Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFF920849F867E075F36455A1C5E2E324FAE1BBB1D62C605A67DECCFFC3BA1CB/0/34352e3232372e3133302e302f32342d3234203d3e20323636373738.roa
File:                     34352e3232372e3133302e302f32342d3234203d3e20323636373738.roa (raw, json)
Hash identifier:          7f6MZIo1lWsdi0j+AnGgmkNJZKBXwNlHMW+hniSMIIo=
Subject key identifier:   BD:AC:9F:99:1F:D3:B2:AC:07:A7:DC:27:3C:67:04:0B:99:A0:4F:1F
Certificate issuer:       /CN=950C360CB6EA8B2E8A8F400061E45C4BA9C2FD33
Certificate serial:       0C68B4E21D51905B831056FC9BA975B19EE9F483
Authority key identifier: 95:0C:36:0C:B6:EA:8B:2E:8A:8F:40:00:61:E4:5C:4B:A9:C2:FD:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/950C360CB6EA8B2E8A8F400061E45C4BA9C2FD33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DFF920849F867E075F36455A1C5E2E324FAE1BBB1D62C605A67DECCFFC3BA1CB/0/34352e3232372e3133302e302f32342d3234203d3e20323636373738.roa
Signing time:             Tue 05 Mar 2024 18:04:31 +0000
ROA not before:           Tue 05 Mar 2024 17:59:31 +0000
ROA not after:            Tue 04 Mar 2025 18:04:31 +0000
asID:                     266778
IP address blocks:        45.227.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DFF920849F867E075F36455A1C5E2E324FAE1BBB1D62C605A67DECCFFC3BA1CB/0/950C360CB6EA8B2E8A8F400061E45C4BA9C2FD33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DFF920849F867E075F36455A1C5E2E324FAE1BBB1D62C605A67DECCFFC3BA1CB/0/950C360CB6EA8B2E8A8F400061E45C4BA9C2FD33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/950C360CB6EA8B2E8A8F400061E45C4BA9C2FD33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:68:b4:e2:1d:51:90:5b:83:10:56:fc:9b:a9:75:b1:9e:e9:f4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=950C360CB6EA8B2E8A8F400061E45C4BA9C2FD33
        Validity
            Not Before: Mar  5 17:59:31 2024 GMT
            Not After : Mar  4 18:04:31 2025 GMT
        Subject: CN=BDAC9F991FD3B2AC07A7DC273C67040B99A04F1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6d:60:a4:58:ab:73:12:2c:14:18:5a:78:62:
                    32:fe:4b:55:bb:f2:6e:b8:f1:8f:56:1c:af:ec:d1:
                    b0:ca:03:54:13:b7:5b:c7:a1:34:ea:3a:6f:e2:2c:
                    69:1c:7c:99:c2:26:5e:27:54:0e:e7:2d:8a:36:0b:
                    86:f2:69:ac:4e:73:07:35:27:8a:3a:0d:f8:b0:8d:
                    27:95:9f:ef:01:6c:f6:60:9d:6d:c7:78:1f:57:50:
                    60:c5:7b:56:7b:99:ec:b3:fe:05:bd:ee:1d:5f:de:
                    c1:85:54:36:60:fc:8c:14:26:7a:a1:7c:f6:57:d6:
                    e1:64:91:70:a0:1b:16:cb:8f:c5:7e:bc:13:88:41:
                    2f:18:23:aa:c6:a5:28:fe:94:f5:2e:35:c9:87:64:
                    c4:bc:cb:61:fe:b2:08:7a:3a:70:c0:41:c0:7b:48:
                    b9:84:de:23:2d:d7:9d:ac:ea:fb:0e:f5:4e:f4:45:
                    62:a5:0e:1b:f7:a6:3f:09:fe:6b:43:1e:e6:ae:05:
                    12:22:06:9d:8f:c9:ce:3f:0d:5b:7b:1e:f1:d0:75:
                    d0:4a:a6:ea:08:f6:81:99:e7:72:55:b7:20:3b:a8:
                    c4:7e:22:a2:15:6d:04:65:78:68:6c:c1:40:0f:16:
                    87:b7:5f:41:d2:b6:9b:71:64:30:c7:b3:a6:3d:5f:
                    b4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AC:9F:99:1F:D3:B2:AC:07:A7:DC:27:3C:67:04:0B:99:A0:4F:1F
            X509v3 Authority Key Identifier:
