Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F9CFB607155053E5F25901BBA00C5AF4F13BA097205B636F130E944F136009F8/0/34352e3232362e35382e302f32342d3234203d3e20323635383635.roa
File:                     34352e3232362e35382e302f32342d3234203d3e20323635383635.roa (raw, json)
Hash identifier:          /bk0pJfO7v9WaXR6b7088xBXbKEDULwHRrARawasTXA=
Subject key identifier:   18:8E:FC:40:57:7D:36:5F:0F:AF:99:35:BF:60:59:FA:D8:DC:50:52
Certificate issuer:       /CN=E3B0123AE4005218C7B0755D72FB3B2F6AD49825
Certificate serial:       56E09DCE5CD4AAEB5274294810A7C06B651D47BE
Authority key identifier: E3:B0:12:3A:E4:00:52:18:C7:B0:75:5D:72:FB:3B:2F:6A:D4:98:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3B0123AE4005218C7B0755D72FB3B2F6AD49825.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F9CFB607155053E5F25901BBA00C5AF4F13BA097205B636F130E944F136009F8/0/34352e3232362e35382e302f32342d3234203d3e20323635383635.roa
Signing time:             Tue 05 Mar 2024 17:57:02 +0000
ROA not before:           Tue 05 Mar 2024 17:52:02 +0000
ROA not after:            Tue 04 Mar 2025 17:57:02 +0000
asID:                     265865
IP address blocks:        45.226.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F9CFB607155053E5F25901BBA00C5AF4F13BA097205B636F130E944F136009F8/0/E3B0123AE4005218C7B0755D72FB3B2F6AD49825.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F9CFB607155053E5F25901BBA00C5AF4F13BA097205B636F130E944F136009F8/0/E3B0123AE4005218C7B0755D72FB3B2F6AD49825.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3B0123AE4005218C7B0755D72FB3B2F6AD49825.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e0:9d:ce:5c:d4:aa:eb:52:74:29:48:10:a7:c0:6b:65:1d:47:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3B0123AE4005218C7B0755D72FB3B2F6AD49825
        Validity
            Not Before: Mar  5 17:52:02 2024 GMT
            Not After : Mar  4 17:57:02 2025 GMT
        Subject: CN=188EFC40577D365F0FAF9935BF6059FAD8DC5052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:48:47:4a:d3:e0:13:0b:6e:5b:46:b7:6e:6c:
                    c4:dd:9e:f6:4d:d4:4e:10:64:08:51:96:83:b8:47:
                    01:de:32:9d:a8:58:a0:a7:82:cc:e6:b7:d7:e9:57:
                    a3:d1:8c:84:91:b2:9e:35:5c:c7:1e:df:08:fa:4d:
                    12:76:fa:6e:a1:bd:ab:46:9f:19:9a:5c:bd:30:95:
                    b5:51:7a:ce:37:54:a7:15:98:ae:2a:d5:30:1b:6c:
                    2b:c1:8e:59:c9:57:aa:a0:81:71:4a:b3:99:c9:5c:
                    db:ba:e7:bb:7b:ad:a3:59:06:b8:52:b8:5d:3d:fb:
                    64:14:5a:87:34:10:c8:55:e6:2f:cb:90:40:01:4f:
                    b5:61:76:ab:e1:09:3c:09:ce:6b:12:77:9a:fd:2e:
                    ef:08:15:27:f7:ab:fe:39:13:69:ec:12:b3:4b:f4:
                    c1:64:87:ba:18:b1:78:ba:2f:c0:69:12:4e:24:f2:
                    b6:55:1a:0d:05:f9:cb:c2:df:10:43:93:fb:57:b8:
                    56:08:9c:99:0c:07:4a:1e:6b:42:cc:49:81:c8:1a:
                    89:c9:e7:97:c9:81:68:c0:d3:43:bf:52:a3:47:b3:
                    d7:66:ef:c8:f1:71:99:53:74:f4:ef:79:77:94:f9:
                    01:9a:58:f9:0c:55:69:d7:48:ed:83:84:53:0f:17:
                    24:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8E:FC:40:57:7D:36:5F:0F:AF:99:35:BF:60:59:FA:D8:DC:50:52
            X509v3 Authority Key Identifier:
                keyid:E3:B0:12:3A:E4:00:52:18:C7:B0:75:5D:72:FB:3B:2F:6A:D4:98:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F9CFB607155053E5F25901BBA00C5AF4F13BA097205B636F130E944F136009F8/0/E3B0123AE4005218C7B0755D72FB3B2F6AD49825.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3B0123AE4005218C7B0755D72FB3B2F6AD49825.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F9CFB607155053E5F25901BBA00C5AF4F13BA097205B636F130E944F136009F8/0/34352e3232362e35382e302f32342d3234203d3e20323635383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:07:a2:4e:8d:f5:4f:19:e8:3a:d1:37:69:7b:a9:fe:22:8c:
         82:ce:f0:27:b0:69:0e:98:5f:0f:76:7e:28:f7:c3:b5:d0:3f:
         22:9f:ee:b8:1f:e3:50:0d:b1:6b:84:e4:af:7a:68:fd:ce:03:
         f3:aa:a9:92:3e:7a:55:cf:6f:64:ac:e3:a5:ce:d2:a0:37:06:
         b3:c1:c7:cf:a3:6c:7d:46:36:37:be:f4:18:67:77:8e:54:89:
         3b:c5:96:f6:a2:1b:35:24:33:fc:61:ff:ea:59:e8:40:97:88:
         75:56:09:ec:b4:fe:6e:eb:0e:0f:5b:86:a9:ae:ab:1b:48:05:
         b9:29:06:38:51:23:5e:1c:33:3d:d4:63:f9:3c:1e:1f:3b:4d:
         bc:54:e9:bc:1e:cb:51:3f:fc:ae:3e:f5:a8:f8:45:a9:e4:0a:
         d8:9e:ce:1e:25:78:3c:aa:c5:ab:90:de:65:b2:4c:b2:a6:84:
         83:a2:10:cc:12:64:1e:69:7c:24:49:b5:2d:96:c2:22:50:a5:
         af:11:fe:6b:b9:56:77:83:ac:34:ac:0d:f9:38:71:97:dc:36:
         aa:02:7f:fa:01:54:0e:6f:f6:7a:15:1b:79:0a:77:86:0b:af:
         cf:1f:8a:f3:57:99:12:70:43:98:6b:ec:d4:f3:b3:3c:51:21:
         70:b7:a4:09
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVuCdzlzUqutSdClIEKfAa2UdR74wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNCMDEyM0FFNDAwNTIxOEM3QjA3NTVENzJGQjNCMkY2
QUQ0OTgyNTAeFw0yNDAzMDUxNzUyMDJaFw0yNTAzMDQxNzU3MDJaMDMxMTAvBgNV
BAMTKDE4OEVGQzQwNTc3RDM2NUYwRkFGOTkzNUJGNjA1OUZBRDhEQzUwNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQSEdK0+ATC25bRrdubMTdnvZN
1E4QZAhRloO4RwHeMp2oWKCngszmt9fpV6PRjISRsp41XMce3wj6TRJ2+m6hvatG
nxmaXL0wlbVRes43VKcVmK4q1TAbbCvBjlnJV6qggXFKs5nJXNu657t7raNZBrhS
uF09+2QUWoc0EMhV5i/LkEABT7VhdqvhCTwJzmsSd5r9Lu8IFSf3q/45E2nsErNL
9MFkh7oYsXi6L8BpEk4k8rZVGg0F+cvC3xBDk/tXuFYInJkMB0oea0LMSYHIGonJ
55fJgWjA00O/UqNHs9dm78jxcZlTdPTveXeU+QGaWPkMVWnXSO2DhFMPFyQDAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUGI78QFd9Nl8Pr5k1v2BZ+tjcUFIwHwYDVR0j
BBgwFoAU47ASOuQAUhjHsHVdcvs7L2rUmCUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GOUNGQjYwNzE1NTA1M0U1RjI1OTAxQkJBMDBDNUFGNEYx
M0JBMDk3MjA1QjYzNkYxMzBFOTQ0RjEzNjAwOUY4LzAvRTNCMDEyM0FFNDAwNTIx
OEM3QjA3NTVENzJGQjNCMkY2QUQ0OTgyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FM0IwMTIzQUU0MDA1MjE4QzdC
MDc1NUQ3MkZCM0IyRjZBRDQ5ODI1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjlDRkI2MDcxNTUwNTNFNUYyNTkwMUJCQTAwQzVBRjRGMTNCQTA5NzIw
NUI2MzZGMTMwRTk0NEYxMzYwMDlGOC8wLzM0MzUyZTMyMzIzNjJlMzUzODJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNTM4MzYzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3iOjAN
BgkqhkiG9w0BAQsFAAOCAQEAngeiTo31TxnoOtE3aXup/iKMgs7wJ7BpDphfD3Z+
KPfDtdA/Ip/uuB/jUA2xa4Tkr3po/c4D86qpkj56Vc9vZKzjpc7SoDcGs8HHz6Ns
fUY2N770GGd3jlSJO8WW9qIbNSQz/GH/6lnoQJeIdVYJ7LT+busOD1uGqa6rG0gF
uSkGOFEjXhwzPdRj+TweHztNvFTpvB7LUT/8rj71qPhFqeQK2J7OHiV4PKrFq5De
ZbJMsqaEg6IQzBJkHml8JEm1LZbCIlClrxH+a7lWd4OsNKwN+Thxl9w2qgJ/+gFU
Dm/2ehUbeQp3hguvzx+K81eZEnBDmGvs1POzPFEhcLekCQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org