Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE2CADB6530F8AC31EF0950E024CB75A3AB0B40442D67E171E5D718DCAA7112A/0/34352e3139312e302e302f32322d3234203d3e203231363632.roa
File:                     34352e3139312e302e302f32322d3234203d3e203231363632.roa (raw, json)
Hash identifier:          KSFjg4H2owtN7miDZgcL7i6RZDbwT+yvgwJ/K0NAaUc=
Subject key identifier:   6B:81:9B:78:D4:12:DF:AC:BD:20:B3:1E:A2:8E:BF:E8:8F:E5:75:A0
Certificate issuer:       /CN=6F536C71A8200D1878CE43CF666EB2F58403A8F1
Certificate serial:       4E26A075BC87B46E6FB8A2223130C89899E9758F
Authority key identifier: 6F:53:6C:71:A8:20:0D:18:78:CE:43:CF:66:6E:B2:F5:84:03:A8:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F536C71A8200D1878CE43CF666EB2F58403A8F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE2CADB6530F8AC31EF0950E024CB75A3AB0B40442D67E171E5D718DCAA7112A/0/34352e3139312e302e302f32322d3234203d3e203231363632.roa
Signing time:             Tue 05 Mar 2024 18:05:22 +0000
ROA not before:           Tue 05 Mar 2024 18:00:22 +0000
ROA not after:            Tue 04 Mar 2025 18:05:22 +0000
asID:                     21662
IP address blocks:        45.191.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EE2CADB6530F8AC31EF0950E024CB75A3AB0B40442D67E171E5D718DCAA7112A/0/6F536C71A8200D1878CE43CF666EB2F58403A8F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EE2CADB6530F8AC31EF0950E024CB75A3AB0B40442D67E171E5D718DCAA7112A/0/6F536C71A8200D1878CE43CF666EB2F58403A8F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F536C71A8200D1878CE43CF666EB2F58403A8F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:26:a0:75:bc:87:b4:6e:6f:b8:a2:22:31:30:c8:98:99:e9:75:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F536C71A8200D1878CE43CF666EB2F58403A8F1
        Validity
            Not Before: Mar  5 18:00:22 2024 GMT
            Not After : Mar  4 18:05:22 2025 GMT
        Subject: CN=6B819B78D412DFACBD20B31EA28EBFE88FE575A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6a:a4:88:91:6d:5c:27:5f:ce:bc:4d:de:1d:
                    fc:0d:fb:b4:55:69:c0:36:aa:9b:16:f0:d7:6f:12:
                    52:74:de:cd:dd:8f:49:42:8f:b8:b1:0e:d5:83:50:
                    3e:b4:b2:fd:a8:e8:58:fa:01:b8:9e:ee:88:34:49:
                    24:5c:2a:f4:d3:fe:67:f0:d1:e6:5f:72:2d:c1:b5:
                    92:a9:51:93:05:7b:d8:0d:fc:10:19:4e:cf:ee:03:
                    5a:81:54:91:cf:43:93:01:89:dc:2f:0a:90:6b:f5:
                    bc:68:08:97:59:2d:6f:32:d0:35:d4:0b:2e:0c:b4:
                    b0:6a:2d:61:77:a5:e8:5e:42:3d:05:f7:19:4c:93:
                    f8:73:a8:30:60:06:04:44:76:97:0b:50:9c:65:92:
                    14:4b:39:90:94:ad:f9:6b:c4:fe:c1:93:db:c5:19:
                    a8:a3:ba:1d:af:dc:b4:74:c3:74:14:5b:dd:5b:9d:
                    ed:37:82:12:ff:35:26:fe:f2:a1:ec:b6:e8:17:36:
                    03:98:d5:4f:b8:c3:91:cc:61:5c:97:07:90:f6:e8:
                    f6:37:62:b6:5b:ef:8e:2a:bb:61:71:ea:e6:8c:00:
                    37:61:5e:e9:d1:03:6b:4e:d7:d2:fb:d2:f6:19:9b:
                    41:d8:79:71:93:1d:02:28:6a:ef:3d:8a:f9:57:6d:
                    7e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:81:9B:78:D4:12:DF:AC:BD:20:B3:1E:A2:8E:BF:E8:8F:E5:75:A0
            X509v3 Authority Key Identifier:
                keyid:6F:53:6C:71:A8:20:0D:18:78:CE:43:CF:66:6E:B2:F5:84:03:A8:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE2CADB6530F8AC31EF0950E024CB75A3AB0B40442D67E171E5D718DCAA7112A/0/6F536C71A8200D1878CE43CF666EB2F58403A8F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F536C71A8200D1878CE43CF666EB2F58403A8F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE2CADB6530F8AC31EF0950E024CB75A3AB0B40442D67E171E5D718DCAA7112A/0/34352e3139312e302e302f32322d3234203d3e203231363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:c8:cc:31:2f:68:de:4d:91:6e:8c:f7:c3:02:3f:e1:b8:12:
         fc:84:3c:fc:96:ab:47:ba:1d:6f:52:82:1a:71:98:38:14:32:
         19:42:b4:06:88:6c:17:be:a6:d1:d9:2f:29:be:84:ed:23:23:
         2b:bc:fe:73:a7:65:9d:94:06:63:89:1e:7a:c5:a7:a3:5d:d8:
         14:ac:cf:31:79:6f:ad:eb:15:2a:d0:7b:5b:d4:44:6c:db:f7:
         f8:39:db:6a:91:0c:4d:00:e1:e3:fc:25:28:36:8f:93:9c:8a:
         ab:cf:39:a7:19:85:e3:c2:d5:55:3d:fe:a0:49:34:f7:6b:c1:
         8e:1c:96:3d:18:15:e1:1e:5a:97:40:35:e4:d8:cc:34:0a:24:
         af:05:60:b2:d0:1a:77:03:5d:bf:62:d0:13:08:21:26:bf:aa:
         09:bc:42:dc:58:c4:27:3e:6f:3b:c2:b7:4f:4c:92:af:d0:82:
         0c:ba:c4:c9:7f:0e:cb:dd:2a:84:74:8c:fe:0c:10:42:32:f7:
         25:9e:98:dc:74:a7:85:5e:1b:c0:a4:82:ce:0b:1e:20:20:05:
         db:eb:ea:a9:d2:da:ec:f8:a2:69:54:13:4b:59:ba:1c:75:2b:
         28:76:fc:39:dc:b6:37:36:ab:91:0c:d2:50:a8:e5:df:2c:0a:
         94:ce:4c:62
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUTiagdbyHtG5vuKIiMTDImJnpdY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY1MzZDNzFBODIwMEQxODc4Q0U0M0NGNjY2RUIyRjU4
NDAzQThGMTAeFw0yNDAzMDUxODAwMjJaFw0yNTAzMDQxODA1MjJaMDMxMTAvBgNV
BAMTKDZCODE5Qjc4RDQxMkRGQUNCRDIwQjMxRUEyOEVCRkU4OEZFNTc1QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzaqSIkW1cJ1/OvE3eHfwN+7RV
acA2qpsW8NdvElJ03s3dj0lCj7ixDtWDUD60sv2o6Fj6Abie7og0SSRcKvTT/mfw
0eZfci3BtZKpUZMFe9gN/BAZTs/uA1qBVJHPQ5MBidwvCpBr9bxoCJdZLW8y0DXU
Cy4MtLBqLWF3peheQj0F9xlMk/hzqDBgBgREdpcLUJxlkhRLOZCUrflrxP7Bk9vF
Gaijuh2v3LR0w3QUW91bne03ghL/NSb+8qHstugXNgOY1U+4w5HMYVyXB5D26PY3
YrZb744qu2Fx6uaMADdhXunRA2tO19L70vYZm0HYeXGTHQIoau89ivlXbX79AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUa4GbeNQS36y9ILMeoo6/6I/ldaAwHwYDVR0j
BBgwFoAUb1NscaggDRh4zkPPZm6y9YQDqPEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRTJDQURCNjUzMEY4QUMzMUVGMDk1MEUwMjRDQjc1QTNB
QjBCNDA0NDJENjdFMTcxRTVENzE4RENBQTcxMTJBLzAvNkY1MzZDNzFBODIwMEQx
ODc4Q0U0M0NGNjY2RUIyRjU4NDAzQThGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82RjUzNkM3MUE4MjAwRDE4NzhD
RTQzQ0Y2NjZFQjJGNTg0MDNBOEYxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUUyQ0FEQjY1MzBGOEFDMzFFRjA5NTBFMDI0Q0I3NUEzQUIwQjQwNDQy
RDY3RTE3MUU1RDcxOERDQUE3MTEyQS8wLzM0MzUyZTMxMzkzMTJlMzAyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMjMxMzYzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLb8AMA0GCSqG
SIb3DQEBCwUAA4IBAQCZyMwxL2jeTZFujPfDAj/huBL8hDz8lqtHuh1vUoIacZg4
FDIZQrQGiGwXvqbR2S8pvoTtIyMrvP5zp2WdlAZjiR56xaejXdgUrM8xeW+t6xUq
0Htb1ERs2/f4OdtqkQxNAOHj/CUoNo+TnIqrzzmnGYXjwtVVPf6gSTT3a8GOHJY9
GBXhHlqXQDXk2Mw0CiSvBWCy0Bp3A12/YtATCCEmv6oJvELcWMQnPm87wrdPTJKv
0IIMusTJfw7L3SqEdIz+DBBCMvclnpjcdKeFXhvApILOCx4gIAXb6+qp0trs+KJp
VBNLWbocdSsodvw53LY3NquRDNJQqOXfLAqUzkxi
-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:50 2024 by rpki-client on console-ams.rpki-client.org