Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/34352e3138362e3130382e302f32322d3232203d3e203237373239.roa
File:                     34352e3138362e3130382e302f32322d3232203d3e203237373239.roa (raw, json)
Hash identifier:          +qo1/EKGI1ArbuRXzgVOMGlnK7oI2OD3Tk8UBP7RthE=
Subject key identifier:   8B:0D:4C:0F:6A:0B:ED:87:40:7C:76:65:B8:CB:FE:95:2F:E3:CB:18
Certificate issuer:       /CN=B0F0C9DD73F6C1475F1456103DA6BB622464669F
Certificate serial:       68DEE12527A16AC63D10E9DD32A325FC9C0A48B2
Authority key identifier: B0:F0:C9:DD:73:F6:C1:47:5F:14:56:10:3D:A6:BB:62:24:64:66:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/34352e3138362e3130382e302f32322d3232203d3e203237373239.roa
Signing time:             Thu 07 Mar 2024 04:55:00 +0000
ROA not before:           Thu 07 Mar 2024 04:50:00 +0000
ROA not after:            Thu 06 Mar 2025 04:55:00 +0000
asID:                     27729
IP address blocks:        45.186.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:de:e1:25:27:a1:6a:c6:3d:10:e9:dd:32:a3:25:fc:9c:0a:48:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F0C9DD73F6C1475F1456103DA6BB622464669F
        Validity
            Not Before: Mar  7 04:50:00 2024 GMT
            Not After : Mar  6 04:55:00 2025 GMT
        Subject: CN=8B0D4C0F6A0BED87407C7665B8CBFE952FE3CB18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ba:52:e4:55:1d:5c:bf:ee:97:c4:fc:58:50:
                    17:15:f1:88:06:7d:5f:e4:1e:b6:88:6b:02:3a:b2:
                    a8:71:9e:af:b8:98:d7:a6:6f:3e:42:d6:bb:91:35:
                    f3:7c:43:f0:bd:9b:a1:98:b0:5e:41:5e:66:2a:ee:
                    c3:1b:23:bf:9a:48:ea:41:98:fc:93:99:ce:01:9c:
                    f2:58:6c:03:27:6d:ef:68:ea:52:1c:5e:68:29:0e:
                    a1:54:5c:92:78:99:c1:3b:cf:84:70:5a:41:17:04:
                    f3:1d:6e:54:dc:f9:84:ec:ef:06:e0:8e:56:b0:97:
                    b9:af:e6:54:a8:65:cd:0a:3a:ae:2a:14:44:6f:75:
                    72:87:ec:97:58:f0:3e:be:e4:aa:be:dc:c8:cf:23:
                    f8:14:33:ca:d6:51:91:7c:6d:81:15:96:34:9c:68:
                    72:91:5d:a2:53:8a:4d:29:13:95:b4:9b:15:f7:e3:
                    71:80:c3:8b:86:bb:4e:6a:1d:ec:c3:46:51:83:aa:
                    02:98:1b:07:b6:c9:9e:14:25:78:44:e4:23:c7:2c:
                    20:f7:83:9d:f4:da:80:cb:9a:be:34:af:81:f5:24:
                    8b:43:88:13:3c:8b:7b:06:41:c8:f7:32:cb:a7:13:
                    dc:71:21:04:78:36:08:db:d7:86:4e:c2:c2:4a:e4:
                    81:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0D:4C:0F:6A:0B:ED:87:40:7C:76:65:B8:CB:FE:95:2F:E3:CB:18
            X509v3 Authority Key Identifier:
                keyid:B0:F0:C9:DD:73:F6:C1:47:5F:14:56:10:3D:A6:BB:62:24:64:66:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/34352e3138362e3130382e302f32322d3232203d3e203237373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:52:2b:f7:01:8a:a6:d3:c0:88:9c:d9:27:90:8d:3b:48:55:
         7a:7a:ee:bd:42:2b:7c:d0:b6:17:33:36:cf:78:2f:cd:f4:71:
         9b:64:98:14:32:70:87:e7:5d:fd:03:e1:55:f4:8e:22:59:d0:
         d2:ca:b1:b4:4e:a5:99:07:f9:ae:36:c5:a6:37:08:d9:76:eb:
         99:50:fb:8e:38:a2:14:38:94:6d:c5:21:74:14:49:c5:ff:89:
         74:df:62:84:20:e9:d6:23:6d:67:5a:49:b8:a5:9d:47:0f:33:
         12:f4:c7:ae:f4:17:11:2a:dc:53:78:fc:9b:45:dc:32:42:6f:
         0e:0a:1c:4b:54:cf:ad:55:8a:01:29:6a:d3:8c:91:8c:b9:c7:
         ea:9b:75:93:fb:cc:44:fe:86:3f:3d:45:fa:b6:1d:88:cd:01:
         6b:76:fb:3d:e8:c6:75:1c:7d:c1:49:d9:ce:eb:d1:e4:6c:25:
         81:36:d5:b1:4b:af:2d:c6:ea:64:ca:1b:ee:29:9f:f5:3b:a9:
         b3:4c:d9:2b:73:fa:49:77:ea:8d:3c:8a:42:90:bd:77:fd:2d:
         45:56:94:cc:e4:d4:92:31:26:17:c0:87:e9:7b:47:bd:1f:96:
         55:e2:f8:a0:62:08:dd:8e:81:0c:d8:b6:ae:6b:fd:e1:0b:35:
         8c:d2:09:c6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUaN7hJSehasY9EOndMqMl/JwKSLIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBGMEM5REQ3M0Y2QzE0NzVGMTQ1NjEwM0RBNkJCNjIy
NDY0NjY5RjAeFw0yNDAzMDcwNDUwMDBaFw0yNTAzMDYwNDU1MDBaMDMxMTAvBgNV
BAMTKDhCMEQ0QzBGNkEwQkVEODc0MDdDNzY2NUI4Q0JGRTk1MkZFM0NCMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXulLkVR1cv+6XxPxYUBcV8YgG
fV/kHraIawI6sqhxnq+4mNembz5C1ruRNfN8Q/C9m6GYsF5BXmYq7sMbI7+aSOpB
mPyTmc4BnPJYbAMnbe9o6lIcXmgpDqFUXJJ4mcE7z4RwWkEXBPMdblTc+YTs7wbg
jlawl7mv5lSoZc0KOq4qFERvdXKH7JdY8D6+5Kq+3MjPI/gUM8rWUZF8bYEVljSc
aHKRXaJTik0pE5W0mxX343GAw4uGu05qHezDRlGDqgKYGwe2yZ4UJXhE5CPHLCD3
g5302oDLmr40r4H1JItDiBM8i3sGQcj3MsunE9xxIQR4Ngjb14ZOwsJK5IE1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUiw1MD2oL7YdAfHZluMv+lS/jyxgwHwYDVR0j
BBgwFoAUsPDJ3XP2wUdfFFYQPaa7YiRkZp8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNDFERTVCNjMyMDIzOEEyN0M4QUU0NUE5Njc2MjFDOEUz
N0JFNzBGNzM5NzkyNEJDRjUyNEQwNEM0QkE3MzkwLzAvQjBGMEM5REQ3M0Y2QzE0
NzVGMTQ1NjEwM0RBNkJCNjIyNDY0NjY5Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMEYwQzlERDczRjZDMTQ3NUYx
NDU2MTAzREE2QkI2MjI0NjQ2NjlGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjQxREU1QjYzMjAyMzhBMjdDOEFFNDVBOTY3NjIxQzhFMzdCRTcwRjcz
OTc5MjRCQ0Y1MjREMDRDNEJBNzM5MC8wLzM0MzUyZTMxMzgzNjJlMzEzMDM4MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzM3MzIzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi26bDAN
BgkqhkiG9w0BAQsFAAOCAQEAlFIr9wGKptPAiJzZJ5CNO0hVenruvUIrfNC2FzM2
z3gvzfRxm2SYFDJwh+dd/QPhVfSOIlnQ0sqxtE6lmQf5rjbFpjcI2XbrmVD7jjii
FDiUbcUhdBRJxf+JdN9ihCDp1iNtZ1pJuKWdRw8zEvTHrvQXESrcU3j8m0XcMkJv
DgocS1TPrVWKASlq04yRjLnH6pt1k/vMRP6GPz1F+rYdiM0Ba3b7PejGdRx9wUnZ
zuvR5GwlgTbVsUuvLcbqZMob7imf9Tups0zZK3P6SXfqjTyKQpC9d/0tRVaUzOTU
kjEmF8CH6XtHvR+WVeL4oGII3Y6BDNi2rmv94Qs1jNIJxg==
-----END CERTIFICATE-----
Generated at Sat May 18 10:34:20 2024 by rpki-client on console-fra.rpki-client.org