Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/34352e3139302e38362e302f32342d3234203d3e20323639383933.roa
File:                     34352e3139302e38362e302f32342d3234203d3e20323639383933.roa (raw, json)
Hash identifier:          JvmytwBKW9WYNASAVvUVaSoKGDYB640UxyJJZRzTioA=
Subject key identifier:   38:B8:7C:42:AF:D1:C9:98:7C:EA:F3:66:23:C9:4B:D2:D9:41:14:A7
Certificate issuer:       /CN=97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1
Certificate serial:       1729016E2CB0363E9D35C8C351ED5D3AAA550515
Authority key identifier: 97:89:9A:48:49:F5:51:BB:C2:F4:F8:70:F0:EC:EA:5A:66:BB:B7:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/34352e3139302e38362e302f32342d3234203d3e20323639383933.roa
Signing time:             Tue 05 Mar 2024 18:11:55 +0000
ROA not before:           Tue 05 Mar 2024 18:06:55 +0000
ROA not after:            Tue 04 Mar 2025 18:11:55 +0000
asID:                     269893
IP address blocks:        45.190.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:29:01:6e:2c:b0:36:3e:9d:35:c8:c3:51:ed:5d:3a:aa:55:05:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1
        Validity
            Not Before: Mar  5 18:06:55 2024 GMT
            Not After : Mar  4 18:11:55 2025 GMT
        Subject: CN=38B87C42AFD1C9987CEAF36623C94BD2D94114A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:75:bc:48:53:0c:4b:14:50:ca:4e:1a:a8:52:
                    9f:e5:a1:13:34:a1:96:a7:81:dd:6b:34:fc:44:a1:
                    62:50:bc:ce:b5:45:f9:1a:41:62:28:d3:32:70:dd:
                    8d:40:9f:13:1d:d9:4a:3f:32:26:26:f3:82:42:1c:
                    40:ea:94:d6:f8:b4:dc:0c:64:9d:3a:34:92:a1:34:
                    a8:76:ab:fe:5f:ea:3b:78:c1:7e:1b:fe:bc:a5:87:
                    d6:1c:32:ef:b2:79:b6:ef:b3:32:d6:2d:2c:85:19:
                    2c:6b:d1:1a:ff:9a:e3:b1:21:40:ca:fc:f2:ef:df:
                    ca:50:af:fd:10:73:88:9f:12:77:51:78:65:67:9f:
                    0a:fd:8d:bc:82:b0:a3:06:2f:b5:d2:f0:46:6e:41:
                    fa:04:aa:e5:cc:5c:45:74:31:49:ce:ad:61:18:8a:
                    ff:af:73:1a:51:1f:de:8d:f5:a2:9b:71:da:27:68:
                    f0:e1:6a:8d:25:49:bb:9c:55:0d:b1:51:88:82:a5:
                    9b:e2:10:bb:0c:fc:f5:1d:f4:9b:30:35:a5:70:5e:
                    82:92:a8:c5:4a:7f:9a:6f:5e:5c:78:74:8e:d8:e9:
                    5c:ec:25:bd:b7:fd:fc:a3:56:8d:25:44:79:bf:7b:
                    56:e7:3a:f9:7a:59:f8:ac:2b:65:f9:e8:02:39:13:
                    7b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B8:7C:42:AF:D1:C9:98:7C:EA:F3:66:23:C9:4B:D2:D9:41:14:A7
            X509v3 Authority Key Identifier:
                keyid:97:89:9A:48:49:F5:51:BB:C2:F4:F8:70:F0:EC:EA:5A:66:BB:B7:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/34352e3139302e38362e302f32342d3234203d3e20323639383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:79:fa:54:68:bc:cf:27:e4:0c:4d:eb:f6:b2:75:4c:00:d3:
         55:83:5e:a9:2b:bc:0c:a3:4c:8a:1b:a5:60:b2:32:82:ae:43:
         49:11:98:5d:6a:27:82:64:88:4c:7e:96:e1:2d:e4:b8:e4:96:
         83:99:23:80:fa:c0:26:93:85:a9:0f:b5:81:48:fd:fe:c5:c6:
         6f:fd:cf:07:69:e1:dd:db:23:2e:59:9e:5d:da:1e:14:f1:03:
         0b:fd:14:60:c5:3f:5b:61:82:97:7d:fb:6f:a8:d4:bb:03:86:
         77:2c:46:f5:97:32:07:8d:ef:76:28:c1:30:a7:79:fa:0e:a1:
         1e:67:67:ae:5b:94:86:d0:26:bf:dc:30:33:2c:79:3f:51:62:
         03:01:c2:e3:c6:12:5e:ab:e5:f8:96:65:bb:0c:6f:c3:d3:fc:
         1e:13:39:42:94:9d:35:a6:5a:f8:a5:91:71:76:0d:e4:47:13:
         8c:93:cf:aa:d7:f9:ad:7e:6c:a4:ed:da:88:48:1b:23:85:26:
         db:ad:2c:d9:84:16:a9:44:e3:1b:cd:73:13:c3:93:49:ea:6c:
         c4:70:e6:fe:67:3a:c9:2a:48:ab:6e:e5:e4:0c:21:b7:14:e9:
         23:e5:d0:c6:3b:48:ef:0b:b2:ea:fc:37:01:27:b7:d0:d5:83:
         33:e2:0f:e7
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFykBbiywNj6dNcjDUe1dOqpVBRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc4OTlBNDg0OUY1NTFCQkMyRjRGODcwRjBFQ0VBNUE2
NkJCQjdGMTAeFw0yNDAzMDUxODA2NTVaFw0yNTAzMDQxODExNTVaMDMxMTAvBgNV
BAMTKDM4Qjg3QzQyQUZEMUM5OTg3Q0VBRjM2NjIzQzk0QkQyRDk0MTE0QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtdbxIUwxLFFDKThqoUp/loRM0
oZangd1rNPxEoWJQvM61RfkaQWIo0zJw3Y1AnxMd2Uo/MiYm84JCHEDqlNb4tNwM
ZJ06NJKhNKh2q/5f6jt4wX4b/rylh9YcMu+yebbvszLWLSyFGSxr0Rr/muOxIUDK
/PLv38pQr/0Qc4ifEndReGVnnwr9jbyCsKMGL7XS8EZuQfoEquXMXEV0MUnOrWEY
iv+vcxpRH96N9aKbcdonaPDhao0lSbucVQ2xUYiCpZviELsM/PUd9JswNaVwXoKS
qMVKf5pvXlx4dI7Y6VzsJb23/fyjVo0lRHm/e1bnOvl6WfisK2X56AI5E3slAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUOLh8Qq/RyZh86vNmI8lL0tlBFKcwHwYDVR0j
BBgwFoAUl4maSEn1UbvC9Phw8OzqWma7t/EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RUUwOEFBNzZFRjdBRTRFRjQ3QUI2Q0Y1NjkyNERGOTcw
QUJDMUI0MERGRTM3NEIwMzJEMDVGNkJFQTUwQ0ZCLzAvOTc4OTlBNDg0OUY1NTFC
QkMyRjRGODcwRjBFQ0VBNUE2NkJCQjdGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85Nzg5OUE0ODQ5RjU1MUJCQzJG
NEY4NzBGMEVDRUE1QTY2QkJCN0YxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUVFMDhBQTc2RUY3QUU0RUY0N0FCNkNGNTY5MjRERjk3MEFCQzFCNDBE
RkUzNzRCMDMyRDA1RjZCRUE1MENGQi8wLzM0MzUyZTMxMzkzMDJlMzgzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTM4MzkzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2+VjAN
BgkqhkiG9w0BAQsFAAOCAQEAd3n6VGi8zyfkDE3r9rJ1TADTVYNeqSu8DKNMihul
YLIygq5DSRGYXWongmSITH6W4S3kuOSWg5kjgPrAJpOFqQ+1gUj9/sXGb/3PB2nh
3dsjLlmeXdoeFPEDC/0UYMU/W2GCl337b6jUuwOGdyxG9ZcyB43vdijBMKd5+g6h
HmdnrluUhtAmv9wwMyx5P1FiAwHC48YSXqvl+JZluwxvw9P8HhM5QpSdNaZa+KWR
cXYN5EcTjJPPqtf5rX5spO3aiEgbI4Um260s2YQWqUTjG81zE8OTSepsxHDm/mc6
ySpIq27l5AwhtxTpI+XQxjtI7wuy6vw3ASe30NWDM+IP5w==
-----END CERTIFICATE-----
Generated at Fri May 3 12:58:08 2024 by rpki-client on console-ams.rpki-client.org