Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/34352e3137342e37362e302f32322d3234203d3e203238343331.roa
File:                     34352e3137342e37362e302f32322d3234203d3e203238343331.roa (raw, json)
Hash identifier:          BcC7EWrNG7l6NuTsOum8/iyT+8+k7Huck3SuhRsufyk=
Subject key identifier:   2C:FB:E7:F8:B2:1E:2E:C4:79:2A:91:55:B7:34:0A:3A:41:BA:2C:53
Certificate issuer:       /CN=EB0BD38ABAB80DF9290FB741AFACC631740FA7E9
Certificate serial:       60B194C3EE7D6E50DC0317AD69181B8C7C844062
Authority key identifier: EB:0B:D3:8A:BA:B8:0D:F9:29:0F:B7:41:AF:AC:C6:31:74:0F:A7:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/34352e3137342e37362e302f32322d3234203d3e203238343331.roa
Signing time:             Tue 05 Mar 2024 18:01:04 +0000
ROA not before:           Tue 05 Mar 2024 17:56:04 +0000
ROA not after:            Tue 04 Mar 2025 18:01:04 +0000
asID:                     28431
IP address blocks:        45.174.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b1:94:c3:ee:7d:6e:50:dc:03:17:ad:69:18:1b:8c:7c:84:40:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB0BD38ABAB80DF9290FB741AFACC631740FA7E9
        Validity
            Not Before: Mar  5 17:56:04 2024 GMT
            Not After : Mar  4 18:01:04 2025 GMT
        Subject: CN=2CFBE7F8B21E2EC4792A9155B7340A3A41BA2C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c8:2b:07:fe:18:43:36:dc:b2:dd:64:52:dd:
                    cc:89:b7:7a:92:30:cd:fd:41:99:a7:d8:22:7a:9c:
                    6a:9d:17:0b:ff:fd:b7:7b:ec:51:aa:07:15:19:90:
                    c0:c5:52:06:e0:29:45:15:c1:29:ef:50:88:0f:c0:
                    de:b6:c6:43:ae:1f:f3:6c:80:cf:13:02:c8:03:cb:
                    8d:08:9b:64:a9:d7:90:0f:bd:f6:7c:42:c5:6b:70:
                    2e:81:ea:77:c1:9d:e1:21:38:d1:19:de:8c:7b:e3:
                    c1:31:75:eb:0b:a2:9a:b0:cf:f9:76:82:ea:d0:7f:
                    b3:c6:86:0d:af:a4:e9:3c:d4:ae:9c:9f:24:68:71:
                    a3:1e:4b:7d:23:3d:88:6d:ce:40:26:c7:9b:f7:db:
                    bc:44:02:69:65:af:a7:9e:f5:ff:0e:e8:24:38:0a:
                    3f:0f:70:cf:bb:40:58:34:2f:f3:15:09:e2:ae:a8:
                    ae:ef:ce:f7:13:34:28:72:ae:6d:2f:fb:cc:88:54:
                    cd:14:a6:12:77:ca:fd:43:54:c0:a0:de:0b:51:af:
                    7a:68:65:95:d9:d3:77:2c:ff:8b:ab:b6:f4:7c:f8:
                    6b:45:e3:9a:22:78:21:4d:da:2d:63:84:d7:d6:85:
                    bc:2d:c6:34:34:72:40:ea:30:01:f8:a1:4e:54:07:
                    bd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FB:E7:F8:B2:1E:2E:C4:79:2A:91:55:B7:34:0A:3A:41:BA:2C:53
            X509v3 Authority Key Identifier:
                keyid:EB:0B:D3:8A:BA:B8:0D:F9:29:0F:B7:41:AF:AC:C6:31:74:0F:A7:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/34352e3137342e37362e302f32322d3234203d3e203238343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:4c:6c:44:f8:71:c4:8e:ef:0e:10:bf:e5:40:5f:bb:ba:a1:
