Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/34352e3136302e31322e302f32322d3234203d3e20323636383730.roa
File:                     34352e3136302e31322e302f32322d3234203d3e20323636383730.roa (raw, json)
Hash identifier:          bGvQhhq3zAdxN464HB3VVzSe9rPYzdcGacZSRUnUw4M=
Subject key identifier:   05:7F:EC:8C:73:62:1B:C7:CA:2D:FD:52:3B:4B:44:B7:AF:8F:03:94
Certificate issuer:       /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
Certificate serial:       3833CC65EA5164AE23656B87D27558895C6A832F
Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/34352e3136302e31322e302f32322d3234203d3e20323636383730.roa
Signing time:             Tue 05 Mar 2024 18:05:27 +0000
ROA not before:           Tue 05 Mar 2024 18:00:27 +0000
ROA not after:            Tue 04 Mar 2025 18:05:27 +0000
asID:                     266870
IP address blocks:        45.160.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:33:cc:65:ea:51:64:ae:23:65:6b:87:d2:75:58:89:5c:6a:83:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
        Validity
            Not Before: Mar  5 18:00:27 2024 GMT
            Not After : Mar  4 18:05:27 2025 GMT
        Subject: CN=057FEC8C73621BC7CA2DFD523B4B44B7AF8F0394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:ea:e2:da:f8:3a:a2:21:60:b3:25:1d:73:
                    67:4e:c4:1d:cf:27:72:6f:7b:11:8c:68:3c:5a:6a:
                    2c:95:c3:4d:f6:f8:86:90:0c:9f:cf:44:45:68:fa:
                    25:89:1e:09:11:68:44:5c:be:3f:b1:7c:7d:c5:6b:
                    39:d1:9f:c1:3b:da:ca:60:01:cb:7e:6b:2c:77:8a:
                    5b:54:51:3d:68:21:ef:ff:f2:84:06:0a:7c:2e:91:
                    5f:7b:75:24:28:a9:0a:c5:fe:6a:67:e8:4b:b8:ba:
                    da:39:32:57:ac:9c:49:6e:b3:d9:68:39:55:28:91:
                    93:80:cf:47:2b:07:b3:1a:0f:51:73:e8:42:f0:90:
                    9e:24:03:4e:86:fb:7c:bf:f1:87:d7:b7:e6:b9:75:
                    d6:a9:2a:fd:8e:16:96:c5:82:80:f6:fb:55:a7:1b:
                    81:f1:b8:d0:0c:a6:31:f8:80:fd:e6:19:23:af:86:
                    a6:82:b1:7a:59:64:5b:46:0d:43:f0:ff:23:2d:cc:
                    43:79:44:71:22:1c:0b:37:dc:83:55:3c:f6:45:f0:
                    a5:44:6e:fc:4a:4b:c2:33:e8:45:71:b6:ce:43:30:
                    3e:b0:e5:14:20:f6:54:04:80:81:5a:06:48:66:a8:
                    7b:79:a5:ce:e5:b9:b5:8f:68:67:b9:6e:91:5e:26:
                    42:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7F:EC:8C:73:62:1B:C7:CA:2D:FD:52:3B:4B:44:B7:AF:8F:03:94
            X509v3 Authority Key Identifier:
                keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/34352e3136302e31322e302f32322d3234203d3e20323636383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:29:1f:b8:8a:1a:86:35:f0:be:45:f9:b7:69:9d:bb:9f:94:
         80:30:c2:14:73:97:3f:ed:6f:04:2b:da:58:25:30:4a:05:d1:
         bf:8e:b1:61:f8:c1:64:d8:57:29:3c:a9:95:d7:43:91:cf:43:
         4e:1a:b8:97:a3:c2:3a:6a:54:19:4d:99:e2:68:f2:9f:48:e5:
         fa:35:8c:3e:2b:3a:07:c7:8b:2e:b8:3f:17:8d:d8:81:d3:6c:
         f0:25:7c:b1:cc:0e:25:a5:cb:7c:52:ce:a8:b5:f8:16:fa:92:
         5b:00:cf:d5:0b:b4:e0:79:80:82:0c:3e:a7:f4:64:ef:0e:01:
         86:cb:70:7b:32:c6:0d:6e:31:90:2c:1d:2a:69:df:dd:aa:a3:
         a8:d3:88:bc:b6:5d:09:55:a3:de:ab:5e:89:7c:a7:8e:04:d3:
         c8:b1:ba:e3:dd:3c:17:d0:99:ea:58:f8:cc:e8:13:8e:3f:21:
         72:f2:0b:56:39:a2:28:20:a5:2b:be:01:f6:81:fe:78:ed:6a:
         03:ad:97:22:75:cc:fe:42:32:c9:bd:62:0b:86:86:46:a5:e2:
         62:77:ee:df:f9:c3:0f:82:5e:c0:d2:65:ca:57:54:4d:f4:c9:
         df:56:97:00:7b:f7:a1:cb:13:83:f2:4a:da:5b:4c:b4:65:62:
         9d:24:48:d0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUODPMZepRZK4jZWuH0nVYiVxqgy8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EzMjVDNzU4QkQ5NUFFMjMzOEQzN0JCMzBGQ0EyN0I4
RkJFOERBOTAeFw0yNDAzMDUxODAwMjdaFw0yNTAzMDQxODA1MjdaMDMxMTAvBgNV
BAMTKDA1N0ZFQzhDNzM2MjFCQzdDQTJERkQ1MjNCNEI0NEI3QUY4RjAzOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzReri2vg6oiFgsyUdc2dOxB3P
J3JvexGMaDxaaiyVw032+IaQDJ/PREVo+iWJHgkRaERcvj+xfH3FaznRn8E72spg
Act+ayx3iltUUT1oIe//8oQGCnwukV97dSQoqQrF/mpn6Eu4uto5MlesnElus9lo
OVUokZOAz0crB7MaD1Fz6ELwkJ4kA06G+3y/8YfXt+a5ddapKv2OFpbFgoD2+1Wn
G4HxuNAMpjH4gP3mGSOvhqaCsXpZZFtGDUPw/yMtzEN5RHEiHAs33INVPPZF8KVE
bvxKS8Iz6EVxts5DMD6w5RQg9lQEgIFaBkhmqHt5pc7lubWPaGe5bpFeJkLJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUBX/sjHNiG8fKLf1SO0tEt6+PA5QwHwYDVR0j
BBgwFoAUyjJcdYvZWuIzjTe7MPyie4++jakwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMDkyN0Q0RTE4Rjc3RUZCNjAyQUUyMUQ1NjExQjg5QzZF
MkVCNEQxOTVCQTE4NDhERDk5NjFGODRBMEVEMkIyLzAvQ0EzMjVDNzU4QkQ5NUFF
MjMzOEQzN0JCMzBGQ0EyN0I4RkJFOERBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTMyNUM3NThCRDk1QUUyMzM4
RDM3QkIzMEZDQTI3QjhGQkU4REE5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzA5MjdENEUxOEY3N0VGQjYwMkFFMjFENTYxMUI4OUM2RTJFQjREMTk1
QkExODQ4REQ5OTYxRjg0QTBFRDJCMi8wLzM0MzUyZTMxMzYzMDJlMzEzMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM4MzczMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2gDDAN
BgkqhkiG9w0BAQsFAAOCAQEAISkfuIoahjXwvkX5t2mdu5+UgDDCFHOXP+1vBCva
WCUwSgXRv46xYfjBZNhXKTyplddDkc9DThq4l6PCOmpUGU2Z4mjyn0jl+jWMPis6
B8eLLrg/F43YgdNs8CV8scwOJaXLfFLOqLX4FvqSWwDP1Qu04HmAggw+p/Rk7w4B
hstwezLGDW4xkCwdKmnf3aqjqNOIvLZdCVWj3qteiXynjgTTyLG64908F9CZ6lj4
zOgTjj8hcvILVjmiKCClK74B9oH+eO1qA62XInXM/kIyyb1iC4aGRqXiYnfu3/nD
D4JewNJlyldUTfTJ31aXAHv3ocsTg/JK2ltMtGVinSRI0A==
-----END CERTIFICATE-----
Generated at Fri May 10 23:52:03 2024 by rpki-client on console-fra.rpki-client.org