Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFFFB211ADF2CF89D3DC16CAAD3507A71D73679F1347B0B06DEC2C1A463C5739/0/34352e3139302e3138342e302f32322d3234203d3e203532343638.roa
File:                     34352e3139302e3138342e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          Soo/ycTP054lOB7rqS8zb5qSokR/eS2kbJZObJCypF8=
Subject key identifier:   F7:F2:BB:39:D5:C0:26:6D:06:8C:CD:B9:E2:52:F4:71:E8:BF:4C:E4
Certificate issuer:       /CN=5C6C51BA0F3F312CC2221019C1183719A9647AE7
Certificate serial:       63E0339CEEA03B89D3F53CD1F2270A4E6B9C3FED
Authority key identifier: 5C:6C:51:BA:0F:3F:31:2C:C2:22:10:19:C1:18:37:19:A9:64:7A:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C6C51BA0F3F312CC2221019C1183719A9647AE7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFFFB211ADF2CF89D3DC16CAAD3507A71D73679F1347B0B06DEC2C1A463C5739/0/34352e3139302e3138342e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:05:14 +0000
ROA not before:           Tue 05 Mar 2024 18:00:14 +0000
ROA not after:            Tue 04 Mar 2025 18:05:14 +0000
asID:                     52468
IP address blocks:        45.190.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFFFB211ADF2CF89D3DC16CAAD3507A71D73679F1347B0B06DEC2C1A463C5739/0/5C6C51BA0F3F312CC2221019C1183719A9647AE7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFFFB211ADF2CF89D3DC16CAAD3507A71D73679F1347B0B06DEC2C1A463C5739/0/5C6C51BA0F3F312CC2221019C1183719A9647AE7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C6C51BA0F3F312CC2221019C1183719A9647AE7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e0:33:9c:ee:a0:3b:89:d3:f5:3c:d1:f2:27:0a:4e:6b:9c:3f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C6C51BA0F3F312CC2221019C1183719A9647AE7
        Validity
            Not Before: Mar  5 18:00:14 2024 GMT
            Not After : Mar  4 18:05:14 2025 GMT
        Subject: CN=F7F2BB39D5C0266D068CCDB9E252F471E8BF4CE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:55:1d:c1:81:90:c6:e6:43:f8:7b:49:df:85:
                    c2:8f:a0:e7:73:10:6c:d3:09:70:b0:2f:11:2c:5f:
                    47:ad:4a:70:38:30:de:1c:c9:14:aa:f4:dd:de:f8:
                    c1:49:26:b5:14:98:af:d3:f4:f5:a1:03:0e:ab:49:
                    cc:96:9a:9a:2f:1d:09:f4:a7:fa:fe:1f:a3:44:b4:
                    5f:49:08:1a:14:ba:16:c5:57:8e:09:f4:fc:61:c0:
                    9b:6c:1f:d5:39:76:c3:14:ea:d9:39:09:c5:c5:55:
                    68:c1:39:9c:17:cb:7a:06:bd:a8:38:eb:6b:7c:7c:
                    fb:63:5f:c5:06:a9:7a:6e:c6:1d:94:7c:1f:73:fd:
                    53:b0:d0:02:c5:24:58:ef:82:00:46:71:fd:86:0f:
                    b6:d3:72:2c:32:28:80:3e:8f:0d:2d:24:32:8b:23:
                    2b:bd:cc:8e:d8:50:ee:d4:16:cf:70:26:67:4a:1c:
                    b3:2b:60:17:93:97:98:bc:c2:46:dc:5c:44:ec:6a:
                    be:21:0f:b0:cb:10:49:e5:72:72:65:c6:17:15:69:
                    98:e8:cb:cb:aa:67:f9:4f:bb:26:00:48:4f:39:65:
                    3a:1e:80:0e:fe:1a:c7:58:76:78:55:d0:41:c2:c3:
                    a1:93:03:66:9d:60:ce:e1:a9:70:d0:16:12:e6:31:
                    18:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F2:BB:39:D5:C0:26:6D:06:8C:CD:B9:E2:52:F4:71:E8:BF:4C:E4
            X509v3 Authority Key Identifier:
