Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33362e302f32342d3234203d3e20323637363830.roa
File:                     34352e3136332e33362e302f32342d3234203d3e20323637363830.roa (raw, json)
Hash identifier:          vDzryZoSRAtKhIhdCRo4pTj2LpoTC4Q7kfQG8Bu2P84=
Subject key identifier:   A1:AF:55:9B:AD:83:B5:56:EC:14:CE:A7:AF:DC:78:46:45:53:FA:BE
Certificate issuer:       /CN=A43B54A45F6595D87EE8D04C516D7321C1DC20D6
Certificate serial:       556AEF1B942054D5DAD0500E28397876EB163CCD
Authority key identifier: A4:3B:54:A4:5F:65:95:D8:7E:E8:D0:4C:51:6D:73:21:C1:DC:20:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33362e302f32342d3234203d3e20323637363830.roa
Signing time:             Tue 05 Mar 2024 17:46:42 +0000
ROA not before:           Tue 05 Mar 2024 17:41:42 +0000
ROA not after:            Tue 04 Mar 2025 17:46:42 +0000
asID:                     267680
IP address blocks:        45.163.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6a:ef:1b:94:20:54:d5:da:d0:50:0e:28:39:78:76:eb:16:3c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43B54A45F6595D87EE8D04C516D7321C1DC20D6
        Validity
            Not Before: Mar  5 17:41:42 2024 GMT
            Not After : Mar  4 17:46:42 2025 GMT
        Subject: CN=A1AF559BAD83B556EC14CEA7AFDC78464553FABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:63:f4:0e:d6:c5:fd:63:65:bd:1c:20:b5:69:
                    08:49:22:70:81:0c:cd:ec:9c:35:83:3a:e6:ab:3e:
                    d6:14:46:97:6a:76:fc:47:30:36:3d:be:09:f9:d4:
                    e9:44:cf:90:7a:d2:cd:38:e1:3b:8c:99:0f:1f:5a:
                    61:e5:e5:1a:6b:83:b5:68:d2:fc:67:08:b5:73:c1:
                    d7:01:7e:da:41:5a:2e:38:0e:0c:c4:9c:e5:bc:48:
                    53:ca:3b:5d:7d:90:f6:9a:90:1c:f8:06:46:79:e3:
                    cc:42:c8:d4:72:00:44:b5:88:18:76:2d:db:85:28:
                    9a:db:37:6f:8e:b9:e1:03:e1:ba:d4:31:7f:25:46:
                    a6:65:60:9f:11:af:01:90:9b:a5:30:00:d1:74:1b:
                    72:a6:c8:51:6d:f9:06:65:40:a3:8e:4a:79:18:4c:
                    a3:37:d3:e3:2c:ee:75:a1:f5:84:24:b7:52:3f:03:
                    82:94:bd:35:5c:59:df:52:ad:7b:78:45:4a:d4:75:
                    9b:9d:c3:c6:22:74:65:49:69:a7:3a:e1:8e:6a:17:
                    58:73:07:e2:c7:03:34:d5:64:83:ab:5b:ce:37:6d:
                    2e:da:d7:48:40:66:46:e7:e6:1e:97:35:50:9b:94:
                    b5:23:f9:0b:e3:8b:c3:82:db:2b:ef:16:cb:94:59:
                    29:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AF:55:9B:AD:83:B5:56:EC:14:CE:A7:AF:DC:78:46:45:53:FA:BE
            X509v3 Authority Key Identifier:
                keyid:A4:3B:54:A4:5F:65:95:D8:7E:E8:D0:4C:51:6D:73:21:C1:DC:20:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33362e302f32342d3234203d3e20323637363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:3a:51:c8:bb:6c:58:be:c2:c1:dc:92:ce:27:b9:50:10:93:
