Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/34352e3138312e3230362e302f32342d3234203d3e20323639373337.roa
File:                     34352e3138312e3230362e302f32342d3234203d3e20323639373337.roa (raw, json)
Hash identifier:          aSXjMWYqMsqkZStxzHqwgcX3AF32B0T1CVMrtTu68Q0=
Subject key identifier:   A2:F5:5F:60:44:C9:40:4F:4C:F5:FF:51:40:DB:7A:0C:D1:42:42:2D
Certificate issuer:       /CN=851F72AF17FC1DA87BB197750BC5B43F401D78D2
Certificate serial:       0BB45AAE22D0FA4977D6433DA27AAD0DDB848F69
Authority key identifier: 85:1F:72:AF:17:FC:1D:A8:7B:B1:97:75:0B:C5:B4:3F:40:1D:78:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/34352e3138312e3230362e302f32342d3234203d3e20323639373337.roa
Signing time:             Tue 05 Mar 2024 18:12:02 +0000
ROA not before:           Tue 05 Mar 2024 18:07:02 +0000
ROA not after:            Tue 04 Mar 2025 18:12:02 +0000
asID:                     269737
IP address blocks:        45.181.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b4:5a:ae:22:d0:fa:49:77:d6:43:3d:a2:7a:ad:0d:db:84:8f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851F72AF17FC1DA87BB197750BC5B43F401D78D2
        Validity
            Not Before: Mar  5 18:07:02 2024 GMT
            Not After : Mar  4 18:12:02 2025 GMT
        Subject: CN=A2F55F6044C9404F4CF5FF5140DB7A0CD142422D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:34:0f:2e:df:cc:4c:5a:4c:f1:c6:32:46:2a:
                    8d:e4:90:ea:ec:aa:bc:29:ed:89:a5:8b:32:f5:b4:
                    e2:26:02:68:60:ec:46:c0:81:99:c8:fe:d3:91:c8:
                    e1:84:6d:23:05:08:65:ea:c2:63:0d:95:a3:e1:3e:
                    d8:5c:f0:09:e9:28:1b:ed:72:b8:22:02:9e:b7:ba:
                    fa:4a:75:4c:4a:e7:4b:0e:29:7a:1a:56:57:cf:51:
                    2b:cf:00:0d:bf:d6:ab:1b:57:a3:82:19:a7:4b:4c:
                    a6:75:b4:bb:81:af:b4:de:ab:a2:3b:a0:24:ac:ad:
                    11:82:05:b1:62:86:61:33:40:61:77:da:54:8c:ab:
                    97:e9:b8:79:6b:cc:5e:1a:6c:ac:61:83:f1:e6:86:
                    5c:69:a5:67:68:72:2f:22:e9:80:44:c9:a1:3d:08:
                    b4:43:21:ee:88:d5:15:5d:a2:54:dc:e5:18:16:b8:
                    29:4c:88:71:33:bf:7d:9d:e9:a4:cf:02:a6:7f:15:
                    3d:88:fc:db:b9:1c:58:97:ef:01:cc:be:76:89:d4:
                    f6:07:f7:19:2f:30:97:9b:66:42:60:d7:46:54:5b:
                    8f:9e:f4:2b:9c:fb:2f:62:17:f8:6e:9e:20:af:e1:
                    c0:03:de:68:f4:f9:61:00:28:a2:9c:92:6f:1c:01:
                    27:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F5:5F:60:44:C9:40:4F:4C:F5:FF:51:40:DB:7A:0C:D1:42:42:2D
            X509v3 Authority Key Identifier:
                keyid:85:1F:72:AF:17:FC:1D:A8:7B:B1:97:75:0B:C5:B4:3F:40:1D:78:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/34352e3138312e3230362e302f32342d3234203d3e20323639373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:f7:f8:c8:79:e5:cd:b5:b0:8b:2e:18:ed:90:e5:50:4d:c3:
         a7:dc:fb:e7:9f:bf:a7:11:96:e6:53:9c:bf:48:fe:f2:4f:1f:
         38:5d:4a:a1:11:b2:c8:81:ad:75:08:74:68:b9:74:dc:81:2e:
         26:90:b7:4d:b0:54:80:8f:76:70:06:8a:1d:70:48:72:a8:c5:
         01:38:40:a5:44:fb:0e:4c:da:65:c1:c6:d1:53:85:3a:4d:bc:
         fe:51:63:01:54:f2:f0:96:7e:b6:4f:25:49:29:82:04:e5:9c:
         e2:4d:ec:a1:c0:2f:84:68:11:a0:96:97:28:75:c5:5b:a4:fc:
         c1:25:88:2f:4f:97:1d:f3:f2:49:55:8b:32:2e:f1:5a:79:2c:
         be:6d:2d:b0:47:93:c9:e4:07:33:81:2c:4b:e5:08:57:76:d7:
         7e:c3:cb:cf:b0:a5:b0:c2:25:64:a5:4c:28:2e:d8:96:a1:d0:
         a4:3b:7d:f6:06:bf:f4:c3:dc:b1:76:02:b7:a2:7b:c8:ac:7e:
         69:f3:1b:35:62:6f:5e:18:23:4e:6b:e2:f1:1c:4b:7e:95:21:
         2a:c3:0c:ad:a1:7a:14:c9:3b:48:75:09:a4:c6:49:67:0d:f7:
         29:e3:67:be:d7:72:d0:03:e7:9e:31:20:83:64:93:2a:64:50:
         dc:c5:ad:6b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUC7RariLQ+kl31kM9onqtDduEj2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUxRjcyQUYxN0ZDMURBODdCQjE5Nzc1MEJDNUI0M0Y0
MDFENzhEMjAeFw0yNDAzMDUxODA3MDJaFw0yNTAzMDQxODEyMDJaMDMxMTAvBgNV
BAMTKEEyRjU1RjYwNDRDOTQwNEY0Q0Y1RkY1MTQwREI3QTBDRDE0MjQyMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpNA8u38xMWkzxxjJGKo3kkOrs
qrwp7YmlizL1tOImAmhg7EbAgZnI/tORyOGEbSMFCGXqwmMNlaPhPthc8AnpKBvt
crgiAp63uvpKdUxK50sOKXoaVlfPUSvPAA2/1qsbV6OCGadLTKZ1tLuBr7Teq6I7
oCSsrRGCBbFihmEzQGF32lSMq5fpuHlrzF4abKxhg/HmhlxppWdoci8i6YBEyaE9
CLRDIe6I1RVdolTc5RgWuClMiHEzv32d6aTPAqZ/FT2I/Nu5HFiX7wHMvnaJ1PYH
9xkvMJebZkJg10ZUW4+e9Cuc+y9iF/huniCv4cAD3mj0+WEAKKKckm8cASeDAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUovVfYETJQE9M9f9RQNt6DNFCQi0wHwYDVR0j
BBgwFoAUhR9yrxf8Hah7sZd1C8W0P0AdeNIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTg3MjNBMEZCMzZGN0U5OTk3QUIwNUU5MTUzMzNCOEIy
QjE0MEUxNkU5MDM3NEZFRUM5MjZEQTAyRDhBRDk2LzAvODUxRjcyQUYxN0ZDMURB
ODdCQjE5Nzc1MEJDNUI0M0Y0MDFENzhEMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTFGNzJBRjE3RkMxREE4N0JC
MTk3NzUwQkM1QjQzRjQwMUQ3OEQyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDU4NzIzQTBGQjM2RjdFOTk5N0FCMDVFOTE1MzMzQjhCMkIxNDBFMTZF
OTAzNzRGRUVDOTI2REEwMkQ4QUQ5Ni8wLzM0MzUyZTMxMzgzMTJlMzIzMDM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzczMzM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALbXO
MA0GCSqGSIb3DQEBCwUAA4IBAQCU9/jIeeXNtbCLLhjtkOVQTcOn3Pvnn7+nEZbm
U5y/SP7yTx84XUqhEbLIga11CHRouXTcgS4mkLdNsFSAj3ZwBoodcEhyqMUBOECl
RPsOTNplwcbRU4U6Tbz+UWMBVPLwln62TyVJKYIE5ZziTeyhwC+EaBGglpcodcVb
pPzBJYgvT5cd8/JJVYsyLvFaeSy+bS2wR5PJ5AczgSxL5QhXdtd+w8vPsKWwwiVk
pUwoLtiWodCkO332Br/0w9yxdgK3onvIrH5p8xs1Ym9eGCNOa+LxHEt+lSEqwwyt
oXoUyTtIdQmkxklnDfcp42e+13LQA+eeMSCDZJMqZFDcxa1r
-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:54 2024 by rpki-client on console-fra.rpki-client.org