Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232342e302f32342d3234203d3e203532333238.roa
File:                     34352e3232372e3232342e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          ujxcL4ghWRxy8yld+Wl9wB1c8prAHCKI6ci5LYbl2AI=
Subject key identifier:   D2:E7:35:59:F8:7A:FD:5A:43:1D:C9:F5:F0:4F:D6:2D:AE:8E:1E:91
Certificate issuer:       /CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
Certificate serial:       1CA773D5027857C900D9F5C3D1A42E542FE79E9B
Authority key identifier: D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232342e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 18:02:49 +0000
ROA not before:           Tue 05 Mar 2024 17:57:49 +0000
ROA not after:            Tue 04 Mar 2025 18:02:49 +0000
asID:                     52328
IP address blocks:        45.227.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a7:73:d5:02:78:57:c9:00:d9:f5:c3:d1:a4:2e:54:2f:e7:9e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
        Validity
            Not Before: Mar  5 17:57:49 2024 GMT
            Not After : Mar  4 18:02:49 2025 GMT
        Subject: CN=D2E73559F87AFD5A431DC9F5F04FD62DAE8E1E91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2c:b3:5d:ff:05:f7:40:d1:ec:95:da:da:93:
                    06:ee:ae:31:a3:e8:ae:1d:3e:3e:9d:86:44:69:a2:
                    4c:be:f1:f3:a9:ec:51:77:bd:53:1d:9f:27:47:d0:
                    a6:d9:ee:04:eb:a3:ce:8b:64:eb:18:d5:48:68:48:
                    a9:9d:4d:34:88:9d:05:0c:11:52:87:dc:3f:c9:10:
                    55:8e:47:d2:a0:8a:f0:2a:53:69:ef:81:df:4f:6c:
                    51:1c:00:58:d8:d0:bf:ba:49:91:7a:6f:70:fb:26:
                    8e:80:ed:de:7a:ae:37:1c:6e:7b:57:30:51:3e:f7:
                    e3:fc:b7:81:9a:d3:d3:30:7d:91:1c:45:7d:c1:b9:
                    55:57:5d:f3:ea:81:40:49:e8:90:32:e3:b2:5a:12:
                    60:a1:b6:c1:d8:39:1a:20:ab:bd:55:36:84:42:8f:
                    ed:a1:18:ba:d9:9a:df:3e:24:e6:ba:8b:a7:2f:54:
                    73:a0:e5:c9:7d:a4:08:c8:e9:85:a8:00:9a:10:81:
                    b1:4f:e0:db:68:1e:aa:5e:70:93:bb:5b:6f:77:45:
                    55:74:6e:21:be:39:e3:8c:6a:28:f8:29:c9:4b:1a:
                    16:3e:67:0b:91:c5:74:d0:ab:e8:81:be:e2:23:d0:
                    e9:1d:ef:47:93:ec:8e:f6:2c:f1:46:d9:ed:ea:f8:
                    e6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E7:35:59:F8:7A:FD:5A:43:1D:C9:F5:F0:4F:D6:2D:AE:8E:1E:91
            X509v3 Authority Key Identifier:
                keyid:D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232342e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:d7:df:fd:72:03:61:7a:98:19:88:0e:fb:4f:eb:d0:ec:0f:
