Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/34352e3233302e3230372e302f32342d3234203d3e20323636373433.roa
File:                     34352e3233302e3230372e302f32342d3234203d3e20323636373433.roa (raw, json)
Hash identifier:          bn/Hi9nHCShaO2YCei22J86wZVUDYaYOrIQrCrihC/A=
Subject key identifier:   81:B8:3C:EB:45:D2:28:BE:02:45:18:69:AB:3A:C7:61:98:1C:40:5E
Certificate issuer:       /CN=27132C0B16F59934A89DA1E369D30BCEC9B7E01E
Certificate serial:       7ED46E2FC6008F35302BDFDBDA395A17192AEC87
Authority key identifier: 27:13:2C:0B:16:F5:99:34:A8:9D:A1:E3:69:D3:0B:CE:C9:B7:E0:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/34352e3233302e3230372e302f32342d3234203d3e20323636373433.roa
Signing time:             Tue 05 Mar 2024 18:13:32 +0000
ROA not before:           Tue 05 Mar 2024 18:08:32 +0000
ROA not after:            Tue 04 Mar 2025 18:13:32 +0000
asID:                     266743
IP address blocks:        45.230.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d4:6e:2f:c6:00:8f:35:30:2b:df:db:da:39:5a:17:19:2a:ec:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27132C0B16F59934A89DA1E369D30BCEC9B7E01E
        Validity
            Not Before: Mar  5 18:08:32 2024 GMT
            Not After : Mar  4 18:13:32 2025 GMT
        Subject: CN=81B83CEB45D228BE02451869AB3AC761981C405E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dc:e3:ef:40:39:9c:a3:0b:fa:14:d1:6a:46:
                    9b:ec:ce:94:9c:58:40:a3:b4:2a:bf:81:54:30:91:
                    71:df:cd:b2:d2:9f:d9:9d:bc:6b:7b:29:71:06:0c:
                    2a:43:f0:23:ba:df:ca:a2:b5:85:a7:b8:a0:f5:03:
                    b2:c0:e9:ac:94:a2:e4:ed:5e:f6:0b:1f:cc:a3:74:
                    b7:0c:79:46:c4:ec:97:f8:d7:98:ed:93:4d:29:a3:
                    43:f8:19:64:8c:e4:26:32:90:42:b6:a8:84:75:7f:
                    cc:3f:47:03:a1:8b:1f:dc:3c:78:84:8c:3a:53:da:
                    7c:3a:ca:c0:83:d8:7e:1f:e5:1a:79:d6:bb:a3:ae:
                    1a:1d:33:45:33:24:ad:7a:e2:b5:d9:26:c6:0d:07:
                    eb:03:ea:f9:93:45:bc:6e:9f:2b:d4:e4:51:e0:83:
                    60:a1:90:f8:d2:eb:20:ce:a2:82:15:b7:f3:d6:b4:
                    5e:f9:83:71:56:b4:7a:b3:9d:09:76:dd:62:d0:69:
                    2b:30:3d:8d:b8:f0:fc:b8:d2:8b:40:eb:c2:0d:fa:
                    32:15:2f:c7:71:32:94:a3:f2:6c:ad:b2:51:68:db:
                    08:13:f1:ec:5b:92:b0:d5:90:19:74:4a:3d:85:23:
                    7d:a8:82:02:93:b1:53:36:40:3a:2a:24:98:25:66:
                    d9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B8:3C:EB:45:D2:28:BE:02:45:18:69:AB:3A:C7:61:98:1C:40:5E
            X509v3 Authority Key Identifier:
                keyid:27:13:2C:0B:16:F5:99:34:A8:9D:A1:E3:69:D3:0B:CE:C9:B7:E0:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/34352e3233302e3230372e302f32342d3234203d3e20323636373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:f4:3d:92:7e:2d:d5:0d:49:44:46:5d:9d:37:6a:c9:cc:bd:
