fa:30:2a:49:f5:e0:21:bb:
                    3f:0f:08:55:30:e0:db:e4:7d:01:73:a4:8c:67:fc:
                    34:89:25:97:ec:09:1e:7a:ae:a3:4b:6a:74:00:e7:
                    35:35:ac:ed:be:1a:76:66:bc:04:52:46:ba:bf:f0:
                    5b:72:84:c6:aa:d7:9a:ce:ee:58:d7:8a:51:dd:29:
                    32:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EE:02:C2:18:EC:45:3A:25:E5:89:14:92:B3:B2:C0:8B:B8:AB:8E
            X509v3 Authority Key Identifier:
                keyid:F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3138362e3130342e302f32342d3234203d3e20323635363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:ba:72:e7:f4:2b:43:21:3f:c6:ab:23:68:ed:1b:24:e2:df:
         1d:d0:77:df:db:2b:d9:79:ba:a0:ec:34:80:a5:bc:52:62:73:
         0d:b5:69:45:48:98:b5:ee:e0:c9:dd:2b:42:2b:91:6e:52:a6:
         c4:f9:bd:d4:ec:4c:ca:f0:38:ea:39:fb:57:76:66:e1:3e:99:
         0b:cd:dd:6c:72:a2:78:34:d8:28:01:b8:f7:82:68:3d:dd:06:
         e6:03:22:c5:a6:f0:2d:cc:df:d6:2d:8b:35:c1:34:32:67:a8:
         9e:f5:6d:84:c6:0f:44:96:da:3e:cc:99:76:57:05:c4:3d:42:
         f0:7f:e9:7f:99:ab:d5:0d:7f:60:ce:e3:c1:6d:ab:81:7c:7d:
         b9:b0:81:59:88:9f:b8:d0:b4:39:91:dc:14:1a:16:be:3b:36:
         2e:a8:82:28:3a:14:19:82:f7:61:df:9b:6a:ce:db:5a:3c:0a:
         07:3f:f1:20:bb:1a:c1:7b:d5:11:0e:ad:ab:2c:79:01:99:4a:
         63:c7:d1:6c:7d:48:08:74:5a:bc:63:0a:a9:44:26:c5:57:4c:
         de:2e:bf:6b:d5:84:e9:37:09:7e:80:e7:4e:73:99:2d:36:24:
         c4:4c:05:41:7c:dc:68:c8:05:47:d3:94:3a:e2:c8:08:b3:59:
         5c:dd:82:da
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUBoAPnrlMBA3Dji8GRTXqSscUmEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA0RTYyRjQyRThDNzU0MTMyQzQxMzc1MjE4NzNDRkNF
M0MyQkI0ODAeFw0yNDAzMjExOTEwMDFaFw0yNTAzMjAxOTE1MDFaMDMxMTAvBgNV
BAMTKEY1RUUwMkMyMThFQzQ1M0EyNUU1ODkxNDkyQjNCMkMwOEJCOEFCOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3w9Zhl83halIDNWTTxAjihH6V
j01COMg6ANVqn0kGfNpPAjkgsa+59MLalmP/BXNrG2I8WDYYhN7dSvKZ3SL4DMce
5Vx9aRA3yv8nrkFJwKSE0CJuapmuVConwYQ6g2efzyXxjhSLlPS9kaZgS8vMFRGO
tH+cBhvkVQJSGOTyhGsZuXB6uY3glTLa++2fUWy5qJT8cE4nFXWkYewD8eigtrM8
TZ38EV/qzUy7h/PzS6PsHoOfJAm4jUr6MCpJ9eAhuz8PCFUw4NvkfQFzpIxn/DSJ
JZfsCR56rqNLanQA5zU1rO2+GnZmvARSRrq/8FtyhMaq15rO7ljXilHdKTLFAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU9e4CwhjsRTol5YkUkrOywIu4q44wHwYDVR0j
BBgwFoAU8E5i9C6MdUEyxBN1IYc8/OPCu0gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85REQwOEI1NDU4M0U0MkI0Nzc2MkE0QTlCQjA0MjMyOTAx
N0ZEQjQ0NTRFQzExNDNBN0E2MjU1RDNBOTdFQjM2LzAvRjA0RTYyRjQyRThDNzU0
MTMyQzQxMzc1MjE4NzNDRkNFM0MyQkI0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMDRFNjJGNDJFOEM3NTQxMzJD
NDEzNzUyMTg3M0NGQ0UzQzJCQjQ4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUREMDhCNTQ1ODNFNDJCNDc3NjJBNEE5QkIwNDIzMjkwMTdGREI0NDU0
RUMxMTQzQTdBNjI1NUQzQTk3RUIzNi8wLzM0MzUyZTMxMzgzNjJlMzEzMDM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzODM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALbpo
MA0GCSqGSIb3DQEBCwUAA4IBAQBsunLn9CtDIT/GqyNo7Rsk4t8d0Hff2yvZebqg
7DSApbxSYnMNtWlFSJi17uDJ3StCK5FuUqbE+b3U7EzK8DjqOftXdmbhPpkLzd1s
cqJ4NNgoAbj3gmg93QbmAyLFpvAtzN/WLYs1wTQyZ6ie9W2Exg9Elto+zJl2VwXE
PULwf+l/mavVDX9gzuPBbauBfH25sIFZiJ+40LQ5kdwUGha+OzYuqIIoOhQZgvdh
35tqzttaPAoHP/EguxrBe9URDq2rLHkBmUpjx9FsfUgIdFq8YwqpRCbFV0zeLr9r
1YTpNwl+gOdOc5ktNiTETAVBfNxoyAVH05Q64sgIs1lc3YLa
-----END CERTIFICATE-----
Generated at Thu May 9 18:11:59 2024 by rpki-client on console-fra.rpki-client.org