Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/34352e36352e3230302e302f32342d3234203d3e20323637383933.roa
File:                     34352e36352e3230302e302f32342d3234203d3e20323637383933.roa (raw, json)
Hash identifier:          g4cox8aUWsOXytqpXK92lZdjOrIfetlcLjjI+WviRQI=
Subject key identifier:   6E:14:F7:5F:B5:0E:5A:7D:FC:B7:FE:E7:10:81:00:9D:FF:E3:5F:B3
Certificate issuer:       /CN=3FA213F071F512993E71744BA485B170F0449C83
Certificate serial:       2067732041CD66140753CB775AB519E3949562D5
Authority key identifier: 3F:A2:13:F0:71:F5:12:99:3E:71:74:4B:A4:85:B1:70:F0:44:9C:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FA213F071F512993E71744BA485B170F0449C83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/34352e36352e3230302e302f32342d3234203d3e20323637383933.roa
Signing time:             Tue 05 Mar 2024 18:03:05 +0000
ROA not before:           Tue 05 Mar 2024 17:58:05 +0000
ROA not after:            Tue 04 Mar 2025 18:03:05 +0000
asID:                     267893
IP address blocks:        45.65.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FA213F071F512993E71744BA485B170F0449C83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:67:73:20:41:cd:66:14:07:53:cb:77:5a:b5:19:e3:94:95:62:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA213F071F512993E71744BA485B170F0449C83
        Validity
            Not Before: Mar  5 17:58:05 2024 GMT
            Not After : Mar  4 18:03:05 2025 GMT
        Subject: CN=6E14F75FB50E5A7DFCB7FEE71081009DFFE35FB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b8:ba:a4:f0:23:a9:d1:7e:22:39:26:e2:f6:
                    98:23:86:81:e9:59:c0:eb:d3:e6:81:96:eb:e0:a4:
                    3b:d6:2d:5c:2d:5a:c3:06:4f:7c:2c:f5:ec:96:b1:
                    f2:bd:4b:6a:f7:3c:3c:70:e5:5b:fc:57:f2:07:c9:
                    a8:cb:99:64:37:79:46:e4:32:53:13:50:15:c3:f2:
                    fe:8c:c3:78:45:de:86:74:77:32:6f:a0:66:ef:b9:
                    4d:d9:8c:d6:a5:0d:c0:76:9e:0b:ef:f0:9b:5e:f7:
                    80:fd:06:1c:d5:28:16:bf:59:07:a4:98:b6:82:91:
                    ee:a6:52:54:b7:2f:61:d9:ab:9e:4f:47:7d:85:44:
                    76:5f:cb:5d:05:21:6a:6e:b8:96:4e:3c:3c:f5:60:
                    d8:85:11:ae:94:2b:e5:9c:cb:8a:af:33:e8:5f:c1:
                    39:b2:c4:9d:30:09:b0:24:60:2d:37:1e:1e:a6:ba:
                    c0:bd:dc:05:29:20:fc:c3:a6:03:fe:60:a2:74:ee:
                    d7:f1:b1:60:e6:d1:ac:92:e8:73:bf:ff:2c:87:e9:
                    d7:20:59:6e:ce:42:47:33:af:af:eb:87:29:25:ba:
                    90:d6:d5:f4:cd:aa:75:28:fc:82:4d:3b:b2:b6:71:
                    88:9f:29:6a:c9:0d:4e:cd:51:e8:a2:8b:89:db:03:
                    87:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:14:F7:5F:B5:0E:5A:7D:FC:B7:FE:E7:10:81:00:9D:FF:E3:5F:B3
            X509v3 Authority Key Identifier:
                keyid:3F:A2:13:F0:71:F5:12:99:3E:71:74:4B:A4:85:B1:70:F0:44:9C:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FA213F071F512993E71744BA485B170F0449C83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/34352e36352e3230302e302f32342d3234203d3e20323637383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:d4:78:60:fc:3f:bf:74:ee:6f:20:11:6b:3b:5d:71:1d:48:
         4c:7b:6b:9f:78:e8:5b:26:71:cc:ef:e9:f8:dc:3e:8c:c0:55:
         96:a0:6b:99:d3:7c:e2:f4:e3:2f:50:31:e3:cd:32:3d:aa:be:
         4e:15:88:b3:a2:aa:a0:de:36:9d:1f:cd:3f:2e:4c:b1:b3:8e:
         3d:83:88:f2:25:ea:39:a7:48:1e:30:04:e0:b4:26:05:b0:3e:
         8e:1a:30:8a:63:89:71:c4:18:54:fd:3f:69:c4:b6:d1:3c:d2:
         65:ed:47:54:f1:eb:4c:8f:a5:5d:37:8c:c2:1f:77:76:76:3e:
         d6:52:e5:85:d7:12:66:e3:05:c4:03:2e:55:8f:82:08:e3:a7:
         6b:8e:d2:a4:1d:af:d6:c0:1d:86:0f:25:b6:e1:da:9a:64:24:
         26:e1:de:78:34:fd:17:8d:cf:57:db:6a:ed:08:4d:eb:5e:36:
         6f:76:88:45:23:b6:33:45:36:8a:00:9b:49:c5:0a:a0:ea:89:
         6e:60:68:d3:c6:f5:1e:49:25:6d:e6:8e:e5:b9:68:3f:ff:aa:
         7a:dc:2b:c8:b1:b0:6d:da:19:b9:d6:4b:e8:37:7e:42:5b:7b:
         19:ef:e2:f6:c0:a4:a0:58:c1:13:bb:56:68:42:1f:2e:37:ae:
         a7:ac:33:bd
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUIGdzIEHNZhQHU8t3WrUZ45SVYtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZBMjEzRjA3MUY1MTI5OTNFNzE3NDRCQTQ4NUIxNzBG
MDQ0OUM4MzAeFw0yNDAzMDUxNzU4MDVaFw0yNTAzMDQxODAzMDVaMDMxMTAvBgNV
BAMTKDZFMTRGNzVGQjUwRTVBN0RGQ0I3RkVFNzEwODEwMDlERkZFMzVGQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUuLqk8COp0X4iOSbi9pgjhoHp
WcDr0+aBluvgpDvWLVwtWsMGT3ws9eyWsfK9S2r3PDxw5Vv8V/IHyajLmWQ3eUbk
MlMTUBXD8v6Mw3hF3oZ0dzJvoGbvuU3ZjNalDcB2ngvv8Jte94D9BhzVKBa/WQek
mLaCke6mUlS3L2HZq55PR32FRHZfy10FIWpuuJZOPDz1YNiFEa6UK+Wcy4qvM+hf
wTmyxJ0wCbAkYC03Hh6musC93AUpIPzDpgP+YKJ07tfxsWDm0ayS6HO//yyH6dcg
WW7OQkczr6/rhyklupDW1fTNqnUo/IJNO7K2cYifKWrJDU7NUeiii4nbA4c3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUbhT3X7UOWn38t/7nEIEAnf/jX7MwHwYDVR0j
BBgwFoAUP6IT8HH1Epk+cXRLpIWxcPBEnIMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQUZGNDc2OTYzQkVFRUZCQTkyNUU2MDk0QUQ2MUY4RkUx
MDhCNUQ0N0YyNDNBN0QyQzYyODhFMjNGQTRGNjY3LzAvM0ZBMjEzRjA3MUY1MTI5
OTNFNzE3NDRCQTQ4NUIxNzBGMDQ0OUM4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRkEyMTNGMDcxRjUxMjk5M0U3
MTc0NEJBNDg1QjE3MEYwNDQ5QzgzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkFGRjQ3Njk2M0JFRUVGQkE5MjVFNjA5NEFENjFGOEZFMTA4QjVENDdG
MjQzQTdEMkM2Mjg4RTIzRkE0RjY2Ny8wLzM0MzUyZTM2MzUyZTMyMzAzMDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM4MzkzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1ByDAN
BgkqhkiG9w0BAQsFAAOCAQEAMNR4YPw/v3TubyARaztdcR1ITHtrn3joWyZxzO/p
+Nw+jMBVlqBrmdN84vTjL1Ax480yPaq+ThWIs6KqoN42nR/NPy5MsbOOPYOI8iXq
OadIHjAE4LQmBbA+jhowimOJccQYVP0/acS20TzSZe1HVPHrTI+lXTeMwh93dnY+
1lLlhdcSZuMFxAMuVY+CCOOna47SpB2v1sAdhg8ltuHammQkJuHeeDT9F43PV9tq
7QhN6142b3aIRSO2M0U2igCbScUKoOqJbmBo08b1HkklbeaO5bloP/+qetwryLGw
bdoZudZL6Dd+Qlt7Ge/i9sCkoFjBE7tWaEIfLjeup6wzvQ==
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org