Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/34352e3136362e39322e302f32342d3234203d3e20323633373235.roa
File:                     34352e3136362e39322e302f32342d3234203d3e20323633373235.roa (raw, json)
Hash identifier:          8FKuO4hVAqF+3FAGlZ5I+cGJ/k6QF1+EyChnM14B4aI=
Subject key identifier:   7E:88:AE:EA:6C:A7:0D:C8:84:F0:E6:8B:B9:78:42:03:65:1B:8A:07
Certificate issuer:       /CN=303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB
Certificate serial:       6E7583327D3141E0C299CCCEB6FE625C7D15CD90
Authority key identifier: 30:3D:DB:5D:60:F7:11:45:08:9E:EA:3B:03:DB:CD:CF:BC:0D:E3:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/34352e3136362e39322e302f32342d3234203d3e20323633373235.roa
Signing time:             Tue 05 Mar 2024 18:02:14 +0000
ROA not before:           Tue 05 Mar 2024 17:57:14 +0000
ROA not after:            Tue 04 Mar 2025 18:02:14 +0000
asID:                     263725
IP address blocks:        45.166.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:75:83:32:7d:31:41:e0:c2:99:cc:ce:b6:fe:62:5c:7d:15:cd:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB
        Validity
            Not Before: Mar  5 17:57:14 2024 GMT
            Not After : Mar  4 18:02:14 2025 GMT
        Subject: CN=7E88AEEA6CA70DC884F0E68BB9784203651B8A07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c1:3a:70:0f:c9:5c:f8:09:ba:e2:9d:b8:c3:
                    0f:6e:b8:e4:91:c2:b6:83:e8:2f:fc:3b:82:71:f6:
                    a9:a8:20:cd:26:d4:55:e9:6a:35:4a:cb:32:38:d5:
                    ae:b2:42:90:33:3d:8e:94:50:1f:17:8c:36:30:ef:
                    b6:d3:fb:5f:c3:2c:76:9d:65:92:8b:ce:06:e7:15:
                    9a:ce:ae:a1:c0:81:2b:f6:fc:d9:02:14:ec:e0:bb:
                    26:2c:d3:f5:48:4c:25:14:c0:00:19:fe:71:1d:b9:
                    ab:f1:d5:75:bc:7c:d6:ed:3e:b8:cf:53:a2:72:db:
                    fa:ea:64:33:38:10:a3:a3:22:5a:8e:ad:bb:42:fe:
                    9d:59:69:fd:97:cf:ae:0c:99:d2:4e:86:81:88:11:
                    50:a6:e2:8a:d9:a5:ed:8e:69:d7:50:6e:e6:2d:a3:
                    24:da:fb:fa:e7:4a:7b:af:2a:9f:20:29:f2:38:4e:
                    8f:cd:f1:35:94:ed:52:dc:10:6f:e9:b7:0d:bc:01:
                    7f:fd:21:19:6e:b7:24:31:81:5f:32:80:50:f3:af:
                    bf:fd:b7:cf:5e:d9:c8:e7:83:31:a7:54:84:ef:b1:
                    5f:67:f8:1c:18:ac:20:ce:c0:75:ab:b4:53:c7:fc:
                    d8:e0:64:51:f9:59:ff:88:e7:50:82:1a:1a:da:be:
                    38:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:88:AE:EA:6C:A7:0D:C8:84:F0:E6:8B:B9:78:42:03:65:1B:8A:07
            X509v3 Authority Key Identifier:
                keyid:30:3D:DB:5D:60:F7:11:45:08:9E:EA:3B:03:DB:CD:CF:BC:0D:E3:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/34352e3136362e39322e302f32342d3234203d3e20323633373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:ec:e7:5e:b2:d9:12:15:0c:8c:c9:19:69:ca:11:9f:c4:83:
         c9:25:8d:51:4e:b0:08:72:82:44:f9:62:9f:15:5c:4a:05:d4:
         39:c2:23:a8:4d:96:08:c7:f4:2c:6b:d3:a2:07:97:c2:49:1c:
         7a:7f:62:7c:f2:55:7d:ef:bc:c6:31:97:2e:c9:2a:30:02:68:
         20:7e:05:20:75:e0:b7:d6:0d:17:cf:55:53:c1:6e:76:a1:01:
         d7:5f:f5:91:3f:dc:b8:b6:dd:27:bd:3a:60:5e:4c:11:c7:ba:
         e9:ca:3a:02:fd:fc:4f:21:fe:e7:c5:57:00:e0:9c:28:29:d0:
         8f:29:0e:6e:fa:3e:56:4c:7e:8e:91:eb:c7:6e:1b:89:7d:12:
         88:b3:03:b5:ff:5a:b9:ce:eb:73:f7:04:68:44:a3:82:11:52:
         f4:a6:20:d0:11:c5:c6:de:81:b1:4e:22:61:61:2f:d6:6b:2a:
         bf:bc:0a:e0:62:ea:ee:45:f7:7d:a2:a2:31:9b:a4:98:0d:4b:
         32:30:11:ee:61:fe:c8:5b:3a:36:3c:61:2c:af:0d:df:4d:c0:
         26:ac:65:ea:12:cb:0d:9e:29:ea:8a:0e:d7:be:39:6a:88:cc:
         e7:0f:f6:43:d9:8c:32:22:9e:f8:26:b5:dc:50:24:eb:a5:1f:
         8e:69:fd:fd
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbnWDMn0xQeDCmczOtv5iXH0VzZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAzRERCNUQ2MEY3MTE0NTA4OUVFQTNCMDNEQkNEQ0ZC
QzBERTNFQjAeFw0yNDAzMDUxNzU3MTRaFw0yNTAzMDQxODAyMTRaMDMxMTAvBgNV
BAMTKDdFODhBRUVBNkNBNzBEQzg4NEYwRTY4QkI5Nzg0MjAzNjUxQjhBMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+wTpwD8lc+Am64p24ww9uuOSR
wraD6C/8O4Jx9qmoIM0m1FXpajVKyzI41a6yQpAzPY6UUB8XjDYw77bT+1/DLHad
ZZKLzgbnFZrOrqHAgSv2/NkCFOzguyYs0/VITCUUwAAZ/nEduavx1XW8fNbtPrjP
U6Jy2/rqZDM4EKOjIlqOrbtC/p1Zaf2Xz64MmdJOhoGIEVCm4orZpe2OaddQbuYt
oyTa+/rnSnuvKp8gKfI4To/N8TWU7VLcEG/ptw28AX/9IRlutyQxgV8ygFDzr7/9
t89e2cjngzGnVITvsV9n+BwYrCDOwHWrtFPH/NjgZFH5Wf+I51CCGhravjiBAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUfoiu6mynDciE8OaLuXhCA2UbigcwHwYDVR0j
BBgwFoAUMD3bXWD3EUUInuo7A9vNz7wN4+swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMTA5NzQ1NEJENTlCNUJCNTYxNjY2RkMxMTczMjY5RDY0
MDE5ODk4QzlGREM1NTE1RDFFNjMyMTE1Mjk1OUI2LzAvMzAzRERCNUQ2MEY3MTE0
NTA4OUVFQTNCMDNEQkNEQ0ZCQzBERTNFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMDNEREI1RDYwRjcxMTQ1MDg5
RUVBM0IwM0RCQ0RDRkJDMERFM0VCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTEwOTc0NTRCRDU5QjVCQjU2MTY2NkZDMTE3MzI2OUQ2NDAxOTg5OEM5
RkRDNTUxNUQxRTYzMjExNTI5NTlCNi8wLzM0MzUyZTMxMzYzNjJlMzkzMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzM3MzIzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2mXDAN
BgkqhkiG9w0BAQsFAAOCAQEAY+znXrLZEhUMjMkZacoRn8SDySWNUU6wCHKCRPli
nxVcSgXUOcIjqE2WCMf0LGvTogeXwkkcen9ifPJVfe+8xjGXLskqMAJoIH4FIHXg
t9YNF89VU8FudqEB11/1kT/cuLbdJ706YF5MEce66co6Av38TyH+58VXAOCcKCnQ
jykObvo+Vkx+jpHrx24biX0SiLMDtf9auc7rc/cEaESjghFS9KYg0BHFxt6BsU4i
YWEv1msqv7wK4GLq7kX3faKiMZukmA1LMjAR7mH+yFs6NjxhLK8N303AJqxl6hLL
DZ4p6ooO1745aojM5w/2Q9mMMiKe+Ca13FAk66Ufjmn9/Q==
-----END CERTIFICATE-----
Generated at Tue Nov 19 18:42:48 2024 by rpki-client on console-fra.rpki-client.org