Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/34352e3232342e3135322e302f32322d3234203d3e203532343638.roa
File:                     34352e3232342e3135322e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          Av/3InKJTEkNMMRjjCElAWEtnoGRq26xw41ACGS1gvE=
Subject key identifier:   94:1F:AA:CA:D8:CB:DF:23:1A:4E:D3:B7:FB:E3:AD:43:D6:E9:93:F4
Certificate issuer:       /CN=AC4F66836F8621D5CE8015EE7A781F4C097A7F15
Certificate serial:       591F37AB1E727D3D27C4BD0F2FF5CAF0D8FEF850
Authority key identifier: AC:4F:66:83:6F:86:21:D5:CE:80:15:EE:7A:78:1F:4C:09:7A:7F:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC4F66836F8621D5CE8015EE7A781F4C097A7F15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/34352e3232342e3135322e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:50:48 +0000
ROA not before:           Tue 05 Mar 2024 17:45:48 +0000
ROA not after:            Tue 04 Mar 2025 17:50:48 +0000
asID:                     52468
IP address blocks:        45.224.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/AC4F66836F8621D5CE8015EE7A781F4C097A7F15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/AC4F66836F8621D5CE8015EE7A781F4C097A7F15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC4F66836F8621D5CE8015EE7A781F4C097A7F15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:1f:37:ab:1e:72:7d:3d:27:c4:bd:0f:2f:f5:ca:f0:d8:fe:f8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC4F66836F8621D5CE8015EE7A781F4C097A7F15
        Validity
            Not Before: Mar  5 17:45:48 2024 GMT
            Not After : Mar  4 17:50:48 2025 GMT
        Subject: CN=941FAACAD8CBDF231A4ED3B7FBE3AD43D6E993F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:00:94:f3:dd:66:57:77:7c:44:35:1b:06:30:
                    1e:71:87:3f:6f:3e:04:a4:60:97:bc:85:58:5d:0a:
                    3e:a0:09:b7:81:f3:1f:e0:90:e6:1f:46:7f:99:b3:
                    bd:08:0d:32:8f:a2:8c:f2:a7:c9:98:ae:7c:1f:21:
                    44:5c:ba:84:a5:b4:4d:d4:20:8a:38:d3:8d:77:17:
                    be:e1:18:f6:bd:37:9e:f6:e4:1e:3b:69:8f:70:aa:
                    74:89:78:b5:1c:ee:0e:a4:ad:11:d9:c4:60:81:6b:
                    98:68:77:e5:90:ac:ba:69:3f:01:8f:9c:51:26:ad:
                    c7:7a:a6:74:86:23:d4:0b:13:5e:7c:3c:f2:d0:8a:
                    7f:4e:ab:a9:83:1a:03:5b:b0:dd:bd:ac:22:6c:a0:
                    bf:49:24:f7:85:4b:11:89:67:4b:18:20:66:47:e1:
                    70:c0:a9:f2:83:d1:91:ab:f3:30:52:7c:08:70:9e:
                    d7:37:8b:cd:44:82:89:a1:ae:57:ce:08:47:2b:36:
                    29:e9:9f:d6:d3:e9:59:49:94:2a:ad:c1:9d:41:24:
                    ca:9c:49:98:f8:a5:ec:6d:99:96:98:cc:f2:b2:3e:
                    c9:d5:13:9e:1a:a2:2f:69:26:64:bf:22:a5:ea:4c:
                    e3:2e:6c:6c:5c:db:97:1d:bb:1b:6e:7b:71:0b:b1:
                    5e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1F:AA:CA:D8:CB:DF:23:1A:4E:D3:B7:FB:E3:AD:43:D6:E9:93:F4
            X509v3 Authority Key Identifier:
