Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/34352e3233362e3136382e302f32322d3234203d3e20323636383032.roa
File:                     34352e3233362e3136382e302f32322d3234203d3e20323636383032.roa (raw, json)
Hash identifier:          zJ1cszuL6bS8snHJRarsfVAQLYH13t1eAV5t9UV1j64=
Subject key identifier:   36:B0:CA:33:5F:6B:10:AC:CE:AD:53:81:3F:04:17:8D:8C:8E:34:AA
Certificate issuer:       /CN=9DDF7010D9766829525CC44FC34F3B14225EB013
Certificate serial:       5BA1B563854215CECC30D8E1651D8FE52A7DA308
Authority key identifier: 9D:DF:70:10:D9:76:68:29:52:5C:C4:4F:C3:4F:3B:14:22:5E:B0:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DDF7010D9766829525CC44FC34F3B14225EB013.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/34352e3233362e3136382e302f32322d3234203d3e20323636383032.roa
Signing time:             Tue 05 Mar 2024 18:18:01 +0000
ROA not before:           Tue 05 Mar 2024 18:13:01 +0000
ROA not after:            Tue 04 Mar 2025 18:18:01 +0000
asID:                     266802
IP address blocks:        45.236.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/9DDF7010D9766829525CC44FC34F3B14225EB013.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/9DDF7010D9766829525CC44FC34F3B14225EB013.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DDF7010D9766829525CC44FC34F3B14225EB013.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a1:b5:63:85:42:15:ce:cc:30:d8:e1:65:1d:8f:e5:2a:7d:a3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DDF7010D9766829525CC44FC34F3B14225EB013
        Validity
            Not Before: Mar  5 18:13:01 2024 GMT
            Not After : Mar  4 18:18:01 2025 GMT
        Subject: CN=36B0CA335F6B10ACCEAD53813F04178D8C8E34AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7c:33:d2:52:1a:10:04:9c:23:1d:ee:ca:5f:
                    fa:10:e4:f8:5c:45:da:77:1a:2e:96:45:d2:e4:48:
                    fa:00:bb:5e:9d:e1:4a:cd:a6:5a:fa:60:16:44:f3:
                    52:0a:b1:99:eb:96:b7:8a:cb:72:3e:af:be:0a:38:
                    bf:a4:ae:6f:19:6f:3b:25:9b:08:a8:16:ba:bf:01:
                    6e:62:82:2d:25:ce:76:14:15:1d:16:80:a4:eb:27:
                    a8:ee:01:20:5e:aa:f6:0e:cd:de:9a:62:52:ec:1b:
                    07:5e:40:3b:3e:e8:76:83:bb:0c:6c:0b:cd:8a:af:
                    58:8c:f3:e3:02:1c:a3:9f:65:89:69:fc:a7:5b:fa:
                    9e:f0:46:53:e3:e4:45:62:a9:ca:44:c9:33:de:ff:
                    b7:4c:8f:c7:4a:59:2a:91:38:c6:c0:64:ba:5d:ad:
                    af:b4:9a:2e:58:ec:44:c5:9e:b6:1c:9e:35:77:f3:
                    30:d6:3d:9d:1c:73:bb:ca:a3:a4:c3:0b:4e:e2:a8:
                    65:5a:63:fe:2c:f4:fd:07:98:5d:a9:39:52:4d:e9:
                    31:60:f5:3c:9d:63:24:0d:46:b0:ed:f5:27:59:52:
                    22:39:42:09:c7:7c:b8:d0:9d:72:fe:01:c9:64:27:
                    ff:76:4a:19:ff:90:de:c9:ff:05:29:49:cf:ea:60:
                    52:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B0:CA:33:5F:6B:10:AC:CE:AD:53:81:3F:04:17:8D:8C:8E:34:AA
            X509v3 Authority Key Identifier:
                keyid:9D:DF:70:10:D9:76:68:29:52:5C:C4:4F:C3:4F:3B:14:22:5E:B0:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/9DDF7010D9766829525CC44FC34F3B14225EB013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DDF7010D9766829525CC44FC34F3B14225EB013.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/34352e3233362e3136382e302f32322d3234203d3e20323636383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:07:0b:e4:5c:ee:98:fb:0e:d2:34:71:ed:60:89:30:ea:c1:
         87:4f:2a:a3:70:3c:32:5e:79:f6:4c:de:5e:45:4e:bb:ff:8a:
         2b:6f:85:98:73:91:fc:65:e9:76:5b:9a:36:01:42:68:bc:73:
         cd:4d:0d:0f:ec:ab:67:6d:ed:f0:1b:ca:5c:de:b1:e7:52:da:
         75:c0:3c:1e:f1:0f:9c:ed:33:c8:bd:f3:24:4c:d8:38:4b:25:
         5a:ab:ee:1f:4c:46:09:47:77:36:27:dc:e4:5e:59:b2:93:5a:
         74:77:3a:c8:f1:98:d2:f5:e4:be:e7:5e:e5:83:50:e1:a6:14:
         8a:b6:6e:18:81:bc:ce:19:13:4e:42:a1:81:01:3b:a8:96:79:
         c2:d7:98:2b:2e:36:30:84:33:0d:30:58:ca:4f:d0:cc:89:6d:
         06:91:a7:b6:f2:a9:4b:4a:18:1a:94:2e:38:28:22:09:2d:b9:
         dd:7a:a3:dc:35:78:ce:38:ae:ff:83:df:88:46:22:63:5d:7e:
         62:26:10:ce:69:45:82:66:c5:55:96:5b:e2:54:34:08:e2:08:
         23:de:1a:a4:ed:83:c9:1e:06:ff:3e:53:16:09:2c:67:93:76:
         5d:9d:8d:2b:5d:3c:a0:a9:39:57:2d:b3:a6:63:88:4d:35:d0:
         cd:ce:fe:46
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUW6G1Y4VCFc7MMNjhZR2P5Sp9owgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURERjcwMTBEOTc2NjgyOTUyNUNDNDRGQzM0RjNCMTQy
MjVFQjAxMzAeFw0yNDAzMDUxODEzMDFaFw0yNTAzMDQxODE4MDFaMDMxMTAvBgNV
BAMTKDM2QjBDQTMzNUY2QjEwQUNDRUFENTM4MTNGMDQxNzhEOEM4RTM0QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEfDPSUhoQBJwjHe7KX/oQ5Phc
Rdp3Gi6WRdLkSPoAu16d4UrNplr6YBZE81IKsZnrlreKy3I+r74KOL+krm8Zbzsl
mwioFrq/AW5igi0lznYUFR0WgKTrJ6juASBeqvYOzd6aYlLsGwdeQDs+6HaDuwxs
C82Kr1iM8+MCHKOfZYlp/Kdb+p7wRlPj5EViqcpEyTPe/7dMj8dKWSqROMbAZLpd
ra+0mi5Y7ETFnrYcnjV38zDWPZ0cc7vKo6TDC07iqGVaY/4s9P0HmF2pOVJN6TFg
9TydYyQNRrDt9SdZUiI5QgnHfLjQnXL+AclkJ/92Shn/kN7J/wUpSc/qYFJvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUNrDKM19rEKzOrVOBPwQXjYyONKowHwYDVR0j
BBgwFoAUnd9wENl2aClSXMRPw087FCJesBMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNTQ3NTBBMEQ4MEEzMjU5QzZEN0M5NDkxMkNCQjRGNzcz
NkNDQTk3OTZGNzVDM0VGOTdBRERBODFBRTcyRUNFLzAvOURERjcwMTBEOTc2Njgy
OTUyNUNDNDRGQzM0RjNCMTQyMjVFQjAxMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RERGNzAxMEQ5NzY2ODI5NTI1
Q0M0NEZDMzRGM0IxNDIyNUVCMDEzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjU0NzUwQTBEODBBMzI1OUM2RDdDOTQ5MTJDQkI0Rjc3MzZDQ0E5Nzk2
Rjc1QzNFRjk3QUREQTgxQUU3MkVDRS8wLzM0MzUyZTMyMzMzNjJlMzEzNjM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2MzgzMDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLeyo
MA0GCSqGSIb3DQEBCwUAA4IBAQCpBwvkXO6Y+w7SNHHtYIkw6sGHTyqjcDwyXnn2
TN5eRU67/4orb4WYc5H8Zel2W5o2AUJovHPNTQ0P7Ktnbe3wG8pc3rHnUtp1wDwe
8Q+c7TPIvfMkTNg4SyVaq+4fTEYJR3c2J9zkXlmyk1p0dzrI8ZjS9eS+517lg1Dh
phSKtm4YgbzOGRNOQqGBATuolnnC15grLjYwhDMNMFjKT9DMiW0Gkae28qlLShga
lC44KCIJLbndeqPcNXjOOK7/g9+IRiJjXX5iJhDOaUWCZsVVllviVDQI4ggj3hqk
7YPJHgb/PlMWCSxnk3ZdnY0rXTygqTlXLbOmY4hNNdDNzv5G
-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:40 2024 by rpki-client on console-fra.rpki-client.org