Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/34352e3233342e36322e302f32342d3234203d3e20323732383734.roa
File:                     34352e3233342e36322e302f32342d3234203d3e20323732383734.roa (raw, json)
Hash identifier:          9Ty9r0i9ia99IPHePePO16k2mQrPO+/XYy74buVDZNk=
Subject key identifier:   09:36:A6:40:32:7C:F3:64:79:8F:3E:AA:D8:25:7E:27:83:A7:13:35
Certificate issuer:       /CN=DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D
Certificate serial:       7EAC42D814BD7933DD45A5884AECA7889DA7031A
Authority key identifier: DD:28:6A:83:BE:77:C4:2B:A2:D2:BB:C8:E5:A4:CC:AF:19:60:26:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/34352e3233342e36322e302f32342d3234203d3e20323732383734.roa
Signing time:             Tue 20 Aug 2024 21:10:00 +0000
ROA not before:           Tue 20 Aug 2024 21:05:00 +0000
ROA not after:            Tue 19 Aug 2025 21:10:00 +0000
asID:                     272874
IP address blocks:        45.234.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ac:42:d8:14:bd:79:33:dd:45:a5:88:4a:ec:a7:88:9d:a7:03:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D
        Validity
            Not Before: Aug 20 21:05:00 2024 GMT
            Not After : Aug 19 21:10:00 2025 GMT
        Subject: CN=0936A640327CF364798F3EAAD8257E2783A71335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b4:bb:67:fe:d9:7e:d6:f3:87:b6:54:38:87:
                    91:4e:39:d3:29:12:df:f2:c5:64:1d:e6:5f:f7:7b:
                    17:5f:fc:b2:52:d4:fa:90:68:5d:a5:77:2e:3b:23:
                    be:38:1d:fb:ba:31:f2:6c:0d:d7:a3:18:35:92:51:
                    a0:31:9e:da:a1:aa:81:9f:b8:b7:cc:68:d6:de:de:
                    60:53:8a:65:1a:52:19:06:03:29:7f:75:58:12:8a:
                    6f:d7:15:1d:3a:2b:3a:b3:41:e0:aa:7f:e6:58:50:
                    8d:00:b4:bd:58:4c:8b:13:8f:01:c8:48:1a:5f:dc:
                    c6:87:8a:09:39:79:b2:0e:37:35:9d:ef:1f:29:ee:
                    5e:5b:8e:f3:3f:29:a4:34:d3:d0:db:bd:dc:5b:7b:
                    61:86:fd:89:06:b0:99:e0:bf:ab:a0:ed:50:23:d5:
                    15:bf:1e:17:cd:cf:4a:74:ca:8f:f7:1b:85:c2:e0:
                    a1:7c:8d:04:c9:5d:2e:c3:cf:5c:a3:f2:05:97:79:
                    e0:27:6c:b3:30:a2:a1:24:be:71:c3:79:56:ca:dd:
                    15:7c:27:4f:03:d9:53:81:ab:ce:cf:85:e8:17:75:
                    4a:aa:67:ed:e3:5f:6e:08:f7:5e:16:36:1d:07:82:
                    3f:37:1d:22:77:6b:40:77:a9:a9:2f:23:18:6e:38:
                    29:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:36:A6:40:32:7C:F3:64:79:8F:3E:AA:D8:25:7E:27:83:A7:13:35
            X509v3 Authority Key Identifier:
                keyid:DD:28:6A:83:BE:77:C4:2B:A2:D2:BB:C8:E5:A4:CC:AF:19:60:26:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/34352e3233342e36322e302f32342d3234203d3e20323732383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:ed:61:5e:dd:4e:d9:a4:9d:b4:ce:c9:3e:3e:87:77:07:09:
