Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/34352e3137372e3130382e302f32322d3232203d3e20323637383537.roa
File:                     34352e3137372e3130382e302f32322d3232203d3e20323637383537.roa (raw, json)
Hash identifier:          ojzvPaxVoyoiiUAQJgHRqRkctgTrWVxUFAMNDZlZljs=
Subject key identifier:   0E:4C:95:FD:F3:18:74:25:7A:FD:56:92:53:15:33:C5:B1:9C:3D:EB
Certificate issuer:       /CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
Certificate serial:       2A4A6984D3B599F831C41ABC3754F79FB3909C29
Authority key identifier: 8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/34352e3137372e3130382e302f32322d3232203d3e20323637383537.roa
Signing time:             Tue 05 Mar 2024 18:06:22 +0000
ROA not before:           Tue 05 Mar 2024 18:01:22 +0000
ROA not after:            Tue 04 Mar 2025 18:06:22 +0000
asID:                     267857
IP address blocks:        45.177.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4a:69:84:d3:b5:99:f8:31:c4:1a:bc:37:54:f7:9f:b3:90:9c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
        Validity
            Not Before: Mar  5 18:01:22 2024 GMT
            Not After : Mar  4 18:06:22 2025 GMT
        Subject: CN=0E4C95FDF31874257AFD5692531533C5B19C3DEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3b:e3:a7:b7:75:3d:fd:8c:d4:07:57:e0:ff:
                    c6:01:64:21:2b:1d:d3:cd:0a:83:ae:87:07:78:9d:
                    89:1a:58:f9:c8:1a:53:3c:4e:ac:1f:fc:e8:65:0e:
                    a6:b8:45:b4:c5:0d:70:0a:84:b4:ad:c4:f6:2d:83:
                    84:d7:e1:e6:53:ab:e9:54:43:01:cd:75:f9:03:f2:
                    1b:d7:d3:c7:51:7f:21:ac:43:ee:d9:e6:07:f2:f8:
                    cd:fd:71:1c:24:d6:8c:7b:5d:1b:96:f1:94:06:85:
                    96:28:ec:f9:14:a2:3b:1c:d0:cc:e8:9f:83:74:f8:
                    4b:7f:33:2b:36:ea:af:6c:4d:27:f1:2d:08:1f:c2:
                    a7:21:e1:d5:2e:97:cc:bd:dd:85:cd:63:eb:96:3a:
                    8d:52:b8:23:7f:2d:8a:bd:fd:d4:2d:68:44:3d:b3:
                    89:64:5b:18:00:e0:06:d0:0a:4c:2d:23:b4:60:5f:
                    fe:bc:f7:2e:04:b6:c3:96:2a:ed:6c:b6:7a:07:01:
                    12:39:17:b5:c7:de:36:a4:9f:e3:75:23:66:c8:a7:
                    ee:7b:66:f5:2a:88:82:4d:48:de:1b:3c:a8:34:8b:
                    61:51:43:53:23:85:1a:62:33:1b:01:2a:01:4d:81:
                    d6:9f:c7:16:6b:51:1b:fb:64:55:99:c9:11:e4:d0:
                    b7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4C:95:FD:F3:18:74:25:7A:FD:56:92:53:15:33:C5:B1:9C:3D:EB
            X509v3 Authority Key Identifier:
                keyid:8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/34352e3137372e3130382e302f32322d3232203d3e20323637383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:83:75:83:6e:8c:95:cc:2f:88:2b:16:a1:c8:46:28:25:49:
