Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/34352e342e3136302e302f32322d3234203d3e20323635363833.roa
File:                     34352e342e3136302e302f32322d3234203d3e20323635363833.roa (raw, json)
Hash identifier:          1SWoV21xXzD4i2+ibfHYKbLDi9zFpR+LrDU7mcwF5ik=
Subject key identifier:   ED:29:01:FE:F8:D2:FD:A0:DC:E4:68:E5:86:05:AC:39:F6:51:36:B5
Certificate issuer:       /CN=CD3BE458FB49C7199926F12B0F7938C5DDC67C44
Certificate serial:       2CEE5648AB36170A2BABC8B256B8E362F32679CD
Authority key identifier: CD:3B:E4:58:FB:49:C7:19:99:26:F1:2B:0F:79:38:C5:DD:C6:7C:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/34352e342e3136302e302f32322d3234203d3e20323635363833.roa
Signing time:             Tue 05 Mar 2024 18:15:25 +0000
ROA not before:           Tue 05 Mar 2024 18:10:25 +0000
ROA not after:            Tue 04 Mar 2025 18:15:25 +0000
asID:                     265683
IP address blocks:        45.4.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ee:56:48:ab:36:17:0a:2b:ab:c8:b2:56:b8:e3:62:f3:26:79:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD3BE458FB49C7199926F12B0F7938C5DDC67C44
        Validity
            Not Before: Mar  5 18:10:25 2024 GMT
            Not After : Mar  4 18:15:25 2025 GMT
        Subject: CN=ED2901FEF8D2FDA0DCE468E58605AC39F65136B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:22:e7:a3:5d:eb:bc:10:31:1e:b6:48:d2:
                    dc:de:fe:13:c9:12:aa:b7:8f:8c:4a:73:b6:31:96:
                    21:6c:e7:f0:62:6e:a2:f7:2c:46:35:34:b5:3b:7f:
                    0c:7b:2c:e0:e5:39:a7:58:75:fa:12:3a:b4:c0:6e:
                    a1:a4:ac:4e:a0:ca:f2:87:60:17:1c:65:25:3e:67:
                    3e:b9:8e:84:c9:75:24:5a:e1:71:ac:51:22:7e:6a:
                    7a:b8:6a:43:9b:b2:6e:b9:de:d8:37:d4:92:c1:5a:
                    6d:a7:50:6d:d9:5f:54:c6:48:f3:08:05:b6:21:5e:
                    b2:bb:73:77:d7:c8:5f:d3:de:d2:07:2a:0e:af:42:
                    67:6b:f8:af:14:73:b5:3d:9e:42:28:7d:af:72:7c:
                    1f:36:d5:da:c1:54:06:39:08:b1:d0:35:19:db:3b:
                    16:35:e0:84:b4:49:a1:9f:65:12:70:46:2d:2d:45:
                    04:09:64:68:3c:d0:90:d4:70:25:75:03:19:f8:05:
                    3e:12:db:d4:a5:d5:ff:f4:97:72:93:27:a0:42:d0:
                    9e:59:71:8e:b4:49:fc:2e:d9:11:98:25:1b:95:79:
                    54:6d:e2:5c:09:72:11:f4:cf:95:2e:ba:17:ef:5d:
                    16:86:37:71:dc:ad:b0:f2:ac:dd:a8:c4:f7:b7:c7:
                    80:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:29:01:FE:F8:D2:FD:A0:DC:E4:68:E5:86:05:AC:39:F6:51:36:B5
            X509v3 Authority Key Identifier:
                keyid:CD:3B:E4:58:FB:49:C7:19:99:26:F1:2B:0F:79:38:C5:DD:C6:7C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/34352e342e3136302e302f32322d3234203d3e20323635363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:5f:60:94:79:88:a8:a7:74:81:2f:d7:7a:6f:de:fb:05:cb:
