Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/34352e342e3231362e302f32322d3234203d3e203532333631.roa
File:                     34352e342e3231362e302f32322d3234203d3e203532333631.roa (raw, json)
Hash identifier:          QcnQLYE7edBLIHINgm2KaUYyV0HjjKw5+xXSggwN6zw=
Subject key identifier:   69:70:51:6E:77:12:39:6F:B1:BE:C1:92:05:9A:14:34:C7:AC:52:60
Certificate issuer:       /CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
Certificate serial:       5D8B003C8620E6FBCA11074553A69821613E15BA
Authority key identifier: 60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/34352e342e3231362e302f32322d3234203d3e203532333631.roa
Signing time:             Tue 05 Mar 2024 18:15:41 +0000
ROA not before:           Tue 05 Mar 2024 18:10:41 +0000
ROA not after:            Tue 04 Mar 2025 18:15:41 +0000
asID:                     52361
IP address blocks:        45.4.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8b:00:3c:86:20:e6:fb:ca:11:07:45:53:a6:98:21:61:3e:15:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
        Validity
            Not Before: Mar  5 18:10:41 2024 GMT
            Not After : Mar  4 18:15:41 2025 GMT
        Subject: CN=6970516E7712396FB1BEC192059A1434C7AC5260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:06:4e:58:95:d8:07:81:b6:48:84:61:4f:61:
                    c7:3a:da:fc:90:6f:8c:12:06:3c:67:3e:16:21:c4:
                    9f:83:2d:04:e7:57:cc:1a:82:79:b0:30:03:24:a9:
                    53:91:30:94:cf:de:50:9c:a2:8a:9c:71:40:8b:50:
                    d1:4f:37:a5:5c:55:33:bf:3a:bc:42:7b:02:67:8f:
                    cc:78:72:a6:87:f1:0b:f2:1f:67:9a:c5:d7:4f:ad:
                    db:6a:74:f8:63:db:ec:11:c7:7c:be:b2:2b:10:96:
                    6d:57:4b:a2:ad:5b:51:41:e5:51:8b:55:9e:10:2b:
                    5d:d3:bb:d9:0d:f1:f0:52:24:4a:06:12:72:56:6b:
                    59:60:97:bc:3e:ce:32:de:11:e0:cb:2c:2b:50:c3:
                    9d:21:84:e5:91:2c:ff:1e:7a:6d:9d:2e:79:5c:2d:
                    f9:d5:28:00:c7:62:6a:15:29:f3:1e:d2:2e:09:58:
                    92:d9:c1:86:b6:c6:26:cd:5d:8c:5a:1b:3a:30:d4:
                    f8:e0:74:f1:7e:94:89:d4:f6:7a:59:d1:52:30:ab:
                    9b:73:97:49:3e:70:1d:da:3a:4d:ac:03:f0:14:25:
                    5e:95:bb:87:b4:ae:2e:20:99:9e:6c:5f:7c:ee:20:
                    a6:ad:78:e5:15:4e:ba:00:d2:e7:33:e8:3e:a5:d9:
                    eb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:70:51:6E:77:12:39:6F:B1:BE:C1:92:05:9A:14:34:C7:AC:52:60
            X509v3 Authority Key Identifier:
                keyid:60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/34352e342e3231362e302f32322d3234203d3e203532333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:e6:e7:83:d5:b6:8d:60:aa:13:e5:15:83:8b:85:92:14:64:
         42:19:90:46:ea:c9:14:c6:37:b2:b4:41:9f:6b:ca:3a:3a:89:
         c7:09:31:ca:0a:dc:fe:6c:98:36:94:68:a1:47:a9:42:45:a9:
         a3:9d:e0:10:6c:4a:e4:ec:f5:5e:9d:ac:05:e6:db:4b:e1:cd:
         26:92:42:be:15:2c:0f:55:0a:07:fd:69:18:b3:36:b0:0f:15:
         be:94:25:c5:5a:01:c9:8a:2e:d2:2b:6c:19:30:f8:bc:49:d7:
         51:c7:21:ec:c5:27:b2:21:8d:4d:06:b2:02:27:50:f1:ce:f8:
         17:d2:5d:ae:c0:44:4e:c9:f2:cf:46:93:6d:4f:06:ee:1d:35:
         75:4e:3c:b6:94:0d:80:af:d5:73:1b:b5:81:f5:9e:2d:9e:1f:
         44:a7:b6:8a:9b:cb:6c:2a:33:e0:14:0f:2d:6b:fd:8e:92:5f:
         58:71:b7:01:d6:66:5c:c1:2c:fa:15:cf:84:a8:39:f4:f6:c8:
         c4:e8:6a:37:fb:64:60:7d:3e:62:d1:74:f0:c7:fa:eb:12:6f:
         36:2c:76:73:70:b5:66:5d:e2:6e:7a:ae:70:1c:ab:b7:b3:49:
         38:17:0b:11:ac:5e:93:ba:05:bb:ea:4e:be:7f:f4:cb:51:b6:
         01:c9:8f:c2
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUXYsAPIYg5vvKEQdFU6aYIWE+FbowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA0Qjk1M0U3Q0RGRDE1NkNENDRDN0U5QkVEQzM3QUU2
OUI0Mzg4MTAeFw0yNDAzMDUxODEwNDFaFw0yNTAzMDQxODE1NDFaMDMxMTAvBgNV
BAMTKDY5NzA1MTZFNzcxMjM5NkZCMUJFQzE5MjA1OUExNDM0QzdBQzUyNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Bk5YldgHgbZIhGFPYcc62vyQ
b4wSBjxnPhYhxJ+DLQTnV8wagnmwMAMkqVORMJTP3lCcooqccUCLUNFPN6VcVTO/
OrxCewJnj8x4cqaH8QvyH2eaxddPrdtqdPhj2+wRx3y+sisQlm1XS6KtW1FB5VGL
VZ4QK13Tu9kN8fBSJEoGEnJWa1lgl7w+zjLeEeDLLCtQw50hhOWRLP8eem2dLnlc
LfnVKADHYmoVKfMe0i4JWJLZwYa2xibNXYxaGzow1PjgdPF+lInU9npZ0VIwq5tz
l0k+cB3aOk2sA/AUJV6Vu4e0ri4gmZ5sX3zuIKateOUVTroA0ucz6D6l2eu5AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUaXBRbncSOW+xvsGSBZoUNMesUmAwHwYDVR0j
BBgwFoAUYEuVPnzf0VbNRMfpvtw3rmm0OIEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTM3OTY3MTg5RjRCMjVBMUE3RUJFRDNBMkE5QzQ1RUJD
OTlERTlCQjY4RUNBRTZENUY2MEQxMzU0RUQ2Mzg3LzAvNjA0Qjk1M0U3Q0RGRDE1
NkNENDRDN0U5QkVEQzM3QUU2OUI0Mzg4MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MDRCOTUzRTdDREZEMTU2Q0Q0
NEM3RTlCRURDMzdBRTY5QjQzODgxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDUzNzk2NzE4OUY0QjI1QTFBN0VCRUQzQTJBOUM0NUVCQzk5REU5QkI2
OEVDQUU2RDVGNjBEMTM1NEVENjM4Ny8wLzM0MzUyZTM0MmUzMjMxMzYyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNTMyMzMzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQTYMA0GCSqG
SIb3DQEBCwUAA4IBAQBb5ueD1baNYKoT5RWDi4WSFGRCGZBG6skUxjeytEGfa8o6
OonHCTHKCtz+bJg2lGihR6lCRamjneAQbErk7PVenawF5ttL4c0mkkK+FSwPVQoH
/WkYszawDxW+lCXFWgHJii7SK2wZMPi8SddRxyHsxSeyIY1NBrICJ1DxzvgX0l2u
wEROyfLPRpNtTwbuHTV1Tjy2lA2Ar9VzG7WB9Z4tnh9Ep7aKm8tsKjPgFA8ta/2O
kl9YcbcB1mZcwSz6Fc+EqDn09sjE6Go3+2RgfT5i0XTwx/rrEm82LHZzcLVmXeJu
eq5wHKu3s0k4FwsRrF6TugW76k6+f/TLUbYByY/C
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:55 2024 by rpki-client on console-fra.rpki-client.org