Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/34352e3136382e3137342e302f32332d3233203d3e20323639383736.roa
File:                     34352e3136382e3137342e302f32332d3233203d3e20323639383736.roa (raw, json)
Hash identifier:          MWuo5p0t/E2nPRhMGr8qfPFHhdczsqDpsOyHkfF1gnE=
Subject key identifier:   D4:83:ED:95:3E:50:2A:9B:B7:C3:1F:38:1D:4A:BC:8F:FC:69:D2:AB
Certificate issuer:       /CN=33765A5A53AB5641AF9C73A1929D99EAB1234478
Certificate serial:       5A784B0053006FFBA0070B2EF8B10B29DD24D88A
Authority key identifier: 33:76:5A:5A:53:AB:56:41:AF:9C:73:A1:92:9D:99:EA:B1:23:44:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/34352e3136382e3137342e302f32332d3233203d3e20323639383736.roa
Signing time:             Tue 05 Mar 2024 18:12:08 +0000
ROA not before:           Tue 05 Mar 2024 18:07:08 +0000
ROA not after:            Tue 04 Mar 2025 18:12:08 +0000
asID:                     269876
IP address blocks:        45.168.174.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:78:4b:00:53:00:6f:fb:a0:07:0b:2e:f8:b1:0b:29:dd:24:d8:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33765A5A53AB5641AF9C73A1929D99EAB1234478
        Validity
            Not Before: Mar  5 18:07:08 2024 GMT
            Not After : Mar  4 18:12:08 2025 GMT
        Subject: CN=D483ED953E502A9BB7C31F381D4ABC8FFC69D2AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6b:fa:80:2d:3f:9b:25:f4:4f:fc:34:37:96:
                    81:59:6e:11:c5:b0:0d:44:75:d3:1b:d6:06:ce:ad:
                    1d:09:b4:0f:de:23:34:b6:06:24:1f:25:4d:b7:4c:
                    f1:a9:5b:db:06:5c:e7:e5:0f:c7:dd:ab:da:f7:ec:
                    35:57:0d:43:f3:a3:95:b9:61:22:18:99:3d:24:0e:
                    30:2f:56:5b:ba:da:a8:84:84:53:7e:ff:9e:99:df:
                    b7:6f:20:99:83:fe:30:d5:f4:47:d3:5c:bf:6a:62:
                    ed:a4:80:7e:d9:4d:a1:10:67:8d:b1:7e:7f:fb:8e:
                    4a:6d:72:20:30:37:12:9a:ad:97:e7:e5:81:52:25:
                    a1:53:2e:4c:0b:22:e8:41:9f:fc:19:76:34:63:0b:
                    b6:95:69:fb:29:49:eb:46:7e:d5:bf:80:de:bc:6a:
                    67:bf:ef:c3:ad:e9:da:eb:6e:3e:f2:40:df:00:be:
                    f4:e8:55:e6:8c:74:b5:f9:de:44:4b:55:ed:2a:cf:
                    94:08:6a:27:3b:84:c1:55:ad:c5:d0:f6:42:52:07:
                    90:b9:72:c3:33:e6:b0:3d:11:18:2e:2e:3f:bb:7c:
                    1a:32:b8:b1:3d:94:d4:b9:76:e3:2e:7d:d6:65:62:
                    3c:97:a0:8e:49:7c:da:3e:fa:ce:50:67:71:5a:7a:
                    ff:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:83:ED:95:3E:50:2A:9B:B7:C3:1F:38:1D:4A:BC:8F:FC:69:D2:AB
            X509v3 Authority Key Identifier:
                keyid:33:76:5A:5A:53:AB:56:41:AF:9C:73:A1:92:9D:99:EA:B1:23:44:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/34352e3136382e3137342e302f32332d3233203d3e20323639383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:2b:dd:c8:2b:10:a3:2d:59:24:71:35:6b:92:fe:9d:bf:bf:
