Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/34352e3233392e33342e302f32332d3233203d3e20323636383435.roa
File:                     34352e3233392e33342e302f32332d3233203d3e20323636383435.roa (raw, json)
Hash identifier:          8oXkVjAA/a9pipMd4L0j1QuKiqvIpECpu6oMyTFthlo=
Subject key identifier:   B1:3D:5B:E6:78:6D:99:A7:84:FE:61:6C:45:2A:4D:0F:51:45:D9:69
Certificate issuer:       /CN=9C47A2CE71365140A7ACBE7252BB0916C054BE16
Certificate serial:       53C9052C6E9AD86E14A3285660BEDEC523F3AEDD
Authority key identifier: 9C:47:A2:CE:71:36:51:40:A7:AC:BE:72:52:BB:09:16:C0:54:BE:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/34352e3233392e33342e302f32332d3233203d3e20323636383435.roa
Signing time:             Tue 05 Mar 2024 17:55:17 +0000
ROA not before:           Tue 05 Mar 2024 17:50:17 +0000
ROA not after:            Tue 04 Mar 2025 17:55:17 +0000
asID:                     266845
IP address blocks:        45.239.34.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c9:05:2c:6e:9a:d8:6e:14:a3:28:56:60:be:de:c5:23:f3:ae:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C47A2CE71365140A7ACBE7252BB0916C054BE16
        Validity
            Not Before: Mar  5 17:50:17 2024 GMT
            Not After : Mar  4 17:55:17 2025 GMT
        Subject: CN=B13D5BE6786D99A784FE616C452A4D0F5145D969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1f:b0:f1:ff:e2:7a:b8:a5:08:ac:f2:64:28:
                    0a:f2:a5:cb:cd:ca:cf:57:5d:a0:8e:6e:b3:19:36:
                    bb:23:4d:77:d8:63:39:f0:47:4e:51:cb:94:23:fa:
                    9c:d8:ff:04:51:e5:f2:90:07:ab:e3:d6:7a:ba:08:
                    99:5d:d7:40:8d:8d:42:18:b3:20:3b:2f:74:92:82:
                    41:58:e8:4d:71:43:66:36:cc:80:98:d4:53:05:a5:
                    60:61:5f:71:d7:cd:89:3d:e6:d0:fd:76:56:8f:08:
                    17:9a:7d:08:d7:22:dc:9e:70:aa:38:bb:af:8f:4f:
                    3e:43:af:d3:70:78:1e:f6:36:96:4f:d3:7f:ad:e3:
                    32:74:d1:3c:16:ad:17:99:83:65:15:91:0e:12:90:
                    67:2a:ee:48:9f:28:56:82:f3:21:ca:19:f8:f2:a7:
                    47:19:f3:67:99:c0:1c:2e:72:a8:de:34:b3:41:ff:
                    ff:ca:fc:6e:84:4c:99:c9:6a:cc:dc:47:c8:f2:cf:
                    b3:2d:de:e6:4d:cd:92:45:a4:c7:f9:17:34:22:f4:
                    5d:93:c7:11:7c:7c:b7:3f:c1:eb:d0:35:e5:e6:eb:
                    da:37:e0:58:49:aa:62:0e:30:07:64:37:b9:50:f8:
                    41:9c:26:ce:6e:78:ee:11:7c:7c:b2:59:3e:d1:0f:
                    7e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3D:5B:E6:78:6D:99:A7:84:FE:61:6C:45:2A:4D:0F:51:45:D9:69
            X509v3 Authority Key Identifier:
                keyid:9C:47:A2:CE:71:36:51:40:A7:AC:BE:72:52:BB:09:16:C0:54:BE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/34352e3233392e33342e302f32332d3233203d3e20323636383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:cd:5d:6b:05:83:d1:df:f0:36:53:e4:63:d4:3f:95:2c:46:
         b2:97:d9:36:46:f0:b4:b6:3f:50:4f:a4:30:2e:43:64:05:46:
         28:11:e6:a2:23:8e:f3:9d:af:d4:d7:10:2a:fc:a4:be:b7:f7:
         80:38:32:1f:24:c7:a2:d6:73:57:42:9c:b2:3b:37:30:b5:c3:
         09:f6:b2:98:64:a8:7e:92:aa:e3:a6:53:3d:75:68:86:50:97:
         09:61:df:b1:7d:4d:cb:81:29:3b:01:93:69:5c:b8:31:c9:cc:
         97:9e:e1:b2:a8:4f:89:6b:57:0c:f3:be:a2:56:e9:26:8a:d4:
         c8:6f:d6:af:8d:d0:8d:04:0e:59:2b:46:b6:16:ba:83:a4:cb:
         5c:72:57:e1:5c:e5:44:d7:8d:29:21:10:83:ed:7f:09:b8:53:
         27:16:0f:63:d2:7d:af:e4:4e:be:a0:4a:cc:54:1d:ee:da:15:
         71:17:e4:c5:76:65:55:9f:8a:bf:84:b5:d1:cf:b3:60:82:cc:
         65:eb:4d:1c:dd:d7:0d:98:39:b2:f5:ee:4f:a0:b0:af:c5:39:
         d0:ac:40:c3:65:04:05:5b:d4:6d:2f:be:85:89:97:49:79:0c:
         9f:bf:2c:de:0f:63:98:99:0c:d4:20:d1:2c:40:0b:17:10:45:
         cb:bd:92:f8
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUU8kFLG6a2G4UoyhWYL7exSPzrt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM0N0EyQ0U3MTM2NTE0MEE3QUNCRTcyNTJCQjA5MTZD
MDU0QkUxNjAeFw0yNDAzMDUxNzUwMTdaFw0yNTAzMDQxNzU1MTdaMDMxMTAvBgNV
BAMTKEIxM0Q1QkU2Nzg2RDk5QTc4NEZFNjE2QzQ1MkE0RDBGNTE0NUQ5NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdH7Dx/+J6uKUIrPJkKArypcvN
ys9XXaCObrMZNrsjTXfYYznwR05Ry5Qj+pzY/wRR5fKQB6vj1nq6CJld10CNjUIY
syA7L3SSgkFY6E1xQ2Y2zICY1FMFpWBhX3HXzYk95tD9dlaPCBeafQjXItyecKo4
u6+PTz5Dr9NweB72NpZP03+t4zJ00TwWrReZg2UVkQ4SkGcq7kifKFaC8yHKGfjy
p0cZ82eZwBwucqjeNLNB///K/G6ETJnJaszcR8jyz7Mt3uZNzZJFpMf5FzQi9F2T
xxF8fLc/wevQNeXm69o34FhJqmIOMAdkN7lQ+EGcJs5ueO4RfHyyWT7RD37vAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUsT1b5nhtmaeE/mFsRSpND1FF2WkwHwYDVR0j
BBgwFoAUnEeiznE2UUCnrL5yUrsJFsBUvhYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DM0IzQzU5RTIzNkMzMjlBQzM4OUEwNjA2OUJBQUE2MTFE
ODlBNkI5NzczQURCOUZDQjU4MzQ4QTczRjlGOEIzLzAvOUM0N0EyQ0U3MTM2NTE0
MEE3QUNCRTcyNTJCQjA5MTZDMDU0QkUxNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QzQ3QTJDRTcxMzY1MTQwQTdB
Q0JFNzI1MkJCMDkxNkMwNTRCRTE2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzNCM0M1OUUyMzZDMzI5QUMzODlBMDYwNjlCQUFBNjExRDg5QTZCOTc3
M0FEQjlGQ0I1ODM0OEE3M0Y5RjhCMy8wLzM0MzUyZTMyMzMzOTJlMzMzNDJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNjM4MzQzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS3vIjAN
BgkqhkiG9w0BAQsFAAOCAQEAlc1dawWD0d/wNlPkY9Q/lSxGspfZNkbwtLY/UE+k
MC5DZAVGKBHmoiOO852v1NcQKvykvrf3gDgyHyTHotZzV0Kcsjs3MLXDCfaymGSo
fpKq46ZTPXVohlCXCWHfsX1Ny4EpOwGTaVy4McnMl57hsqhPiWtXDPO+olbpJorU
yG/Wr43QjQQOWStGtha6g6TLXHJX4VzlRNeNKSEQg+1/CbhTJxYPY9J9r+ROvqBK
zFQd7toVcRfkxXZlVZ+Kv4S10c+zYILMZetNHN3XDZg5svXuT6Cwr8U50KxAw2UE
BVvUbS++hYmXSXkMn78s3g9jmJkM1CDRLEALFxBFy72S+A==
-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:43 2024 by rpki-client on console-fra.rpki-client.org