         7c:c4:c6:3e:ad:98:7d:48:4d:79:62:38:5f:3b:2a:30:d2:e4:
         4c:d1:6c:63:24:ed:69:f8:bf:e6:a7:44:52:74:74:0a:2d:0f:
         d4:0b:10:09:d1:ab:41:3d:ca:83:32:7b:37:69:6f:a4:e4:f8:
         92:05:07:3f:c7:17:94:26:9b:29:1d:9e:76:1e:ad:07:8e:f7:
         06:79:ad:32:a8:9d:9d:88:dc:a6:7e:c4:ed:d7:d3:51:f7:b5:
         3a:44:cd:cf:7a:92:21:7e:b3:b9:f2:85:d3:66:2b:59:eb:0e:
         97:ae:19:bc:b3:2a:27:17:80:54:6b:45:ae:43:2f:15:3c:48:
         68:39:11:0f:65:43:b8:48:5e:ea:98:36:b6:68:0e:ae:69:ce:
         c4:49:6e:20:d9:e7:1b:20:71:ec:d1:5c:84:d6:43:91:87:6a:
         62:f8:6d:fc:0b:c2:2e:75:7e:e0:e9:84:33:13:e0:2b:db:3d:
         fc:e1:4d:9f:e8:ef:85:db:a9:a9:6d:d8:39:15:8d:dd:03:53:
         c3:85:8f:1e:dd:28:70:f8:f5:a5:b3:7a:9b:e1:95:af:a8:a1:
         64:61:a5:6e:ab:43:b1:de:14:29:92:89:35:19:7b:a0:70:e1:
         70:b0:29:27
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUYLGUw+59blDcAxetaRgbjHyEQGIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUIwQkQzOEFCQUI4MERGOTI5MEZCNzQxQUZBQ0M2MzE3
NDBGQTdFOTAeFw0yNDAzMDUxNzU2MDRaFw0yNTAzMDQxODAxMDRaMDMxMTAvBgNV
BAMTKDJDRkJFN0Y4QjIxRTJFQzQ3OTJBOTE1NUI3MzQwQTNBNDFCQTJDNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKyCsH/hhDNtyy3WRS3cyJt3qS
MM39QZmn2CJ6nGqdFwv//bd77FGqBxUZkMDFUgbgKUUVwSnvUIgPwN62xkOuH/Ns
gM8TAsgDy40Im2Sp15APvfZ8QsVrcC6B6nfBneEhONEZ3ox748ExdesLopqwz/l2
gurQf7PGhg2vpOk81K6cnyRocaMeS30jPYhtzkAmx5v327xEAmllr6ee9f8O6CQ4
Cj8PcM+7QFg0L/MVCeKuqK7vzvcTNChyrm0v+8yIVM0UphJ3yv1DVMCg3gtRr3po
ZZXZ03cs/4urtvR8+GtF45oieCFN2i1jhNfWhbwtxjQ0ckDqMAH4oU5UB70zAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQULPvn+LIeLsR5KpFVtzQKOkG6LFMwHwYDVR0j
BBgwFoAU6wvTirq4DfkpD7dBr6zGMXQPp+kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMTQ0MzUzRDVCRjc4NjdCMjZENzQ3MDNGQTZBQUI1RTlB
MjAzM0E3NTlDRDZEMzQ1RTdGODRGREU1RDNBN0IxLzAvRUIwQkQzOEFCQUI4MERG
OTI5MEZCNzQxQUZBQ0M2MzE3NDBGQTdFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQjBCRDM4QUJBQjgwREY5Mjkw
RkI3NDFBRkFDQzYzMTc0MEZBN0U5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTE0NDM1M0Q1QkY3ODY3QjI2RDc0NzAzRkE2QUFCNUU5QTIwMzNBNzU5
Q0Q2RDM0NUU3Rjg0RkRFNUQzQTdCMS8wLzM0MzUyZTMxMzczNDJlMzczNjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzgzNDMzMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItrkwwDQYJ
KoZIhvcNAQELBQADggEBAJRMbET4ccSO7w4Qv+VAX7u6oXzExj6tmH1ITXliOF87
KjDS5EzRbGMk7Wn4v+anRFJ0dAotD9QLEAnRq0E9yoMyezdpb6Tk+JIFBz/HF5Qm
mykdnnYerQeO9wZ5rTKonZ2I3KZ+xO3X01H3tTpEzc96kiF+s7nyhdNmK1nrDpeu
GbyzKicXgFRrRa5DLxU8SGg5EQ9lQ7hIXuqYNrZoDq5pzsRJbiDZ5xsgcezRXITW
Q5GHamL4bfwLwi51fuDphDMT4CvbPfzhTZ/o74Xbqalt2DkVjd0DU8OFjx7dKHD4
9aWzepvhla+ooWRhpW6rQ7HeFCmSiTUZe6Bw4XCwKSc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:02 2024 by rpki-client on console-ams.rpki-client.org