Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31362e302f32332d3233203d3e20323637373938.roa
File:                     34352e3137332e31362e302f32332d3233203d3e20323637373938.roa (raw, json)
Hash identifier:          oQPJCUImU86nZiHsd/9KmUhHnEWICzdPPLKqS3QL1SA=
Subject key identifier:   61:3B:2F:9D:CC:29:73:C6:0B:5F:DD:5C:A9:31:87:ED:91:3A:96:B5
Certificate issuer:       /CN=378C4A178BD1442C656AA12825B69BFF74217F32
Certificate serial:       03CEE0A37AF012A07027415C4057802728898DF8
Authority key identifier: 37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31362e302f32332d3233203d3e20323637373938.roa
Signing time:             Fri 17 May 2024 16:55:00 +0000
ROA not before:           Fri 17 May 2024 16:50:00 +0000
ROA not after:            Fri 16 May 2025 16:55:00 +0000
asID:                     267798
IP address blocks:        45.173.16.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ce:e0:a3:7a:f0:12:a0:70:27:41:5c:40:57:80:27:28:89:8d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378C4A178BD1442C656AA12825B69BFF74217F32
        Validity
            Not Before: May 17 16:50:00 2024 GMT
            Not After : May 16 16:55:00 2025 GMT
        Subject: CN=613B2F9DCC2973C60B5FDD5CA93187ED913A96B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4c:54:c4:c9:46:e5:ab:54:d8:a5:ef:24:f5:
                    ec:2b:79:a8:03:55:92:75:f2:4f:58:ed:92:44:2b:
                    43:2d:3a:8b:18:2c:58:ab:d9:99:72:bd:6e:af:9a:
                    12:7e:51:25:06:f3:cf:ef:10:3a:2c:25:65:78:6f:
                    1c:04:d9:71:31:c0:03:db:36:22:a4:1f:7c:f5:14:
                    b0:a2:ff:a8:dd:4f:d1:66:95:3b:cc:e1:dc:6e:53:
                    13:f8:20:f1:d4:e7:b9:59:83:b0:28:31:e7:79:08:
                    72:41:8b:d1:2f:7a:46:40:b2:3b:e2:6f:2b:5d:60:
                    23:d7:b5:36:7a:b5:11:e1:51:25:e2:08:59:7d:e2:
                    f3:85:60:f8:26:aa:ce:0f:b8:33:e0:43:63:d3:0c:
                    80:4a:1e:8b:df:16:dd:8e:67:0e:74:fb:a1:c9:78:
                    6e:59:6c:2e:9d:7c:bc:b3:a8:6f:1d:b7:15:8e:a4:
                    80:01:83:3f:a0:0e:aa:17:3b:dd:d4:6f:15:21:76:
                    d7:3d:f6:54:05:12:96:15:3b:e7:6d:a8:e7:75:8d:
                    58:13:d7:0f:d1:ba:04:1f:61:d3:51:41:f1:1f:25:
                    6b:b5:03:6f:54:80:c0:e2:67:75:2e:07:82:34:58:
                    ea:25:6d:2c:df:cf:78:d6:ff:2d:89:f5:36:91:a7:
                    f5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3B:2F:9D:CC:29:73:C6:0B:5F:DD:5C:A9:31:87:ED:91:3A:96:B5
            X509v3 Authority Key Identifier:
                keyid:37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31362e302f32332d3233203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         de:a6:93:15:0c:fb:82:24:a3:48:59:11:1d:52:33:ae:0c:e7:
