Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EECBA86087A832B2E491E1337C3656C7201E0920D80872B942321AF5B443AB31/0/34352e3138362e3230302e302f32322d3234203d3e20323639383230.roa
File:                     34352e3138362e3230302e302f32322d3234203d3e20323639383230.roa (raw, json)
Hash identifier:          Kare8/mAFqMHYMRSKQLepVlJ8GXG5PC8X5i9DxBAYHo=
Subject key identifier:   32:2D:FA:0F:5B:F4:8A:D5:8E:F3:56:D9:2C:38:7F:03:48:A1:98:AB
Certificate issuer:       /CN=8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0
Certificate serial:       51CD8D0DD5537CD43DAC423CE647EC9F8949B996
Authority key identifier: 8D:A6:D7:75:DB:31:F2:78:09:1A:DA:28:4A:3E:CD:5B:DE:A9:CC:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EECBA86087A832B2E491E1337C3656C7201E0920D80872B942321AF5B443AB31/0/34352e3138362e3230302e302f32322d3234203d3e20323639383230.roa
Signing time:             Tue 05 Mar 2024 17:54:33 +0000
ROA not before:           Tue 05 Mar 2024 17:49:33 +0000
ROA not after:            Tue 04 Mar 2025 17:54:33 +0000
asID:                     269820
IP address blocks:        45.186.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EECBA86087A832B2E491E1337C3656C7201E0920D80872B942321AF5B443AB31/0/8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EECBA86087A832B2E491E1337C3656C7201E0920D80872B942321AF5B443AB31/0/8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:cd:8d:0d:d5:53:7c:d4:3d:ac:42:3c:e6:47:ec:9f:89:49:b9:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0
        Validity
            Not Before: Mar  5 17:49:33 2024 GMT
            Not After : Mar  4 17:54:33 2025 GMT
        Subject: CN=322DFA0F5BF48AD58EF356D92C387F0348A198AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e2:9d:07:47:09:82:79:84:b3:9f:72:bd:c9:
                    15:c1:98:38:69:0d:3d:0a:25:07:6e:01:cc:f2:cd:
                    07:ae:0a:63:c6:f9:8d:dc:f3:95:bc:63:e6:13:d9:
                    c3:13:6e:ba:a6:f2:63:6e:33:87:53:b3:3c:c1:c2:
                    b3:21:cf:1c:3a:e1:21:11:8f:96:c7:f2:e2:16:58:
                    38:96:8a:de:be:d4:67:c0:84:41:88:77:ad:96:d6:
                    f6:73:aa:20:4c:9b:84:b8:d7:53:71:68:58:9e:48:
                    0a:0f:fb:b6:ea:ba:a4:37:49:60:fe:3b:6b:08:51:
                    88:01:41:30:97:90:e6:31:33:9f:e0:11:b2:6e:27:
                    95:9d:66:f9:2e:74:f0:22:09:85:19:9a:c5:22:9b:
                    e3:27:c3:bc:32:f0:97:c7:6d:8f:b1:4d:a4:be:8f:
                    73:3a:af:d0:10:97:f1:46:81:9a:9e:fa:89:60:3d:
                    22:c6:ed:3d:0e:50:e2:b2:9a:f6:36:c5:18:43:48:
                    04:9b:5f:d6:b1:e5:79:54:63:28:34:2f:8f:b6:e0:
                    1e:e4:0a:b5:47:62:28:1f:60:e8:c8:4b:f2:25:34:
                    96:85:de:fa:e4:18:76:e3:df:c7:0e:1f:92:a9:af:
                    6a:4c:53:e8:b1:e9:74:60:60:4a:d0:a3:28:7d:80:
                    7a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2D:FA:0F:5B:F4:8A:D5:8E:F3:56:D9:2C:38:7F:03:48:A1:98:AB
            X509v3 Authority Key Identifier:
