Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135352e302f32342d3234203d3e20323636383434.roa
File:                     34352e3233382e3135352e302f32342d3234203d3e20323636383434.roa (raw, json)
Hash identifier:          RcsQou5whpDydevqorwJTAGLWCtZItaLAhVDKyGUO2E=
Subject key identifier:   C7:EE:60:95:F9:CF:79:90:EB:C2:86:65:7A:E4:51:5F:9F:13:B3:C0
Certificate issuer:       /CN=A070374834B30E4E1EAC2F337D7138EE06F6AB7A
Certificate serial:       56243EB47B265FDD81534014B9E8E06EB025ADA7
Authority key identifier: A0:70:37:48:34:B3:0E:4E:1E:AC:2F:33:7D:71:38:EE:06:F6:AB:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135352e302f32342d3234203d3e20323636383434.roa
Signing time:             Tue 05 Mar 2024 17:53:08 +0000
ROA not before:           Tue 05 Mar 2024 17:48:08 +0000
ROA not after:            Tue 04 Mar 2025 17:53:08 +0000
asID:                     266844
IP address blocks:        45.238.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:24:3e:b4:7b:26:5f:dd:81:53:40:14:b9:e8:e0:6e:b0:25:ad:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A070374834B30E4E1EAC2F337D7138EE06F6AB7A
        Validity
            Not Before: Mar  5 17:48:08 2024 GMT
            Not After : Mar  4 17:53:08 2025 GMT
        Subject: CN=C7EE6095F9CF7990EBC286657AE4515F9F13B3C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:32:9d:85:ae:8d:3d:bd:c2:64:d2:fb:43:a7:
                    bd:af:da:9c:37:b9:ac:f1:b9:72:d4:cb:da:a2:c9:
                    e7:75:d2:fe:a9:2a:9d:a2:8d:db:f0:bb:ee:f5:84:
                    fa:a7:9d:26:4d:d3:e8:e6:8c:7c:60:9d:01:bd:c8:
                    64:39:6a:3f:1d:16:39:76:f6:4f:49:50:5f:22:29:
                    04:e6:a0:26:02:24:df:98:21:89:ae:4a:1e:27:92:
                    83:8d:1d:8a:50:ae:bd:2d:02:dc:0f:ad:bc:3a:b7:
                    22:57:58:3c:45:08:bb:f2:62:1a:b7:44:6b:b1:9b:
                    6c:39:ef:49:e5:8c:f3:cd:7f:4d:48:ed:e3:28:3c:
                    0f:dc:33:f0:26:1e:7b:ba:a0:58:55:19:d7:c7:dc:
                    aa:74:da:30:40:dd:c5:6d:f5:a6:37:e5:98:59:c7:
                    ad:55:20:eb:89:a6:5e:69:97:e4:b6:2e:d3:15:87:
                    fa:92:b8:df:72:a4:de:7b:6b:f1:b3:b4:24:76:56:
                    55:be:8c:d4:7d:60:50:84:a2:2c:31:74:5c:91:c8:
                    f9:84:fa:f9:0b:c5:68:54:56:a6:18:90:71:a0:58:
                    b3:5d:3e:85:ff:b6:30:60:a2:b9:31:84:99:b6:5c:
                    9a:80:d3:d9:96:42:53:4e:12:5a:59:b9:94:f0:b2:
                    9c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EE:60:95:F9:CF:79:90:EB:C2:86:65:7A:E4:51:5F:9F:13:B3:C0
            X509v3 Authority Key Identifier:
                keyid:A0:70:37:48:34:B3:0E:4E:1E:AC:2F:33:7D:71:38:EE:06:F6:AB:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135352e302f32342d3234203d3e20323636383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:bf:23:3c:98:8c:ac:2b:7f:68:69:90:d8:49:a2:36:5b:9f:
         a8:34:80:85:d2:75:27:49:fc:b7:20:0b:01:5a:d5:ec:f3:0f:
         61:14:94:0b:51:78:0b:d7:a9:eb:af:69:22:ae:45:00:40:72:
         7d:bb:69:87:97:6f:2d:f8:da:8e:f3:5e:44:d5:04:07:86:91:
         e9:28:59:a4:26:18:23:3c:3c:27:e8:8a:67:3f:15:5e:37:9f:
         a1:80:b5:a6:a3:dd:fa:61:fe:f2:0d:69:a6:ad:d1:5c:d7:d8:
         05:10:94:d1:b2:1d:13:13:af:3e:7e:d0:cd:62:d1:73:44:bb:
         90:f0:1d:be:be:4e:a9:d6:01:2c:fd:83:00:b7:de:14:4d:5d:
         74:d2:2a:ec:7f:33:ee:f5:15:4f:f6:2f:46:ff:1f:34:a7:2a:
         1a:a1:dc:11:5b:24:6e:a8:fb:0d:e1:5b:ea:0e:b3:10:e3:42:
         0a:d4:6e:64:5c:8b:11:55:64:fa:2a:b4:95:cb:dc:d1:3f:c8:
         61:2e:6d:64:c4:22:55:fa:76:db:47:82:f9:eb:18:0d:63:83:
         5c:8a:c1:ec:cb:71:39:f0:b3:b8:ea:46:08:ab:12:52:cb:82:
         a0:08:65:3a:e4:2e:63:65:03:0c:e0:ca:76:5a:47:48:bb:c2:
         9b:ce:cb:f8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUViQ+tHsmX92BU0AUuejgbrAlracwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA3MDM3NDgzNEIzMEU0RTFFQUMyRjMzN0Q3MTM4RUUw
NkY2QUI3QTAeFw0yNDAzMDUxNzQ4MDhaFw0yNTAzMDQxNzUzMDhaMDMxMTAvBgNV
BAMTKEM3RUU2MDk1RjlDRjc5OTBFQkMyODY2NTdBRTQ1MTVGOUYxM0IzQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtMp2Fro09vcJk0vtDp72v2pw3
uazxuXLUy9qiyed10v6pKp2ijdvwu+71hPqnnSZN0+jmjHxgnQG9yGQ5aj8dFjl2
9k9JUF8iKQTmoCYCJN+YIYmuSh4nkoONHYpQrr0tAtwPrbw6tyJXWDxFCLvyYhq3
RGuxm2w570nljPPNf01I7eMoPA/cM/AmHnu6oFhVGdfH3Kp02jBA3cVt9aY35ZhZ
x61VIOuJpl5pl+S2LtMVh/qSuN9ypN57a/GztCR2VlW+jNR9YFCEoiwxdFyRyPmE
+vkLxWhUVqYYkHGgWLNdPoX/tjBgorkxhJm2XJqA09mWQlNOElpZuZTwspxfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUx+5glfnPeZDrwoZleuRRX58Ts8AwHwYDVR0j
BBgwFoAUoHA3SDSzDk4erC8zfXE47gb2q3owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMzk1RTNERUU1M0FFNDhGOTY3QkY5OTM2OTA0Nzk1MDQ3
NDc0MTM5RjdFN0Q0MTQ5QkZFMjU5N0NBRTNENzE4LzAvQTA3MDM3NDgzNEIzMEU0
RTFFQUMyRjMzN0Q3MTM4RUUwNkY2QUI3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMDcwMzc0ODM0QjMwRTRFMUVB
QzJGMzM3RDcxMzhFRTA2RjZBQjdBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDM5NUUzREVFNTNBRTQ4Rjk2N0JGOTkzNjkwNDc5NTA0NzQ3NDEzOUY3
RTdENDE0OUJGRTI1OTdDQUUzRDcxOC8wLzM0MzUyZTMyMzMzODJlMzEzNTM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzgzNDM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALe6b
MA0GCSqGSIb3DQEBCwUAA4IBAQCzvyM8mIysK39oaZDYSaI2W5+oNICF0nUnSfy3
IAsBWtXs8w9hFJQLUXgL16nrr2kirkUAQHJ9u2mHl28t+NqO815E1QQHhpHpKFmk
JhgjPDwn6IpnPxVeN5+hgLWmo936Yf7yDWmmrdFc19gFEJTRsh0TE68+ftDNYtFz
RLuQ8B2+vk6p1gEs/YMAt94UTV100irsfzPu9RVP9i9G/x80pyoaodwRWyRuqPsN
4VvqDrMQ40IK1G5kXIsRVWT6KrSVy9zRP8hhLm1kxCJV+nbbR4L56xgNY4NcisHs
y3E58LO46kYIqxJSy4KgCGU65C5jZQMM4Mp2WkdIu8Kbzsv4
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:42 2024 by rpki-client on console-fra.rpki-client.org