Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/34352e3136322e37362e302f32322d3234203d3e20323632353839.roa
File:                     34352e3136322e37362e302f32322d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          XoP5c3R2w1EAPH1TDU9tHlBFsBHGt5k/bhrhOPhWZb4=
Subject key identifier:   43:F5:88:AD:CF:7C:0F:94:DA:EE:41:C0:66:A5:2A:51:40:0C:C6:33
Certificate issuer:       /CN=02ED3395A01A385371573CF59B1E5D8F2BF6D57E
Certificate serial:       42E8B4F0CF875BFA5198A3CDA9D1584F734ADC53
Authority key identifier: 02:ED:33:95:A0:1A:38:53:71:57:3C:F5:9B:1E:5D:8F:2B:F6:D5:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/34352e3136322e37362e302f32322d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 17:57:55 +0000
ROA not before:           Tue 05 Mar 2024 17:52:55 +0000
ROA not after:            Tue 04 Mar 2025 17:57:55 +0000
asID:                     262589
IP address blocks:        45.162.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e8:b4:f0:cf:87:5b:fa:51:98:a3:cd:a9:d1:58:4f:73:4a:dc:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ED3395A01A385371573CF59B1E5D8F2BF6D57E
        Validity
            Not Before: Mar  5 17:52:55 2024 GMT
            Not After : Mar  4 17:57:55 2025 GMT
        Subject: CN=43F588ADCF7C0F94DAEE41C066A52A51400CC633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:69:d8:cd:97:5a:17:3e:84:b2:8b:a1:33:
                    71:e4:06:fe:f2:d9:2a:fe:4a:48:bb:90:e6:48:ef:
                    95:f6:97:8a:8e:6b:93:0b:53:9e:22:d0:dc:05:5b:
                    77:6c:14:c8:3a:3a:76:31:3d:89:5c:0a:ce:bc:f2:
                    36:76:e8:30:1c:a5:07:5d:aa:71:ee:7d:8d:71:1c:
                    69:f1:96:fb:75:05:05:e9:d1:0a:ed:92:d0:fb:b7:
                    76:2c:1c:08:e4:93:8a:ec:64:7d:6e:b7:38:be:17:
                    b8:f3:ac:e4:a7:d8:ee:a7:ac:7b:24:69:5b:4a:e1:
                    c4:df:bd:5a:54:b9:c2:fc:8b:97:68:e2:5d:99:3e:
                    48:cb:3c:07:95:0e:9c:0b:c5:e9:bc:0b:8f:cb:b2:
                    85:7e:6f:6d:e3:c2:a8:33:60:57:14:86:94:6a:ad:
                    a6:7f:6a:18:e3:5a:e6:c8:81:97:0c:b3:a0:ce:73:
                    9a:d9:17:ca:0b:38:91:d9:0a:a7:f6:ed:29:75:3c:
                    25:0e:69:9f:0f:46:14:f4:33:68:bb:e8:93:8e:fb:
                    0e:b8:fd:0d:a0:75:ef:e5:54:54:89:89:e5:e0:e4:
                    83:6a:8b:3f:8b:6e:d1:c5:84:06:80:d3:ae:1f:de:
                    67:c8:23:35:6d:72:9e:ec:3c:14:dc:99:fa:19:87:
                    6c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F5:88:AD:CF:7C:0F:94:DA:EE:41:C0:66:A5:2A:51:40:0C:C6:33
            X509v3 Authority Key Identifier:
                keyid:02:ED:33:95:A0:1A:38:53:71:57:3C:F5:9B:1E:5D:8F:2B:F6:D5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/34352e3136322e37362e302f32322d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:17:05:fb:cb:25:c6:23:70:ee:a7:f8:1c:cc:a0:d3:85:07:
