Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230392e302f32342d3234203d3e20323635373239.roa
File:                     34352e372e3230392e302f32342d3234203d3e20323635373239.roa (raw, json)
Hash identifier:          gWZtuDo5sIi1jEJSS13YCiS1hhF4EOsZZrFj+vqY79o=
Subject key identifier:   5D:CD:F5:50:35:CC:2D:8A:AC:8E:6E:7F:04:96:80:C9:12:D3:63:B6
Certificate issuer:       /CN=3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A
Certificate serial:       2C840310FD7815466A740F3A4C14FA7C6327A1CE
Authority key identifier: 3A:74:8E:67:E7:C3:9A:7A:19:6D:27:CB:2F:4D:E6:C9:B8:3D:42:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230392e302f32342d3234203d3e20323635373239.roa
Signing time:             Tue 05 Mar 2024 18:06:44 +0000
ROA not before:           Tue 05 Mar 2024 18:01:44 +0000
ROA not after:            Tue 04 Mar 2025 18:06:44 +0000
asID:                     265729
IP address blocks:        45.7.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:84:03:10:fd:78:15:46:6a:74:0f:3a:4c:14:fa:7c:63:27:a1:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A
        Validity
            Not Before: Mar  5 18:01:44 2024 GMT
            Not After : Mar  4 18:06:44 2025 GMT
        Subject: CN=5DCDF55035CC2D8AAC8E6E7F049680C912D363B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cc:ad:29:57:25:18:24:f4:a8:a0:b3:78:58:
                    6d:12:5b:ad:a1:c4:7c:28:11:ee:0e:cc:cf:71:a1:
                    54:71:f5:0c:c6:55:a2:06:06:12:98:2e:1d:2d:9b:
                    9f:a3:7d:69:f6:49:f7:c8:44:52:e1:0e:6c:4a:27:
                    81:1c:bb:a4:02:d6:b1:e6:54:e6:c1:e6:02:27:be:
                    99:cf:43:e5:2f:92:92:59:e6:3f:87:c5:62:5a:46:
                    2d:1c:65:77:94:bb:5b:ae:b6:dc:b1:bb:8d:71:7c:
                    24:b2:ef:67:be:a9:f7:a2:f4:0e:64:1f:9b:59:83:
                    1a:2e:f8:fe:f6:9b:47:b3:3d:ff:91:a3:32:3b:af:
                    71:c1:a0:1a:27:a6:ab:6e:e1:e8:04:f8:33:5e:94:
                    bb:22:5e:aa:4f:18:71:84:5d:18:6b:39:76:59:e6:
                    1c:ee:f0:39:4f:c6:c6:43:f4:70:97:8a:8f:df:af:
                    fc:dd:00:f5:ba:c3:a1:25:3f:e4:a4:e7:22:39:0a:
                    84:70:e7:88:10:c9:b5:e7:59:8e:23:a4:66:e5:06:
                    94:75:c8:e6:ab:a5:6c:f0:86:13:00:e9:a6:ad:ac:
                    b5:80:14:3a:c2:74:3c:4e:17:c7:3b:73:6e:5a:1b:
                    c6:d4:10:9d:25:80:14:e3:f8:2a:6f:27:20:7a:25:
                    a1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CD:F5:50:35:CC:2D:8A:AC:8E:6E:7F:04:96:80:C9:12:D3:63:B6
            X509v3 Authority Key Identifier:
                keyid:3A:74:8E:67:E7:C3:9A:7A:19:6D:27:CB:2F:4D:E6:C9:B8:3D:42:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230392e302f32342d3234203d3e20323635373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:ba:99:bb:2b:96:b3:c2:02:4a:91:b7:42:88:11:14:39:ea:
         9c:e6:9b:72:f0:72:21:b1:b0:fa:c9:2e:97:7c:c5:44:fc:9e:
         51:cb:17:6b:ff:03:8e:fb:79:8f:5a:ad:da:e7:43:3f:76:f1:
         48:71:6e:f8:ae:1e:31:08:a9:cf:60:cd:67:28:8c:46:4a:77:
         2b:be:12:d3:e5:bb:8d:ed:a1:35:a2:2d:f8:22:49:bf:d8:19:
         c6:1c:5b:03:49:b5:fe:ff:91:41:18:bf:04:3f:9a:a6:31:2e:
         60:14:d3:14:b9:62:8f:58:02:c5:21:b1:6c:b7:d7:1f:1a:2d:
         91:ad:ef:21:53:74:d8:5c:0b:fd:7d:02:b0:1b:78:41:49:8d:
         ef:3b:e3:47:53:d5:ac:29:8f:50:e3:a9:dd:6a:65:76:d0:ad:
         fd:25:b2:b7:1e:c3:e6:b5:cd:f7:c0:79:f3:18:1c:c4:67:d8:
         7b:a0:b6:3a:82:f6:59:74:66:b5:8d:00:c2:33:24:7a:8f:e0:
         c1:58:5c:99:8d:2a:4d:96:2c:0e:f5:3b:a3:b1:85:e8:54:e6:
         11:8c:20:50:68:ff:8d:9d:bd:f2:ec:91:ac:f8:f1:58:6a:20:
         b7:44:4c:d4:dd:62:0b:4b:42:d4:fb:d3:ba:5f:db:a2:ab:ad:
         c5:b0:d5:c3
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIULIQDEP14FUZqdA86TBT6fGMnoc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E3NDhFNjdFN0MzOUE3QTE5NkQyN0NCMkY0REU2QzlC
ODNENDI3QTAeFw0yNDAzMDUxODAxNDRaFw0yNTAzMDQxODA2NDRaMDMxMTAvBgNV
BAMTKDVEQ0RGNTUwMzVDQzJEOEFBQzhFNkU3RjA0OTY4MEM5MTJEMzYzQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzK0pVyUYJPSooLN4WG0SW62h
xHwoEe4OzM9xoVRx9QzGVaIGBhKYLh0tm5+jfWn2SffIRFLhDmxKJ4Ecu6QC1rHm
VObB5gInvpnPQ+UvkpJZ5j+HxWJaRi0cZXeUu1uuttyxu41xfCSy72e+qfei9A5k
H5tZgxou+P72m0ezPf+RozI7r3HBoBonpqtu4egE+DNelLsiXqpPGHGEXRhrOXZZ
5hzu8DlPxsZD9HCXio/fr/zdAPW6w6ElP+Sk5yI5CoRw54gQybXnWY4jpGblBpR1
yOarpWzwhhMA6aatrLWAFDrCdDxOF8c7c25aG8bUEJ0lgBTj+CpvJyB6JaEnAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUXc31UDXMLYqsjm5/BJaAyRLTY7YwHwYDVR0j
BBgwFoAUOnSOZ+fDmnoZbSfLL03mybg9QnowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRjlGMjY2OURDQTI4RTUyNTkxOUU0NEU0RkVEQ0Q1RkZE
MEZERjBGRUVBQTQyMzAyNTc0OUEzQ0FBMkM1NUZCLzAvM0E3NDhFNjdFN0MzOUE3
QTE5NkQyN0NCMkY0REU2QzlCODNENDI3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQTc0OEU2N0U3QzM5QTdBMTk2
RDI3Q0IyRjRERTZDOUI4M0Q0MjdBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0Y5RjI2NjlEQ0EyOEU1MjU5MTlFNDRFNEZFRENENUZGRDBGREYwRkVF
QUE0MjMwMjU3NDlBM0NBQTJDNTVGQi8wLzM0MzUyZTM3MmUzMjMwMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNzMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtB9EwDQYJ
KoZIhvcNAQELBQADggEBAKW6mbsrlrPCAkqRt0KIERQ56pzmm3LwciGxsPrJLpd8
xUT8nlHLF2v/A477eY9ardrnQz928UhxbviuHjEIqc9gzWcojEZKdyu+EtPlu43t
oTWiLfgiSb/YGcYcWwNJtf7/kUEYvwQ/mqYxLmAU0xS5Yo9YAsUhsWy31x8aLZGt
7yFTdNhcC/19ArAbeEFJje8740dT1awpj1Djqd1qZXbQrf0lsrcew+a1zffAefMY
HMRn2HugtjqC9ll0ZrWNAMIzJHqP4MFYXJmNKk2WLA71O6OxhehU5hGMIFBo/42d
vfLskaz48VhqILdETNTdYgtLQtT707pf26KrrcWw1cM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:06 2024 by rpki-client on console-ams.rpki-client.org