Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/34352e3138392e3134392e302f32342d3234203d3e203238343335.roa
File:                     34352e3138392e3134392e302f32342d3234203d3e203238343335.roa (raw, json)
Hash identifier:          wGtkWefOn5fdhOaKNhV3SXIgJFw9jy5+Y8ahQHD6TjY=
Subject key identifier:   D7:4C:38:1D:63:D5:B8:45:44:C4:46:6B:7C:DB:71:9E:13:C5:C0:A3
Certificate issuer:       /CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
Certificate serial:       25930D95AC668BAE5E2312BB01C204A057C49E75
Authority key identifier: 96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/34352e3138392e3134392e302f32342d3234203d3e203238343335.roa
Signing time:             Tue 05 Mar 2024 18:12:44 +0000
ROA not before:           Tue 05 Mar 2024 18:07:44 +0000
ROA not after:            Tue 04 Mar 2025 18:12:44 +0000
asID:                     28435
IP address blocks:        45.189.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:93:0d:95:ac:66:8b:ae:5e:23:12:bb:01:c2:04:a0:57:c4:9e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
        Validity
            Not Before: Mar  5 18:07:44 2024 GMT
            Not After : Mar  4 18:12:44 2025 GMT
        Subject: CN=D74C381D63D5B84544C4466B7CDB719E13C5C0A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c6:ed:66:12:57:14:b0:a7:9a:e2:ef:05:4c:
                    c4:c3:1f:b4:d8:01:74:90:22:8f:68:29:ab:4b:8c:
                    9d:11:f6:69:8b:e2:c1:bd:ce:4b:05:19:6b:d6:b2:
                    71:4f:9b:26:d4:6e:40:55:d0:9c:a7:58:ee:75:42:
                    18:93:6f:df:48:64:15:23:dc:93:8e:07:2c:a9:1d:
                    2b:36:78:5c:a1:0b:77:e0:e7:e6:27:29:94:d7:92:
                    0d:1b:42:91:84:f6:d5:e5:ea:49:cb:e0:b7:82:5a:
                    84:dd:f8:b2:ab:c5:2d:e2:92:c1:fd:3d:51:d9:29:
                    f5:e1:16:bd:b9:3f:fc:48:ab:77:71:21:a1:28:b2:
                    0d:ff:41:c5:56:da:b3:32:1d:f4:e7:9b:33:3c:10:
                    1e:01:27:01:52:62:65:34:b4:f3:44:36:1d:74:33:
                    e5:d7:9a:33:03:12:05:aa:19:76:5f:78:10:49:42:
                    bd:81:30:26:d7:7f:5e:a3:c8:71:c9:92:da:72:7f:
                    84:e8:c2:42:7d:30:8c:10:1e:b1:3f:52:b1:5b:a4:
                    72:b8:a1:af:4e:56:2c:a8:aa:1b:ca:67:f5:a9:75:
                    5a:aa:68:b9:af:88:71:25:8a:03:a1:6c:cd:d9:6a:
                    02:c4:c9:78:4f:a8:7a:24:87:68:77:84:f0:69:c8:
                    24:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4C:38:1D:63:D5:B8:45:44:C4:46:6B:7C:DB:71:9E:13:C5:C0:A3
            X509v3 Authority Key Identifier:
                keyid:96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/34352e3138392e3134392e302f32342d3234203d3e203238343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:d0:6f:6e:b2:59:20:e9:d5:a0:6c:6a:63:42:ac:ca:ed:d4:
         13:f2:f1:aa:f3:43:f5:16:79:f5:97:07:f6:4a:7f:3f:94:b6:
         bf:26:16:3d:6b:f0:e7:72:64:c2:f7:53:2a:d7:d8:c4:35:c9:
         c0:c2:cf:77:8f:8e:91:b4:21:8e:55:89:2c:30:bf:6a:96:51:
         81:80:28:a5:62:41:0c:14:4d:00:6b:b5:87:21:85:33:f7:8e:
         32:99:c2:48:af:b2:2c:a3:de:44:52:7c:4d:da:be:e5:b9:79:
         3e:70:1c:00:56:09:65:9c:1a:df:a0:ec:3c:72:be:90:09:ab:
         2f:66:0c:0d:fb:e0:7a:42:eb:80:e3:dd:76:28:07:0c:87:91:
         ba:76:68:fb:98:a2:e9:16:e7:9f:5d:39:87:3a:b4:d2:d6:d3:
         88:0d:8b:b1:83:1f:4f:22:06:a7:81:4d:b0:b5:40:c6:65:86:
         4c:b1:84:ca:07:43:c7:10:33:a1:73:e9:ac:54:ca:fe:07:5c:
         f6:7d:b9:f4:0f:03:62:79:14:0b:70:0d:c5:35:e4:96:80:87:
         a0:03:38:41:e2:39:88:0d:a3:76:1b:8c:d4:74:50:40:8d:c4:
         72:2d:02:2f:a8:d1:04:2c:f6:91:9c:7e:24:c9:54:da:0f:db:
         bc:f9:c5:13
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJZMNlaxmi65eIxK7AcIEoFfEnnUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYxNkYzNjdCQzE5MzRCQkNCNEE0MjI5M0Y4QzRBQkQ2
RUNFQkFFMDAeFw0yNDAzMDUxODA3NDRaFw0yNTAzMDQxODEyNDRaMDMxMTAvBgNV
BAMTKEQ3NEMzODFENjNENUI4NDU0NEM0NDY2QjdDREI3MTlFMTNDNUMwQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHxu1mElcUsKea4u8FTMTDH7TY
AXSQIo9oKatLjJ0R9mmL4sG9zksFGWvWsnFPmybUbkBV0JynWO51QhiTb99IZBUj
3JOOByypHSs2eFyhC3fg5+YnKZTXkg0bQpGE9tXl6knL4LeCWoTd+LKrxS3iksH9
PVHZKfXhFr25P/xIq3dxIaEosg3/QcVW2rMyHfTnmzM8EB4BJwFSYmU0tPNENh10
M+XXmjMDEgWqGXZfeBBJQr2BMCbXf16jyHHJktpyf4TowkJ9MIwQHrE/UrFbpHK4
oa9OViyoqhvKZ/WpdVqqaLmviHEligOhbM3ZagLEyXhPqHokh2h3hPBpyCQLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU10w4HWPVuEVExEZrfNtxnhPFwKMwHwYDVR0j
BBgwFoAUlhbzZ7wZNLvLSkIpP4xKvW7OuuAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNUFFQ0Y3MTY4RDJCN0IyNzMzOUUyNzEzNzVGRTQ5RjAy
RjU4MTQwNzU1MEQ5OTIyNTcyMjM1NEQwMUREMTlGLzAvOTYxNkYzNjdCQzE5MzRC
QkNCNEE0MjI5M0Y4QzRBQkQ2RUNFQkFFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NjE2RjM2N0JDMTkzNEJCQ0I0
QTQyMjkzRjhDNEFCRDZFQ0VCQUUwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzVBRUNGNzE2OEQyQjdCMjczMzlFMjcxMzc1RkU0OUYwMkY1ODE0MDc1
NTBEOTkyMjU3MjIzNTREMDFERDE5Ri8wLzM0MzUyZTMxMzgzOTJlMzEzNDM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODM0MzMzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC29lTAN
BgkqhkiG9w0BAQsFAAOCAQEALtBvbrJZIOnVoGxqY0Ksyu3UE/LxqvND9RZ59ZcH
9kp/P5S2vyYWPWvw53JkwvdTKtfYxDXJwMLPd4+OkbQhjlWJLDC/apZRgYAopWJB
DBRNAGu1hyGFM/eOMpnCSK+yLKPeRFJ8Tdq+5bl5PnAcAFYJZZwa36DsPHK+kAmr
L2YMDfvgekLrgOPddigHDIeRunZo+5ii6Rbnn105hzq00tbTiA2LsYMfTyIGp4FN
sLVAxmWGTLGEygdDxxAzoXPprFTK/gdc9n259A8DYnkUC3ANxTXkloCHoAM4QeI5
iA2jdhuM1HRQQI3Eci0CL6jRBCz2kZx+JMlU2g/bvPnFEw==
-----END CERTIFICATE-----
Generated at Sun Nov 24 13:13:48 2024 by rpki-client on console-fra.rpki-client.org