Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/34352e3136342e36342e302f32322d3234203d3e20323637363939.roa
File:                     34352e3136342e36342e302f32322d3234203d3e20323637363939.roa (raw, json)
Hash identifier:          o84m6GPUvWCqe0GtINkIjhNQwoIhgt6RqsblfaF6CU4=
Subject key identifier:   69:CE:CC:B3:D3:3B:C0:94:94:05:0B:0A:CD:D0:14:25:F6:8F:3D:82
Certificate issuer:       /CN=02B881E65D6C311F6B248CD1A44B07782782D3C5
Certificate serial:       36D1E9455F596A7B802F13918EA5AA422CE3C7F4
Authority key identifier: 02:B8:81:E6:5D:6C:31:1F:6B:24:8C:D1:A4:4B:07:78:27:82:D3:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/34352e3136342e36342e302f32322d3234203d3e20323637363939.roa
Signing time:             Tue 05 Mar 2024 17:50:43 +0000
ROA not before:           Tue 05 Mar 2024 17:45:43 +0000
ROA not after:            Tue 04 Mar 2025 17:50:43 +0000
asID:                     267699
IP address blocks:        45.164.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d1:e9:45:5f:59:6a:7b:80:2f:13:91:8e:a5:aa:42:2c:e3:c7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02B881E65D6C311F6B248CD1A44B07782782D3C5
        Validity
            Not Before: Mar  5 17:45:43 2024 GMT
            Not After : Mar  4 17:50:43 2025 GMT
        Subject: CN=69CECCB3D33BC09494050B0ACDD01425F68F3D82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d3:0a:a3:92:ea:14:2b:0d:bb:6a:ff:32:9c:
                    6d:72:8c:e0:c1:30:25:a7:ba:e8:46:29:8f:ce:d2:
                    5a:dc:27:07:f6:f1:e9:38:25:8e:84:ca:3e:3b:99:
                    db:65:fc:bd:6e:be:91:3a:b7:99:18:dd:a2:ec:80:
                    6f:2b:ab:f1:be:5d:56:b2:02:66:91:2d:aa:ce:6e:
                    7a:59:c1:4d:fc:1d:9b:70:bf:6a:77:ec:5d:b8:7c:
                    20:67:77:37:a1:fe:1e:64:32:bc:14:63:91:7e:15:
                    1a:b7:b0:b7:00:b0:80:77:61:76:98:8a:c0:c9:8f:
                    ba:06:3b:b8:06:50:33:bf:a6:95:99:91:f2:1a:00:
                    e6:dd:0d:28:41:89:4d:bb:6d:8b:be:74:87:d1:ae:
                    08:72:8e:29:04:b5:19:0a:82:74:5c:04:49:40:f4:
                    3d:76:af:98:e8:b2:1d:cc:2e:02:63:64:29:4d:43:
                    a7:89:0c:6c:5a:57:8c:3d:6f:bf:1e:92:25:b5:aa:
                    f9:cd:55:2d:54:52:ac:da:85:44:be:20:fe:a5:cf:
                    c6:e3:59:81:44:c1:0f:bc:8e:99:fe:8b:33:d0:f3:
                    35:f2:b1:b9:b5:1d:4f:09:19:5a:53:07:5d:69:79:
                    3f:d6:e2:91:59:57:d6:61:c3:bc:4a:36:74:01:4c:
                    86:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CE:CC:B3:D3:3B:C0:94:94:05:0B:0A:CD:D0:14:25:F6:8F:3D:82
            X509v3 Authority Key Identifier:
                keyid:02:B8:81:E6:5D:6C:31:1F:6B:24:8C:D1:A4:4B:07:78:27:82:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/34352e3136342e36342e302f32322d3234203d3e20323637363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:6d:6f:1e:61:cd:2d:6c:73:81:a2:bf:cc:e5:ed:07:06:62:
         07:67:42:d8:38:e9:52:f6:cc:c4:b2:2f:da:52:1e:23:b1:b5:
         37:30:b3:9e:d3:ab:cc:21:77:d7:43:32:17:95:21:5d:99:bc:
         a4:3c:08:1a:4a:7f:78:53:25:f3:b6:2f:96:91:cc:31:e7:9d:
         14:0c:4a:7f:d4:39:fc:10:f9:c4:47:ff:36:12:7f:3c:72:a9:
         2d:aa:ff:89:47:52:cb:ad:af:c3:df:d8:83:56:46:4f:e7:2c:
         ce:1c:c6:bd:29:83:f2:72:2b:99:58:7f:a0:92:75:12:eb:69:
         2b:cd:ce:b1:5a:12:94:68:55:f2:b2:e4:84:f4:04:db:4d:30:
         70:88:e7:03:df:25:aa:06:ce:d8:ed:45:5d:75:5e:e4:0c:5a:
         58:9e:8e:ea:ad:2f:2a:d3:5c:06:27:42:00:d0:b2:5c:15:ea:
         94:f8:b6:bc:44:d3:0a:2a:b5:64:55:ca:3c:c2:67:67:89:b2:
         6b:2c:7d:e9:b7:88:c5:a9:de:83:2b:50:ab:d1:6c:1c:c1:95:
         5a:71:28:3e:62:d5:c0:ac:21:ad:40:80:ee:4f:b7:7e:9d:50:
         8e:f6:0f:8c:2b:b7:7c:10:0b:24:37:70:9a:cb:90:2f:31:c1:
         a6:8d:41:49
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNtHpRV9ZanuALxORjqWqQizjx/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJCODgxRTY1RDZDMzExRjZCMjQ4Q0QxQTQ0QjA3Nzgy
NzgyRDNDNTAeFw0yNDAzMDUxNzQ1NDNaFw0yNTAzMDQxNzUwNDNaMDMxMTAvBgNV
BAMTKDY5Q0VDQ0IzRDMzQkMwOTQ5NDA1MEIwQUNERDAxNDI1RjY4RjNEODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB0wqjkuoUKw27av8ynG1yjODB
MCWnuuhGKY/O0lrcJwf28ek4JY6Eyj47mdtl/L1uvpE6t5kY3aLsgG8rq/G+XVay
AmaRLarObnpZwU38HZtwv2p37F24fCBndzeh/h5kMrwUY5F+FRq3sLcAsIB3YXaY
isDJj7oGO7gGUDO/ppWZkfIaAObdDShBiU27bYu+dIfRrghyjikEtRkKgnRcBElA
9D12r5josh3MLgJjZClNQ6eJDGxaV4w9b78ekiW1qvnNVS1UUqzahUS+IP6lz8bj
WYFEwQ+8jpn+izPQ8zXysbm1HU8JGVpTB11peT/W4pFZV9Zhw7xKNnQBTIYfAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUac7Ms9M7wJSUBQsKzdAUJfaPPYIwHwYDVR0j
BBgwFoAUAriB5l1sMR9rJIzRpEsHeCeC08UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMTVBNDZDRUVCOTgxOUU2QjQzMTkwRDI3RjE3QUFGMEI3
QjUyNDJGNjI2ODExN0RDMDc4N0NCQzJDMTFFQ0UyLzAvMDJCODgxRTY1RDZDMzEx
RjZCMjQ4Q0QxQTQ0QjA3NzgyNzgyRDNDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMkI4ODFFNjVENkMzMTFGNkIy
NDhDRDFBNDRCMDc3ODI3ODJEM0M1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjE1QTQ2Q0VFQjk4MTlFNkI0MzE5MEQyN0YxN0FBRjBCN0I1MjQyRjYy
NjgxMTdEQzA3ODdDQkMyQzExRUNFMi8wLzM0MzUyZTMxMzYzNDJlMzYzNDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNzM2MzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2kQDAN
BgkqhkiG9w0BAQsFAAOCAQEAkG1vHmHNLWxzgaK/zOXtBwZiB2dC2DjpUvbMxLIv
2lIeI7G1NzCzntOrzCF310MyF5UhXZm8pDwIGkp/eFMl87YvlpHMMeedFAxKf9Q5
/BD5xEf/NhJ/PHKpLar/iUdSy62vw9/Yg1ZGT+cszhzGvSmD8nIrmVh/oJJ1Eutp
K83OsVoSlGhV8rLkhPQE200wcIjnA98lqgbO2O1FXXVe5AxaWJ6O6q0vKtNcBidC
ANCyXBXqlPi2vETTCiq1ZFXKPMJnZ4myayx96beIxanegytQq9FsHMGVWnEoPmLV
wKwhrUCA7k+3fp1QjvYPjCu3fBALJDdwmsuQLzHBpo1BSQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org