                keyid:AC:4F:66:83:6F:86:21:D5:CE:80:15:EE:7A:78:1F:4C:09:7A:7F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/AC4F66836F8621D5CE8015EE7A781F4C097A7F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC4F66836F8621D5CE8015EE7A781F4C097A7F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/34352e3232342e3135322e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:6f:dc:92:d3:72:4d:28:cd:fb:02:12:cb:d3:8a:41:02:d5:
         e9:5d:6a:e1:35:af:8a:1a:21:ce:f8:44:a8:04:36:76:a3:7f:
         27:ab:13:4e:f7:6f:3b:ae:db:28:42:de:f3:03:3c:86:dc:75:
         2a:66:65:0c:36:41:dd:be:ce:ea:00:08:eb:17:6f:d9:49:7c:
         33:98:ff:fc:25:8f:58:06:b0:be:56:0d:1b:c2:99:db:57:9a:
         a6:86:38:82:b3:8e:35:50:61:39:68:cf:5e:89:da:95:b5:36:
         e8:dc:d6:7e:b1:a0:4f:2c:f7:5f:2f:10:f5:2c:9e:1a:59:b1:
         d0:44:77:90:f9:11:03:d4:a8:df:d4:80:1f:d2:aa:43:ac:17:
         bb:7e:bf:0e:7f:83:f2:b2:df:98:36:0b:20:73:f4:67:98:bf:
         38:f2:f1:c0:28:fe:be:d1:ae:e7:1a:be:9e:63:e1:ce:2d:d9:
         b7:f1:2f:d5:a9:12:a4:20:08:87:a0:cd:4a:f1:ea:d6:18:54:
         ad:85:d3:4b:ad:bc:de:05:56:c1:e1:46:d3:f1:19:fc:98:4a:
         47:0f:37:68:18:00:1b:c0:8d:6a:1d:2c:c0:b4:58:70:6c:83:
         92:f4:d1:7b:87:27:98:bf:0a:f6:ce:9e:e3:3a:d5:a0:ed:f7:
         db:eb:65:47
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWR83qx5yfT0nxL0PL/XK8Nj++FAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM0RjY2ODM2Rjg2MjFENUNFODAxNUVFN0E3ODFGNEMw
OTdBN0YxNTAeFw0yNDAzMDUxNzQ1NDhaFw0yNTAzMDQxNzUwNDhaMDMxMTAvBgNV
BAMTKDk0MUZBQUNBRDhDQkRGMjMxQTRFRDNCN0ZCRTNBRDQzRDZFOTkzRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDAJTz3WZXd3xENRsGMB5xhz9v
PgSkYJe8hVhdCj6gCbeB8x/gkOYfRn+Zs70IDTKPoozyp8mYrnwfIURcuoSltE3U
IIo40413F77hGPa9N5725B47aY9wqnSJeLUc7g6krRHZxGCBa5hod+WQrLppPwGP
nFEmrcd6pnSGI9QLE158PPLQin9Oq6mDGgNbsN29rCJsoL9JJPeFSxGJZ0sYIGZH
4XDAqfKD0ZGr8zBSfAhwntc3i81EgomhrlfOCEcrNinpn9bT6VlJlCqtwZ1BJMqc
SZj4pextmZaYzPKyPsnVE54aoi9pJmS/IqXqTOMubGxc25cduxtue3ELsV5PAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUlB+qytjL3yMaTtO3++OtQ9bpk/QwHwYDVR0j
BBgwFoAUrE9mg2+GIdXOgBXuengfTAl6fxUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMzc3RUU3OTI4MDhBQ0I3Qjg4QTRFNjAyOUZCMDNGNjBG
Mzg4NTYwQjgyNDI0QzFBMzY1MEJFNjc2NzJBOEU1LzAvQUM0RjY2ODM2Rjg2MjFE
NUNFODAxNUVFN0E3ODFGNEMwOTdBN0YxNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQzRGNjY4MzZGODYyMUQ1Q0U4
MDE1RUU3QTc4MUY0QzA5N0E3RjE1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjM3N0VFNzkyODA4QUNCN0I4OEE0RTYwMjlGQjAzRjYwRjM4ODU2MEI4
MjQyNEMxQTM2NTBCRTY3NjcyQThFNS8wLzM0MzUyZTMyMzIzNDJlMzEzNTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3gmDAN
BgkqhkiG9w0BAQsFAAOCAQEAu2/cktNyTSjN+wISy9OKQQLV6V1q4TWvihohzvhE
qAQ2dqN/J6sTTvdvO67bKELe8wM8htx1KmZlDDZB3b7O6gAI6xdv2Ul8M5j//CWP
WAawvlYNG8KZ21eapoY4grOONVBhOWjPXonalbU26NzWfrGgTyz3Xy8Q9SyeGlmx
0ER3kPkRA9So39SAH9KqQ6wXu36/Dn+D8rLfmDYLIHP0Z5i/OPLxwCj+vtGu5xq+
nmPhzi3Zt/Ev1akSpCAIh6DNSvHq1hhUrYXTS6283gVWweFG0/EZ/JhKRw83aBgA
G8CNah0swLRYcGyDkvTRe4cnmL8K9s6e4zrVoO332+tlRw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:44 2024 by rpki-client on console-fra.rpki-client.org