Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/34352e352e36342e302f32322d3232203d3e20333934343734.roa
File:                     34352e352e36342e302f32322d3232203d3e20333934343734.roa (raw, json)
Hash identifier:          r3QKyfXm7maBCxLRG/mMaFCu9PZp35e9Yv9nET1zS0o=
Subject key identifier:   D9:58:52:E6:90:1A:2A:90:DB:2B:79:A0:4F:BF:DE:8F:E0:08:35:49
Certificate issuer:       /CN=4CA91FFA6AE8A06F96A7F21B170F2E116200F977
Certificate serial:       244E5E684729997DE65A1652F5C15BE17631D6B7
Authority key identifier: 4C:A9:1F:FA:6A:E8:A0:6F:96:A7:F2:1B:17:0F:2E:11:62:00:F9:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/34352e352e36342e302f32322d3232203d3e20333934343734.roa
Signing time:             Tue 05 Mar 2024 18:14:46 +0000
ROA not before:           Tue 05 Mar 2024 18:09:46 +0000
ROA not after:            Tue 04 Mar 2025 18:14:46 +0000
asID:                     394474
IP address blocks:        45.5.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4e:5e:68:47:29:99:7d:e6:5a:16:52:f5:c1:5b:e1:76:31:d6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CA91FFA6AE8A06F96A7F21B170F2E116200F977
        Validity
            Not Before: Mar  5 18:09:46 2024 GMT
            Not After : Mar  4 18:14:46 2025 GMT
        Subject: CN=D95852E6901A2A90DB2B79A04FBFDE8FE0083549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:be:4e:00:2a:9b:ab:88:ec:24:25:2e:e0:b2:
                    ad:0d:dd:2e:18:53:77:79:a7:08:d5:8b:14:7c:10:
                    9a:7d:d5:33:f0:8d:ac:1a:be:94:53:a8:c9:fa:f5:
                    53:7e:78:d9:8c:f1:73:94:46:30:99:e5:e5:91:52:
                    6c:f3:ed:2f:39:a3:6c:45:8f:2d:71:d5:e4:75:70:
                    63:a2:69:31:0e:93:03:83:33:8d:06:62:af:f8:5f:
                    bb:c8:41:45:94:d8:76:78:92:01:9f:05:0e:d8:24:
                    48:9d:75:f5:c1:d0:3f:53:57:5e:d7:d6:05:f9:bd:
                    05:4b:20:c4:18:df:b3:01:4f:db:bf:92:fe:43:2c:
                    a7:e6:dc:7a:f3:cf:bf:41:63:75:96:96:a7:32:82:
                    da:56:25:4e:13:2b:a7:5a:f2:6a:4d:a1:07:ae:d4:
                    29:54:61:26:ce:92:52:62:01:d2:65:71:26:e4:e3:
                    43:92:56:5d:fe:9c:3f:ae:d7:75:58:26:25:b6:f3:
                    a4:f3:70:73:40:df:bb:64:78:84:91:4d:ce:c6:aa:
                    5f:d1:71:05:ff:df:25:2a:28:8e:8c:e3:67:f9:87:
                    cc:f5:68:04:3e:6e:d3:74:1c:eb:3a:f4:67:f4:67:
                    4b:7b:7e:c2:10:bb:88:01:fb:5e:48:7d:ea:00:36:
                    4d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:58:52:E6:90:1A:2A:90:DB:2B:79:A0:4F:BF:DE:8F:E0:08:35:49
            X509v3 Authority Key Identifier:
                keyid:4C:A9:1F:FA:6A:E8:A0:6F:96:A7:F2:1B:17:0F:2E:11:62:00:F9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/34352e352e36342e302f32322d3232203d3e20333934343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:c9:0f:24:fe:eb:46:85:bd:03:94:a3:23:84:41:a3:f9:b0:
         68:39:92:63:c0:c5:9c:61:1d:4b:91:e1:76:cf:d0:8d:5d:d6:
         bb:4e:63:fc:16:a6:47:9a:5f:0b:92:cd:ca:3c:5f:dd:5f:af:
         b5:eb:66:23:2f:9a:06:68:fa:ac:11:92:1f:56:41:92:7c:f1:
         59:33:f9:fb:fd:13:7b:37:0a:51:01:65:15:a0:00:70:25:0a:
         f6:a3:4f:72:09:65:da:ac:54:41:68:67:1f:12:4e:96:5a:c6:
         8c:a6:f2:44:6e:9f:91:fc:6b:d2:59:3a:54:54:50:a6:c1:11:
         dd:6d:39:48:c5:e8:ad:51:35:6a:87:06:b8:86:bc:4e:8f:40:
         6c:c1:75:28:a6:87:1f:50:70:ff:3f:0a:7f:99:a8:bc:75:d1:
         52:7d:c1:3d:b7:58:ed:10:97:c4:21:02:85:04:c5:ee:0e:86:
         54:df:83:b8:e4:50:e0:88:84:75:02:63:eb:3a:18:d3:3d:21:
         7d:cd:88:30:f9:dd:42:8f:40:49:9b:c6:b3:4a:b3:9a:e5:15:
         33:11:cd:52:43:9f:58:af:c9:e6:7c:4f:73:8d:a8:7d:5a:e0:
         e1:97:12:21:b2:94:8f:3c:62:6e:03:f9:4c:d2:c1:9a:89:09:
         d5:de:4d:9f
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUJE5eaEcpmX3mWhZS9cFb4XYx1rcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENBOTFGRkE2QUU4QTA2Rjk2QTdGMjFCMTcwRjJFMTE2
MjAwRjk3NzAeFw0yNDAzMDUxODA5NDZaFw0yNTAzMDQxODE0NDZaMDMxMTAvBgNV
BAMTKEQ5NTg1MkU2OTAxQTJBOTBEQjJCNzlBMDRGQkZERThGRTAwODM1NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUvk4AKpuriOwkJS7gsq0N3S4Y
U3d5pwjVixR8EJp91TPwjawavpRTqMn69VN+eNmM8XOURjCZ5eWRUmzz7S85o2xF
jy1x1eR1cGOiaTEOkwODM40GYq/4X7vIQUWU2HZ4kgGfBQ7YJEiddfXB0D9TV17X
1gX5vQVLIMQY37MBT9u/kv5DLKfm3Hrzz79BY3WWlqcygtpWJU4TK6da8mpNoQeu
1ClUYSbOklJiAdJlcSbk40OSVl3+nD+u13VYJiW286TzcHNA37tkeISRTc7Gql/R
cQX/3yUqKI6M42f5h8z1aAQ+btN0HOs69Gf0Z0t7fsIQu4gB+15IfeoANk1vAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU2VhS5pAaKpDbK3mgT7/ej+AINUkwHwYDVR0j
BBgwFoAUTKkf+mrooG+Wp/IbFw8uEWIA+XcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RUJCRTE1NzlBQkNCRjJFOEFDNDlEQzdBRDNENEQ5MzJF
RkZFRjZBMTgyNEI0MTZGMjg5QThBRjg4MDk3MzAxLzAvNENBOTFGRkE2QUU4QTA2
Rjk2QTdGMjFCMTcwRjJFMTE2MjAwRjk3Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Q0E5MUZGQTZBRThBMDZGOTZB
N0YyMUIxNzBGMkUxMTYyMDBGOTc3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUVCQkUxNTc5QUJDQkYyRThBQzQ5REM3QUQzRDREOTMyRUZGRUY2QTE4
MjRCNDE2RjI4OUE4QUY4ODA5NzMwMS8wLzM0MzUyZTM1MmUzNjM0MmUzMDJmMzIz
MjJkMzIzMjIwM2QzZTIwMzMzOTM0MzQzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQVAMA0GCSqG
SIb3DQEBCwUAA4IBAQC7yQ8k/utGhb0DlKMjhEGj+bBoOZJjwMWcYR1LkeF2z9CN
Xda7TmP8FqZHml8Lks3KPF/dX6+162YjL5oGaPqsEZIfVkGSfPFZM/n7/RN7NwpR
AWUVoABwJQr2o09yCWXarFRBaGcfEk6WWsaMpvJEbp+R/GvSWTpUVFCmwRHdbTlI
xeitUTVqhwa4hrxOj0BswXUopocfUHD/Pwp/mai8ddFSfcE9t1jtEJfEIQKFBMXu
DoZU34O45FDgiIR1AmPrOhjTPSF9zYgw+d1Cj0BJm8azSrOa5RUzEc1SQ59Yr8nm
fE9zjah9WuDhlxIhspSPPGJuA/lM0sGaiQnV3k2f
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:47 2024 by rpki-client on console-fra.rpki-client.org