Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32332d3233203d3e20323636373931.roa
File:                     34352e3233362e33322e302f32332d3233203d3e20323636373931.roa (raw, json)
Hash identifier:          k7LUuj3iyEB1SBDuMRxG4z1/LwDYIFhJxf4wtdXM+Hk=
Subject key identifier:   4E:BA:79:CC:25:98:2B:3F:15:0D:0C:6A:06:A8:41:2F:50:D6:F9:EB
Certificate issuer:       /CN=F381BE6CF64000AB9FF5B43AFF78F2623199F153
Certificate serial:       5394788933EE17E79DC3C22A8EB198E111ED799F
Authority key identifier: F3:81:BE:6C:F6:40:00:AB:9F:F5:B4:3A:FF:78:F2:62:31:99:F1:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32332d3233203d3e20323636373931.roa
Signing time:             Fri 26 Apr 2024 16:25:00 +0000
ROA not before:           Fri 26 Apr 2024 16:20:00 +0000
ROA not after:            Fri 25 Apr 2025 16:25:00 +0000
asID:                     266791
IP address blocks:        45.236.32.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:94:78:89:33:ee:17:e7:9d:c3:c2:2a:8e:b1:98:e1:11:ed:79:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F381BE6CF64000AB9FF5B43AFF78F2623199F153
        Validity
            Not Before: Apr 26 16:20:00 2024 GMT
            Not After : Apr 25 16:25:00 2025 GMT
        Subject: CN=4EBA79CC25982B3F150D0C6A06A8412F50D6F9EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0c:4a:6b:4c:bc:d7:d0:a6:9f:e5:31:0f:79:
                    77:2f:7e:bc:26:26:ae:aa:fc:79:cd:70:82:9d:15:
                    b4:4a:25:71:80:59:7b:b9:6d:b2:8d:4a:f8:5b:f8:
                    f0:37:5b:80:a0:bf:89:c6:6e:08:44:29:35:98:2a:
                    4d:42:a4:26:cf:9c:26:ea:54:22:70:6a:e9:ee:0e:
                    2b:f0:6a:1c:e0:51:00:7f:de:ff:a7:de:93:d3:a5:
                    0c:76:b9:af:a5:56:ff:30:0a:f9:98:c8:b4:52:81:
                    7f:4d:78:5b:9c:52:27:dc:86:9c:82:33:f4:8e:eb:
                    5e:c4:90:98:be:d2:1e:ad:b9:46:4e:72:a9:0e:58:
                    6c:25:96:9c:51:5b:2b:d7:fa:3d:13:7a:90:5f:af:
                    b4:92:e4:7b:4a:01:bf:10:10:cb:60:bb:cd:c0:4d:
                    83:0a:1c:b9:a8:f7:6e:9b:8a:78:e1:04:1b:aa:21:
                    1f:c1:25:f4:cd:2c:7d:c3:ef:1e:48:95:51:7c:b9:
                    ab:07:06:a9:20:47:b7:bc:49:29:ae:34:9c:50:e2:
                    3b:3e:04:2a:28:d8:b0:a0:31:46:9b:3e:9c:a1:bf:
                    7c:91:ad:cd:ee:90:86:9b:da:5d:0a:61:00:27:7b:
                    55:a4:d8:5c:a3:9e:8d:58:8d:6e:bf:33:2b:db:f7:
                    2a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BA:79:CC:25:98:2B:3F:15:0D:0C:6A:06:A8:41:2F:50:D6:F9:EB
            X509v3 Authority Key Identifier:
                keyid:F3:81:BE:6C:F6:40:00:AB:9F:F5:B4:3A:FF:78:F2:62:31:99:F1:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32332d3233203d3e20323636373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:b5:84:27:d3:18:a1:ad:13:a9:48:07:a7:7d:ce:80:35:4c:
         b8:70:04:60:ec:20:cf:a6:2b:d0:f8:54:0d:31:f2:3c:90:29:
         9f:c4:a3:d2:56:55:1c:5c:d7:ab:4f:ce:13:20:f6:98:cc:7a:
         66:e7:af:c8:84:38:5d:bb:4f:9c:b1:89:65:92:dd:f4:f3:a2:
         d2:d4:b2:b1:12:66:40:e2:53:29:03:11:f6:8c:5b:1b:e0:19:
         1f:87:09:5e:ba:87:48:78:dd:e0:92:fb:55:3b:11:5a:2a:0a:
         01:92:30:89:78:ab:74:94:a2:28:4f:e9:3a:48:70:14:a0:0f:
         75:a0:f4:3a:f6:70:de:99:e2:c5:c7:dd:30:e4:43:06:dc:29:
         f5:58:2a:46:d6:74:fa:e6:6c:81:aa:a4:12:f1:b7:e6:53:cc:
         12:2d:cf:7a:58:f5:04:ef:c4:e4:c1:c3:87:7b:b9:76:94:f3:
         36:fd:0d:57:4d:1b:f5:98:86:00:06:41:38:20:42:8c:24:d4:
         f0:ab:bf:ae:53:74:00:16:92:9e:31:b8:d8:5a:44:aa:84:69:
         b8:e3:99:c4:67:f1:87:d0:10:db:00:66:bd:05:c3:11:62:43:
         06:af:5c:90:43:76:99:fc:65:e0:84:00:75:49:4b:2c:76:93:
         3c:07:fd:43
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUU5R4iTPuF+edw8IqjrGY4RHteZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM4MUJFNkNGNjQwMDBBQjlGRjVCNDNBRkY3OEYyNjIz
MTk5RjE1MzAeFw0yNDA0MjYxNjIwMDBaFw0yNTA0MjUxNjI1MDBaMDMxMTAvBgNV
BAMTKDRFQkE3OUNDMjU5ODJCM0YxNTBEMEM2QTA2QTg0MTJGNTBENkY5RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDEprTLzX0Kaf5TEPeXcvfrwm
Jq6q/HnNcIKdFbRKJXGAWXu5bbKNSvhb+PA3W4Cgv4nGbghEKTWYKk1CpCbPnCbq
VCJwaunuDivwahzgUQB/3v+n3pPTpQx2ua+lVv8wCvmYyLRSgX9NeFucUifchpyC
M/SO617EkJi+0h6tuUZOcqkOWGwllpxRWyvX+j0TepBfr7SS5HtKAb8QEMtgu83A
TYMKHLmo926binjhBBuqIR/BJfTNLH3D7x5IlVF8uasHBqkgR7e8SSmuNJxQ4js+
BCoo2LCgMUabPpyhv3yRrc3ukIab2l0KYQAne1Wk2Fyjno1YjW6/Myvb9yolAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUTrp5zCWYKz8VDQxqBqhBL1DW+eswHwYDVR0j
BBgwFoAU84G+bPZAAKuf9bQ6/3jyYjGZ8VMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GREM2QUU0RjIwNDc0OTM3OTM0QUY1RUY0OEVGOEIyQzY0
NTU1RkZFRTk4NDg2NDVCMUI4NkI3NTc5MjhGNzM4LzAvRjM4MUJFNkNGNjQwMDBB
QjlGRjVCNDNBRkY3OEYyNjIzMTk5RjE1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMzgxQkU2Q0Y2NDAwMEFCOUZG
NUI0M0FGRjc4RjI2MjMxOTlGMTUzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkRDNkFFNEYyMDQ3NDkzNzkzNEFGNUVGNDhFRjhCMkM2NDU1NUZGRUU5
ODQ4NjQ1QjFCODZCNzU3OTI4RjczOC8wLzM0MzUyZTMyMzMzNjJlMzMzMjJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNjM3MzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS3sIDAN
BgkqhkiG9w0BAQsFAAOCAQEAq7WEJ9MYoa0TqUgHp33OgDVMuHAEYOwgz6Yr0PhU
DTHyPJApn8Sj0lZVHFzXq0/OEyD2mMx6ZuevyIQ4XbtPnLGJZZLd9POi0tSysRJm
QOJTKQMR9oxbG+AZH4cJXrqHSHjd4JL7VTsRWioKAZIwiXirdJSiKE/pOkhwFKAP
daD0OvZw3pnixcfdMORDBtwp9VgqRtZ0+uZsgaqkEvG35lPMEi3Pelj1BO/E5MHD
h3u5dpTzNv0NV00b9ZiGAAZBOCBCjCTU8Ku/rlN0ABaSnjG42FpEqoRpuOOZxGfx
h9AQ2wBmvQXDEWJDBq9ckEN2mfxl4IQAdUlLLHaTPAf9Qw==
-----END CERTIFICATE-----
Generated at Tue Jun 25 23:04:24 2024 by rpki-client on console-fra.rpki-client.org