Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2673C790E63680AF244BE18E191159BABDA2C73A4EBE01EB2CAFA644E191C7E0/0/34352e3136392e3130342e302f32322d3232203d3e20323637373634.roa
File:                     34352e3136392e3130342e302f32322d3232203d3e20323637373634.roa (raw, json)
Hash identifier:          XICrGGm4SmvRxpkoLNxzMzmuoYF14pI9nV951D+w5mQ=
Subject key identifier:   83:48:40:A8:54:ED:55:E6:74:F3:7D:AE:F7:A4:C9:5F:0E:F1:B2:38
Certificate issuer:       /CN=9D3193ED4BB8707C69E928DDD9885B6BDA1E7865
Certificate serial:       7026107944672A0865EFDCF32C63286499FD25C3
Authority key identifier: 9D:31:93:ED:4B:B8:70:7C:69:E9:28:DD:D9:88:5B:6B:DA:1E:78:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D3193ED4BB8707C69E928DDD9885B6BDA1E7865.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2673C790E63680AF244BE18E191159BABDA2C73A4EBE01EB2CAFA644E191C7E0/0/34352e3136392e3130342e302f32322d3232203d3e20323637373634.roa
Signing time:             Tue 04 Feb 2025 18:52:26 +0000
ROA not before:           Tue 04 Feb 2025 18:47:26 +0000
ROA not after:            Tue 03 Feb 2026 18:52:26 +0000
asID:                     267764
IP address blocks:        45.169.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2673C790E63680AF244BE18E191159BABDA2C73A4EBE01EB2CAFA644E191C7E0/0/9D3193ED4BB8707C69E928DDD9885B6BDA1E7865.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2673C790E63680AF244BE18E191159BABDA2C73A4EBE01EB2CAFA644E191C7E0/0/9D3193ED4BB8707C69E928DDD9885B6BDA1E7865.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D3193ED4BB8707C69E928DDD9885B6BDA1E7865.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:26:10:79:44:67:2a:08:65:ef:dc:f3:2c:63:28:64:99:fd:25:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D3193ED4BB8707C69E928DDD9885B6BDA1E7865
        Validity
            Not Before: Feb  4 18:47:26 2025 GMT
            Not After : Feb  3 18:52:26 2026 GMT
        Subject: CN=834840A854ED55E674F37DAEF7A4C95F0EF1B238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a8:79:02:8a:6b:a7:85:95:23:00:33:88:95:
                    ff:62:39:02:8e:da:cd:f6:eb:ba:73:ce:88:a3:08:
                    45:4c:0f:8b:de:4e:5e:24:d9:16:24:79:22:ed:3d:
                    c7:9c:98:3b:0f:6f:2a:20:15:15:1a:0a:5a:f0:bd:
                    34:9f:a9:32:03:5c:f3:2e:f8:4e:46:94:e8:f9:fe:
                    f5:7a:94:fa:97:11:39:ea:8a:fd:5c:dc:68:89:b9:
                    88:69:9b:3f:66:f9:cb:53:de:97:b7:26:28:0c:b4:
                    db:52:38:bf:5a:93:74:70:81:25:aa:3c:45:f1:f4:
                    f6:27:b8:61:9a:fa:95:5f:c0:c5:e6:01:31:47:6b:
                    80:dd:7d:32:ff:2c:d1:de:8a:e5:93:c4:9c:60:4e:
                    f5:5b:ef:bd:a8:c0:aa:17:1d:1f:89:0a:e0:dc:0f:
                    63:35:fe:25:e4:e7:1e:6a:37:e7:c3:d1:44:ee:3b:
                    8e:6c:61:31:8c:44:25:5d:3c:9a:48:6c:58:92:b5:
                    30:54:71:61:91:87:19:35:29:c6:33:8d:3d:52:48:
                    89:1f:d2:11:78:6b:2e:ac:62:68:be:8d:03:f2:17:
                    39:d0:de:a1:dd:9e:e3:07:a9:87:00:11:2d:86:c0:
                    71:1a:16:96:02:b0:aa:65:81:cd:13:d4:2d:46:95:
                    8f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:48:40:A8:54:ED:55:E6:74:F3:7D:AE:F7:A4:C9:5F:0E:F1:B2:38
            X509v3 Authority Key Identifier:
                keyid:9D:31:93:ED:4B:B8:70:7C:69:E9:28:DD:D9:88:5B:6B:DA:1E:78:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2673C790E63680AF244BE18E191159BABDA2C73A4EBE01EB2CAFA644E191C7E0/0/9D3193ED4BB8707C69E928DDD9885B6BDA1E7865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D3193ED4BB8707C69E928DDD9885B6BDA1E7865.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2673C790E63680AF244BE18E191159BABDA2C73A4EBE01EB2CAFA644E191C7E0/0/34352e3136392e3130342e302f32322d3232203d3e20323637373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:2e:bc:55:67:a7:7e:dc:f9:6f:6d:a9:69:e0:21:72:c2:d2:
         04:79:17:44:d4:92:13:f3:f4:aa:b7:a8:31:df:df:ec:92:e9:
         e8:f4:3a:60:d6:eb:11:35:75:71:49:fb:cb:87:83:40:9e:0a:
         02:95:33:d9:70:4e:67:9b:0e:95:d7:c1:d8:b7:7e:67:ab:45:
         c3:41:0b:c2:d2:40:78:c3:2a:2d:67:a0:7a:19:5b:5c:54:b5:
         88:b2:34:a0:78:fe:a9:a0:d1:42:16:cb:87:75:32:18:26:fd:
         33:71:a7:39:ef:b5:b2:f0:45:f3:a9:fd:32:52:1b:04:18:4a:
         f8:5f:8f:d5:33:c8:84:cd:d3:9f:ec:09:ee:20:92:52:b9:0e:
         39:2f:8c:08:b4:63:cc:d0:f2:ba:af:77:d2:98:3c:20:86:5b:
         ab:a0:41:17:a1:ee:b0:57:b8:c2:9f:ce:fa:06:66:6f:66:d4:
         5c:fd:5a:68:bd:45:f5:13:39:35:c3:18:80:82:b3:e7:5d:78:
         5d:33:7e:1e:54:15:66:fc:21:7a:02:9c:1b:a1:c8:8a:86:ff:
         7d:14:04:f9:5c:6c:f1:aa:78:8e:0b:ee:71:2e:13:98:46:c4:
         3c:60:44:b9:f8:3e:52:cc:9b:6c:a6:ae:70:2a:f4:97:07:21:
         c5:8b:5b:80
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcCYQeURnKghl79zzLGMoZJn9JcMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQzMTkzRUQ0QkI4NzA3QzY5RTkyOERERDk4ODVCNkJE
QTFFNzg2NTAeFw0yNTAyMDQxODQ3MjZaFw0yNjAyMDMxODUyMjZaMDMxMTAvBgNV
BAMTKDgzNDg0MEE4NTRFRDU1RTY3NEYzN0RBRUY3QTRDOTVGMEVGMUIyMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgqHkCimunhZUjADOIlf9iOQKO
2s3267pzzoijCEVMD4veTl4k2RYkeSLtPcecmDsPbyogFRUaClrwvTSfqTIDXPMu
+E5GlOj5/vV6lPqXETnqiv1c3GiJuYhpmz9m+ctT3pe3JigMtNtSOL9ak3RwgSWq
PEXx9PYnuGGa+pVfwMXmATFHa4DdfTL/LNHeiuWTxJxgTvVb772owKoXHR+JCuDc
D2M1/iXk5x5qN+fD0UTuO45sYTGMRCVdPJpIbFiStTBUcWGRhxk1KcYzjT1SSIkf
0hF4ay6sYmi+jQPyFznQ3qHdnuMHqYcAES2GwHEaFpYCsKplgc0T1C1GlY+jAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUg0hAqFTtVeZ0832u96TJXw7xsjgwHwYDVR0j
BBgwFoAUnTGT7Uu4cHxp6Sjd2Yhba9oeeGUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNjczQzc5MEU2MzY4MEFGMjQ0QkUxOEUxOTExNTlCQUJE
QTJDNzNBNEVCRTAxRUIyQ0FGQTY0NEUxOTFDN0UwLzAvOUQzMTkzRUQ0QkI4NzA3
QzY5RTkyOERERDk4ODVCNkJEQTFFNzg2NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RDMxOTNFRDRCQjg3MDdDNjlF
OTI4REREOTg4NUI2QkRBMUU3ODY1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjY3M0M3OTBFNjM2ODBBRjI0NEJFMThFMTkxMTU5QkFCREEyQzczQTRF
QkUwMUVCMkNBRkE2NDRFMTkxQzdFMC8wLzM0MzUyZTMxMzYzOTJlMzEzMDM0MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM3MzczNjM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLalo
MA0GCSqGSIb3DQEBCwUAA4IBAQAVLrxVZ6d+3Plvbalp4CFywtIEeRdE1JIT8/Sq
t6gx39/skuno9Dpg1usRNXVxSfvLh4NAngoClTPZcE5nmw6V18HYt35nq0XDQQvC
0kB4wyotZ6B6GVtcVLWIsjSgeP6poNFCFsuHdTIYJv0zcac577Wy8EXzqf0yUhsE
GEr4X4/VM8iEzdOf7AnuIJJSuQ45L4wItGPM0PK6r3fSmDwghluroEEXoe6wV7jC
n876BmZvZtRc/VpovUX1Ezk1wxiAgrPnXXhdM34eVBVm/CF6ApwbociKhv99FAT5
XGzxqniOC+5xLhOYRsQ8YES5+D5SzJtspq5wKvSXByHFi1uA
-----END CERTIFICATE-----
Generated at Wed Apr 16 15:56:36 2025 by rpki-client