Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F9960B114E40956DEC70A75BD9A52941AA59F2C9BF16912D07F29A18DDB82827/0/34352e3138382e35382e302f32342d3234203d3e20323639383330.roa
File:                     34352e3138382e35382e302f32342d3234203d3e20323639383330.roa (raw, json)
Hash identifier:          370APhCpCpEDxOiIPuP9JPe9wXn43qkJL7pny/T6Du0=
Subject key identifier:   CC:A3:B3:3E:0A:03:DB:8C:37:BA:5F:0C:72:2D:25:BC:C6:F3:6A:AB
Certificate issuer:       /CN=19BD67F219C52DA156D28F772C8EA3B994A02141
Certificate serial:       3F2244AA0B3F5034BA6EDB5AC2D03329331F474A
Authority key identifier: 19:BD:67:F2:19:C5:2D:A1:56:D2:8F:77:2C:8E:A3:B9:94:A0:21:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BD67F219C52DA156D28F772C8EA3B994A02141.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F9960B114E40956DEC70A75BD9A52941AA59F2C9BF16912D07F29A18DDB82827/0/34352e3138382e35382e302f32342d3234203d3e20323639383330.roa
Signing time:             Tue 05 Mar 2024 17:56:13 +0000
ROA not before:           Tue 05 Mar 2024 17:51:13 +0000
ROA not after:            Tue 04 Mar 2025 17:56:13 +0000
asID:                     269830
IP address blocks:        45.188.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F9960B114E40956DEC70A75BD9A52941AA59F2C9BF16912D07F29A18DDB82827/0/19BD67F219C52DA156D28F772C8EA3B994A02141.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F9960B114E40956DEC70A75BD9A52941AA59F2C9BF16912D07F29A18DDB82827/0/19BD67F219C52DA156D28F772C8EA3B994A02141.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BD67F219C52DA156D28F772C8EA3B994A02141.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:22:44:aa:0b:3f:50:34:ba:6e:db:5a:c2:d0:33:29:33:1f:47:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19BD67F219C52DA156D28F772C8EA3B994A02141
        Validity
            Not Before: Mar  5 17:51:13 2024 GMT
            Not After : Mar  4 17:56:13 2025 GMT
        Subject: CN=CCA3B33E0A03DB8C37BA5F0C722D25BCC6F36AAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:e7:81:dc:7d:cf:b8:61:17:5c:02:fa:b5:
                    7f:ea:1e:6b:4d:0c:59:5c:17:6f:83:e8:c9:5f:86:
                    07:3f:a8:17:53:fb:1e:05:b6:5f:36:c9:30:6f:e9:
                    5d:59:d4:06:81:93:e5:c1:4a:d1:00:34:b0:9e:9c:
                    a3:04:3d:b4:ee:3d:8d:1d:44:64:e7:3c:44:2d:a4:
                    fa:1f:b5:53:72:87:c2:df:1d:ea:0c:e7:85:93:88:
                    7c:bc:4d:8c:40:c4:61:4a:34:42:cf:3e:b0:0d:af:
                    e3:fb:db:dd:a6:86:d6:52:57:cf:13:63:94:53:ab:
                    93:92:2a:a4:77:cd:88:dc:ab:72:5a:5c:cc:f9:0b:
                    d3:af:ab:f3:91:0c:04:38:4c:d5:f5:0f:93:47:49:
                    66:c9:af:53:a2:a2:28:1a:29:63:b9:46:ae:41:e1:
                    58:d0:f1:58:fc:3a:d5:12:a4:92:7e:32:d8:d1:b8:
                    a5:a8:17:f0:ae:6b:d9:90:7f:80:7b:4d:f0:6f:ca:
                    17:90:b6:05:e0:03:5b:ed:41:4d:18:bb:c1:c3:d3:
                    9c:77:08:e4:8d:29:76:a6:86:6b:eb:e1:8e:ff:52:
                    6e:38:12:35:95:20:57:70:82:32:91:8e:e4:a4:ae:
                    c4:d8:2d:58:1c:9a:34:64:cd:42:60:be:c3:36:c8:
                    b4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A3:B3:3E:0A:03:DB:8C:37:BA:5F:0C:72:2D:25:BC:C6:F3:6A:AB
            X509v3 Authority Key Identifier:
                keyid:19:BD:67:F2:19:C5:2D:A1:56:D2:8F:77:2C:8E:A3:B9:94:A0:21:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F9960B114E40956DEC70A75BD9A52941AA59F2C9BF16912D07F29A18DDB82827/0/19BD67F219C52DA156D28F772C8EA3B994A02141.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BD67F219C52DA156D28F772C8EA3B994A02141.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F9960B114E40956DEC70A75BD9A52941AA59F2C9BF16912D07F29A18DDB82827/0/34352e3138382e35382e302f32342d3234203d3e20323639383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:de:35:66:42:33:a9:39:38:e6:88:58:11:c2:4d:25:f4:da:
         32:90:a9:99:23:48:91:16:f9:a5:9f:42:c1:7e:0d:5d:95:4d:
         08:4e:f6:ff:1a:9d:af:aa:51:14:85:85:ac:78:36:11:3a:f0:
         c2:18:a9:fd:70:dc:18:73:91:3f:5b:88:dd:a5:e8:a1:19:8a:
         85:f7:a7:62:af:19:69:0e:1e:2e:e9:89:83:a4:7c:29:c4:80:
         dc:dc:a5:01:6e:23:96:c1:06:60:72:bf:d4:59:7a:35:1b:11:
         3f:3b:3a:ac:26:17:84:d8:a7:1b:ce:72:39:e6:c8:61:19:e1:
         a3:5d:fc:6c:3c:72:63:1e:06:76:61:3e:93:f8:20:cd:6e:34:
         37:b8:e3:27:c3:88:c7:e8:80:d6:a4:64:27:7d:0d:ba:c7:21:
         d6:6c:4d:57:e0:a0:63:e0:6a:aa:66:cf:f3:b2:a6:fc:95:c4:
         b4:28:e9:22:48:d2:91:65:d0:70:a1:9e:b3:e0:34:a0:1f:b4:
         56:7c:25:e7:82:a7:79:c7:e6:2c:46:31:80:a1:81:ea:da:73:
         48:18:d2:da:45:1f:48:86:34:68:29:86:67:9f:c3:68:43:cc:
         39:71:8d:b1:e1:a4:e7:67:81:38:b7:d8:35:71:b8:56:95:49:
         f8:10:84:92
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPyJEqgs/UDS6bttawtAzKTMfR0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlCRDY3RjIxOUM1MkRBMTU2RDI4Rjc3MkM4RUEzQjk5
NEEwMjE0MTAeFw0yNDAzMDUxNzUxMTNaFw0yNTAzMDQxNzU2MTNaMDMxMTAvBgNV
BAMTKENDQTNCMzNFMEEwM0RCOEMzN0JBNUYwQzcyMkQyNUJDQzZGMzZBQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YeeB3H3PuGEXXAL6tX/qHmtN
DFlcF2+D6Mlfhgc/qBdT+x4Ftl82yTBv6V1Z1AaBk+XBStEANLCenKMEPbTuPY0d
RGTnPEQtpPoftVNyh8LfHeoM54WTiHy8TYxAxGFKNELPPrANr+P7292mhtZSV88T
Y5RTq5OSKqR3zYjcq3JaXMz5C9Ovq/ORDAQ4TNX1D5NHSWbJr1OioigaKWO5Rq5B
4VjQ8Vj8OtUSpJJ+MtjRuKWoF/Cua9mQf4B7TfBvyheQtgXgA1vtQU0Yu8HD05x3
COSNKXamhmvr4Y7/Um44EjWVIFdwgjKRjuSkrsTYLVgcmjRkzUJgvsM2yLTlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUzKOzPgoD24w3ul8Mci0lvMbzaqswHwYDVR0j
BBgwFoAUGb1n8hnFLaFW0o93LI6juZSgIUEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GOTk2MEIxMTRFNDA5NTZERUM3MEE3NUJEOUE1Mjk0MUFB
NTlGMkM5QkYxNjkxMkQwN0YyOUExOEREQjgyODI3LzAvMTlCRDY3RjIxOUM1MkRB
MTU2RDI4Rjc3MkM4RUEzQjk5NEEwMjE0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xOUJENjdGMjE5QzUyREExNTZE
MjhGNzcyQzhFQTNCOTk0QTAyMTQxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjk5NjBCMTE0RTQwOTU2REVDNzBBNzVCRDlBNTI5NDFBQTU5RjJDOUJG
MTY5MTJEMDdGMjlBMThEREI4MjgyNy8wLzM0MzUyZTMxMzgzODJlMzUzODJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTM4MzMzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC28OjAN
BgkqhkiG9w0BAQsFAAOCAQEAR941ZkIzqTk45ohYEcJNJfTaMpCpmSNIkRb5pZ9C
wX4NXZVNCE72/xqdr6pRFIWFrHg2ETrwwhip/XDcGHORP1uI3aXooRmKhfenYq8Z
aQ4eLumJg6R8KcSA3NylAW4jlsEGYHK/1Fl6NRsRPzs6rCYXhNinG85yOebIYRnh
o138bDxyYx4GdmE+k/ggzW40N7jjJ8OIx+iA1qRkJ30Nusch1mxNV+CgY+BqqmbP
87Km/JXEtCjpIkjSkWXQcKGes+A0oB+0Vnwl54KnecfmLEYxgKGB6tpzSBjS2kUf
SIY0aCmGZ5/DaEPMOXGNseGk52eBOLfYNXG4VpVJ+BCEkg==
-----END CERTIFICATE-----
Generated at Fri May 17 06:45:38 2024 by rpki-client on console-ams.rpki-client.org