         44:96:e7:85:5d:b5:61:28:b5:0c:de:7c:7a:06:44:2e:c3:23:
         b9:ba:72:e7:2b:ac:06:42:b4:78:11:4f:ea:38:4f:70:29:1b:
         97:b0:c4:bf:f5:ce:63:11:7b:7f:74:72:d8:2d:67:f5:80:9d:
         6a:eb:54:77:f6:da:a0:3b:1c:5f:85:c4:92:99:cc:fd:39:d7:
         ca:c6:14:1c:4d:79:68:6e:fc:65:9c:30:3b:1a:ff:12:aa:69:
         9a:11:ba:4c:57:eb:13:97:bc:fd:9a:4e:20:db:d9:3f:ca:17:
         b6:0f:b8:20:79:24:f2:20:f9:21:49:e3:c2:5a:3d:45:df:3f:
         cf:04:29:4d:e2:5b:1e:e3:7f:5e:18:a8:fe:37:4e:e9:4d:71:
         c5:44:06:94:d7:77:53:b8:5e:fe:6e:2c:a6:53:ca:f4:9a:c9:
         c1:f5:12:9f:ce:21:7a:3a:fd:63:85:95:02:47:6e:3d:82:9b:
         74:48:7d:36:1b:45:74:57:77:86:16:57:a6:0f:de:08:fa:8b:
         0c:0e:86:88:ff:eb:83:7a:ba:1d:c0:52:f3:e6:80:1e:13:8b:
         b9:ab:ce:d0:5a:10:76:df:4e:8d:a1:44:6d:b2:52:8f:4e:28:
         89:31:f1:aa
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUWnhLAFMAb/ugBwsu+LELKd0k2IowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM3NjVBNUE1M0FCNTY0MUFGOUM3M0ExOTI5RDk5RUFC
MTIzNDQ3ODAeFw0yNDAzMDUxODA3MDhaFw0yNTAzMDQxODEyMDhaMDMxMTAvBgNV
BAMTKEQ0ODNFRDk1M0U1MDJBOUJCN0MzMUYzODFENEFCQzhGRkM2OUQyQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLa/qALT+bJfRP/DQ3loFZbhHF
sA1EddMb1gbOrR0JtA/eIzS2BiQfJU23TPGpW9sGXOflD8fdq9r37DVXDUPzo5W5
YSIYmT0kDjAvVlu62qiEhFN+/56Z37dvIJmD/jDV9EfTXL9qYu2kgH7ZTaEQZ42x
fn/7jkptciAwNxKarZfn5YFSJaFTLkwLIuhBn/wZdjRjC7aVafspSetGftW/gN68
ame/78Ot6drrbj7yQN8AvvToVeaMdLX53kRLVe0qz5QIaic7hMFVrcXQ9kJSB5C5
csMz5rA9ERguLj+7fBoyuLE9lNS5duMufdZlYjyXoI5JfNo++s5QZ3Faev9fAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU1IPtlT5QKpu3wx84HUq8j/xp0qswHwYDVR0j
BBgwFoAUM3ZaWlOrVkGvnHOhkp2Z6rEjRHgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNDREQzY4MzBCMjA5MDVFNDBFRkY2RDY2MzBCNzU3MUFB
RTYyQTkyOTgxODdEOTY5QTVGOUE1RURFQUM5MTA1LzAvMzM3NjVBNUE1M0FCNTY0
MUFGOUM3M0ExOTI5RDk5RUFCMTIzNDQ3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMzc2NUE1QTUzQUI1NjQxQUY5
QzczQTE5MjlEOTlFQUIxMjM0NDc4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjQ0REM2ODMwQjIwOTA1RTQwRUZGNkQ2NjMwQjc1NzFBQUU2MkE5Mjk4
MTg3RDk2OUE1RjlBNUVERUFDOTEwNS8wLzM0MzUyZTMxMzYzODJlMzEzNzM0MmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5MzgzNzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLaiu
MA0GCSqGSIb3DQEBCwUAA4IBAQBNK93IKxCjLVkkcTVrkv6dv79ElueFXbVhKLUM
3nx6BkQuwyO5unLnK6wGQrR4EU/qOE9wKRuXsMS/9c5jEXt/dHLYLWf1gJ1q61R3
9tqgOxxfhcSSmcz9OdfKxhQcTXlobvxlnDA7Gv8SqmmaEbpMV+sTl7z9mk4g29k/
yhe2D7ggeSTyIPkhSePCWj1F3z/PBClN4lse439eGKj+N07pTXHFRAaU13dTuF7+
biymU8r0msnB9RKfziF6Ov1jhZUCR249gpt0SH02G0V0V3eGFlemD94I+osMDoaI
/+uDerodwFLz5oAeE4u5q87QWhB2306NoURtslKPTiiJMfGq
-----END CERTIFICATE-----
Generated at Sun Nov 24 10:18:24 2024 by rpki-client on console-fra.rpki-client.org