Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/34352e342e3230302e302f32322d3234203d3e20323633323338.roa
File:                     34352e342e3230302e302f32322d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          PH1Qo1MoMGVz5CtYTA5Ly0hAQBuytNdtai0GP2nR8XM=
Subject key identifier:   74:FC:68:BE:69:16:77:D5:3D:F3:B5:5B:48:67:19:C9:B8:72:EA:DE
Certificate issuer:       /CN=74CB08D6E0688F8E499DD91190E49000CC837759
Certificate serial:       13987C88DE70B2C2D81DCCE24F5A68B525C3E7A3
Authority key identifier: 74:CB:08:D6:E0:68:8F:8E:49:9D:D9:11:90:E4:90:00:CC:83:77:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/34352e342e3230302e302f32322d3234203d3e20323633323338.roa
Signing time:             Tue 05 Mar 2024 18:12:32 +0000
ROA not before:           Tue 05 Mar 2024 18:07:32 +0000
ROA not after:            Tue 04 Mar 2025 18:12:32 +0000
asID:                     263238
IP address blocks:        45.4.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:98:7c:88:de:70:b2:c2:d8:1d:cc:e2:4f:5a:68:b5:25:c3:e7:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74CB08D6E0688F8E499DD91190E49000CC837759
        Validity
            Not Before: Mar  5 18:07:32 2024 GMT
            Not After : Mar  4 18:12:32 2025 GMT
        Subject: CN=74FC68BE691677D53DF3B55B486719C9B872EADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7a:08:d6:f2:e7:e4:66:89:01:ea:d1:41:44:
                    c0:e6:ee:96:b4:59:c0:ca:b1:d4:27:22:43:1f:1a:
                    85:e5:63:ed:c5:22:6c:28:ba:1a:55:80:a7:8a:fa:
                    7b:6d:e0:37:11:df:2d:e1:52:97:13:1a:1a:32:e7:
                    af:97:b7:64:86:ae:90:51:fa:1c:c8:00:45:79:b3:
                    0f:ac:35:48:10:3e:cd:f3:1f:d2:d8:86:8a:c9:7f:
                    5a:0a:1b:41:0c:43:0b:77:60:2f:15:a0:61:63:1e:
                    7a:71:9e:a8:c8:46:9f:fa:c4:ed:b2:e3:f6:8d:a3:
                    82:20:88:fb:36:c2:af:94:00:cf:f6:60:ea:95:aa:
                    0e:4b:f3:54:35:b3:9d:c2:14:b4:22:33:72:f2:2e:
                    2a:fd:55:ca:7f:e5:5d:96:fe:ee:00:61:ae:0a:d7:
                    01:18:de:72:fb:ee:2f:0c:df:91:6e:94:73:db:b3:
                    dd:0e:10:10:f0:81:46:d5:8b:fc:3c:99:99:ff:6b:
                    39:7e:e8:ab:53:85:e3:2e:e4:31:d9:95:37:a3:71:
                    67:16:f9:da:f2:7e:ad:ba:7f:33:81:fb:7f:2a:1c:
                    7a:3e:f3:98:d3:ea:0f:ad:1c:ff:a8:48:2c:48:93:
                    bd:48:6b:4f:d4:25:93:e6:74:d9:0c:91:e2:66:c7:
                    e9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FC:68:BE:69:16:77:D5:3D:F3:B5:5B:48:67:19:C9:B8:72:EA:DE
            X509v3 Authority Key Identifier:
                keyid:74:CB:08:D6:E0:68:8F:8E:49:9D:D9:11:90:E4:90:00:CC:83:77:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/34352e342e3230302e302f32322d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:52:04:1d:20:d3:20:12:4a:b4:b3:2b:95:a0:db:34:f6:e5:
         fd:ef:30:a3:e8:b1:50:5d:3d:5d:ae:64:00:b1:c8:dc:a9:91:
         db:9c:12:85:2d:0e:a8:35:12:c0:92:bf:59:6b:47:73:ba:08:
         9a:a4:2d:92:3c:0d:f5:db:78:40:9f:1b:2d:cc:0d:f0:56:18:
         1a:0a:36:6f:0e:87:f3:24:f8:99:fd:87:ae:b6:d3:c9:42:52:
         43:11:ae:14:79:b2:7f:d1:9c:7d:be:5a:f5:e0:58:0c:90:6a:
         32:a6:83:5e:f7:15:55:59:8d:c2:e6:b5:72:16:81:d9:39:65:
         52:7a:21:51:78:e5:0b:26:04:47:93:75:37:bf:f2:e4:3f:84:
         f2:1d:40:6a:71:0c:4e:14:d4:7a:28:d7:1f:ab:f0:5c:b0:c2:
         ba:2c:bf:ad:24:56:3f:5e:e8:08:9c:36:52:49:12:a0:ed:9d:
         52:00:52:e3:9e:f4:82:6d:fe:93:90:2a:79:93:65:0b:c0:fe:
         03:1c:a6:7e:e2:f4:f7:17:2a:46:7c:ea:de:0d:79:e6:33:1b:
         e9:54:c3:ef:f6:67:66:65:b5:64:a4:7d:f1:8c:26:aa:bf:84:
         79:d4:dd:c6:8f:e1:30:bd:d7:bd:e4:b4:e1:bd:9f:5e:2d:ed:
         36:fc:bd:2c
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUE5h8iN5wssLYHcziT1potSXD56MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRDQjA4RDZFMDY4OEY4RTQ5OUREOTExOTBFNDkwMDBD
QzgzNzc1OTAeFw0yNDAzMDUxODA3MzJaFw0yNTAzMDQxODEyMzJaMDMxMTAvBgNV
BAMTKDc0RkM2OEJFNjkxNjc3RDUzREYzQjU1QjQ4NjcxOUM5Qjg3MkVBREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaegjW8ufkZokB6tFBRMDm7pa0
WcDKsdQnIkMfGoXlY+3FImwouhpVgKeK+ntt4DcR3y3hUpcTGhoy56+Xt2SGrpBR
+hzIAEV5sw+sNUgQPs3zH9LYhorJf1oKG0EMQwt3YC8VoGFjHnpxnqjIRp/6xO2y
4/aNo4IgiPs2wq+UAM/2YOqVqg5L81Q1s53CFLQiM3LyLir9Vcp/5V2W/u4AYa4K
1wEY3nL77i8M35FulHPbs90OEBDwgUbVi/w8mZn/azl+6KtTheMu5DHZlTejcWcW
+dryfq26fzOB+38qHHo+85jT6g+tHP+oSCxIk71Ia0/UJZPmdNkMkeJmx+mJAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUdPxovmkWd9U987VbSGcZybhy6t4wHwYDVR0j
BBgwFoAUdMsI1uBoj45JndkRkOSQAMyDd1kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQ0ZBRjY1OEM4QzMyQ0UyNjNERDU0QzkwMEY1RDA2MjY0
QzQzODQ2NENGOTI2MzJEQ0VEQkJBMjkxMjI5QzFGLzAvNzRDQjA4RDZFMDY4OEY4
RTQ5OUREOTExOTBFNDkwMDBDQzgzNzc1OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NENCMDhENkUwNjg4RjhFNDk5
REQ5MTE5MEU0OTAwMENDODM3NzU5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUNGQUY2NThDOEMzMkNFMjYzREQ1NEM5MDBGNUQwNjI2NEM0Mzg0NjRD
RjkyNjMyRENFREJCQTI5MTIyOUMxRi8wLzM0MzUyZTM0MmUzMjMwMzAyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMjM2MzMzMjMzMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItBMgwDQYJ
KoZIhvcNAQELBQADggEBAAhSBB0g0yASSrSzK5Wg2zT25f3vMKPosVBdPV2uZACx
yNypkducEoUtDqg1EsCSv1lrR3O6CJqkLZI8DfXbeECfGy3MDfBWGBoKNm8Oh/Mk
+Jn9h66208lCUkMRrhR5sn/RnH2+WvXgWAyQajKmg173FVVZjcLmtXIWgdk5ZVJ6
IVF45QsmBEeTdTe/8uQ/hPIdQGpxDE4U1Hoo1x+r8Fywwrosv60kVj9e6AicNlJJ
EqDtnVIAUuOe9IJt/pOQKnmTZQvA/gMcpn7i9PcXKkZ86t4NeeYzG+lUw+/2Z2Zl
tWSkffGMJqq/hHnU3caP4TC9173ktOG9n14t7Tb8vSw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:37 2024 by rpki-client on console-fra.rpki-client.org