Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/34352e3233382e3139322e302f32322d3234203d3e20323636383037.roa
File:                     34352e3233382e3139322e302f32322d3234203d3e20323636383037.roa (raw, json)
Hash identifier:          V6spAzEZWZ6mk+u5kDfkPLpWvizVTil0Ius9gcdeQQY=
Subject key identifier:   D1:E3:7F:08:EB:F0:6D:3C:5C:9F:78:FD:57:B0:11:35:EC:E6:85:65
Certificate issuer:       /CN=00D66BC9589B906B6A52A31D7187FE6686118DFA
Certificate serial:       1C5BF15FB70F647277C9A80FDD844A33329F90D9
Authority key identifier: 00:D6:6B:C9:58:9B:90:6B:6A:52:A3:1D:71:87:FE:66:86:11:8D:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/34352e3233382e3139322e302f32322d3234203d3e20323636383037.roa
Signing time:             Tue 30 Apr 2024 12:45:00 +0000
ROA not before:           Tue 30 Apr 2024 12:40:00 +0000
ROA not after:            Tue 29 Apr 2025 12:45:00 +0000
asID:                     266807
IP address blocks:        45.238.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5b:f1:5f:b7:0f:64:72:77:c9:a8:0f:dd:84:4a:33:32:9f:90:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00D66BC9589B906B6A52A31D7187FE6686118DFA
        Validity
            Not Before: Apr 30 12:40:00 2024 GMT
            Not After : Apr 29 12:45:00 2025 GMT
        Subject: CN=D1E37F08EBF06D3C5C9F78FD57B01135ECE68565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:03:98:32:8e:38:16:4e:e7:6e:5b:e6:15:
                    6f:7c:98:77:f8:7d:d6:7f:b7:6b:e1:86:1f:54:4a:
                    61:4e:81:f2:00:a5:5f:65:85:f1:7d:26:77:9b:7b:
                    af:57:06:12:54:17:51:36:d8:1f:8b:30:55:1d:61:
                    e0:7d:c8:d5:38:eb:1f:ce:6b:4d:e1:9f:3d:48:e9:
                    bc:47:e0:f7:27:61:6a:9e:57:4c:ef:02:7f:77:02:
                    0f:e2:6c:cb:09:52:06:dc:d2:aa:91:dc:9a:93:80:
                    88:8c:4c:e8:fc:4c:9e:fa:cb:6c:9d:90:b5:03:ed:
                    08:46:de:f4:54:24:49:53:e5:c4:ea:85:48:ee:ef:
                    27:57:fc:9d:3f:be:f3:5f:54:0d:86:28:e7:ae:b0:
                    52:7a:76:12:b4:dc:8a:04:3b:92:f8:d8:90:97:5d:
                    15:2d:30:35:51:7e:4d:6a:d4:0d:07:38:37:f2:2b:
                    3b:65:f8:29:fe:01:bc:7a:8a:02:06:6d:e7:b2:cd:
                    d7:3f:dd:10:78:9d:f2:9a:bf:6e:53:f0:37:14:35:
                    27:00:8e:b9:4d:ae:04:e6:20:6a:ac:6f:14:bc:72:
                    5d:78:fb:e4:bb:8c:0a:f8:d5:9a:bc:95:79:c7:7a:
                    09:03:3c:26:58:ff:08:1e:59:45:be:85:6c:90:24:
                    4e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E3:7F:08:EB:F0:6D:3C:5C:9F:78:FD:57:B0:11:35:EC:E6:85:65
            X509v3 Authority Key Identifier:
                keyid:00:D6:6B:C9:58:9B:90:6B:6A:52:A3:1D:71:87:FE:66:86:11:8D:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/34352e3233382e3139322e302f32322d3234203d3e20323636383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:f9:62:9a:28:59:cb:00:00:90:3e:96:91:64:8c:c3:8f:b2:
         75:5e:5b:42:81:f6:f8:38:b7:69:f7:97:44:41:96:50:d7:0e:
         fd:1e:41:a2:47:6c:ee:15:5f:21:47:73:57:4b:9f:ff:fd:f8:
         18:21:01:e1:cc:28:be:98:9b:ef:e0:b3:f2:cc:5f:28:ff:59:
         bd:bb:d3:bf:f3:8c:ca:f0:ec:46:fc:80:ed:cb:f4:ff:ff:b0:
         df:48:a3:d4:d6:fb:af:88:92:39:eb:1a:f7:5a:96:43:e8:0e:
         fd:3f:96:1e:25:78:f3:64:42:fa:f4:31:c0:ab:24:50:db:2c:
         aa:81:2c:56:3b:53:e6:d0:50:6e:78:66:e7:9f:9c:c4:21:75:
         96:e1:ef:11:28:bb:e0:0a:c2:31:de:c9:33:2a:70:23:bb:42:
         19:91:7c:a9:19:fc:e2:40:82:63:13:ed:5e:c2:d4:36:c6:16:
         c2:e9:11:26:93:f8:d7:9d:8f:ef:e1:7b:6e:49:88:b8:c2:5b:
         fb:5e:15:29:66:52:ca:51:d7:73:50:90:4b:38:2b:61:66:12:
         78:ed:0e:0e:6c:f4:2c:5c:7f:b6:61:84:e2:c7:17:2f:04:cd:
         bc:cf:50:b7:09:da:1a:08:d8:68:0f:ae:5a:c0:c7:a1:5a:37:
         35:17:dc:e6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHFvxX7cPZHJ3yagP3YRKMzKfkNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBENjZCQzk1ODlCOTA2QjZBNTJBMzFENzE4N0ZFNjY4
NjExOERGQTAeFw0yNDA0MzAxMjQwMDBaFw0yNTA0MjkxMjQ1MDBaMDMxMTAvBgNV
BAMTKEQxRTM3RjA4RUJGMDZEM0M1QzlGNzhGRDU3QjAxMTM1RUNFNjg1NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1MAOYMo44Fk7nblvmFW98mHf4
fdZ/t2vhhh9USmFOgfIApV9lhfF9Jnebe69XBhJUF1E22B+LMFUdYeB9yNU46x/O
a03hnz1I6bxH4PcnYWqeV0zvAn93Ag/ibMsJUgbc0qqR3JqTgIiMTOj8TJ76y2yd
kLUD7QhG3vRUJElT5cTqhUju7ydX/J0/vvNfVA2GKOeusFJ6dhK03IoEO5L42JCX
XRUtMDVRfk1q1A0HODfyKztl+Cn+Abx6igIGbeeyzdc/3RB4nfKav25T8DcUNScA
jrlNrgTmIGqsbxS8cl14++S7jAr41Zq8lXnHegkDPCZY/wgeWUW+hWyQJE7zAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU0eN/COvwbTxcn3j9V7ARNezmhWUwHwYDVR0j
BBgwFoAUANZryVibkGtqUqMdcYf+ZoYRjfowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNDdDMTJFOENGQjEzMzIyODE2OUQ2RjBBNDg0RURBMEQ4
MTk2NzBCRTdFQjI0QjgwQTMzNDc3M0E0NjdDRTRELzAvMDBENjZCQzk1ODlCOTA2
QjZBNTJBMzFENzE4N0ZFNjY4NjExOERGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMEQ2NkJDOTU4OUI5MDZCNkE1
MkEzMUQ3MTg3RkU2Njg2MTE4REZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTQ3QzEyRThDRkIxMzMyMjgxNjlENkYwQTQ4NEVEQTBEODE5NjcwQkU3
RUIyNEI4MEEzMzQ3NzNBNDY3Q0U0RC8wLzM0MzUyZTMyMzMzODJlMzEzOTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2MzgzMDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLe7A
MA0GCSqGSIb3DQEBCwUAA4IBAQBA+WKaKFnLAACQPpaRZIzDj7J1XltCgfb4OLdp
95dEQZZQ1w79HkGiR2zuFV8hR3NXS5///fgYIQHhzCi+mJvv4LPyzF8o/1m9u9O/
84zK8OxG/IDty/T//7DfSKPU1vuviJI56xr3WpZD6A79P5YeJXjzZEL69DHAqyRQ
2yyqgSxWO1Pm0FBueGbnn5zEIXWW4e8RKLvgCsIx3skzKnAju0IZkXypGfziQIJj
E+1ewtQ2xhbC6REmk/jXnY/v4XtuSYi4wlv7XhUpZlLKUddzUJBLOCthZhJ47Q4O
bPQsXH+2YYTixxcvBM28z1C3CdoaCNhoD65awMehWjc1F9zm
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org