Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/34352e3232382e3137332e302f32342d3234203d3e20323636363637.roa
File:                     34352e3232382e3137332e302f32342d3234203d3e20323636363637.roa (raw, json)
Hash identifier:          LSnv34Qg6odD2MouVRDvOyC5VN/Z4XLvHAS3RSo4EzI=
Subject key identifier:   1F:5B:0C:02:50:76:01:F5:CC:1B:66:0C:CB:F0:D7:12:F9:7E:2B:51
Certificate issuer:       /CN=A5277502999C0778EA28B6DE57F3CF801BE9ADDA
Certificate serial:       76408A2A36B950BA215E9EE9D21859BC7904B12B
Authority key identifier: A5:27:75:02:99:9C:07:78:EA:28:B6:DE:57:F3:CF:80:1B:E9:AD:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/34352e3232382e3137332e302f32342d3234203d3e20323636363637.roa
Signing time:             Tue 05 Mar 2024 18:04:49 +0000
ROA not before:           Tue 05 Mar 2024 17:59:49 +0000
ROA not after:            Tue 04 Mar 2025 18:04:49 +0000
asID:                     266667
IP address blocks:        45.228.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:40:8a:2a:36:b9:50:ba:21:5e:9e:e9:d2:18:59:bc:79:04:b1:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5277502999C0778EA28B6DE57F3CF801BE9ADDA
        Validity
            Not Before: Mar  5 17:59:49 2024 GMT
            Not After : Mar  4 18:04:49 2025 GMT
        Subject: CN=1F5B0C02507601F5CC1B660CCBF0D712F97E2B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:df:82:c6:3b:7a:7b:93:79:f9:fa:fd:b6:7b:
                    53:f5:61:f5:4c:9d:d8:5f:53:53:d5:4f:38:1a:18:
                    c3:fc:92:47:60:03:95:ec:9b:a5:e3:04:9f:7f:e0:
                    01:3f:7c:81:8d:74:99:e6:bf:a8:cb:55:57:fa:11:
                    aa:c2:a9:d8:4c:c5:f0:12:ff:1e:b3:2d:1a:96:f2:
                    3f:e4:ac:be:7a:81:9d:0e:01:d4:67:bf:96:f8:b0:
                    59:bf:10:7d:85:dd:a2:6e:f8:72:ef:db:c4:be:42:
                    3e:9e:6c:d4:de:25:09:3b:60:9b:13:70:56:c7:c8:
                    f7:a4:dc:0f:15:4c:d8:69:c0:82:55:60:27:2f:53:
                    c7:b5:7f:65:cb:cf:c7:03:4b:53:74:f6:d3:ec:d9:
                    4f:4f:c5:a5:23:03:55:73:7a:61:c1:69:69:bf:8c:
                    aa:01:8f:00:d5:24:c9:f4:94:3a:16:25:40:be:17:
                    12:79:33:1d:17:fd:92:40:9d:10:70:fa:4d:e5:1b:
                    58:09:6e:11:ea:11:69:7c:3d:47:7e:d3:64:16:d1:
                    99:78:b9:26:40:c3:7d:1e:1c:8b:50:22:21:3a:cb:
                    35:44:54:f3:b5:02:31:c4:b0:5a:96:e3:9c:75:95:
                    21:7c:0d:84:ee:43:1e:7e:b2:ae:64:36:3e:19:7b:
                    87:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5B:0C:02:50:76:01:F5:CC:1B:66:0C:CB:F0:D7:12:F9:7E:2B:51
            X509v3 Authority Key Identifier:
                keyid:A5:27:75:02:99:9C:07:78:EA:28:B6:DE:57:F3:CF:80:1B:E9:AD:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/34352e3232382e3137332e302f32342d3234203d3e20323636363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:f3:b2:32:6e:dd:6f:7e:08:26:6f:15:34:db:92:b8:2f:de:
         c7:be:2d:7c:74:f4:a8:56:f9:d9:5a:d9:8b:66:81:b3:6c:2b:
         9b:b6:e8:60:d9:b9:db:0a:c0:3c:b8:db:9f:60:1e:ef:75:21:
         e0:87:fc:93:0e:00:6e:5c:f4:f1:a3:5e:d2:4e:e4:88:48:de:
         36:03:a6:b4:c5:8d:b5:d3:87:93:de:a8:97:91:80:19:13:6b:
         a9:fa:f9:26:63:b8:f6:ae:c2:e2:9b:bd:ea:8e:9f:90:f8:18:
         20:f3:f0:c0:aa:6d:d6:f9:74:ac:66:ec:27:84:25:6a:a3:5f:
         24:1d:86:5f:89:13:0b:ac:92:b9:7d:97:89:46:f1:20:f0:60:
         ff:dc:f8:f2:04:10:99:42:1b:03:64:a1:3f:29:91:ea:e5:75:
         6c:43:ed:3c:66:2a:64:99:e6:61:df:53:d2:b1:de:58:2c:47:
         7c:01:d1:31:56:9c:fd:6f:1d:ba:62:9d:09:65:09:b8:95:9a:
         4b:bf:dc:a9:ba:c6:bd:24:b8:26:e0:e5:7d:ed:dc:3e:51:3e:
         b3:56:83:eb:9e:b9:bb:1c:79:15:aa:01:78:6e:33:42:d2:cb:
         cf:35:30:0d:95:e4:2c:ec:76:ec:36:95:0c:ed:fc:77:d8:13:
         ce:3c:f7:0f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdkCKKja5ULohXp7p0hhZvHkEsSswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUyNzc1MDI5OTlDMDc3OEVBMjhCNkRFNTdGM0NGODAx
QkU5QUREQTAeFw0yNDAzMDUxNzU5NDlaFw0yNTAzMDQxODA0NDlaMDMxMTAvBgNV
BAMTKDFGNUIwQzAyNTA3NjAxRjVDQzFCNjYwQ0NCRjBENzEyRjk3RTJCNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf34LGO3p7k3n5+v22e1P1YfVM
ndhfU1PVTzgaGMP8kkdgA5Xsm6XjBJ9/4AE/fIGNdJnmv6jLVVf6EarCqdhMxfAS
/x6zLRqW8j/krL56gZ0OAdRnv5b4sFm/EH2F3aJu+HLv28S+Qj6ebNTeJQk7YJsT
cFbHyPek3A8VTNhpwIJVYCcvU8e1f2XLz8cDS1N09tPs2U9PxaUjA1VzemHBaWm/
jKoBjwDVJMn0lDoWJUC+FxJ5Mx0X/ZJAnRBw+k3lG1gJbhHqEWl8PUd+02QW0Zl4
uSZAw30eHItQIiE6yzVEVPO1AjHEsFqW45x1lSF8DYTuQx5+sq5kNj4Ze4eNAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUH1sMAlB2AfXMG2YMy/DXEvl+K1EwHwYDVR0j
BBgwFoAUpSd1ApmcB3jqKLbeV/PPgBvprdowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOUFDNjAxQzcyNzA0NUJBMDc4NUIyMjZFNzQ4NjdDQ0M0
MEVDRkYwNjIwNDIyQjAzODhFM0M4REU1MjlCNDA5LzAvQTUyNzc1MDI5OTlDMDc3
OEVBMjhCNkRFNTdGM0NGODAxQkU5QUREQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNTI3NzUwMjk5OUMwNzc4RUEy
OEI2REU1N0YzQ0Y4MDFCRTlBRERBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDlBQzYwMUM3MjcwNDVCQTA3ODVCMjI2RTc0ODY3Q0NDNDBFQ0ZGMDYy
MDQyMkIwMzg4RTNDOERFNTI5QjQwOS8wLzM0MzUyZTMyMzIzODJlMzEzNzMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzYzNjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeSt
MA0GCSqGSIb3DQEBCwUAA4IBAQCW87Iybt1vfggmbxU025K4L97Hvi18dPSoVvnZ
WtmLZoGzbCubtuhg2bnbCsA8uNufYB7vdSHgh/yTDgBuXPTxo17STuSISN42A6a0
xY2104eT3qiXkYAZE2up+vkmY7j2rsLim73qjp+Q+Bgg8/DAqm3W+XSsZuwnhCVq
o18kHYZfiRMLrJK5fZeJRvEg8GD/3PjyBBCZQhsDZKE/KZHq5XVsQ+08ZipkmeZh
31PSsd5YLEd8AdExVpz9bx26Yp0JZQm4lZpLv9ypusa9JLgm4OV97dw+UT6zVoPr
nrm7HHkVqgF4bjNC0svPNTANleQs7HbsNpUM7fx32BPOPPcP
-----END CERTIFICATE-----
Generated at Mon May 6 17:40:01 2024 by rpki-client on console-ams.rpki-client.org