         c8:81:9e:e9:b2:ca:db:bb:59:6e:67:2c:4b:c6:71:7c:61:91:
         70:6e:05:32:a4:8c:8d:ca:d5:a0:a5:5e:20:0c:ba:b0:84:b9:
         d4:49:d5:91:8c:29:a8:87:6d:37:9b:92:0b:67:7f:b3:19:f6:
         f2:cf:66:a3:b3:b2:5f:f8:b4:84:c8:a4:06:ba:1b:2b:c6:1a:
         24:bc:1d:27:38:dd:e3:ba:b0:af:d3:11:9a:b1:a9:7b:1f:cb:
         4a:e6:d6:e8:8d:f5:a5:ce:90:63:e7:14:1e:28:3c:5b:e8:7d:
         ee:bf:15:b7:cf:86:c5:00:35:54:ac:50:3c:fa:42:78:fd:c3:
         92:62:06:0a:c7:3f:37:69:23:8b:29:c6:9b:8c:e6:bf:28:b8:
         cd:c1:d1:41:a9:5f:d7:39:f3:29:69:57:c4:c6:5d:08:9f:e1:
         6e:76:9f:c3:db:8d:9c:14:b3:78:bf:c1:27:7e:7d:d4:53:04:
         07:a9:91:de:49:25:05:c1:ec:15:5c:95:bd:fa:91:07:8c:40:
         4d:70:52:40:0d:5d:31:bf:9e:58:c9:7b:b7:c2:8b:5e:94:5f:
         fc:9a:a6:7a:2e:b3:ce:ab:2c:d9:9a:71:4f:c4:0d:08:4e:16:
         37:03:be:4f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUftRuL8YAjzUwK9/b2jlaFxkq7IcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcxMzJDMEIxNkY1OTkzNEE4OURBMUUzNjlEMzBCQ0VD
OUI3RTAxRTAeFw0yNDAzMDUxODA4MzJaFw0yNTAzMDQxODEzMzJaMDMxMTAvBgNV
BAMTKDgxQjgzQ0VCNDVEMjI4QkUwMjQ1MTg2OUFCM0FDNzYxOTgxQzQwNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd3OPvQDmcowv6FNFqRpvszpSc
WECjtCq/gVQwkXHfzbLSn9mdvGt7KXEGDCpD8CO638qitYWnuKD1A7LA6ayUouTt
XvYLH8yjdLcMeUbE7Jf415jtk00po0P4GWSM5CYykEK2qIR1f8w/RwOhix/cPHiE
jDpT2nw6ysCD2H4f5Rp51rujrhodM0UzJK164rXZJsYNB+sD6vmTRbxunyvU5FHg
g2ChkPjS6yDOooIVt/PWtF75g3FWtHqznQl23WLQaSswPY248Py40otA68IN+jIV
L8dxMpSj8mytslFo2wgT8exbkrDVkBl0Sj2FI32oggKTsVM2QDoqJJglZtkJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUgbg860XSKL4CRRhpqzrHYZgcQF4wHwYDVR0j
BBgwFoAUJxMsCxb1mTSonaHjadMLzsm34B4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNkQxNzA2NDNEODY1MkQ4OEJEMjg3OERGNEQ0MEFFMjJF
RjgwN0ExNDUzNTI1MEQ2QTkwM0E4MkU1NTI5QUY1LzAvMjcxMzJDMEIxNkY1OTkz
NEE4OURBMUUzNjlEMzBCQ0VDOUI3RTAxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNzEzMkMwQjE2RjU5OTM0QTg5
REExRTM2OUQzMEJDRUM5QjdFMDFFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjZEMTcwNjQzRDg2NTJEODhCRDI4NzhERjRENDBBRTIyRUY4MDdBMTQ1
MzUyNTBENkE5MDNBODJFNTUyOUFGNS8wLzM0MzUyZTMyMzMzMDJlMzIzMDM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzczNDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALebP
MA0GCSqGSIb3DQEBCwUAA4IBAQB19D2Sfi3VDUlERl2dN2rJzL3IgZ7pssrbu1lu
ZyxLxnF8YZFwbgUypIyNytWgpV4gDLqwhLnUSdWRjCmoh203m5ILZ3+zGfbyz2aj
s7Jf+LSEyKQGuhsrxhokvB0nON3jurCv0xGasal7H8tK5tbojfWlzpBj5xQeKDxb
6H3uvxW3z4bFADVUrFA8+kJ4/cOSYgYKxz83aSOLKcabjOa/KLjNwdFBqV/XOfMp
aVfExl0In+Fudp/D242cFLN4v8Enfn3UUwQHqZHeSSUFwewVXJW9+pEHjEBNcFJA
DV0xv55YyXu3wotelF/8mqZ6LrPOqyzZmnFPxA0IThY3A75P
-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:16 2024 by rpki-client on console-ams.rpki-client.org