                keyid:5C:6C:51:BA:0F:3F:31:2C:C2:22:10:19:C1:18:37:19:A9:64:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFFFB211ADF2CF89D3DC16CAAD3507A71D73679F1347B0B06DEC2C1A463C5739/0/5C6C51BA0F3F312CC2221019C1183719A9647AE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C6C51BA0F3F312CC2221019C1183719A9647AE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFFFB211ADF2CF89D3DC16CAAD3507A71D73679F1347B0B06DEC2C1A463C5739/0/34352e3139302e3138342e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:cd:f0:82:59:24:9d:01:2b:5c:94:a6:ab:43:a8:b0:51:38:
         f0:93:5e:75:6d:aa:0b:81:5f:f8:0e:ae:c6:26:13:db:05:7b:
         22:de:23:0f:8e:66:0b:fe:b5:6d:15:67:99:96:8c:e4:cd:a2:
         a5:6f:51:23:9d:7e:81:5c:ab:be:df:2b:6e:12:69:e6:8f:73:
         fb:ba:62:2e:ac:88:27:a3:6c:f6:f4:f1:99:fa:f3:28:60:b8:
         f4:22:c8:b2:a5:b9:f1:86:01:e4:1f:68:b8:59:3a:78:63:01:
         ee:65:70:f0:90:5e:1d:31:bc:c6:28:75:52:dd:41:e9:1c:56:
         76:e8:e0:ba:8f:fa:5c:41:48:2a:b5:e7:98:9e:e7:53:c6:3d:
         95:17:71:ce:01:6f:b9:45:47:79:e1:27:40:ce:dd:a9:2f:23:
         1b:22:8c:1c:b3:f4:cf:0e:1f:dc:2d:db:e3:28:4e:8d:6a:c7:
         8e:81:7b:d8:62:23:e7:01:ca:47:6f:5f:1a:bd:05:b2:34:f9:
         c8:8a:e1:40:8c:bf:bf:6a:73:1d:b4:e6:d8:23:97:f6:15:01:
         25:18:8b:8f:0f:3a:ea:6c:41:f7:d7:71:cf:8c:75:29:d9:d0:
         5f:10:9e:e3:77:ef:c5:ee:6b:75:2b:69:3d:b8:a0:c9:e0:55:
         02:22:2a:a5
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUY+AznO6gO4nT9TzR8icKTmucP+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM2QzUxQkEwRjNGMzEyQ0MyMjIxMDE5QzExODM3MTlB
OTY0N0FFNzAeFw0yNDAzMDUxODAwMTRaFw0yNTAzMDQxODA1MTRaMDMxMTAvBgNV
BAMTKEY3RjJCQjM5RDVDMDI2NkQwNjhDQ0RCOUUyNTJGNDcxRThCRjRDRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpVR3BgZDG5kP4e0nfhcKPoOdz
EGzTCXCwLxEsX0etSnA4MN4cyRSq9N3e+MFJJrUUmK/T9PWhAw6rScyWmpovHQn0
p/r+H6NEtF9JCBoUuhbFV44J9PxhwJtsH9U5dsMU6tk5CcXFVWjBOZwXy3oGvag4
62t8fPtjX8UGqXpuxh2UfB9z/VOw0ALFJFjvggBGcf2GD7bTciwyKIA+jw0tJDKL
Iyu9zI7YUO7UFs9wJmdKHLMrYBeTl5i8wkbcXETsar4hD7DLEEnlcnJlxhcVaZjo
y8uqZ/lPuyYASE85ZToegA7+GsdYdnhV0EHCw6GTA2adYM7hqXDQFhLmMRizAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU9/K7OdXAJm0GjM254lL0cei/TOQwHwYDVR0j
BBgwFoAUXGxRug8/MSzCIhAZwRg3GalkeucwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRkZGQjIxMUFERjJDRjg5RDNEQzE2Q0FBRDM1MDdBNzFE
NzM2NzlGMTM0N0IwQjA2REVDMkMxQTQ2M0M1NzM5LzAvNUM2QzUxQkEwRjNGMzEy
Q0MyMjIxMDE5QzExODM3MTlBOTY0N0FFNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QzZDNTFCQTBGM0YzMTJDQzIy
MjEwMTlDMTE4MzcxOUE5NjQ3QUU3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkZGRkIyMTFBREYyQ0Y4OUQzREMxNkNBQUQzNTA3QTcxRDczNjc5RjEz
NDdCMEIwNkRFQzJDMUE0NjNDNTczOS8wLzM0MzUyZTMxMzkzMDJlMzEzODM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2+uDAN
BgkqhkiG9w0BAQsFAAOCAQEArc3wglkknQErXJSmq0OosFE48JNedW2qC4Ff+A6u
xiYT2wV7It4jD45mC/61bRVnmZaM5M2ipW9RI51+gVyrvt8rbhJp5o9z+7piLqyI
J6Ns9vTxmfrzKGC49CLIsqW58YYB5B9ouFk6eGMB7mVw8JBeHTG8xih1Ut1B6RxW
dujguo/6XEFIKrXnmJ7nU8Y9lRdxzgFvuUVHeeEnQM7dqS8jGyKMHLP0zw4f3C3b
4yhOjWrHjoF72GIj5wHKR29fGr0FsjT5yIrhQIy/v2pzHbTm2COX9hUBJRiLjw86
6mxB99dxz4x1KdnQXxCe43fvxe5rdStpPbigyeBVAiIqpQ==
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org