         76:71:e0:36:89:dc:30:5f:2a:a2:4c:7c:02:df:49:0b:dd:7e:
         95:b5:97:0a:23:69:a0:18:f4:80:3f:37:3d:7e:bb:85:5e:9e:
         79:a5:31:10:83:1f:9e:ec:54:9c:2d:c1:9c:47:60:49:57:8c:
         ea:a5:2b:a2:b7:40:86:83:81:0b:47:42:4f:82:83:7b:07:56:
         66:d4:26:f5:68:f6:16:7d:f9:56:4e:77:17:1f:1d:f6:fe:77:
         5e:e4:08:bb:9a:0b:d6:f8:02:36:7a:a6:a4:94:66:dc:25:ec:
         dd:12:31:d5:49:aa:41:25:78:5c:fe:cf:ef:3e:c7:db:61:f6:
         31:02:b2:91:78:e5:be:13:b1:2f:d9:2e:e5:6f:f7:3c:07:c8:
         3b:85:89:ba:1b:7d:9c:18:3b:92:ea:92:fa:5a:f6:7a:ee:81:
         2e:e3:83:f7:3e:e4:7c:b9:da:cf:c2:43:7e:73:7c:09:7c:ec:
         9a:76:7e:d6:40:ff:fd:ef:e8:64:dc:eb:b9:0b:d8:be:dd:c4:
         94:2c:0f:fa:f5:87:43:e9:d5:b9:15:41:1e:4b:d3:50:02:dd:
         b8:80:d1:b7:42:26:1b:fa:06:39:d3:1b:e0:89:63:e5:e0:fc:
         2b:47:e0:ee
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQui08M+HW/pRmKPNqdFYT3NK3FMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJFRDMzOTVBMDFBMzg1MzcxNTczQ0Y1OUIxRTVEOEYy
QkY2RDU3RTAeFw0yNDAzMDUxNzUyNTVaFw0yNTAzMDQxNzU3NTVaMDMxMTAvBgNV
BAMTKDQzRjU4OEFEQ0Y3QzBGOTREQUVFNDFDMDY2QTUyQTUxNDAwQ0M2MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4tmnYzZdaFz6EsouhM3HkBv7y
2Sr+Ski7kOZI75X2l4qOa5MLU54i0NwFW3dsFMg6OnYxPYlcCs688jZ26DAcpQdd
qnHufY1xHGnxlvt1BQXp0QrtktD7t3YsHAjkk4rsZH1utzi+F7jzrOSn2O6nrHsk
aVtK4cTfvVpUucL8i5do4l2ZPkjLPAeVDpwLxem8C4/LsoV+b23jwqgzYFcUhpRq
raZ/ahjjWubIgZcMs6DOc5rZF8oLOJHZCqf27Sl1PCUOaZ8PRhT0M2i76JOO+w64
/Q2gde/lVFSJieXg5INqiz+LbtHFhAaA064f3mfIIzVtcp7sPBTcmfoZh2yPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUQ/WIrc98D5Ta7kHAZqUqUUAMxjMwHwYDVR0j
BBgwFoAUAu0zlaAaOFNxVzz1mx5djyv21X4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9COUQxREY0NUU5QTg2Q0RBMUNGRTk1QkM1RTU3OTZFREVB
QkQyMTRBOEIwN0M5NEJCOUQ2NjI4RDA2NTZBRTExLzAvMDJFRDMzOTVBMDFBMzg1
MzcxNTczQ0Y1OUIxRTVEOEYyQkY2RDU3RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMkVEMzM5NUEwMUEzODUzNzE1
NzNDRjU5QjFFNUQ4RjJCRjZENTdFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjlEMURGNDVFOUE4NkNEQTFDRkU5NUJDNUU1Nzk2RURFQUJEMjE0QThC
MDdDOTRCQjlENjYyOEQwNjU2QUUxMS8wLzM0MzUyZTMxMzYzMjJlMzczNjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzMjM1MzgzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2iTDAN
BgkqhkiG9w0BAQsFAAOCAQEAYBcF+8slxiNw7qf4HMyg04UHdnHgNoncMF8qokx8
At9JC91+lbWXCiNpoBj0gD83PX67hV6eeaUxEIMfnuxUnC3BnEdgSVeM6qUrordA
hoOBC0dCT4KDewdWZtQm9Wj2Fn35Vk53Fx8d9v53XuQIu5oL1vgCNnqmpJRm3CXs
3RIx1UmqQSV4XP7P7z7H22H2MQKykXjlvhOxL9ku5W/3PAfIO4WJuht9nBg7kuqS
+lr2eu6BLuOD9z7kfLnaz8JDfnN8CXzsmnZ+1kD//e/oZNzruQvYvt3ElCwP+vWH
Q+nVuRVBHkvTUALduIDRt0ImG/oGOdMb4Ilj5eD8K0fg7g==
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org