         b0:64:2e:b7:bb:41:6a:d5:fa:78:43:70:fb:54:0b:1c:ce:20:
         21:57:a5:75:b1:07:81:3b:3d:6c:1a:8f:97:c9:dd:45:2d:db:
         91:6c:74:de:80:d2:64:fc:4e:c5:6d:ae:a4:d9:88:d8:bc:57:
         6c:13:86:23:38:f9:2d:e1:f7:da:49:9b:39:15:ec:87:b4:63:
         88:62:3a:80:37:a0:5b:fd:60:d7:da:a5:ce:50:fc:2f:e6:97:
         84:fb:e6:9f:a5:6c:cf:8b:8c:1a:98:85:b3:c3:21:5b:b6:9d:
         c9:74:c3:91:0d:e8:5c:05:e3:26:34:d7:c2:2b:88:1b:c1:a5:
         e0:a0:b3:b6:9b:19:a8:93:05:25:2f:dc:31:db:30:56:2b:3e:
         25:69:57:2e:2e:99:5c:9f:2e:95:81:f9:e4:af:a7:b2:dc:3d:
         b3:39:e4:2c:f1:c0:13:5c:63:ca:d2:50:ac:a3:4a:23:cc:68:
         cd:25:23:64:00:46:7a:de:38:d7:65:31:a0:e2:d3:9d:ee:6d:
         79:3d:78:69:30:2f:25:e6:fb:06:ce:4a:06:1f:6d:40:be:a8:
         52:58:c7:a3:10:89:ed:cb:7b:02:9e:8f:fc:b0:f7:07:ab:ed:
         ce:17:12:e3
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIULO5WSKs2Fworq8iyVrjjYvMmec0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0QzQkU0NThGQjQ5QzcxOTk5MjZGMTJCMEY3OTM4QzVE
REM2N0M0NDAeFw0yNDAzMDUxODEwMjVaFw0yNTAzMDQxODE1MjVaMDMxMTAvBgNV
BAMTKEVEMjkwMUZFRjhEMkZEQTBEQ0U0NjhFNTg2MDVBQzM5RjY1MTM2QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGNCLno13rvBAxHrZI0tze/hPJ
Eqq3j4xKc7YxliFs5/BibqL3LEY1NLU7fwx7LODlOadYdfoSOrTAbqGkrE6gyvKH
YBccZSU+Zz65joTJdSRa4XGsUSJ+anq4akObsm653tg31JLBWm2nUG3ZX1TGSPMI
BbYhXrK7c3fXyF/T3tIHKg6vQmdr+K8Uc7U9nkIofa9yfB821drBVAY5CLHQNRnb
OxY14IS0SaGfZRJwRi0tRQQJZGg80JDUcCV1Axn4BT4S29Sl1f/0l3KTJ6BC0J5Z
cY60Sfwu2RGYJRuVeVRt4lwJchH0z5UuuhfvXRaGN3HcrbDyrN2oxPe3x4C3AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU7SkB/vjS/aDc5GjlhgWsOfZRNrUwHwYDVR0j
BBgwFoAUzTvkWPtJxxmZJvErD3k4xd3GfEQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GN0YwN0IwQjREQ0MwODZFOTVBNDY1M0UxRDBERjM5NTEy
MzgxREU5MDY2OTVGNkM5QUY5MTMyOURFRjE5RTU5LzAvQ0QzQkU0NThGQjQ5Qzcx
OTk5MjZGMTJCMEY3OTM4QzVEREM2N0M0NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRDNCRTQ1OEZCNDlDNzE5OTky
NkYxMkIwRjc5MzhDNUREQzY3QzQ0LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjdGMDdCMEI0RENDMDg2RTk1QTQ2NTNFMUQwREYzOTUxMjM4MURFOTA2
Njk1RjZDOUFGOTEzMjlERUYxOUU1OS8wLzM0MzUyZTM0MmUzMTM2MzAyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMjM2MzUzNjM4MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItBKAwDQYJ
KoZIhvcNAQELBQADggEBAHxfYJR5iKindIEv13pv3vsFy7BkLre7QWrV+nhDcPtU
CxzOICFXpXWxB4E7PWwaj5fJ3UUt25FsdN6A0mT8TsVtrqTZiNi8V2wThiM4+S3h
99pJmzkV7Ie0Y4hiOoA3oFv9YNfapc5Q/C/ml4T75p+lbM+LjBqYhbPDIVu2ncl0
w5EN6FwF4yY018IriBvBpeCgs7abGaiTBSUv3DHbMFYrPiVpVy4umVyfLpWB+eSv
p7LcPbM55CzxwBNcY8rSUKyjSiPMaM0lI2QARnreONdlMaDi053ubXk9eGkwLyXm
+wbOSgYfbUC+qFJYx6MQie3LewKej/yw9wer7c4XEuM=
-----END CERTIFICATE-----
Generated at Sun May 19 00:59:10 2024 by rpki-client on console-fra.rpki-client.org