Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/34352e3233382e3135362e302f32342d3234203d3e20323636383432.roa
File:                     34352e3233382e3135362e302f32342d3234203d3e20323636383432.roa (raw, json)
Hash identifier:          NE/seLXIOl6qdgfsPZpVtAY3tlG3Sswcb4BhDAgaEYY=
Subject key identifier:   79:00:F0:43:60:C6:4C:1A:3A:AB:93:23:B6:0B:41:F3:AD:35:0C:13
Certificate issuer:       /CN=99AC90C6431B27F29FD3D3C3FECE807D86BFE025
Certificate serial:       6378AE9A5E8E27A22056876F1C200BBD1231C12F
Authority key identifier: 99:AC:90:C6:43:1B:27:F2:9F:D3:D3:C3:FE:CE:80:7D:86:BF:E0:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/34352e3233382e3135362e302f32342d3234203d3e20323636383432.roa
Signing time:             Tue 05 Mar 2024 18:08:42 +0000
ROA not before:           Tue 05 Mar 2024 18:03:42 +0000
ROA not after:            Tue 04 Mar 2025 18:08:42 +0000
asID:                     266842
IP address blocks:        45.238.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:78:ae:9a:5e:8e:27:a2:20:56:87:6f:1c:20:0b:bd:12:31:c1:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99AC90C6431B27F29FD3D3C3FECE807D86BFE025
        Validity
            Not Before: Mar  5 18:03:42 2024 GMT
            Not After : Mar  4 18:08:42 2025 GMT
        Subject: CN=7900F04360C64C1A3AAB9323B60B41F3AD350C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ce:97:51:4f:77:e2:0f:56:2e:1b:09:8b:88:
                    29:8a:79:64:80:31:d3:ed:38:af:3c:01:6b:1b:7f:
                    9b:40:38:ac:55:36:9c:67:92:93:2b:8b:d9:5f:b6:
                    7a:f9:b9:7f:c4:9b:fc:72:2d:d0:91:0c:3a:5d:8d:
                    13:d9:eb:ef:47:73:80:ce:f0:a7:50:56:d7:e1:03:
                    7f:b6:85:50:bb:31:09:5a:eb:e1:f3:84:48:de:a0:
                    57:ba:35:c7:2b:64:90:d6:86:0e:05:c8:0c:e8:6d:
                    6f:0d:1e:9a:a7:db:15:f5:ca:53:eb:45:6e:f7:2c:
                    22:dd:29:b7:cc:d7:5e:38:43:e4:74:45:c8:c0:26:
                    bb:f1:1b:0e:15:47:79:cb:4a:48:81:7b:cf:b8:11:
                    9d:69:7f:bf:88:1e:bb:f6:f0:f1:03:32:29:3e:69:
                    33:dd:10:13:a8:61:46:ec:15:6b:6a:e9:62:a0:52:
                    9d:3f:80:87:fa:a9:b5:fc:ce:d1:9a:b1:27:1f:4c:
                    9a:0e:9e:fe:49:01:8f:6b:f9:18:e0:39:5d:ed:e9:
                    16:fe:78:6c:d6:0a:db:47:4b:43:18:9b:0c:74:2c:
                    f3:83:b2:9d:2c:dc:73:1d:2e:cd:c9:24:91:69:55:
                    87:6b:e2:5e:b9:7a:9b:98:03:59:cb:75:92:7b:1c:
                    a2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:00:F0:43:60:C6:4C:1A:3A:AB:93:23:B6:0B:41:F3:AD:35:0C:13
            X509v3 Authority Key Identifier:
                keyid:99:AC:90:C6:43:1B:27:F2:9F:D3:D3:C3:FE:CE:80:7D:86:BF:E0:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/34352e3233382e3135362e302f32342d3234203d3e20323636383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:5a:40:5b:08:22:92:85:21:76:c9:43:82:5a:c6:64:82:44:
