Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3130392e302f32342d3234203d3e20323639383836.roa
File:                     34352e3139312e3130392e302f32342d3234203d3e20323639383836.roa (raw, json)
Hash identifier:          dVfYnoXxQdspCgKl8gV+0Kns9OxgDcI8i+0livr3ckE=
Subject key identifier:   29:30:2D:24:C5:D3:A6:3F:7D:C8:63:B2:35:42:FA:7F:D0:22:2C:6D
Certificate issuer:       /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
Certificate serial:       2DBBF14F83C0425DC686255C6C294A4F95F397B1
Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3130392e302f32342d3234203d3e20323639383836.roa
Signing time:             Tue 05 Mar 2024 18:06:36 +0000
ROA not before:           Tue 05 Mar 2024 18:01:36 +0000
ROA not after:            Tue 04 Mar 2025 18:06:36 +0000
asID:                     269886
IP address blocks:        45.191.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:bb:f1:4f:83:c0:42:5d:c6:86:25:5c:6c:29:4a:4f:95:f3:97:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
        Validity
            Not Before: Mar  5 18:01:36 2024 GMT
            Not After : Mar  4 18:06:36 2025 GMT
        Subject: CN=29302D24C5D3A63F7DC863B23542FA7FD0222C6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:59:03:46:eb:aa:d6:f0:bf:b5:55:1d:52:a1:
                    b7:bb:35:47:ef:f0:3e:23:f6:85:6d:e0:b8:6a:95:
                    12:b1:b0:75:7f:7c:f5:a8:c5:86:0e:2b:2e:c7:fd:
                    fb:b4:d5:48:7c:8d:e2:b7:eb:96:db:c7:8b:62:76:
                    2e:7e:8c:ff:80:d1:f6:ce:fa:75:54:a1:c6:e7:04:
                    9e:f8:87:4f:cf:69:22:54:c0:56:0c:f8:0a:f0:2d:
                    33:84:5d:53:b1:3d:2b:4f:54:5f:2d:f2:97:a8:dd:
                    8e:48:51:f0:62:07:84:49:65:2c:13:81:1c:ad:62:
                    d4:fc:fc:0a:e0:a1:10:9a:1c:c3:0a:d7:d7:e3:86:
                    f0:99:6d:79:96:df:c7:61:26:12:f7:b2:07:3c:46:
                    13:fd:ca:b4:0a:50:c2:18:e4:ef:2c:bc:04:d7:23:
                    08:63:06:ef:ce:7e:fb:0d:63:d0:2e:06:aa:c5:55:
                    de:47:db:75:71:72:9d:e0:bd:06:4c:d0:e6:d9:40:
                    27:4a:62:aa:aa:62:c7:4a:84:02:d0:91:7a:44:3b:
                    ee:1f:b7:24:88:c7:17:17:12:d2:dc:b5:3f:b6:40:
                    b7:03:48:cd:11:d2:94:08:4a:00:2d:70:28:99:27:
                    8b:12:6a:d6:fc:7f:3d:a0:a8:06:98:92:f2:fd:4c:
                    b6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:30:2D:24:C5:D3:A6:3F:7D:C8:63:B2:35:42:FA:7F:D0:22:2C:6D
            X509v3 Authority Key Identifier:
                keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3130392e302f32342d3234203d3e20323639383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:16:11:e8:8b:c0:0e:47:d1:ec:05:d5:3c:1e:fe:79:72:53:
         ee:41:2d:62:bf:42:b8:de:cf:7f:f6:fa:ae:c4:0e:97:bd:3f:
         7a:19:fa:d8:ea:d8:b2:65:d4:08:e9:7c:f4:5b:84:17:f8:da:
         d3:13:0d:c3:c5:e6:d6:1e:2f:06:b1:7b:01:e9:e9:77:d6:bc:
         cf:42:7f:89:6b:31:0e:22:10:00:29:a6:eb:70:df:ff:22:02:
         7a:e4:b3:c1:7a:bf:55:77:36:12:59:fc:f9:92:7f:f7:44:a5:
         2b:2e:62:11:03:4d:88:2e:10:48:b3:78:c0:e5:3f:b3:2c:5a:
         13:ad:af:da:3a:db:11:88:29:27:6b:7f:21:57:94:bb:dc:5c:
         fd:61:17:04:81:76:14:44:07:25:04:cd:9d:6e:bf:7b:37:09:
         b7:fd:85:37:6c:83:d9:ab:13:98:09:5c:94:18:10:f7:21:61:
         b0:86:da:8f:a5:3f:04:d7:fc:5a:08:3f:78:21:c7:86:c0:2f:
         64:88:ce:2a:04:60:d8:54:42:ac:ba:c5:2c:12:b5:8f:8d:db:
         c0:3d:e3:72:cc:c8:b6:d8:83:fd:12:6c:50:c8:a6:a5:46:45:
         22:df:e6:a6:2f:ba:b1:03:b2:9f:56:81:7c:7c:3c:ca:e4:00:
         3b:2d:7c:66
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIULbvxT4PAQl3GhiVcbClKT5Xzl7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ1QUM0OUI4Qzc0NjFFNTlDMTQ0RTAxNDlDNjBENEY3
NDEzMkE0MzAeFw0yNDAzMDUxODAxMzZaFw0yNTAzMDQxODA2MzZaMDMxMTAvBgNV
BAMTKDI5MzAyRDI0QzVEM0E2M0Y3REM4NjNCMjM1NDJGQTdGRDAyMjJDNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQWQNG66rW8L+1VR1Sobe7NUfv
8D4j9oVt4LhqlRKxsHV/fPWoxYYOKy7H/fu01Uh8jeK365bbx4tidi5+jP+A0fbO
+nVUocbnBJ74h0/PaSJUwFYM+ArwLTOEXVOxPStPVF8t8peo3Y5IUfBiB4RJZSwT
gRytYtT8/ArgoRCaHMMK19fjhvCZbXmW38dhJhL3sgc8RhP9yrQKUMIY5O8svATX
IwhjBu/OfvsNY9AuBqrFVd5H23Vxcp3gvQZM0ObZQCdKYqqqYsdKhALQkXpEO+4f
tySIxxcXEtLctT+2QLcDSM0R0pQISgAtcCiZJ4sSatb8fz2gqAaYkvL9TLabAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUKTAtJMXTpj99yGOyNUL6f9AiLG0wHwYDVR0j
BBgwFoAUxFrEm4x0YeWcFE4BScYNT3QTKkMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BOTcwREQ0MDJGQTI1RjUyQjhGODk0N0REMzg3NTQ3QTc3
OTFBNzU4QjA5MkJDMjkxMkU5OEE5RDc1MDkyQTZGLzAvQzQ1QUM0OUI4Qzc0NjFF
NTlDMTQ0RTAxNDlDNjBENEY3NDEzMkE0My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNDVBQzQ5QjhDNzQ2MUU1OUMx
NDRFMDE0OUM2MEQ0Rjc0MTMyQTQzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTk3MERENDAyRkEyNUY1MkI4Rjg5NDdERDM4NzU0N0E3NzkxQTc1OEIw
OTJCQzI5MTJFOThBOUQ3NTA5MkE2Ri8wLzM0MzUyZTMxMzkzMTJlMzEzMDM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzgzODM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALb9t
MA0GCSqGSIb3DQEBCwUAA4IBAQCDFhHoi8AOR9HsBdU8Hv55clPuQS1iv0K43s9/
9vquxA6XvT96GfrY6tiyZdQI6Xz0W4QX+NrTEw3DxebWHi8GsXsB6el31rzPQn+J
azEOIhAAKabrcN//IgJ65LPBer9VdzYSWfz5kn/3RKUrLmIRA02ILhBIs3jA5T+z
LFoTra/aOtsRiCkna38hV5S73Fz9YRcEgXYURAclBM2dbr97Nwm3/YU3bIPZqxOY
CVyUGBD3IWGwhtqPpT8E1/xaCD94IceGwC9kiM4qBGDYVEKsusUsErWPjdvAPeNy
zMi22IP9EmxQyKalRkUi3+amL7qxA7KfVoF8fDzK5AA7LXxm
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:34:18 2024 by rpki-client on console-fra.rpki-client.org