Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/34352e3137352e3134382e302f32322d3232203d3e20323637383738.roa
File:                     34352e3137352e3134382e302f32322d3232203d3e20323637383738.roa (raw, json)
Hash identifier:          9nrry51UZFikyzpIVbDP7+IISfNsXRV7EPomRaHhVRA=
Subject key identifier:   48:76:5B:EE:F6:E9:6F:9B:00:CB:6D:B6:A9:FA:84:E3:BC:56:53:E8
Certificate issuer:       /CN=D2C96715842E19445AE9268C979CE3C8F576D88D
Certificate serial:       59A5F5C294DB71CF5555B0967B8E759F25F52EB9
Authority key identifier: D2:C9:67:15:84:2E:19:44:5A:E9:26:8C:97:9C:E3:C8:F5:76:D8:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/34352e3137352e3134382e302f32322d3232203d3e20323637383738.roa
Signing time:             Tue 05 Mar 2024 17:50:58 +0000
ROA not before:           Tue 05 Mar 2024 17:45:58 +0000
ROA not after:            Tue 04 Mar 2025 17:50:58 +0000
asID:                     267878
IP address blocks:        45.175.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a5:f5:c2:94:db:71:cf:55:55:b0:96:7b:8e:75:9f:25:f5:2e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2C96715842E19445AE9268C979CE3C8F576D88D
        Validity
            Not Before: Mar  5 17:45:58 2024 GMT
            Not After : Mar  4 17:50:58 2025 GMT
        Subject: CN=48765BEEF6E96F9B00CB6DB6A9FA84E3BC5653E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:fd:87:72:fc:b4:2f:3e:89:91:8d:4f:5f:
                    73:58:ca:93:52:38:d5:6c:27:b6:e2:00:05:71:e6:
                    1f:4c:6b:05:68:57:c2:f8:6b:29:6e:87:14:a3:12:
                    41:cd:73:44:e3:81:50:cf:8f:d9:12:4d:f3:2e:7d:
                    17:40:24:48:ad:e4:45:ed:fd:25:8d:b0:78:33:1b:
                    0a:3a:2f:03:83:c0:dd:e6:50:66:ee:25:39:44:af:
                    25:07:f3:12:cd:b8:a8:e6:2b:4c:b4:15:cf:05:52:
                    ae:30:05:34:0d:2f:12:f8:83:b8:aa:74:55:6f:66:
                    bd:65:e4:1b:61:c9:c0:1f:b6:57:85:ee:e6:a9:71:
                    18:13:64:e2:70:30:d3:b5:53:e9:1c:3a:5c:36:1a:
                    71:77:72:ff:9c:8e:d1:d7:f6:65:6b:c2:0c:b5:21:
                    b5:ef:82:99:2c:a7:45:2b:6f:6c:c6:70:8b:3c:b0:
                    b0:4d:17:b8:97:0b:05:bc:52:61:b8:a5:fd:36:99:
                    d7:84:65:e3:32:e8:d4:30:d4:5b:66:19:b7:6b:a8:
                    e7:55:10:99:cc:dd:5b:a4:1a:60:62:bf:05:4a:3b:
                    7e:98:d0:b1:5f:89:2e:1d:c0:84:21:f7:1b:11:0d:
                    f7:16:80:cd:2d:16:81:60:85:9f:15:82:74:95:8e:
                    d6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:76:5B:EE:F6:E9:6F:9B:00:CB:6D:B6:A9:FA:84:E3:BC:56:53:E8
            X509v3 Authority Key Identifier:
                keyid:D2:C9:67:15:84:2E:19:44:5A:E9:26:8C:97:9C:E3:C8:F5:76:D8:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/34352e3137352e3134382e302f32322d3232203d3e20323637383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:87:fe:a2:1c:a2:52:68:16:11:56:e4:a7:2b:08:83:84:84:
         14:9d:80:35:61:69:4b:20:30:98:44:35:a7:b2:af:00:1d:03:
         a1:9b:7b:1f:6a:08:97:30:3e:26:6e:5b:32:54:a6:24:b4:8a:
         a7:48:1a:c4:9a:2e:f2:32:0b:f1:6a:da:95:a2:a6:c0:32:95:
         09:c8:99:0b:4f:34:b3:97:2e:cf:a8:ba:51:4f:3a:57:63:aa:
         68:2a:b5:c3:03:ff:b1:61:9a:b9:46:ec:f2:1e:2c:2e:e3:f7:
         b3:f1:41:9a:12:9a:3f:e0:0d:3f:b5:4b:dd:03:36:ae:e6:bf:
         56:31:99:71:db:77:d3:81:71:35:79:77:e3:fb:f6:67:8f:2e:
         e4:a2:16:bb:47:5f:3a:68:18:84:54:15:eb:a8:c3:c3:b6:9c:
         e1:e9:1c:1d:c5:f4:d2:41:d4:d1:60:12:e3:cf:3c:50:c2:8f:
         49:26:90:7d:dd:e2:56:f4:c9:8d:d6:76:ec:7c:79:c3:9e:0e:
         bf:9a:3a:20:dc:3b:40:1c:ed:92:f3:91:7c:fa:6a:27:7b:c0:
         6c:58:0f:34:56:6f:9f:a7:f6:03:6c:be:33:f6:bc:2c:4e:74:
         e1:e7:33:dc:5b:c1:2f:cf:e6:7d:a7:36:05:0b:8e:39:b0:02:
         fb:2a:a5:69
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUWaX1wpTbcc9VVbCWe451nyX1LrkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJDOTY3MTU4NDJFMTk0NDVBRTkyNjhDOTc5Q0UzQzhG
NTc2RDg4RDAeFw0yNDAzMDUxNzQ1NThaFw0yNTAzMDQxNzUwNThaMDMxMTAvBgNV
BAMTKDQ4NzY1QkVFRjZFOTZGOUIwMENCNkRCNkE5RkE4NEUzQkM1NjUzRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwX/2Hcvy0Lz6JkY1PX3NYypNS
ONVsJ7biAAVx5h9MawVoV8L4ayluhxSjEkHNc0TjgVDPj9kSTfMufRdAJEit5EXt
/SWNsHgzGwo6LwODwN3mUGbuJTlEryUH8xLNuKjmK0y0Fc8FUq4wBTQNLxL4g7iq
dFVvZr1l5BthycAftleF7uapcRgTZOJwMNO1U+kcOlw2GnF3cv+cjtHX9mVrwgy1
IbXvgpksp0Urb2zGcIs8sLBNF7iXCwW8UmG4pf02mdeEZeMy6NQw1FtmGbdrqOdV
EJnM3VukGmBivwVKO36Y0LFfiS4dwIQh9xsRDfcWgM0tFoFghZ8VgnSVjtbZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUSHZb7vbpb5sAy222qfqE47xWU+gwHwYDVR0j
BBgwFoAU0slnFYQuGURa6SaMl5zjyPV22I0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNzdCQTgzQ0ZFRDlCNjdCOTFDMjEwRDI2Qjc4NUUxMEY0
QUMwMzRDMURBMzkxOUI1Q0E1RDFGRDFDNDA3ODc5LzAvRDJDOTY3MTU4NDJFMTk0
NDVBRTkyNjhDOTc5Q0UzQzhGNTc2RDg4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkM5NjcxNTg0MkUxOTQ0NUFF
OTI2OEM5NzlDRTNDOEY1NzZEODhELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjc3QkE4M0NGRUQ5QjY3QjkxQzIxMEQyNkI3ODVFMTBGNEFDMDM0QzFE
QTM5MTlCNUNBNUQxRkQxQzQwNzg3OS8wLzM0MzUyZTMxMzczNTJlMzEzNDM4MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM3MzgzNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLa+U
MA0GCSqGSIb3DQEBCwUAA4IBAQCeh/6iHKJSaBYRVuSnKwiDhIQUnYA1YWlLIDCY
RDWnsq8AHQOhm3sfagiXMD4mblsyVKYktIqnSBrEmi7yMgvxatqVoqbAMpUJyJkL
TzSzly7PqLpRTzpXY6poKrXDA/+xYZq5RuzyHiwu4/ez8UGaEpo/4A0/tUvdAzau
5r9WMZlx23fTgXE1eXfj+/Znjy7koha7R186aBiEVBXrqMPDtpzh6RwdxfTSQdTR
YBLjzzxQwo9JJpB93eJW9MmN1nbsfHnDng6/mjog3DtAHO2S85F8+mone8BsWA80
Vm+fp/YDbL4z9rwsTnTh5zPcW8Evz+Z9pzYFC445sAL7KqVp
-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:05 2024 by rpki-client on console-fra.rpki-client.org