         3c:f3:6c:01:a0:86:58:66:e3:b6:fe:01:e6:e0:ca:12:87:81:
         fc:93:1f:cb:e9:14:3a:a2:38:a2:90:2d:39:a2:78:f9:93:30:
         d2:28:1a:79:0f:e6:5e:15:74:57:8c:a9:27:90:fe:1a:60:a4:
         f2:cb:56:fa:5f:1a:f4:ee:5a:22:80:e2:39:fd:24:f4:27:db:
         d0:b3:58:dd:dc:ec:ce:ef:37:17:9b:9f:66:3a:6c:6a:94:65:
         13:a2:eb:9f:2e:55:7e:34:c3:02:33:e7:0e:52:83:21:94:10:
         e9:47:74:ce:0f:2d:0d:17:73:01:8c:9c:05:5f:ea:fb:fe:2d:
         27:8a:bb:0d:0d:a0:ff:00:7a:38:02:fd:6b:b3:a6:fa:be:ab:
         f7:fe:6d:26:c0:44:d3:54:d5:bf:68:e4:c0:d9:3d:8a:a5:e8:
         f3:71:d4:b3:ff:2c:40:92:1b:33:92:5a:e5:eb:7c:e0:e5:2d:
         e1:04:1d:f0:70:6a:26:bb:90:bc:b2:0c:aa:df:fe:e4:04:48:
         6d:13:5f:2d:7d:3e:d1:70:4f:2a:f4:a8:2f:44:96:d5:78:4d:
         66:3b:2e:c4:bc:23:4c:2e:4a:ee:2c:ce:f4:d9:1b:bc:81:d1:
         5c:84:ad:d0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHKdz1QJ4V8kA2fXD0aQuVC/nnpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBGNjMyRjUwNkU5RjQzQkZEMUM4OUU3REMxNTYwRUIx
Nzc0NTM4QjAeFw0yNDAzMDUxNzU3NDlaFw0yNTAzMDQxODAyNDlaMDMxMTAvBgNV
BAMTKEQyRTczNTU5Rjg3QUZENUE0MzFEQzlGNUYwNEZENjJEQUU4RTFFOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLLLNd/wX3QNHsldrakwburjGj
6K4dPj6dhkRpoky+8fOp7FF3vVMdnydH0KbZ7gTro86LZOsY1UhoSKmdTTSInQUM
EVKH3D/JEFWOR9KgivAqU2nvgd9PbFEcAFjY0L+6SZF6b3D7Jo6A7d56rjccbntX
MFE+9+P8t4Ga09MwfZEcRX3BuVVXXfPqgUBJ6JAy47JaEmChtsHYORogq71VNoRC
j+2hGLrZmt8+JOa6i6cvVHOg5cl9pAjI6YWoAJoQgbFP4NtoHqpecJO7W293RVV0
biG+OeOMaij4KclLGhY+ZwuRxXTQq+iBvuIj0Okd70eT7I72LPFG2e3q+Oa5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU0uc1Wfh6/VpDHcn18E/WLa6OHpEwHwYDVR0j
BBgwFoAU0PYy9Qbp9Dv9HInn3BVg6xd0U4swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DN0U0MTZFRjhCNkNGQjNGOUFBNURBNDk5OUIxRTVDNzUx
RDRBMTIxNUFGQzcxQjE3MTc1Q0U0Q0YyRDJBMDZELzAvRDBGNjMyRjUwNkU5RjQz
QkZEMUM4OUU3REMxNTYwRUIxNzc0NTM4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMEY2MzJGNTA2RTlGNDNCRkQx
Qzg5RTdEQzE1NjBFQjE3NzQ1MzhCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzdFNDE2RUY4QjZDRkIzRjlBQTVEQTQ5OTlCMUU1Qzc1MUQ0QTEyMTVB
RkM3MUIxNzE3NUNFNENGMkQyQTA2RC8wLzM0MzUyZTMyMzIzNzJlMzIzMjM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3j4DAN
BgkqhkiG9w0BAQsFAAOCAQEAh9ff/XIDYXqYGYgO+0/r0OwPPPNsAaCGWGbjtv4B
5uDKEoeB/JMfy+kUOqI4opAtOaJ4+ZMw0igaeQ/mXhV0V4ypJ5D+GmCk8stW+l8a
9O5aIoDiOf0k9Cfb0LNY3dzszu83F5ufZjpsapRlE6Lrny5VfjTDAjPnDlKDIZQQ
6Ud0zg8tDRdzAYycBV/q+/4tJ4q7DQ2g/wB6OAL9a7Om+r6r9/5tJsBE01TVv2jk
wNk9iqXo83HUs/8sQJIbM5Ja5et84OUt4QQd8HBqJruQvLIMqt/+5ARIbRNfLX0+
0XBPKvSoL0SW1XhNZjsuxLwjTC5K7izO9NkbvIHRXISt0A==
-----END CERTIFICATE-----
Generated at Tue May 7 06:29:15 2024 by rpki-client on console-ams.rpki-client.org