Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232362e302f32332d3233203d3e20323636373235.roa
File:                     34352e36352e3232362e302f32332d3233203d3e20323636373235.roa (raw, json)
Hash identifier:          P1BTG9PBouvgJOh3SliqRTbLxjagtF78dDNkxDa3F0Q=
Subject key identifier:   99:68:53:29:43:B2:90:21:AF:4E:C6:91:39:0E:1F:F6:61:EA:35:E9
Certificate issuer:       /CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Certificate serial:       01356150B16A2C8FC6A0B48FDDD420413EA0762E
Authority key identifier: 9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232362e302f32332d3233203d3e20323636373235.roa
Signing time:             Tue 05 Mar 2024 18:00:44 +0000
ROA not before:           Tue 05 Mar 2024 17:55:44 +0000
ROA not after:            Tue 04 Mar 2025 18:00:44 +0000
asID:                     266725
IP address blocks:        45.65.226.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:35:61:50:b1:6a:2c:8f:c6:a0:b4:8f:dd:d4:20:41:3e:a0:76:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
        Validity
            Not Before: Mar  5 17:55:44 2024 GMT
            Not After : Mar  4 18:00:44 2025 GMT
        Subject: CN=9968532943B29021AF4EC691390E1FF661EA35E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:a0:21:4e:62:5e:45:5c:6f:f8:aa:40:2e:
                    08:a8:1c:d0:85:aa:90:4c:03:22:a5:b7:7e:75:4d:
                    ea:50:77:2f:cf:50:92:c3:38:88:9c:fb:20:b1:53:
                    bf:25:43:c6:c1:ea:8e:a3:17:d8:b1:67:3e:8a:3c:
                    bd:4f:00:4e:cd:11:a9:ec:7b:8f:57:b6:a7:40:dd:
                    9f:55:8f:12:70:f6:2c:59:d9:74:d0:52:1b:b5:45:
                    d5:aa:9c:8f:88:1c:ab:02:3f:e7:a7:a2:f4:7a:ab:
                    78:5f:0f:39:20:10:82:34:5d:1a:04:a3:41:29:96:
                    d6:88:25:2e:e8:21:72:c4:d0:7f:12:61:68:0c:9c:
                    95:18:d2:3a:0a:ac:57:3b:3b:be:42:a4:8b:39:36:
                    ad:d5:47:1b:a8:e8:0e:f5:5e:52:1c:1b:69:a7:93:
                    48:5f:ee:cd:e7:40:5d:e6:98:35:a3:a1:2c:d8:3d:
                    70:d8:de:23:e1:c2:f3:68:79:f5:e6:86:be:43:32:
                    1f:0d:bf:71:6b:cb:bd:57:c9:40:fd:ec:ef:7c:18:
                    28:53:66:8e:5d:ed:c8:14:5f:95:79:f4:08:ec:5a:
                    0e:a7:a6:79:a8:c6:ad:af:58:c0:5d:4e:11:09:7f:
                    af:dd:c0:bd:c3:68:de:4c:63:95:24:bb:61:1c:7b:
                    bf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:68:53:29:43:B2:90:21:AF:4E:C6:91:39:0E:1F:F6:61:EA:35:E9
            X509v3 Authority Key Identifier:
                keyid:9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232362e302f32332d3233203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:24:15:37:23:fa:33:e8:ef:02:05:6e:41:d3:a4:c5:7f:7a:
         2a:9a:11:2e:38:c7:11:a5:cb:b6:2f:48:bc:1e:22:5c:f0:e0:
         0f:bf:73:85:f9:31:65:99:7d:b9:5e:75:6c:07:11:46:ed:25:
         f9:2e:4e:58:7e:ad:6b:dc:79:aa:a4:45:57:7c:83:8f:49:d1:
         3f:61:39:65:49:c5:6a:8b:71:e5:31:b8:44:7d:c2:91:15:00:
         78:f9:12:ff:e6:ad:a2:32:ab:e7:1d:f6:cf:d6:99:c3:48:a2:
         f8:7e:15:7c:75:7f:b8:85:9a:ab:a4:ce:f2:e1:0c:17:0f:d5:
         1e:91:ad:d8:ed:03:bb:e1:fc:1d:31:73:79:a3:d3:f9:af:33:
         5e:b1:29:15:4f:66:3b:41:b5:26:08:ba:87:13:5c:6c:3e:5f:
         aa:89:40:6b:8f:df:53:f7:7c:2f:a6:3d:03:db:c5:4a:84:cd:
         55:6c:47:fa:07:73:43:16:82:51:0c:a3:18:fa:2a:8a:87:14:
         e0:99:3c:e1:d2:d4:a0:1b:db:55:9f:66:16:4d:d8:81:54:66:
         f3:ea:da:fc:df:d1:75:1a:d0:df:5d:33:1a:80:3f:d5:7a:f3:
         56:87:d9:16:bc:1d:d3:dd:7a:df:d0:92:c5:55:93:6f:ff:f2:
         ad:1c:66:ac
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUATVhULFqLI/GoLSP3dQgQT6gdi4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJFMTg5NUM4RjY0QUVDNTIyMDlFQTJGREU3RDMwOEFF
RDJEQTY0MDAeFw0yNDAzMDUxNzU1NDRaFw0yNTAzMDQxODAwNDRaMDMxMTAvBgNV
BAMTKDk5Njg1MzI5NDNCMjkwMjFBRjRFQzY5MTM5MEUxRkY2NjFFQTM1RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd4aAhTmJeRVxv+KpALgioHNCF
qpBMAyKlt351TepQdy/PUJLDOIic+yCxU78lQ8bB6o6jF9ixZz6KPL1PAE7NEans
e49XtqdA3Z9VjxJw9ixZ2XTQUhu1RdWqnI+IHKsCP+enovR6q3hfDzkgEII0XRoE
o0EpltaIJS7oIXLE0H8SYWgMnJUY0joKrFc7O75CpIs5Nq3VRxuo6A71XlIcG2mn
k0hf7s3nQF3mmDWjoSzYPXDY3iPhwvNoefXmhr5DMh8Nv3Fry71XyUD97O98GChT
Zo5d7cgUX5V59AjsWg6npnmoxq2vWMBdThEJf6/dwL3DaN5MY5Uku2Ece78NAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUmWhTKUOykCGvTsaROQ4f9mHqNekwHwYDVR0j
BBgwFoAUm+GJXI9krsUiCeov3n0wiu0tpkAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQ0RCNzNGQ0YxRTZCRDAwMkRDQjA2QkQ2MDUyNjkxRDYy
MkVEMDkxMEE3RjJGMDUxQUVDNjkyRERFOTg0QUVGLzAvOUJFMTg5NUM4RjY0QUVD
NTIyMDlFQTJGREU3RDMwOEFFRDJEQTY0MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkUxODk1QzhGNjRBRUM1MjIw
OUVBMkZERTdEMzA4QUVEMkRBNjQwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUNEQjczRkNGMUU2QkQwMDJEQ0IwNkJENjA1MjY5MUQ2MjJFRDA5MTBB
N0YyRjA1MUFFQzY5MkRERTk4NEFFRi8wLzM0MzUyZTM2MzUyZTMyMzIzNjJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNjM3MzIzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS1B4jAN
BgkqhkiG9w0BAQsFAAOCAQEASSQVNyP6M+jvAgVuQdOkxX96KpoRLjjHEaXLti9I
vB4iXPDgD79zhfkxZZl9uV51bAcRRu0l+S5OWH6ta9x5qqRFV3yDj0nRP2E5ZUnF
aotx5TG4RH3CkRUAePkS/+atojKr5x32z9aZw0ii+H4VfHV/uIWaq6TO8uEMFw/V
HpGt2O0Du+H8HTFzeaPT+a8zXrEpFU9mO0G1Jgi6hxNcbD5fqolAa4/fU/d8L6Y9
A9vFSoTNVWxH+gdzQxaCUQyjGPoqiocU4Jk84dLUoBvbVZ9mFk3YgVRm8+ra/N/R
dRrQ310zGoA/1XrzVofZFrwd091639CSxVWTb//yrRxmrA==
-----END CERTIFICATE-----
Generated at Wed May 8 04:38:07 2024 by rpki-client on console-fra.rpki-client.org