Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232352e302f32342d3234203d3e203532333238.roa
File:                     34352e3232372e3232352e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          KcO2I4dWx9uoA50yQYaC/dHxBgCgVZ8+u6A5A80DMLY=
Subject key identifier:   E5:92:2A:D4:59:B5:FF:A5:7A:E8:86:D2:81:53:52:06:B3:1B:A6:F8
Certificate issuer:       /CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
Certificate serial:       486E258B42DCEB105438DE91A9AFB40FDA63AB22
Authority key identifier: D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232352e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 18:02:47 +0000
ROA not before:           Tue 05 Mar 2024 17:57:47 +0000
ROA not after:            Tue 04 Mar 2025 18:02:47 +0000
asID:                     52328
IP address blocks:        45.227.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6e:25:8b:42:dc:eb:10:54:38:de:91:a9:af:b4:0f:da:63:ab:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
        Validity
            Not Before: Mar  5 17:57:47 2024 GMT
            Not After : Mar  4 18:02:47 2025 GMT
        Subject: CN=E5922AD459B5FFA57AE886D281535206B31BA6F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:e1:f8:42:27:75:04:5e:fc:b7:a6:20:b9:
                    8f:58:09:6f:8e:0e:7d:3b:20:18:8c:7e:20:cc:77:
                    a7:ad:d2:9f:d3:87:8d:23:93:56:39:4b:ac:4d:96:
                    41:0f:16:51:8e:93:9d:20:8f:f7:aa:7b:35:db:cb:
                    47:ba:47:b1:60:fb:89:96:6c:c3:9b:24:b9:a6:53:
                    d4:5e:44:83:4e:17:20:19:32:4b:93:15:9c:7c:60:
                    a9:44:94:d6:3b:0d:5b:98:6b:f7:6b:bb:8e:55:58:
                    99:d6:7f:49:89:10:f1:b0:f7:5b:06:4c:ba:34:c4:
                    45:96:17:7d:02:31:c2:e2:49:cd:9e:a7:bd:de:ad:
                    15:ba:02:83:a1:dd:b2:d7:11:48:13:42:43:b4:db:
                    81:8b:76:fa:ae:8e:b1:98:a0:3f:a6:77:f2:d1:0e:
                    bb:c6:1d:e1:3f:9c:38:8e:19:88:fc:1d:f5:82:a3:
                    cc:74:7e:53:a5:38:21:b9:11:33:9f:0f:a6:ae:74:
                    e0:cc:7c:2c:88:75:32:40:b9:dd:be:05:13:47:92:
                    ce:d1:f8:be:70:c1:c4:81:2b:2f:f7:a3:15:29:34:
                    90:74:20:71:23:2a:9d:a6:a2:61:64:a3:90:81:48:
                    a1:0c:7c:64:57:4a:41:2a:64:a0:39:02:83:a5:29:
                    e1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:92:2A:D4:59:B5:FF:A5:7A:E8:86:D2:81:53:52:06:B3:1B:A6:F8
            X509v3 Authority Key Identifier:
                keyid:D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232352e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:93:08:58:8d:5a:50:43:41:89:2f:ea:37:03:62:98:8d:60:
         8c:9c:ab:cf:94:60:cf:93:99:cd:89:05:e3:58:c7:c9:a4:e2:
         82:2a:32:b2:de:44:56:c5:1f:dd:e8:93:c0:5c:95:1b:13:64:
         ff:57:34:b9:51:ae:f7:f0:2a:9b:bc:e5:60:74:da:71:7a:bf:
         96:75:5b:6d:e3:d0:8c:e0:de:e2:a0:ba:27:44:3a:7c:e2:91:
         c2:11:93:dc:29:b1:ff:8f:33:45:2b:13:33:da:cf:25:be:c6:
         29:e1:22:62:d2:6d:8d:17:4e:eb:8e:58:1e:56:ab:d9:d0:0a:
         5f:40:25:91:b5:8a:2c:8a:e2:14:93:36:31:9a:a6:90:a7:59:
         5d:fe:db:68:fd:7b:d3:2f:ac:35:ea:77:1b:d8:97:a1:bf:9b:
         ce:7c:69:ea:a3:38:17:8f:cb:6c:cc:3a:d3:32:1d:6b:4a:c4:
         db:35:3b:28:67:87:88:3c:ad:a5:54:d0:b7:94:fa:86:d7:6b:
         77:39:01:c1:cf:6b:c8:d2:f2:d4:df:51:2b:78:cb:c1:0b:30:
         34:33:d4:40:e5:36:d6:ca:30:b2:57:df:89:47:68:54:38:16:
         1b:54:f9:74:e2:b4:d4:30:97:7d:0a:28:27:c0:a8:ac:92:9b:
         42:70:b6:88
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSG4li0Lc6xBUON6Rqa+0D9pjqyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBGNjMyRjUwNkU5RjQzQkZEMUM4OUU3REMxNTYwRUIx
Nzc0NTM4QjAeFw0yNDAzMDUxNzU3NDdaFw0yNTAzMDQxODAyNDdaMDMxMTAvBgNV
BAMTKEU1OTIyQUQ0NTlCNUZGQTU3QUU4ODZEMjgxNTM1MjA2QjMxQkE2RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC/OH4Qid1BF78t6YguY9YCW+O
Dn07IBiMfiDMd6et0p/Th40jk1Y5S6xNlkEPFlGOk50gj/eqezXby0e6R7Fg+4mW
bMObJLmmU9ReRINOFyAZMkuTFZx8YKlElNY7DVuYa/dru45VWJnWf0mJEPGw91sG
TLo0xEWWF30CMcLiSc2ep73erRW6AoOh3bLXEUgTQkO024GLdvqujrGYoD+md/LR
DrvGHeE/nDiOGYj8HfWCo8x0flOlOCG5ETOfD6audODMfCyIdTJAud2+BRNHks7R
+L5wwcSBKy/3oxUpNJB0IHEjKp2momFko5CBSKEMfGRXSkEqZKA5AoOlKeHHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU5ZIq1Fm1/6V66IbSgVNSBrMbpvgwHwYDVR0j
BBgwFoAU0PYy9Qbp9Dv9HInn3BVg6xd0U4swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DN0U0MTZFRjhCNkNGQjNGOUFBNURBNDk5OUIxRTVDNzUx
RDRBMTIxNUFGQzcxQjE3MTc1Q0U0Q0YyRDJBMDZELzAvRDBGNjMyRjUwNkU5RjQz
QkZEMUM4OUU3REMxNTYwRUIxNzc0NTM4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMEY2MzJGNTA2RTlGNDNCRkQx
Qzg5RTdEQzE1NjBFQjE3NzQ1MzhCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzdFNDE2RUY4QjZDRkIzRjlBQTVEQTQ5OTlCMUU1Qzc1MUQ0QTEyMTVB
RkM3MUIxNzE3NUNFNENGMkQyQTA2RC8wLzM0MzUyZTMyMzIzNzJlMzIzMjM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3j4TAN
BgkqhkiG9w0BAQsFAAOCAQEAnJMIWI1aUENBiS/qNwNimI1gjJyrz5Rgz5OZzYkF
41jHyaTigioyst5EVsUf3eiTwFyVGxNk/1c0uVGu9/Aqm7zlYHTacXq/lnVbbePQ
jODe4qC6J0Q6fOKRwhGT3Cmx/48zRSsTM9rPJb7GKeEiYtJtjRdO645YHlar2dAK
X0AlkbWKLIriFJM2MZqmkKdZXf7baP170y+sNep3G9iXob+bznxp6qM4F4/LbMw6
0zIda0rE2zU7KGeHiDytpVTQt5T6htdrdzkBwc9ryNLy1N9RK3jLwQswNDPUQOU2
1sowslffiUdoVDgWG1T5dOK01DCXfQooJ8CorJKbQnC2iA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org