                keyid:95:0C:36:0C:B6:EA:8B:2E:8A:8F:40:00:61:E4:5C:4B:A9:C2:FD:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DFF920849F867E075F36455A1C5E2E324FAE1BBB1D62C605A67DECCFFC3BA1CB/0/950C360CB6EA8B2E8A8F400061E45C4BA9C2FD33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/950C360CB6EA8B2E8A8F400061E45C4BA9C2FD33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFF920849F867E075F36455A1C5E2E324FAE1BBB1D62C605A67DECCFFC3BA1CB/0/34352e3232372e3133302e302f32342d3234203d3e20323636373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:69:78:36:c0:76:b3:d9:91:ba:0f:63:cb:9b:9d:1d:a9:7c:
         af:13:1d:ca:95:48:05:78:3e:60:9e:6d:ce:96:ca:e5:7d:5e:
         d0:ba:82:4f:92:c0:fb:ee:33:d4:36:7b:f8:3e:01:34:24:e8:
         a6:10:ad:9c:18:c5:8b:fd:48:76:e0:1f:cc:5e:2b:dd:4d:89:
         ff:c9:d0:fc:32:3e:7c:db:46:75:25:a9:df:d8:51:c6:78:c6:
         de:f6:e9:ab:ad:2e:60:6c:3d:9d:d6:2a:23:fd:85:1d:79:a4:
         68:1e:8c:41:1d:1f:a1:bd:7e:df:6f:c3:99:93:4d:dc:c7:25:
         d8:6b:d5:1a:5a:ff:c8:43:24:b6:c9:03:0b:63:66:0a:35:19:
         75:8e:25:a3:2f:73:06:ec:c0:24:c3:74:61:25:2f:0a:38:07:
         36:2b:36:ee:5a:28:1b:8d:6e:ea:f2:3f:5e:3d:2d:8a:37:41:
         9f:21:2d:73:04:b9:b3:f9:54:b2:e9:4b:a0:60:f4:62:c9:a3:
         85:1b:dd:0b:dc:33:cc:bb:90:ce:06:6e:53:6b:c8:d3:b9:b0:
         ba:1a:0f:dc:cc:a9:8f:0c:05:99:54:1f:56:15:24:74:ab:ff:
         89:86:e9:72:bd:c0:87:e7:85:9c:32:b5:e7:59:b4:c3:99:30:
         d0:49:22:0b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUDGi04h1RkFuDEFb8m6l1sZ7p9IMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwQzM2MENCNkVBOEIyRThBOEY0MDAwNjFFNDVDNEJB
OUMyRkQzMzAeFw0yNDAzMDUxNzU5MzFaFw0yNTAzMDQxODA0MzFaMDMxMTAvBgNV
BAMTKEJEQUM5Rjk5MUZEM0IyQUMwN0E3REMyNzNDNjcwNDBCOTlBMDRGMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkbWCkWKtzEiwUGFp4YjL+S1W7
8m648Y9WHK/s0bDKA1QTt1vHoTTqOm/iLGkcfJnCJl4nVA7nLYo2C4byaaxOcwc1
J4o6DfiwjSeVn+8BbPZgnW3HeB9XUGDFe1Z7meyz/gW97h1f3sGFVDZg/IwUJnqh
fPZX1uFkkXCgGxbLj8V+vBOIQS8YI6rGpSj+lPUuNcmHZMS8y2H+sgh6OnDAQcB7
SLmE3iMt152s6vsO9U70RWKlDhv3pj8J/mtDHuauBRIiBp2Pyc4/DVt7HvHQddBK
puoI9oGZ53JVtyA7qMR+IqIVbQRleGhswUAPFoe3X0HStptxZDDHs6Y9X7RfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUvayfmR/TsqwHp9wnPGcEC5mgTx8wHwYDVR0j
BBgwFoAUlQw2DLbqiy6Kj0AAYeRcS6nC/TMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERkY5MjA4NDlGODY3RTA3NUYzNjQ1NUExQzVFMkUzMjRG
QUUxQkJCMUQ2MkM2MDVBNjdERUNDRkZDM0JBMUNCLzAvOTUwQzM2MENCNkVBOEIy
RThBOEY0MDAwNjFFNDVDNEJBOUMyRkQzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NTBDMzYwQ0I2RUE4QjJFOEE4
RjQwMDA2MUU0NUM0QkE5QzJGRDMzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREZGOTIwODQ5Rjg2N0UwNzVGMzY0NTVBMUM1RTJFMzI0RkFFMUJCQjFE
NjJDNjA1QTY3REVDQ0ZGQzNCQTFDQi8wLzM0MzUyZTMyMzIzNzJlMzEzMzMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzczNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeOC
MA0GCSqGSIb3DQEBCwUAA4IBAQApaXg2wHaz2ZG6D2PLm50dqXyvEx3KlUgFeD5g
nm3OlsrlfV7QuoJPksD77jPUNnv4PgE0JOimEK2cGMWL/Uh24B/MXivdTYn/ydD8
Mj5820Z1Janf2FHGeMbe9umrrS5gbD2d1ioj/YUdeaRoHoxBHR+hvX7fb8OZk03c
xyXYa9UaWv/IQyS2yQMLY2YKNRl1jiWjL3MG7MAkw3RhJS8KOAc2KzbuWigbjW7q
8j9ePS2KN0GfIS1zBLmz+VSy6UugYPRiyaOFG90L3DPMu5DOBm5Ta8jTubC6Gg/c
zKmPDAWZVB9WFSR0q/+JhulyvcCH54WcMrXnWbTDmTDQSSIL
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org