         10:f4:4e:65:68:7d:0d:ca:bf:3e:9d:12:5c:0c:c2:5c:82:bd:
         17:a2:6f:ad:9b:4d:4c:c9:d4:8f:9a:11:dd:c2:33:21:f4:b0:
         25:df:9a:b0:55:d7:81:18:d2:e4:c1:ed:de:1c:f4:61:2a:9b:
         4c:01:59:9f:09:4d:21:9e:d6:8d:f8:e7:e7:0e:ca:1e:09:30:
         7c:af:97:61:a5:a3:89:3b:ce:80:39:63:09:04:72:19:e8:02:
         a9:cc:9e:f2:56:fb:a0:e7:9f:c2:f5:b9:79:cd:b7:d4:0c:90:
         14:22:10:9e:74:bd:c1:b0:9b:fd:df:d1:f2:95:9c:e5:fa:65:
         21:e3:0f:05:cb:30:60:45:dd:31:2d:5a:33:63:b6:1d:50:0a:
         68:15:82:51:3e:d7:8f:10:e6:bd:8d:6f:8b:b6:6b:99:f8:6c:
         ac:c8:05:d8:f6:0d:e2:03:9a:db:25:f2:a9:b6:4d:4c:58:33:
         4c:22:10:67:ca:d9:83:91:85:f8:b7:7b:67:70:ef:d9:02:6f:
         d8:8f:f9:20:09:e0:7b:5d:8d:9d:50:40:19:1c:b9:1b:bd:dd:
         05:f9:ec:44:aa:8b:56:41:bb:43:22:14:c1:f3:5d:ea:b3:79:
         c2:86:85:a0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVWrvG5QgVNXa0FAOKDl4dusWPM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQzQjU0QTQ1RjY1OTVEODdFRThEMDRDNTE2RDczMjFD
MURDMjBENjAeFw0yNDAzMDUxNzQxNDJaFw0yNTAzMDQxNzQ2NDJaMDMxMTAvBgNV
BAMTKEExQUY1NTlCQUQ4M0I1NTZFQzE0Q0VBN0FGREM3ODQ2NDU1M0ZBQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvY/QO1sX9Y2W9HCC1aQhJInCB
DM3snDWDOuarPtYURpdqdvxHMDY9vgn51OlEz5B60s044TuMmQ8fWmHl5Rprg7Vo
0vxnCLVzwdcBftpBWi44DgzEnOW8SFPKO119kPaakBz4BkZ548xCyNRyAES1iBh2
LduFKJrbN2+OueED4brUMX8lRqZlYJ8RrwGQm6UwANF0G3KmyFFt+QZlQKOOSnkY
TKM30+Ms7nWh9YQkt1I/A4KUvTVcWd9SrXt4RUrUdZudw8YidGVJaac64Y5qF1hz
B+LHAzTVZIOrW843bS7a10hAZkbn5h6XNVCblLUj+Qvji8OC2yvvFsuUWSmBAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUoa9Vm62DtVbsFM6nr9x4RkVT+r4wHwYDVR0j
BBgwFoAUpDtUpF9lldh+6NBMUW1zIcHcINYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjJGNEIxODczM0RGNkQ1REEyM0RGQ0IzNjZFODBDNDFD
MzgxQThGNzI5OTg2QUNFODUzNjQ3N0YzNDY4MDBDLzAvQTQzQjU0QTQ1RjY1OTVE
ODdFRThEMDRDNTE2RDczMjFDMURDMjBENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNDNCNTRBNDVGNjU5NUQ4N0VF
OEQwNEM1MTZENzMyMUMxREMyMEQ2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUIyRjRCMTg3MzNERjZENURBMjNERkNCMzY2RTgwQzQxQzM4MUE4Rjcy
OTk4NkFDRTg1MzY0NzdGMzQ2ODAwQy8wLzM0MzUyZTMxMzYzMzJlMzMzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM2MzgzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2jJDAN
BgkqhkiG9w0BAQsFAAOCAQEAzTpRyLtsWL7CwdySzie5UBCTEPROZWh9Dcq/Pp0S
XAzCXIK9F6JvrZtNTMnUj5oR3cIzIfSwJd+asFXXgRjS5MHt3hz0YSqbTAFZnwlN
IZ7Wjfjn5w7KHgkwfK+XYaWjiTvOgDljCQRyGegCqcye8lb7oOefwvW5ec231AyQ
FCIQnnS9wbCb/d/R8pWc5fplIeMPBcswYEXdMS1aM2O2HVAKaBWCUT7XjxDmvY1v
i7ZrmfhsrMgF2PYN4gOa2yXyqbZNTFgzTCIQZ8rZg5GF+Ld7Z3Dv2QJv2I/5IAng
e12NnVBAGRy5G73dBfnsRKqLVkG7QyIUwfNd6rN5woaFoA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org