Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa
File:                     34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa (raw, json)
Hash identifier:          l/en10Om4Si29mlufHWLN09ePz3dCvUqT4/P00O/EjI=
Subject key identifier:   62:F0:5C:C3:B3:EB:18:E5:72:3B:6A:C0:60:C8:41:F6:C7:57:64:A9
Certificate issuer:       /CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB
Certificate serial:       7701256B4F372703AFAA09D701B1402E3AB3C499
Authority key identifier: DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa
Signing time:             Thu 21 Mar 2024 19:15:04 +0000
ROA not before:           Thu 21 Mar 2024 19:10:04 +0000
ROA not after:            Thu 20 Mar 2025 19:15:04 +0000
asID:                     265684
IP address blocks:        45.228.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:01:25:6b:4f:37:27:03:af:aa:09:d7:01:b1:40:2e:3a:b3:c4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB
        Validity
            Not Before: Mar 21 19:10:04 2024 GMT
            Not After : Mar 20 19:15:04 2025 GMT
        Subject: CN=62F05CC3B3EB18E5723B6AC060C841F6C75764A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:35:21:ce:8f:95:e7:71:56:9f:d7:43:1c:72:
                    1f:1b:6b:5d:9b:c4:0d:a8:e2:3d:9c:e9:ff:fb:a4:
                    c6:42:d6:a1:62:77:b2:69:f6:4a:1c:07:e3:91:c0:
                    66:b4:1c:b7:ad:cc:1b:57:a7:86:36:df:7d:f0:7d:
                    a3:0b:3f:ae:c9:b0:c6:1d:d6:6d:ce:a6:ce:e4:90:
                    7e:0d:f5:26:51:e1:0d:3e:f8:b0:6c:2e:b5:23:68:
                    03:2c:c9:cc:a7:7d:1b:4a:0c:80:c6:35:33:cd:95:
                    86:b4:c0:83:8f:7c:05:71:43:c9:f3:ba:f7:98:e1:
                    7b:12:e4:6f:94:69:fd:c9:c5:6a:e2:90:ca:25:83:
                    65:20:15:e1:55:2e:47:47:50:ee:6f:e3:28:fb:89:
                    d5:50:fd:85:d4:54:93:6d:6b:74:6a:9c:b1:47:58:
                    57:ef:d2:4c:c4:04:31:fd:f4:2f:c1:13:1b:6a:eb:
                    40:a5:93:6b:92:8d:a2:bc:76:7f:bf:71:ba:98:19:
                    f8:4d:44:d3:e3:0e:8b:f9:20:9d:55:a5:f6:25:7a:
                    e0:f4:ee:0a:7f:80:09:cc:b2:7c:ca:f3:e7:7c:74:
                    1f:a5:5a:34:0e:2d:c0:8b:e6:bf:2f:bc:03:1e:da:
                    70:74:ed:6f:bb:89:9a:6a:1a:56:06:fe:27:dc:87:
                    26:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F0:5C:C3:B3:EB:18:E5:72:3B:6A:C0:60:C8:41:F6:C7:57:64:A9
            X509v3 Authority Key Identifier:
                keyid:DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:da:04:61:c0:55:12:24:e0:c0:51:9b:f9:67:80:5b:23:53:
         d1:87:ef:55:e1:98:c7:95:5b:67:96:d9:c9:d0:ce:29:35:fa:
         65:b6:c9:85:aa:32:cd:94:52:ed:f7:b9:c2:e0:17:38:e8:15:
         46:a6:3f:4f:7d:fa:90:7d:9d:23:2b:b5:52:76:4d:67:8a:77:
         10:54:45:92:8d:9f:82:c2:cf:c6:9f:aa:4f:f1:29:bf:41:d1:
         42:c5:9b:45:79:7d:c7:ea:11:42:02:fe:c1:5c:68:01:eb:67:
         b3:fa:2d:6f:1b:4a:7a:27:30:00:e9:70:12:f3:7f:02:b1:63:
         da:6b:97:b5:28:e7:d5:02:5d:cd:b9:3e:96:1c:b0:3d:04:4a:
         4d:19:58:98:53:bc:f4:3b:28:9b:18:82:37:10:9d:77:c5:e4:
         68:2a:d3:fa:6c:dd:17:96:9a:d1:3f:98:b8:6a:d3:b0:2c:e4:
         33:ba:45:5a:72:0c:47:36:bb:3d:14:23:65:31:6a:c6:08:7f:
         a6:34:c6:6f:32:9b:94:c3:78:1d:f5:82:9f:3a:a3:b1:9a:5e:
         2f:ac:28:d0:df:06:a8:8d:dc:38:61:35:48:1a:40:5a:c8:da:
         fe:2e:fe:9d:45:9f:b0:8c:43:2d:15:df:71:16:88:71:8e:fb:
         3b:ec:4e:3d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdwEla083JwOvqgnXAbFALjqzxJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVGQTVDNUFGRTYzRjZCMDJDM0MzMzM5OUQyQzE5MkUy
NERDRjdGQjAeFw0yNDAzMjExOTEwMDRaFw0yNTAzMjAxOTE1MDRaMDMxMTAvBgNV
BAMTKDYyRjA1Q0MzQjNFQjE4RTU3MjNCNkFDMDYwQzg0MUY2Qzc1NzY0QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4NSHOj5XncVaf10Mcch8ba12b
xA2o4j2c6f/7pMZC1qFid7Jp9kocB+ORwGa0HLetzBtXp4Y2333wfaMLP67JsMYd
1m3Ops7kkH4N9SZR4Q0++LBsLrUjaAMsycynfRtKDIDGNTPNlYa0wIOPfAVxQ8nz
uveY4XsS5G+Uaf3JxWrikMolg2UgFeFVLkdHUO5v4yj7idVQ/YXUVJNta3RqnLFH
WFfv0kzEBDH99C/BExtq60Clk2uSjaK8dn+/cbqYGfhNRNPjDov5IJ1VpfYleuD0
7gp/gAnMsnzK8+d8dB+lWjQOLcCL5r8vvAMe2nB07W+7iZpqGlYG/ifchyYTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUYvBcw7PrGOVyO2rAYMhB9sdXZKkwHwYDVR0j
BBgwFoAU3vpcWv5j9rAsPDM5nSwZLiTc9/swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTM5RDlBQkVBNjkxNTcwQTVEODA0QzIwMzE0OUIzMEFE
QTg3MERGOUQzNjhGRTE1QzUzRTU4QjFCNERFM0ZDLzAvREVGQTVDNUFGRTYzRjZC
MDJDM0MzMzM5OUQyQzE5MkUyNERDRjdGQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUZBNUM1QUZFNjNGNkIwMkMz
QzMzMzk5RDJDMTkyRTI0RENGN0ZCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDkzOUQ5QUJFQTY5MTU3MEE1RDgwNEMyMDMxNDlCMzBBREE4NzBERjlE
MzY4RkUxNUM1M0U1OEIxQjRERTNGQy8wLzM0MzUyZTMyMzIzODJlMzIzMzMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzODM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeTo
MA0GCSqGSIb3DQEBCwUAA4IBAQAm2gRhwFUSJODAUZv5Z4BbI1PRh+9V4ZjHlVtn
ltnJ0M4pNfpltsmFqjLNlFLt97nC4Bc46BVGpj9PffqQfZ0jK7VSdk1nincQVEWS
jZ+Cws/Gn6pP8Sm/QdFCxZtFeX3H6hFCAv7BXGgB62ez+i1vG0p6JzAA6XAS838C
sWPaa5e1KOfVAl3NuT6WHLA9BEpNGViYU7z0OyibGII3EJ13xeRoKtP6bN0XlprR
P5i4atOwLOQzukVacgxHNrs9FCNlMWrGCH+mNMZvMpuUw3gd9YKfOqOxml4vrCjQ
3waojdw4YTVIGkBayNr+Lv6dRZ+wjEMtFd9xFohxjvs77E49
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:57 2024 by rpki-client on console-fra.rpki-client.org