Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34372e302f32342d3234203d3e20323636383538.roa
File:                     34352e3233392e34372e302f32342d3234203d3e20323636383538.roa (raw, json)
Hash identifier:          L2YEcz9u0d1gNamfXnUCBHRw0dIKy0cgkJ2CFSw0Rlw=
Subject key identifier:   CB:CE:BC:A0:E8:EC:ED:C9:DD:EF:B0:37:F6:7E:A8:E1:C5:8F:C8:7A
Certificate issuer:       /CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
Certificate serial:       78F88FA64A65967886D4743F52120AF7EA95A5D7
Authority key identifier: 8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34372e302f32342d3234203d3e20323636383538.roa
Signing time:             Tue 05 Mar 2024 17:42:01 +0000
ROA not before:           Tue 05 Mar 2024 17:37:01 +0000
ROA not after:            Tue 04 Mar 2025 17:42:01 +0000
asID:                     266858
IP address blocks:        45.239.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f8:8f:a6:4a:65:96:78:86:d4:74:3f:52:12:0a:f7:ea:95:a5:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
        Validity
            Not Before: Mar  5 17:37:01 2024 GMT
            Not After : Mar  4 17:42:01 2025 GMT
        Subject: CN=CBCEBCA0E8ECEDC9DDEFB037F67EA8E1C58FC87A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:d9:5f:f6:c3:08:50:ef:5a:56:2b:7c:c2:
                    68:d8:dd:12:f4:73:09:d9:ec:c9:7b:58:2e:70:0f:
                    b6:74:8b:78:8f:4c:f7:b1:77:49:f9:7e:a5:5c:de:
                    8a:81:99:1c:4e:54:4f:40:aa:cb:3f:e7:4d:cd:a5:
                    bd:ef:2a:dc:93:d6:98:2b:f7:36:48:c0:0c:49:a2:
                    3f:36:53:7d:3a:83:41:ef:6e:4b:d8:a5:96:24:69:
                    1f:e2:2b:ad:73:a1:4e:54:c4:75:5b:fa:b5:16:aa:
                    13:6d:d4:11:f3:ca:0b:aa:e6:27:66:cc:fb:66:22:
                    ad:16:18:3e:36:21:7a:b0:68:fc:35:ae:e5:da:65:
                    e7:af:19:c6:be:ec:80:7a:06:69:87:ba:e6:70:7f:
                    fd:40:35:c1:30:f1:c0:09:4a:ea:cd:ad:39:03:ea:
                    cc:dd:52:16:26:2d:02:a6:f9:b2:8a:62:c2:9c:2d:
                    22:61:21:f0:6b:0d:83:46:bb:74:aa:07:f5:2c:16:
                    b3:7d:c9:dc:5f:95:05:c2:08:f7:99:aa:ff:0c:11:
                    1f:3d:a5:ab:0f:07:e7:06:2b:4a:5a:6a:59:24:21:
                    af:a3:15:dd:c1:84:d7:44:5d:bc:3e:39:ad:c7:12:
                    b2:35:71:e6:41:95:3d:8c:86:17:f1:48:c0:29:a7:
                    87:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CE:BC:A0:E8:EC:ED:C9:DD:EF:B0:37:F6:7E:A8:E1:C5:8F:C8:7A
            X509v3 Authority Key Identifier:
                keyid:8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34372e302f32342d3234203d3e20323636383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:84:87:fa:50:94:d8:20:3d:8d:90:53:ac:63:da:25:e5:11:
         d4:6c:ac:50:f5:e4:61:a3:9a:d6:28:9a:ad:6d:03:c9:59:c8:
         20:6a:25:4d:0e:1d:0c:0c:92:f9:60:ef:bb:87:fd:20:d1:f8:
         35:b8:8d:81:30:85:97:7e:36:52:a4:37:3a:49:e0:dc:9d:a2:
         b7:e2:ba:c2:0f:e5:8d:3a:cd:89:56:28:da:33:bd:d3:e0:5c:
         53:17:fe:62:18:f3:fd:7c:9d:eb:75:47:f1:4e:1f:e7:28:2a:
         0f:ce:7c:71:7f:17:d3:9c:a9:e8:5d:05:82:18:23:04:17:89:
         ab:4d:af:37:6b:09:b4:3f:5a:1f:e7:cf:d1:73:8c:83:17:dc:
         d0:38:49:23:49:73:a9:cc:20:98:3f:19:cd:0e:51:63:32:db:
         e7:c5:f6:34:4c:e8:11:05:4b:b6:a5:9e:b2:cf:c4:e9:5c:2c:
         41:c4:c1:d6:c9:df:b9:62:a6:8b:48:45:87:60:81:dd:04:55:
         9f:22:50:ba:a7:52:50:f9:f9:a3:96:13:aa:82:00:f9:a8:98:
         0c:62:fa:57:82:39:47:20:22:56:14:e7:ec:1a:d7:9d:8a:34:
         d0:c1:80:dc:af:52:94:ee:c6:4d:b9:8d:86:19:d7:1b:60:c2:
         b6:36:f9:e0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUePiPpkpllniG1HQ/UhIK9+qVpdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFCODlCRDJEQ0RBQjdCREZGOEY1NjhDMTAwQjI2OENB
MjJFNkJDMTAeFw0yNDAzMDUxNzM3MDFaFw0yNTAzMDQxNzQyMDFaMDMxMTAvBgNV
BAMTKENCQ0VCQ0EwRThFQ0VEQzlEREVGQjAzN0Y2N0VBOEUxQzU4RkM4N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Ztlf9sMIUO9aVit8wmjY3RL0
cwnZ7Ml7WC5wD7Z0i3iPTPexd0n5fqVc3oqBmRxOVE9Aqss/503Npb3vKtyT1pgr
9zZIwAxJoj82U306g0HvbkvYpZYkaR/iK61zoU5UxHVb+rUWqhNt1BHzyguq5idm
zPtmIq0WGD42IXqwaPw1ruXaZeevGca+7IB6BmmHuuZwf/1ANcEw8cAJSurNrTkD
6szdUhYmLQKm+bKKYsKcLSJhIfBrDYNGu3SqB/UsFrN9ydxflQXCCPeZqv8MER89
pasPB+cGK0paalkkIa+jFd3BhNdEXbw+Oa3HErI1ceZBlT2MhhfxSMApp4f9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUy868oOjs7cnd77A39n6o4cWPyHowHwYDVR0j
BBgwFoAUirib0tzat73/j1aMEAsmjKIua8EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQzVBN0VDNkQ3RkUwMzRGNDgzRjE1MTkwQkQ4NUI2Nzk5
RTM2MEM5ODNBRDY1ODQ5RTBDRkQwNzdDMzc5NkE1LzAvOEFCODlCRDJEQ0RBQjdC
REZGOEY1NjhDMTAwQjI2OENBMjJFNkJDMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QUI4OUJEMkRDREFCN0JERkY4
RjU2OEMxMDBCMjY4Q0EyMkU2QkMxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkM1QTdFQzZEN0ZFMDM0RjQ4M0YxNTE5MEJEODVCNjc5OUUzNjBDOTgz
QUQ2NTg0OUUwQ0ZEMDc3QzM3OTZBNS8wLzM0MzUyZTMyMzMzOTJlMzQzNzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM4MzUzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3vLzAN
BgkqhkiG9w0BAQsFAAOCAQEAnISH+lCU2CA9jZBTrGPaJeUR1GysUPXkYaOa1iia
rW0DyVnIIGolTQ4dDAyS+WDvu4f9INH4NbiNgTCFl342UqQ3Okng3J2it+K6wg/l
jTrNiVYo2jO90+BcUxf+Yhjz/Xyd63VH8U4f5ygqD858cX8X05yp6F0FghgjBBeJ
q02vN2sJtD9aH+fP0XOMgxfc0DhJI0lzqcwgmD8ZzQ5RYzLb58X2NEzoEQVLtqWe
ss/E6VwsQcTB1snfuWKmi0hFh2CB3QRVnyJQuqdSUPn5o5YTqoIA+aiYDGL6V4I5
RyAiVhTn7BrXnYo00MGA3K9SlO7GTbmNhhnXG2DCtjb54A==
-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:40 2024 by rpki-client on console-fra.rpki-client.org