Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9FA71B0940D35E413B729B99AFD8A0B7D3B95922121F2F7667C6C00C72749AC3/0/34352e342e3235322e302f32322d3234203d3e20323635363631.roa
File:                     34352e342e3235322e302f32322d3234203d3e20323635363631.roa (raw, json)
Hash identifier:          fvgbYsb7sSc/SikDcgtj44y+uOIqUybri3RPXUQ/QUo=
Subject key identifier:   7A:5D:56:04:FF:C9:FD:AF:C4:C2:19:EA:BA:E8:50:34:3C:7B:0C:FB
Certificate issuer:       /CN=526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9
Certificate serial:       3A45AA066B71F2266B6643860C71BA23CA08031A
Authority key identifier: 52:6F:6C:7C:CB:8D:09:09:9E:22:3D:97:E1:F2:B7:2D:F5:ED:EE:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9FA71B0940D35E413B729B99AFD8A0B7D3B95922121F2F7667C6C00C72749AC3/0/34352e342e3235322e302f32322d3234203d3e20323635363631.roa
Signing time:             Tue 05 Mar 2024 18:11:34 +0000
ROA not before:           Tue 05 Mar 2024 18:06:34 +0000
ROA not after:            Tue 04 Mar 2025 18:11:34 +0000
asID:                     265661
IP address blocks:        45.4.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9FA71B0940D35E413B729B99AFD8A0B7D3B95922121F2F7667C6C00C72749AC3/0/526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9FA71B0940D35E413B729B99AFD8A0B7D3B95922121F2F7667C6C00C72749AC3/0/526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:45:aa:06:6b:71:f2:26:6b:66:43:86:0c:71:ba:23:ca:08:03:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9
        Validity
            Not Before: Mar  5 18:06:34 2024 GMT
            Not After : Mar  4 18:11:34 2025 GMT
        Subject: CN=7A5D5604FFC9FDAFC4C219EABAE850343C7B0CFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e1:d4:e8:81:bb:52:25:95:06:db:f7:b7:db:
                    1c:07:c1:a9:57:8c:7e:b4:e5:28:ec:30:4c:23:6b:
                    3c:e6:74:1a:51:5d:17:32:15:7e:b5:4f:dd:ea:cc:
                    ce:ec:41:58:e6:d1:ef:b6:55:78:c2:e2:62:ba:55:
                    85:47:cc:c3:e2:de:57:19:b1:8b:57:a9:14:85:3c:
                    5d:c3:4f:37:a2:8c:27:f5:b8:fc:bc:ac:12:ca:51:
                    ce:ff:38:2d:14:27:1e:1e:ab:54:5e:1c:e7:6b:09:
                    05:3d:9f:15:07:f9:f6:74:92:62:e1:ab:0a:9f:b0:
                    f5:2b:ae:26:b9:d2:98:70:4e:52:30:81:aa:01:c9:
                    71:2a:75:c3:5e:e4:2b:4c:7d:3c:81:63:6e:e7:d6:
                    a1:fc:f9:fd:2d:87:08:7c:4b:ad:35:91:2d:b0:ec:
                    49:91:04:a8:b9:69:a8:c2:10:d0:56:fc:89:29:6e:
                    3d:eb:d1:26:ac:1f:41:bc:d9:38:69:c0:02:47:78:
                    01:ea:85:32:0a:6b:1e:1d:fd:ba:5d:7e:2c:f8:2d:
                    e7:25:f7:0b:55:e3:98:67:1d:bd:c1:50:ab:e6:4b:
                    b9:8b:e9:42:49:42:10:cb:a4:e2:f5:3e:0e:b1:d4:
                    32:ef:63:c2:01:4b:2b:92:f7:ef:b4:dc:da:8c:eb:
                    10:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5D:56:04:FF:C9:FD:AF:C4:C2:19:EA:BA:E8:50:34:3C:7B:0C:FB
            X509v3 Authority Key Identifier:
                keyid:52:6F:6C:7C:CB:8D:09:09:9E:22:3D:97:E1:F2:B7:2D:F5:ED:EE:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9FA71B0940D35E413B729B99AFD8A0B7D3B95922121F2F7667C6C00C72749AC3/0/526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9FA71B0940D35E413B729B99AFD8A0B7D3B95922121F2F7667C6C00C72749AC3/0/34352e342e3235322e302f32322d3234203d3e20323635363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:31:bd:0a:74:dd:e1:a1:f8:dd:c2:fb:07:0e:5c:b1:ef:5e:
         c2:a0:1f:f1:eb:fd:b1:9d:6f:fc:22:fd:84:5e:0e:e5:02:04:
         99:ba:e5:61:5b:dd:22:d7:62:8f:a2:0e:b9:c2:be:33:78:73:
         58:75:8a:be:f6:93:41:2d:12:6b:f7:4b:40:dc:81:c9:1e:36:
         e1:6c:52:44:0a:aa:c3:7b:eb:6b:1e:c6:27:7c:44:f4:4e:ec:
         d7:b5:f8:34:66:54:77:c2:0e:cb:87:93:8b:ca:2b:f9:8f:ee:
         01:46:3d:43:b8:0e:1a:ba:7d:e6:1e:ca:c5:4c:ca:2f:a7:80:
         31:3d:ba:c3:d4:a7:55:53:0b:9e:0c:e1:17:e9:1e:f4:01:bf:
         df:8d:50:f7:e1:ee:f3:ab:42:4e:10:b3:76:80:1d:c9:7a:20:
         f1:cd:e4:9f:44:ad:8b:a1:b4:76:31:f0:e7:c1:39:ba:18:79:
         f1:25:f9:1e:64:1b:26:cb:2d:62:67:44:a4:60:8b:7b:cd:21:
         6a:56:99:92:dc:8a:75:3d:9b:d7:63:b9:51:6c:a7:e6:d9:fd:
         e1:1d:28:48:7f:28:64:d4:5d:17:13:2f:55:0a:8c:a1:0d:2d:
         93:38:59:3b:80:cb:c4:fd:3b:9b:59:4b:59:af:58:30:38:e4:
         62:04:3a:00
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUOkWqBmtx8iZrZkOGDHG6I8oIAxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI2RjZDN0NDQjhEMDkwOTlFMjIzRDk3RTFGMkI3MkRG
NUVERUVDOTAeFw0yNDAzMDUxODA2MzRaFw0yNTAzMDQxODExMzRaMDMxMTAvBgNV
BAMTKDdBNUQ1NjA0RkZDOUZEQUZDNEMyMTlFQUJBRTg1MDM0M0M3QjBDRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW4dTogbtSJZUG2/e32xwHwalX
jH605SjsMEwjazzmdBpRXRcyFX61T93qzM7sQVjm0e+2VXjC4mK6VYVHzMPi3lcZ
sYtXqRSFPF3DTzeijCf1uPy8rBLKUc7/OC0UJx4eq1ReHOdrCQU9nxUH+fZ0kmLh
qwqfsPUrria50phwTlIwgaoByXEqdcNe5CtMfTyBY27n1qH8+f0thwh8S601kS2w
7EmRBKi5aajCENBW/Ikpbj3r0SasH0G82ThpwAJHeAHqhTIKax4d/bpdfiz4Lecl
9wtV45hnHb3BUKvmS7mL6UJJQhDLpOL1Pg6x1DLvY8IBSyuS9++03NqM6xD7AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUel1WBP/J/a/EwhnquuhQNDx7DPswHwYDVR0j
BBgwFoAUUm9sfMuNCQmeIj2X4fK3LfXt7skwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RkE3MUIwOTQwRDM1RTQxM0I3MjlCOTlBRkQ4QTBCN0Qz
Qjk1OTIyMTIxRjJGNzY2N0M2QzAwQzcyNzQ5QUMzLzAvNTI2RjZDN0NDQjhEMDkw
OTlFMjIzRDk3RTFGMkI3MkRGNUVERUVDOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MjZGNkM3Q0NCOEQwOTA5OUUy
MjNEOTdFMUYyQjcyREY1RURFRUM5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUZBNzFCMDk0MEQzNUU0MTNCNzI5Qjk5QUZEOEEwQjdEM0I5NTkyMjEy
MUYyRjc2NjdDNkMwMEM3Mjc0OUFDMy8wLzM0MzUyZTM0MmUzMjM1MzIyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMjM2MzUzNjM2MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItBPwwDQYJ
KoZIhvcNAQELBQADggEBAAsxvQp03eGh+N3C+wcOXLHvXsKgH/Hr/bGdb/wi/YRe
DuUCBJm65WFb3SLXYo+iDrnCvjN4c1h1ir72k0EtEmv3S0DcgckeNuFsUkQKqsN7
62sexid8RPRO7Ne1+DRmVHfCDsuHk4vKK/mP7gFGPUO4Dhq6feYeysVMyi+ngDE9
usPUp1VTC54M4RfpHvQBv9+NUPfh7vOrQk4Qs3aAHcl6IPHN5J9ErYuhtHYx8OfB
OboYefEl+R5kGybLLWJnRKRgi3vNIWpWmZLcinU9m9djuVFsp+bZ/eEdKEh/KGTU
XRcTL1UKjKENLZM4WTuAy8T9O5tZS1mvWDA45GIEOgA=
-----END CERTIFICATE-----
Generated at Sat May 11 09:10:40 2024 by rpki-client on console-fra.rpki-client.org