         7c:8b:3b:43:65:47:46:23:20:e1:d0:90:d6:7d:ab:e2:bd:33:
         bc:c8:e5:b4:29:fd:c1:bc:10:c6:10:26:47:d9:b3:69:7c:f1:
         b9:83:16:2b:58:85:76:f8:da:d1:77:68:9b:41:f1:e5:60:38:
         96:13:fe:c4:9e:70:cd:3e:59:26:d9:86:19:3b:04:6b:9b:c9:
         b5:f7:d2:8d:6f:67:e2:8a:21:c7:fa:c8:58:06:75:3a:86:d0:
         ff:80:54:5a:4b:88:43:7d:28:90:e9:bc:b9:7c:ab:69:76:af:
         62:05:a6:fe:d7:33:6e:52:c9:dd:95:aa:3e:64:23:b4:7e:8f:
         9b:2f:5e:51:fc:72:62:af:46:4c:39:c1:40:39:01:8e:67:10:
         78:3f:df:ab:b0:c2:a8:37:39:7c:ef:c7:59:2d:cf:81:8a:44:
         18:e6:b7:0e:71:ad:8b:8b:db:90:3e:96:70:03:91:90:52:a3:
         d1:3b:38:78:3f:23:99:2e:75:ef:7c:c2:09:d7:c0:f4:25:0e:
         cd:11:f0:62:0e:87:76:1e:ba:74:08:f7:4b:f6:2b:6c:c4:44:
         2d:e4:ac:67:91:09:05:c1:d7:7a:0c:ff:58:0c:e6:c7:73:15:
         ea:cf:0b:09
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUA87go3rwEqBwJ0FcQFeAJyiJjfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc4QzRBMTc4QkQxNDQyQzY1NkFBMTI4MjVCNjlCRkY3
NDIxN0YzMjAeFw0yNDA1MTcxNjUwMDBaFw0yNTA1MTYxNjU1MDBaMDMxMTAvBgNV
BAMTKDYxM0IyRjlEQ0MyOTczQzYwQjVGREQ1Q0E5MzE4N0VEOTEzQTk2QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbTFTEyUblq1TYpe8k9ewreagD
VZJ18k9Y7ZJEK0MtOosYLFir2ZlyvW6vmhJ+USUG88/vEDosJWV4bxwE2XExwAPb
NiKkH3z1FLCi/6jdT9FmlTvM4dxuUxP4IPHU57lZg7AoMed5CHJBi9EvekZAsjvi
bytdYCPXtTZ6tRHhUSXiCFl94vOFYPgmqs4PuDPgQ2PTDIBKHovfFt2OZw50+6HJ
eG5ZbC6dfLyzqG8dtxWOpIABgz+gDqoXO93UbxUhdtc99lQFEpYVO+dtqOd1jVgT
1w/RugQfYdNRQfEfJWu1A29UgMDiZ3UuB4I0WOolbSzfz3jW/y2J9TaRp/UZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUYTsvncwpc8YLX91cqTGH7ZE6lrUwHwYDVR0j
BBgwFoAUN4xKF4vRRCxlaqEoJbab/3QhfzIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNzg1MEZEODI3MjMzOEFFQzg3QTg1MkE2QjlFRjg2QzlE
RTJGQUY3ODgzRTE1NTU2MDEwRjcwRTU1RTQ3REQ2LzAvMzc4QzRBMTc4QkQxNDQy
QzY1NkFBMTI4MjVCNjlCRkY3NDIxN0YzMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNzhDNEExNzhCRDE0NDJDNjU2
QUExMjgyNUI2OUJGRjc0MjE3RjMyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTc4NTBGRDgyNzIzMzhBRUM4N0E4NTJBNkI5RUY4NkM5REUyRkFGNzg4
M0UxNTU1NjAxMEY3MEU1NUU0N0RENi8wLzM0MzUyZTMxMzczMzJlMzEzNjJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNzM3MzkzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2tEDAN
BgkqhkiG9w0BAQsFAAOCAQEA3qaTFQz7giSjSFkRHVIzrgznfIs7Q2VHRiMg4dCQ
1n2r4r0zvMjltCn9wbwQxhAmR9mzaXzxuYMWK1iFdvja0Xdom0Hx5WA4lhP+xJ5w
zT5ZJtmGGTsEa5vJtffSjW9n4oohx/rIWAZ1OobQ/4BUWkuIQ30okOm8uXyraXav
YgWm/tczblLJ3ZWqPmQjtH6Pmy9eUfxyYq9GTDnBQDkBjmcQeD/fq7DCqDc5fO/H
WS3PgYpEGOa3DnGti4vbkD6WcAORkFKj0Ts4eD8jmS5173zCCdfA9CUOzRHwYg6H
dh66dAj3S/YrbMRELeSsZ5EJBcHXegz/WAzmx3MV6s8LCQ==
-----END CERTIFICATE-----
Generated at Wed Jun 26 06:20:38 2024 by rpki-client on console-fra.rpki-client.org