         30:85:87:5c:4f:3d:03:a4:2b:ab:c6:a0:57:41:7f:bb:c5:6a:
         69:55:b9:4d:78:2b:df:08:00:42:fc:5b:fe:bc:a7:30:c6:78:
         a8:dc:79:8b:dd:81:0c:63:60:19:da:bc:e6:44:f1:21:67:b7:
         f7:1d:af:91:bd:b5:69:18:af:08:5f:27:a1:11:d0:91:90:e1:
         18:75:ff:3f:78:39:6f:7b:64:b5:cd:ad:ab:39:85:96:b4:0d:
         59:60:6c:c2:c2:3a:e8:47:2f:cb:51:d7:06:88:4f:fc:56:a0:
         70:ec:a4:92:7a:2e:a5:00:23:3a:25:19:87:d1:13:1b:cb:db:
         c3:f3:f5:5f:cc:8d:c3:1d:28:0b:96:d0:be:4f:c5:f0:61:0b:
         7a:9c:15:d9:c7:0c:e5:6c:22:78:bc:07:a4:d6:a7:2a:d3:a6:
         59:48:80:c7:75:a2:6e:fb:8b:95:a3:f8:fb:48:a3:3c:7d:c1:
         60:62:ab:cc:9b:f1:3e:dd:4c:da:b4:c4:2c:70:f1:8c:88:82:
         e3:b5:c2:4a:a3:fe:fd:95:5b:4f:86:1a:08:28:70:bc:31:26:
         0f:75:f4:b5:3a:6e:89:da:44:56:9d:1c:d5:ef:28:77:a5:84:
         59:26:06:de
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKkpphNO1mfgxxBq8N1T3n7OQnCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY5NjQxRjM0MUIzMTc4MkFBRDQ0REU0MUVFMENEOTcw
RkY5RUNENTAeFw0yNDAzMDUxODAxMjJaFw0yNTAzMDQxODA2MjJaMDMxMTAvBgNV
BAMTKDBFNEM5NUZERjMxODc0MjU3QUZENTY5MjUzMTUzM0M1QjE5QzNERUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwO+Ont3U9/YzUB1fg/8YBZCEr
HdPNCoOuhwd4nYkaWPnIGlM8Tqwf/OhlDqa4RbTFDXAKhLStxPYtg4TX4eZTq+lU
QwHNdfkD8hvX08dRfyGsQ+7Z5gfy+M39cRwk1ox7XRuW8ZQGhZYo7PkUojsc0Mzo
n4N0+Et/Mys26q9sTSfxLQgfwqch4dUul8y93YXNY+uWOo1SuCN/LYq9/dQtaEQ9
s4lkWxgA4AbQCkwtI7RgX/689y4EtsOWKu1stnoHARI5F7XH3jakn+N1I2bIp+57
ZvUqiIJNSN4bPKg0i2FRQ1MjhRpiMxsBKgFNgdafxxZrURv7ZFWZyRHk0LcfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUDkyV/fMYdCV6/VaSUxUzxbGcPeswHwYDVR0j
BBgwFoAUj5ZB80GzF4Kq1E3kHuDNlw/57NUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CM0QzOUJBNEI4MUEzQzAyQjg1NENDMjQ3RjRDRkU1MzUy
NUJGMjQyM0YyOThCOEM1MzVBMDY1QkJGMDkxOTkwLzAvOEY5NjQxRjM0MUIzMTc4
MkFBRDQ0REU0MUVFMENEOTcwRkY5RUNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84Rjk2NDFGMzQxQjMxNzgyQUFE
NDRERTQxRUUwQ0Q5NzBGRjlFQ0Q1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjNEMzlCQTRCODFBM0MwMkI4NTRDQzI0N0Y0Q0ZFNTM1MjVCRjI0MjNG
Mjk4QjhDNTM1QTA2NUJCRjA5MTk5MC8wLzM0MzUyZTMxMzczNzJlMzEzMDM4MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM3MzgzNTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLbFs
MA0GCSqGSIb3DQEBCwUAA4IBAQCpg3WDboyVzC+IKxahyEYoJUkwhYdcTz0DpCur
xqBXQX+7xWppVblNeCvfCABC/Fv+vKcwxnio3HmL3YEMY2AZ2rzmRPEhZ7f3Ha+R
vbVpGK8IXyehEdCRkOEYdf8/eDlve2S1za2rOYWWtA1ZYGzCwjroRy/LUdcGiE/8
VqBw7KSSei6lACM6JRmH0RMby9vD8/VfzI3DHSgLltC+T8XwYQt6nBXZxwzlbCJ4
vAek1qcq06ZZSIDHdaJu+4uVo/j7SKM8fcFgYqvMm/E+3UzatMQscPGMiILjtcJK
o/79lVtPhhoIKHC8MSYPdfS1Om6J2kRWnRzV7yh3pYRZJgbe
-----END CERTIFICATE-----
Generated at Sun May 12 02:18:42 2024 by rpki-client on console-fra.rpki-client.org