Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32342d3234203d3e20323636383538.roa
File:                     34352e3233392e34342e302f32342d3234203d3e20323636383538.roa (raw, json)
Hash identifier:          gUlvdvHofuzvNTDV+PEQ7ogZo/Ie0YBD9YdLZzPH2yQ=
Subject key identifier:   CF:12:AC:D9:21:B1:BB:7F:B9:18:14:15:3C:C7:FA:04:C1:56:A0:71
Certificate issuer:       /CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
Certificate serial:       36637DED2DBE160A7027CAC461A32616D6E7BC9B
Authority key identifier: 8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32342d3234203d3e20323636383538.roa
Signing time:             Tue 05 Mar 2024 17:42:01 +0000
ROA not before:           Tue 05 Mar 2024 17:37:01 +0000
ROA not after:            Tue 04 Mar 2025 17:42:01 +0000
asID:                     266858
IP address blocks:        45.239.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:63:7d:ed:2d:be:16:0a:70:27:ca:c4:61:a3:26:16:d6:e7:bc:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
        Validity
            Not Before: Mar  5 17:37:01 2024 GMT
            Not After : Mar  4 17:42:01 2025 GMT
        Subject: CN=CF12ACD921B1BB7FB91814153CC7FA04C156A071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:12:b8:a8:b6:2e:49:49:3b:56:9b:08:44:07:
                    c8:bd:27:ed:89:e8:bd:69:d5:be:bc:80:0f:c0:f6:
                    56:8c:d3:8b:ab:9a:ad:f7:1e:3d:10:c4:9a:10:ed:
                    95:c3:0f:c6:43:09:e9:33:0f:44:e2:39:28:06:8e:
                    17:a9:b5:8f:7e:63:2c:bd:14:66:2a:56:60:d2:06:
                    01:5b:25:7c:44:0a:56:3a:d7:6a:92:5d:21:f0:b1:
                    22:5d:ca:17:49:19:04:3c:35:34:6b:4e:bf:6b:45:
                    14:a1:eb:b5:55:20:8e:f8:6a:d8:6a:df:e7:0c:61:
                    6e:ff:1b:24:29:17:54:b2:19:f8:a0:cf:d8:52:b9:
                    6d:07:cf:89:ab:9e:90:84:79:a4:28:ad:c7:c7:aa:
                    ca:75:1f:9b:c7:2a:4d:80:b2:35:5a:b6:04:2b:ae:
                    38:72:6c:d0:78:03:57:74:85:a1:fd:a8:82:4f:d8:
                    46:24:dc:15:99:b1:73:a2:e3:b0:5f:39:6d:64:e6:
                    b1:5d:8a:b4:8c:1a:91:94:50:c7:ca:bf:3c:fe:c4:
                    16:8e:f0:6b:9a:62:5e:c0:42:8d:b9:bd:4f:8b:ea:
                    fa:e7:0b:fb:83:94:da:3b:47:6e:86:99:02:f0:ec:
                    1d:86:c2:9b:7e:59:29:26:09:0e:48:26:34:30:19:
                    ce:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:12:AC:D9:21:B1:BB:7F:B9:18:14:15:3C:C7:FA:04:C1:56:A0:71
            X509v3 Authority Key Identifier:
                keyid:8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32342d3234203d3e20323636383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:69:57:ea:30:c7:d9:d6:cd:45:ed:ea:99:6e:11:ba:4b:b5:
         b0:91:2c:82:c8:10:9b:4c:aa:aa:05:17:72:54:e8:d7:4f:5b:
         d3:29:a2:30:11:ac:5f:78:6f:43:05:85:a3:66:e7:5e:86:70:
         ea:38:91:43:3a:03:0f:37:04:22:53:dd:47:5a:52:93:b6:66:
         ae:68:07:27:11:a8:0f:21:b2:8c:5c:a2:35:a8:39:9f:da:90:
         dc:71:04:4e:c8:9f:78:6d:57:ff:2a:87:66:93:04:95:02:35:
         20:77:f3:6d:a4:56:56:1f:5f:95:c5:1a:ae:8f:53:35:49:d3:
         76:c5:6e:b6:21:c8:41:2c:47:a8:f1:eb:72:1a:7b:ba:a2:2f:
         12:92:ba:e1:e9:7c:d0:03:a9:35:6e:c9:fb:a9:31:b0:91:e5:
         61:93:bd:3e:1f:f2:39:5a:6e:54:b0:a9:60:f5:a7:09:ac:ad:
         98:66:4f:fa:74:9e:11:d2:a9:cc:0d:e5:b8:8b:33:aa:65:07:
         67:46:1b:39:f3:56:65:d6:bf:29:98:db:16:dd:70:5d:e7:9e:
         c3:b1:66:64:b4:23:94:86:a8:57:5a:d7:87:42:f0:4f:bb:53:
         37:91:61:6d:7f:f6:5f:1c:f1:9b:64:01:de:e5:b0:74:d2:82:
         a3:09:8b:e6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNmN97S2+FgpwJ8rEYaMmFtbnvJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFCODlCRDJEQ0RBQjdCREZGOEY1NjhDMTAwQjI2OENB
MjJFNkJDMTAeFw0yNDAzMDUxNzM3MDFaFw0yNTAzMDQxNzQyMDFaMDMxMTAvBgNV
BAMTKENGMTJBQ0Q5MjFCMUJCN0ZCOTE4MTQxNTNDQzdGQTA0QzE1NkEwNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiErioti5JSTtWmwhEB8i9J+2J
6L1p1b68gA/A9laM04urmq33Hj0QxJoQ7ZXDD8ZDCekzD0TiOSgGjheptY9+Yyy9
FGYqVmDSBgFbJXxEClY612qSXSHwsSJdyhdJGQQ8NTRrTr9rRRSh67VVII74athq
3+cMYW7/GyQpF1SyGfigz9hSuW0Hz4mrnpCEeaQorcfHqsp1H5vHKk2AsjVatgQr
rjhybNB4A1d0haH9qIJP2EYk3BWZsXOi47BfOW1k5rFdirSMGpGUUMfKvzz+xBaO
8GuaYl7AQo25vU+L6vrnC/uDlNo7R26GmQLw7B2Gwpt+WSkmCQ5IJjQwGc7zAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUzxKs2SGxu3+5GBQVPMf6BMFWoHEwHwYDVR0j
BBgwFoAUirib0tzat73/j1aMEAsmjKIua8EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQzVBN0VDNkQ3RkUwMzRGNDgzRjE1MTkwQkQ4NUI2Nzk5
RTM2MEM5ODNBRDY1ODQ5RTBDRkQwNzdDMzc5NkE1LzAvOEFCODlCRDJEQ0RBQjdC
REZGOEY1NjhDMTAwQjI2OENBMjJFNkJDMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QUI4OUJEMkRDREFCN0JERkY4
RjU2OEMxMDBCMjY4Q0EyMkU2QkMxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkM1QTdFQzZEN0ZFMDM0RjQ4M0YxNTE5MEJEODVCNjc5OUUzNjBDOTgz
QUQ2NTg0OUUwQ0ZEMDc3QzM3OTZBNS8wLzM0MzUyZTMyMzMzOTJlMzQzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM4MzUzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3vLDAN
BgkqhkiG9w0BAQsFAAOCAQEACGlX6jDH2dbNRe3qmW4Ruku1sJEsgsgQm0yqqgUX
clTo109b0ymiMBGsX3hvQwWFo2bnXoZw6jiRQzoDDzcEIlPdR1pSk7ZmrmgHJxGo
DyGyjFyiNag5n9qQ3HEETsifeG1X/yqHZpMElQI1IHfzbaRWVh9flcUaro9TNUnT
dsVutiHIQSxHqPHrchp7uqIvEpK64el80AOpNW7J+6kxsJHlYZO9Ph/yOVpuVLCp
YPWnCaytmGZP+nSeEdKpzA3luIszqmUHZ0YbOfNWZda/KZjbFt1wXeeew7FmZLQj
lIaoV1rXh0LwT7tTN5FhbX/2Xxzxm2QB3uWwdNKCowmL5g==
-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:40 2024 by rpki-client on console-fra.rpki-client.org