         23:c2:17:70:75:53:1d:63:31:7b:e7:d6:cf:b2:5f:55:c5:47:
         09:39:fe:00:3c:a3:77:4f:aa:cd:73:ab:1d:08:38:13:41:c0:
         c8:eb:80:c6:84:f4:2b:7f:d9:60:e7:65:10:23:3d:77:8f:0b:
         04:2a:e2:6b:c8:b2:94:86:88:59:b3:0b:b9:ea:f2:c6:1b:46:
         5c:cd:77:17:8d:49:c5:78:d5:a8:86:1b:74:22:2a:ca:d0:ea:
         7c:f0:a6:26:25:e3:e2:e3:21:a5:f8:1f:f0:d4:11:b4:f4:09:
         57:4f:f2:6f:f9:9c:50:f5:f0:3b:f2:cd:3e:e6:50:6d:92:cc:
         1a:13:1b:ef:b6:56:09:6f:86:04:e8:03:7c:ec:d7:5c:df:43:
         5b:f9:77:6f:5e:2c:d4:1c:8c:2d:ec:30:60:55:c3:74:0d:a3:
         0c:49:97:36:bc:60:17:a2:05:57:1b:53:65:4e:87:21:01:3d:
         d6:50:a2:88:d4:5d:b4:ac:b0:33:c0:e8:21:c4:d3:3f:fb:c3:
         0d:6e:9f:ca:62:e7:93:89:af:02:a1:cd:5d:c6:17:e1:8c:db:
         0b:d8:cc:0f:05:eb:5b:a8:36:99:bb:69:b3:23:18:70:6b:b4:
         71:18:33:a1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUY3iuml6OJ6IgVodvHCALvRIxwS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlBQzkwQzY0MzFCMjdGMjlGRDNEM0MzRkVDRTgwN0Q4
NkJGRTAyNTAeFw0yNDAzMDUxODAzNDJaFw0yNTAzMDQxODA4NDJaMDMxMTAvBgNV
BAMTKDc5MDBGMDQzNjBDNjRDMUEzQUFCOTMyM0I2MEI0MUYzQUQzNTBDMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqzpdRT3fiD1YuGwmLiCmKeWSA
MdPtOK88AWsbf5tAOKxVNpxnkpMri9lftnr5uX/Em/xyLdCRDDpdjRPZ6+9Hc4DO
8KdQVtfhA3+2hVC7MQla6+HzhEjeoFe6NccrZJDWhg4FyAzobW8NHpqn2xX1ylPr
RW73LCLdKbfM1144Q+R0RcjAJrvxGw4VR3nLSkiBe8+4EZ1pf7+IHrv28PEDMik+
aTPdEBOoYUbsFWtq6WKgUp0/gIf6qbX8ztGasScfTJoOnv5JAY9r+RjgOV3t6Rb+
eGzWCttHS0MYmwx0LPODsp0s3HMdLs3JJJFpVYdr4l65epuYA1nLdZJ7HKIFAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUeQDwQ2DGTBo6q5MjtgtB8601DBMwHwYDVR0j
BBgwFoAUmayQxkMbJ/Kf09PD/s6AfYa/4CUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GQjgwRThBREFBNzdCRDUxN0JCOTUyMDQ1RUE1NkUwRkQ0
MUE1M0U0QjlBRTVFN0UxNTQ0QTBFRjA4Q0E3QzNBLzAvOTlBQzkwQzY0MzFCMjdG
MjlGRDNEM0MzRkVDRTgwN0Q4NkJGRTAyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OUFDOTBDNjQzMUIyN0YyOUZE
M0QzQzNGRUNFODA3RDg2QkZFMDI1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkI4MEU4QURBQTc3QkQ1MTdCQjk1MjA0NUVBNTZFMEZENDFBNTNFNEI5
QUU1RTdFMTU0NEEwRUYwOENBN0MzQS8wLzM0MzUyZTMyMzMzODJlMzEzNTM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzgzNDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALe6c
MA0GCSqGSIb3DQEBCwUAA4IBAQAAWkBbCCKShSF2yUOCWsZkgkQjwhdwdVMdYzF7
59bPsl9VxUcJOf4APKN3T6rNc6sdCDgTQcDI64DGhPQrf9lg52UQIz13jwsEKuJr
yLKUhohZswu56vLGG0ZczXcXjUnFeNWohht0IirK0Op88KYmJePi4yGl+B/w1BG0
9AlXT/Jv+ZxQ9fA78s0+5lBtkswaExvvtlYJb4YE6AN87Ndc30Nb+XdvXizUHIwt
7DBgVcN0DaMMSZc2vGAXogVXG1NlTochAT3WUKKI1F20rLAzwOghxNM/+8MNbp/K
YueTia8Coc1dxhfhjNsL2MwPBetbqDaZu2mzIxhwa7RxGDOh
-----END CERTIFICATE-----
Generated at Tue Nov 19 10:45:31 2024 by rpki-client on console-ams.rpki-client.org