Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/34352e3137312e3138302e302f32322d3234203d3e20323637373737.roa
File:                     34352e3137312e3138302e302f32322d3234203d3e20323637373737.roa (raw, json)
Hash identifier:          nelOSossYEtmNs7f5fi+3aZ1VoMLlgmj5Be7i0mUn74=
Subject key identifier:   06:11:9F:03:31:FA:DA:91:9D:44:2C:BE:38:6C:1C:6A:54:8B:F5:1E
Certificate issuer:       /CN=4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E
Certificate serial:       7C0FEA1A2A4FD611C43B34777193B893C46D0F61
Authority key identifier: 4C:E9:DD:4A:CA:90:E6:24:B6:F7:B7:2C:71:A4:7D:45:41:C7:BB:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/34352e3137312e3138302e302f32322d3234203d3e20323637373737.roa
Signing time:             Tue 05 Mar 2024 18:11:01 +0000
ROA not before:           Tue 05 Mar 2024 18:06:01 +0000
ROA not after:            Tue 04 Mar 2025 18:11:01 +0000
asID:                     267777
IP address blocks:        45.171.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0f:ea:1a:2a:4f:d6:11:c4:3b:34:77:71:93:b8:93:c4:6d:0f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E
        Validity
            Not Before: Mar  5 18:06:01 2024 GMT
            Not After : Mar  4 18:11:01 2025 GMT
        Subject: CN=06119F0331FADA919D442CBE386C1C6A548BF51E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:53:3d:0f:b5:be:e0:d7:37:82:85:55:2d:95:
                    0f:1a:71:33:21:d9:91:3b:27:bf:28:37:1c:fc:e2:
                    ab:28:79:c5:dd:78:a2:14:ab:b9:04:c8:3c:02:bf:
                    47:a6:61:ed:b3:7a:9a:22:ff:85:58:9d:1a:a0:a8:
                    b3:00:14:25:97:82:78:3d:34:e4:b5:33:07:a7:90:
                    53:1c:f4:db:ce:83:1c:d6:89:9c:5d:e3:66:33:7c:
                    cc:8c:95:25:8c:d8:47:92:71:cd:17:50:ce:eb:94:
                    86:e7:aa:28:d5:74:1d:d0:8c:4a:68:c7:fd:4c:ba:
                    41:b8:e9:2c:51:6a:37:a7:16:56:49:c2:62:89:d1:
                    2e:7d:00:f7:52:c3:ee:d3:73:f6:66:ab:d7:50:07:
                    b1:4a:48:03:07:3e:de:33:2c:ed:be:94:ee:63:6d:
                    e7:07:e4:a6:82:3b:fa:77:06:f2:c1:11:83:9a:43:
                    dd:90:af:73:6a:18:e4:2d:54:3f:e8:d0:7e:0b:23:
                    37:f9:ce:54:4e:65:ea:61:63:c1:14:6f:bf:fd:71:
                    96:88:ba:51:a4:8b:e0:22:51:67:88:dc:c8:87:6a:
                    b2:e8:23:14:f8:93:36:7d:88:5c:c5:fd:84:c9:53:
                    6a:a1:c2:13:9d:a3:5f:ae:b3:bb:2a:b2:0a:7d:5d:
                    ce:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:11:9F:03:31:FA:DA:91:9D:44:2C:BE:38:6C:1C:6A:54:8B:F5:1E
            X509v3 Authority Key Identifier:
                keyid:4C:E9:DD:4A:CA:90:E6:24:B6:F7:B7:2C:71:A4:7D:45:41:C7:BB:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/34352e3137312e3138302e302f32322d3234203d3e20323637373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:da:4b:76:d4:c3:90:6e:7e:28:cb:7b:10:d7:39:06:cd:d5:
         56:ec:eb:f7:6d:f0:5e:02:7d:0e:1f:e9:35:79:e8:50:13:ec:
         d3:39:e5:53:9b:09:6d:6a:9d:6a:c3:3f:b6:67:c4:b5:7d:f6:
         46:a3:1c:00:98:f3:d0:ca:51:26:7b:35:31:2b:e9:d6:20:c1:
         81:e2:67:dd:4e:b0:bb:57:f5:c8:88:e1:a2:97:e8:08:0f:99:
         57:c8:b7:e7:82:98:c6:30:70:0b:25:81:70:14:0d:49:99:e3:
         83:e4:84:05:0b:76:f7:0a:45:0b:4a:d1:5b:62:e4:bc:ee:71:
         5e:3e:c6:ae:56:00:fa:2b:30:78:96:f1:a1:c4:51:90:7b:3c:
         d3:03:6e:32:df:7c:01:25:f5:4e:a6:b4:5e:b9:a4:21:e1:9c:
         85:bd:ce:4c:75:d5:d5:58:d1:cf:31:5c:4b:3d:03:11:94:01:
         37:76:06:91:f4:62:42:71:8f:32:e5:c5:c9:32:08:8f:60:84:
         f1:b0:75:98:5e:2e:31:f7:a7:41:97:96:d0:fe:83:0a:cb:51:
         22:2b:d8:1d:fa:00:cb:14:5e:c1:fb:25:c7:86:23:40:50:75:
         c8:b9:e9:28:01:9a:d6:c1:73:7b:8d:b0:4e:53:01:3c:11:cc:
         a3:87:5e:80
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUfA/qGipP1hHEOzR3cZO4k8RtD2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENFOURENEFDQTkwRTYyNEI2RjdCNzJDNzFBNDdENDU0
MUM3QkI0RTAeFw0yNDAzMDUxODA2MDFaFw0yNTAzMDQxODExMDFaMDMxMTAvBgNV
BAMTKDA2MTE5RjAzMzFGQURBOTE5RDQ0MkNCRTM4NkMxQzZBNTQ4QkY1MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Uz0Ptb7g1zeChVUtlQ8acTMh
2ZE7J78oNxz84qsoecXdeKIUq7kEyDwCv0emYe2zepoi/4VYnRqgqLMAFCWXgng9
NOS1MwenkFMc9NvOgxzWiZxd42YzfMyMlSWM2EeScc0XUM7rlIbnqijVdB3QjEpo
x/1MukG46SxRajenFlZJwmKJ0S59APdSw+7Tc/Zmq9dQB7FKSAMHPt4zLO2+lO5j
becH5KaCO/p3BvLBEYOaQ92Qr3NqGOQtVD/o0H4LIzf5zlROZephY8EUb7/9cZaI
ulGki+AiUWeI3MiHarLoIxT4kzZ9iFzF/YTJU2qhwhOdo1+us7sqsgp9Xc4dAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUBhGfAzH62pGdRCy+OGwcalSL9R4wHwYDVR0j
BBgwFoAUTOndSsqQ5iS297cscaR9RUHHu04wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENzVBNzVCNjZCNUMwNDRDOEU1MzdDM0YyQkY4NEUwNDAw
RUJFQjVFRUNCNzJBRENENTY4NzU2M0NFNEIyMThDLzAvNENFOURENEFDQTkwRTYy
NEI2RjdCNzJDNzFBNDdENDU0MUM3QkI0RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Q0U5REQ0QUNBOTBFNjI0QjZG
N0I3MkM3MUE0N0Q0NTQxQzdCQjRFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDc1QTc1QjY2QjVDMDQ0QzhFNTM3QzNGMkJGODRFMDQwMEVCRUI1RUVD
QjcyQURDRDU2ODc1NjNDRTRCMjE4Qy8wLzM0MzUyZTMxMzczMTJlMzEzODMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3MzczNzM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLau0
MA0GCSqGSIb3DQEBCwUAA4IBAQB92kt21MOQbn4oy3sQ1zkGzdVW7Ov3bfBeAn0O
H+k1eehQE+zTOeVTmwltap1qwz+2Z8S1ffZGoxwAmPPQylEmezUxK+nWIMGB4mfd
TrC7V/XIiOGil+gID5lXyLfngpjGMHALJYFwFA1JmeOD5IQFC3b3CkULStFbYuS8
7nFePsauVgD6KzB4lvGhxFGQezzTA24y33wBJfVOprReuaQh4ZyFvc5MddXVWNHP
MVxLPQMRlAE3dgaR9GJCcY8y5cXJMgiPYITxsHWYXi4x96dBl5bQ/oMKy1EiK9gd
+gDLFF7B+yXHhiNAUHXIuekoAZrWwXN7jbBOUwE8Ecyjh16A
-----END CERTIFICATE-----
Generated at Mon May 6 03:06:52 2024 by rpki-client on console-fra.rpki-client.org