Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/34352e3233382e3135382e302f32342d3234203d3e20323636383432.roa
File:                     34352e3233382e3135382e302f32342d3234203d3e20323636383432.roa (raw, json)
Hash identifier:          5fxWlEEkBhUYV/iEFyLPHLqpZVRr7dmqaRQLlfPued0=
Subject key identifier:   39:26:9D:01:96:C3:75:0C:6B:14:00:97:A6:44:8B:B3:F4:F1:CC:94
Certificate issuer:       /CN=99AC90C6431B27F29FD3D3C3FECE807D86BFE025
Certificate serial:       1D42C90FCCFC21703111E22EA714923E43AE0EA8
Authority key identifier: 99:AC:90:C6:43:1B:27:F2:9F:D3:D3:C3:FE:CE:80:7D:86:BF:E0:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/34352e3233382e3135382e302f32342d3234203d3e20323636383432.roa
Signing time:             Tue 05 Mar 2024 18:08:42 +0000
ROA not before:           Tue 05 Mar 2024 18:03:42 +0000
ROA not after:            Tue 04 Mar 2025 18:08:42 +0000
asID:                     266842
IP address blocks:        45.238.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:42:c9:0f:cc:fc:21:70:31:11:e2:2e:a7:14:92:3e:43:ae:0e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99AC90C6431B27F29FD3D3C3FECE807D86BFE025
        Validity
            Not Before: Mar  5 18:03:42 2024 GMT
            Not After : Mar  4 18:08:42 2025 GMT
        Subject: CN=39269D0196C3750C6B140097A6448BB3F4F1CC94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b4:e1:60:62:85:8f:eb:35:97:29:cf:29:24:
                    02:8a:4c:d8:07:18:b8:ed:e1:14:46:6b:35:2b:3f:
                    d1:a8:de:4a:99:90:69:35:ca:67:8f:fc:c3:03:50:
                    05:e4:0a:3d:c0:84:96:20:42:a5:e4:81:71:68:eb:
                    d8:32:92:14:25:3f:cb:42:84:bb:50:0f:bb:f0:6b:
                    07:1e:50:84:54:22:03:0e:35:7b:1f:af:8a:20:08:
                    51:5b:98:23:3c:de:52:c0:05:ed:8e:11:24:fe:1e:
                    80:23:5d:49:0b:ec:21:2d:42:b9:2f:88:e2:2c:7e:
                    ef:da:2d:e4:aa:62:a0:6f:31:9a:e3:7f:24:3e:1b:
                    53:75:9c:63:00:a6:ab:6e:53:f6:57:b0:cf:62:22:
                    46:0c:d1:b3:1b:81:db:d2:70:ea:d8:16:5a:45:4c:
                    1b:31:01:a2:4e:c4:c0:7b:47:af:7e:b7:8f:41:25:
                    47:d0:e6:2e:9c:a9:cc:1e:c9:0b:17:44:5d:52:46:
                    cc:c5:db:5a:05:ef:30:8e:f6:fe:a2:ef:37:c9:92:
                    d6:a9:fc:11:d2:fb:b9:6a:80:72:34:74:02:9d:17:
                    2c:97:95:95:ca:85:9d:2f:02:eb:03:4d:1c:10:0f:
                    94:e3:42:6c:2f:98:d1:02:a3:55:2d:7e:28:b8:b0:
                    82:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:26:9D:01:96:C3:75:0C:6B:14:00:97:A6:44:8B:B3:F4:F1:CC:94
            X509v3 Authority Key Identifier:
                keyid:99:AC:90:C6:43:1B:27:F2:9F:D3:D3:C3:FE:CE:80:7D:86:BF:E0:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/34352e3233382e3135382e302f32342d3234203d3e20323636383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:14:bf:86:a8:83:98:32:9f:be:02:57:87:5f:ef:22:8a:e4:
         cd:93:5d:e5:c2:89:98:d8:5c:2d:6c:32:83:29:41:6d:00:79:
         a1:46:1a:bf:0f:f2:52:0e:32:e1:c9:1c:7c:2f:6a:57:2c:cb:
         07:e6:81:a4:1a:9d:54:10:69:a0:ac:be:a6:b1:d9:cc:7a:0f:
         78:4f:9a:2b:37:12:a3:5c:03:f5:62:e4:5c:1c:74:22:bf:9c:
         c7:36:fd:3e:1d:d8:c8:5d:d9:cf:80:bf:f2:ba:f8:35:d7:d3:
         4c:42:9c:b2:5e:a0:ab:91:4c:c8:b5:90:fa:61:a1:79:f1:5e:
         16:14:f3:ae:41:ce:9a:0f:0d:6d:7b:66:5b:11:9b:53:6f:42:
         4e:d8:73:f8:33:80:1c:7b:a4:b0:3a:6f:cc:b1:34:b1:26:0e:
         08:d9:b9:0f:01:76:e0:5b:6f:39:c6:f2:7d:1b:9a:56:69:e2:
         89:79:3f:21:b9:39:18:96:da:97:4d:96:68:5b:a9:48:82:68:
         70:b1:d6:13:b9:99:f9:fa:0f:88:d0:0b:0e:4f:fd:e1:9a:a6:
         f8:60:cf:38:c0:0b:d5:31:db:fa:70:7b:cd:1f:2e:7d:27:4c:
         43:3b:63:d2:a6:da:65:1d:a1:ad:ac:60:fd:81:e8:24:20:5e:
         9c:b4:4e:7d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHULJD8z8IXAxEeIupxSSPkOuDqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlBQzkwQzY0MzFCMjdGMjlGRDNEM0MzRkVDRTgwN0Q4
NkJGRTAyNTAeFw0yNDAzMDUxODAzNDJaFw0yNTAzMDQxODA4NDJaMDMxMTAvBgNV
BAMTKDM5MjY5RDAxOTZDMzc1MEM2QjE0MDA5N0E2NDQ4QkIzRjRGMUNDOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCntOFgYoWP6zWXKc8pJAKKTNgH
GLjt4RRGazUrP9Go3kqZkGk1ymeP/MMDUAXkCj3AhJYgQqXkgXFo69gykhQlP8tC
hLtQD7vwawceUIRUIgMONXsfr4ogCFFbmCM83lLABe2OEST+HoAjXUkL7CEtQrkv
iOIsfu/aLeSqYqBvMZrjfyQ+G1N1nGMApqtuU/ZXsM9iIkYM0bMbgdvScOrYFlpF
TBsxAaJOxMB7R69+t49BJUfQ5i6cqcweyQsXRF1SRszF21oF7zCO9v6i7zfJktap
/BHS+7lqgHI0dAKdFyyXlZXKhZ0vAusDTRwQD5TjQmwvmNECo1Utfii4sIJLAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUOSadAZbDdQxrFACXpkSLs/TxzJQwHwYDVR0j
BBgwFoAUmayQxkMbJ/Kf09PD/s6AfYa/4CUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GQjgwRThBREFBNzdCRDUxN0JCOTUyMDQ1RUE1NkUwRkQ0
MUE1M0U0QjlBRTVFN0UxNTQ0QTBFRjA4Q0E3QzNBLzAvOTlBQzkwQzY0MzFCMjdG
MjlGRDNEM0MzRkVDRTgwN0Q4NkJGRTAyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OUFDOTBDNjQzMUIyN0YyOUZE
M0QzQzNGRUNFODA3RDg2QkZFMDI1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkI4MEU4QURBQTc3QkQ1MTdCQjk1MjA0NUVBNTZFMEZENDFBNTNFNEI5
QUU1RTdFMTU0NEEwRUYwOENBN0MzQS8wLzM0MzUyZTMyMzMzODJlMzEzNTM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzgzNDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALe6e
MA0GCSqGSIb3DQEBCwUAA4IBAQBXFL+GqIOYMp++AleHX+8iiuTNk13lwomY2Fwt
bDKDKUFtAHmhRhq/D/JSDjLhyRx8L2pXLMsH5oGkGp1UEGmgrL6msdnMeg94T5or
NxKjXAP1YuRcHHQiv5zHNv0+HdjIXdnPgL/yuvg119NMQpyyXqCrkUzItZD6YaF5
8V4WFPOuQc6aDw1te2ZbEZtTb0JO2HP4M4Ace6SwOm/MsTSxJg4I2bkPAXbgW285
xvJ9G5pWaeKJeT8huTkYltqXTZZoW6lIgmhwsdYTuZn5+g+I0AsOT/3hmqb4YM84
wAvVMdv6cHvNHy59J0xDO2PSptplHaGtrGD9gegkIF6ctE59
-----END CERTIFICATE-----
Generated at Tue Nov 19 10:29:39 2024 by rpki-client on console-fra.rpki-client.org