                keyid:8D:A6:D7:75:DB:31:F2:78:09:1A:DA:28:4A:3E:CD:5B:DE:A9:CC:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EECBA86087A832B2E491E1337C3656C7201E0920D80872B942321AF5B443AB31/0/8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EECBA86087A832B2E491E1337C3656C7201E0920D80872B942321AF5B443AB31/0/34352e3138362e3230302e302f32322d3234203d3e20323639383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:d0:33:83:c1:81:0e:60:ee:18:fe:81:eb:bb:71:b4:7b:d7:
         f5:3d:b5:e8:3c:81:62:45:b0:0d:cc:24:8a:64:95:8b:50:72:
         dd:eb:d2:ab:fe:7c:c7:fd:1a:9e:f0:bf:d0:70:73:65:db:86:
         5b:fd:18:cf:87:b5:fe:37:1d:4a:1d:e6:46:05:36:75:3b:30:
         ae:9e:10:28:21:57:be:28:44:a9:cb:de:df:69:f9:9c:67:ab:
         33:b4:d9:f9:1e:c7:d1:00:5c:99:61:d1:66:a0:bd:ee:24:e1:
         73:57:52:3e:fa:28:9a:ef:0e:1f:d5:6b:4e:f8:b6:73:ce:48:
         df:05:18:97:b7:eb:3c:6e:30:36:62:48:25:1d:c9:9a:a6:e8:
         8f:af:41:38:c3:7f:b3:6b:1a:dc:ce:44:5e:74:37:7b:87:91:
         68:50:82:43:af:9d:ad:dc:35:47:cb:96:bd:ed:0c:e4:c2:ac:
         55:4c:75:25:d3:f6:96:ec:39:2a:4d:e8:ab:06:68:9f:3c:80:
         4b:0b:af:6a:07:17:6b:96:97:76:99:e4:b3:e5:57:1c:99:2d:
         3a:1e:ab:aa:dc:69:dd:d5:47:ac:4e:43:9f:d3:e5:24:ab:bc:
         3b:2e:8c:5a:9a:65:96:1c:ac:5e:cd:ce:0f:1e:1b:e0:41:48:
         1d:2d:df:44
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUc2NDdVTfNQ9rEI85kfsn4lJuZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERBNkQ3NzVEQjMxRjI3ODA5MUFEQTI4NEEzRUNENUJE
RUE5Q0NDMDAeFw0yNDAzMDUxNzQ5MzNaFw0yNTAzMDQxNzU0MzNaMDMxMTAvBgNV
BAMTKDMyMkRGQTBGNUJGNDhBRDU4RUYzNTZEOTJDMzg3RjAzNDhBMTk4QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC14p0HRwmCeYSzn3K9yRXBmDhp
DT0KJQduAczyzQeuCmPG+Y3c85W8Y+YT2cMTbrqm8mNuM4dTszzBwrMhzxw64SER
j5bH8uIWWDiWit6+1GfAhEGId62W1vZzqiBMm4S411NxaFieSAoP+7bquqQ3SWD+
O2sIUYgBQTCXkOYxM5/gEbJuJ5WdZvkudPAiCYUZmsUim+Mnw7wy8JfHbY+xTaS+
j3M6r9AQl/FGgZqe+olgPSLG7T0OUOKymvY2xRhDSASbX9ax5XlUYyg0L4+24B7k
CrVHYigfYOjIS/IlNJaF3vrkGHbj38cOH5Kpr2pMU+ix6XRgYErQoyh9gHrVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUMi36D1v0itWO81bZLDh/A0ihmKswHwYDVR0j
BBgwFoAUjabXddsx8ngJGtooSj7NW96pzMAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRUNCQTg2MDg3QTgzMkIyRTQ5MUUxMzM3QzM2NTZDNzIw
MUUwOTIwRDgwODcyQjk0MjMyMUFGNUI0NDNBQjMxLzAvOERBNkQ3NzVEQjMxRjI3
ODA5MUFEQTI4NEEzRUNENUJERUE5Q0NDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84REE2RDc3NURCMzFGMjc4MDkx
QURBMjg0QTNFQ0Q1QkRFQTlDQ0MwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUVDQkE4NjA4N0E4MzJCMkU0OTFFMTMzN0MzNjU2QzcyMDFFMDkyMEQ4
MDg3MkI5NDIzMjFBRjVCNDQzQUIzMS8wLzM0MzUyZTMxMzgzNjJlMzIzMDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5MzgzMjMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLbrI
MA0GCSqGSIb3DQEBCwUAA4IBAQCg0DODwYEOYO4Y/oHru3G0e9f1PbXoPIFiRbAN
zCSKZJWLUHLd69Kr/nzH/Rqe8L/QcHNl24Zb/RjPh7X+Nx1KHeZGBTZ1OzCunhAo
IVe+KESpy97fafmcZ6sztNn5HsfRAFyZYdFmoL3uJOFzV1I++iia7w4f1WtO+LZz
zkjfBRiXt+s8bjA2YkglHcmapuiPr0E4w3+zaxrczkRedDd7h5FoUIJDr52t3DVH
y5a97QzkwqxVTHUl0/aW7DkqTeirBmifPIBLC69qBxdrlpd2meSz5VccmS06Hquq
3Gnd1UesTkOf0+Ukq7w7LoxammWWHKxezc4PHhvgQUgdLd9E
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org