         2a:26:a6:4a:68:30:01:9f:ad:3c:1f:63:34:70:b6:01:e3:7c:
         40:e2:dc:39:5d:2b:b8:1a:57:ee:8b:3c:87:b2:04:c2:91:da:
         48:d5:86:a3:0a:58:ee:7a:61:64:44:09:4a:d7:aa:87:8a:90:
         d9:7e:cc:78:a4:ea:86:93:29:34:ed:20:57:93:eb:94:84:bc:
         fc:67:c7:97:b9:77:86:0d:a9:e3:93:ef:69:3e:5c:88:e8:82:
         99:01:03:db:9e:79:f8:42:28:8d:72:c8:a6:16:cf:3b:c6:82:
         5e:a4:d5:e9:2f:1a:b1:11:b6:5f:b5:58:cb:44:c7:8b:0a:90:
         5f:09:66:95:7c:71:72:5a:c2:54:12:fe:1c:e4:7f:2b:c8:bc:
         94:d0:c4:34:9e:da:6b:19:81:c6:02:b6:a4:ea:7a:9a:a6:e9:
         74:b3:fa:70:eb:e1:37:14:29:cf:62:52:3c:2a:8e:6c:7a:3e:
         03:ab:7f:2b:3e:55:bc:71:1d:cf:ba:a0:5b:35:52:68:8a:b6:
         e2:c0:ab:15:95:ca:de:87:8d:84:78:e7:3c:a6:e7:e9:8b:db:
         32:3e:e9:d4:14:54:a6:ba:bd:3b:b6:63:2a:52:be:b7:78:e4:
         7f:81:96:14
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfqxC2BS9eTPdRaWISuyniJ2nAxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQyODZBODNCRTc3QzQyQkEyRDJCQkM4RTVBNENDQUYx
OTYwMjY0RDAeFw0yNDA4MjAyMTA1MDBaFw0yNTA4MTkyMTEwMDBaMDMxMTAvBgNV
BAMTKDA5MzZBNjQwMzI3Q0YzNjQ3OThGM0VBQUQ4MjU3RTI3ODNBNzEzMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNtLtn/tl+1vOHtlQ4h5FOOdMp
Et/yxWQd5l/3exdf/LJS1PqQaF2ldy47I744Hfu6MfJsDdejGDWSUaAxntqhqoGf
uLfMaNbe3mBTimUaUhkGAyl/dVgSim/XFR06KzqzQeCqf+ZYUI0AtL1YTIsTjwHI
SBpf3MaHigk5ebIONzWd7x8p7l5bjvM/KaQ009Dbvdxbe2GG/YkGsJngv6ug7VAj
1RW/HhfNz0p0yo/3G4XC4KF8jQTJXS7Dz1yj8gWXeeAnbLMwoqEkvnHDeVbK3RV8
J08D2VOBq87PhegXdUqqZ+3jX24I914WNh0Hgj83HSJ3a0B3qakvIxhuOCmDAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUCTamQDJ882R5jz6q2CV+J4OnEzUwHwYDVR0j
BBgwFoAU3Shqg753xCui0rvI5aTMrxlgJk0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERTQ3RERFQkQxOEM4MzQ5M0QxQTExQUVEQjU0MUE1RTMw
RTE4M0RGMjRFQUNGN0YyNTRCMkU2MUEzNjM4N0EwLzAvREQyODZBODNCRTc3QzQy
QkEyRDJCQkM4RTVBNENDQUYxOTYwMjY0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERDI4NkE4M0JFNzdDNDJCQTJE
MkJCQzhFNUE0Q0NBRjE5NjAyNjRELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREU0N0RERUJEMThDODM0OTNEMUExMUFFREI1NDFBNUUzMEUxODNERjI0
RUFDRjdGMjU0QjJFNjFBMzYzODdBMC8wLzM0MzUyZTMyMzMzNDJlMzYzMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMjM4MzczNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3qPjAN
BgkqhkiG9w0BAQsFAAOCAQEAGe1hXt1O2aSdtM7JPj6HdwcJKiamSmgwAZ+tPB9j
NHC2AeN8QOLcOV0ruBpX7os8h7IEwpHaSNWGowpY7nphZEQJSteqh4qQ2X7MeKTq
hpMpNO0gV5PrlIS8/GfHl7l3hg2p45PvaT5ciOiCmQED2555+EIojXLIphbPO8aC
XqTV6S8asRG2X7VYy0THiwqQXwlmlXxxclrCVBL+HOR/K8i8lNDENJ7aaxmBxgK2
pOp6mqbpdLP6cOvhNxQpz2JSPCqObHo+A6t/Kz5VvHEdz7qgWzVSaIq24sCrFZXK
3oeNhHjnPKbn6YvbMj7p1BRUprq9O7ZjKlK+t3jkf4GWFA==
-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:33 2024 by rpki-client on console-fra.rpki-client.org