Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/34352e3233352e31332e302f32342d3234203d3e203532343638.roa
File:                     34352e3233352e31332e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          wX80AJv9LItMxmrMs20mFmBYZQabPTv8Sf1iNrDwX04=
Subject key identifier:   DF:6E:0A:D9:0F:58:56:77:9E:96:B7:55:1B:71:C4:73:B4:DB:21:38
Certificate issuer:       /CN=CBF31447B564264D0A347F323D8011AEBA5D1613
Certificate serial:       7151822AE9E5966FF5C57C5448B59B7F198E3114
Authority key identifier: CB:F3:14:47:B5:64:26:4D:0A:34:7F:32:3D:80:11:AE:BA:5D:16:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/34352e3233352e31332e302f32342d3234203d3e203532343638.roa
Signing time:             Fri 17 Jan 2025 20:40:00 +0000
ROA not before:           Fri 17 Jan 2025 20:35:00 +0000
ROA not after:            Fri 16 Jan 2026 20:40:00 +0000
asID:                     52468
IP address blocks:        45.235.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.crl
                          rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 10 Feb 2025 03:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:51:82:2a:e9:e5:96:6f:f5:c5:7c:54:48:b5:9b:7f:19:8e:31:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBF31447B564264D0A347F323D8011AEBA5D1613
        Validity
            Not Before: Jan 17 20:35:00 2025 GMT
            Not After : Jan 16 20:40:00 2026 GMT
        Subject: CN=DF6E0AD90F5856779E96B7551B71C473B4DB2138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:13:70:d7:ed:f3:a2:1d:5c:83:b7:c1:22:f7:
                    49:fe:8b:88:93:8a:35:69:88:5b:f2:0e:8e:5f:2e:
                    ba:d3:78:7a:95:a5:de:d6:1b:02:67:0d:2c:99:8a:
                    16:77:3b:d2:8c:ec:a8:1d:a2:f5:2d:ba:dc:d6:52:
                    d4:47:92:13:f1:a6:0b:90:37:d3:ba:32:da:d2:54:
                    3a:61:b5:75:c0:1f:91:43:a8:80:45:0a:ee:d4:c5:
                    ef:c3:2a:70:07:4f:34:57:da:4c:32:4b:c8:0e:25:
                    18:69:d7:a1:c5:1d:1b:3c:8a:10:9d:22:77:aa:6c:
                    5c:ec:6e:e6:9c:ac:9e:01:87:01:a2:ad:27:37:4b:
                    77:a2:42:b3:41:cb:3d:75:3b:08:1c:d6:72:bb:3f:
                    48:af:e9:36:72:c3:59:dc:7e:1e:14:56:8c:d9:cd:
                    3b:ce:d8:06:08:c9:4e:fb:c3:17:23:9f:91:b6:47:
                    fe:fa:d8:fb:3f:45:20:68:ee:2f:c3:52:4e:8f:d6:
                    cc:45:5b:40:9f:9e:54:c9:41:be:7a:16:a0:5e:d5:
                    09:ba:0a:57:a6:6a:9b:be:a6:d4:4b:9a:a2:0a:f0:
                    f1:40:9a:ee:11:57:a1:97:dc:82:a5:3c:67:e7:53:
                    93:d7:8d:1c:ff:c7:fe:99:b4:ef:bd:54:16:82:1a:
                    15:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6E:0A:D9:0F:58:56:77:9E:96:B7:55:1B:71:C4:73:B4:DB:21:38
            X509v3 Authority Key Identifier:
                keyid:CB:F3:14:47:B5:64:26:4D:0A:34:7F:32:3D:80:11:AE:BA:5D:16:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/34352e3233352e31332e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:23:da:c5:04:5a:53:30:da:94:9e:6b:09:9b:f1:b6:3e:3e:
         31:64:01:d0:cb:75:45:cd:a6:7c:90:32:31:6c:78:5f:55:48:
         54:96:10:0f:fc:98:3f:4d:79:76:70:ae:2a:a9:a4:4f:ca:0a:
         e2:c6:a7:73:0c:ea:26:d7:69:f4:35:44:23:d0:3a:b9:63:76:
         7a:ae:b5:5d:80:80:55:87:bb:99:63:53:88:c7:81:7c:b7:65:
         6a:c2:15:4d:ef:74:34:1e:97:2e:99:fa:98:ad:d2:1e:35:0a:
         0e:a2:52:40:cd:68:79:36:27:63:d5:66:d7:5b:74:be:ed:9c:
         4e:3c:cb:97:1b:fb:d8:58:80:5a:5a:f8:43:7d:d7:eb:03:a3:
         4e:0d:d9:6d:11:15:8d:b6:57:aa:72:39:0e:10:81:f7:3c:e4:
         cd:4b:a2:8c:94:b1:60:46:70:b0:67:31:dd:08:45:c1:24:9a:
         77:f4:dd:e8:17:d3:85:67:6e:5c:5a:99:38:4e:a0:5a:3a:26:
         ac:ac:cb:bf:87:1e:4c:0b:f2:87:77:ff:5e:59:39:cc:a5:58:
         9a:56:59:82:e9:e5:73:79:06:99:0f:e5:7a:32:ef:cf:97:a6:
         66:ce:93:e7:9f:68:63:0a:1e:d9:6a:1b:8d:18:f1:01:62:18:
         38:9d:de:56
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUcVGCKunllm/1xXxUSLWbfxmOMRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JGMzE0NDdCNTY0MjY0RDBBMzQ3RjMyM0Q4MDExQUVC
QTVEMTYxMzAeFw0yNTAxMTcyMDM1MDBaFw0yNjAxMTYyMDQwMDBaMDMxMTAvBgNV
BAMTKERGNkUwQUQ5MEY1ODU2Nzc5RTk2Qjc1NTFCNzFDNDczQjREQjIxMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOE3DX7fOiHVyDt8Ei90n+i4iT
ijVpiFvyDo5fLrrTeHqVpd7WGwJnDSyZihZ3O9KM7KgdovUtutzWUtRHkhPxpguQ
N9O6MtrSVDphtXXAH5FDqIBFCu7Uxe/DKnAHTzRX2kwyS8gOJRhp16HFHRs8ihCd
IneqbFzsbuacrJ4BhwGirSc3S3eiQrNByz11Owgc1nK7P0iv6TZyw1ncfh4UVozZ
zTvO2AYIyU77wxcjn5G2R/762Ps/RSBo7i/DUk6P1sxFW0CfnlTJQb56FqBe1Qm6
Clemapu+ptRLmqIK8PFAmu4RV6GX3IKlPGfnU5PXjRz/x/6ZtO+9VBaCGhWFAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU324K2Q9YVneelrdVG3HEc7TbITgwHwYDVR0j
BBgwFoAUy/MUR7VkJk0KNH8yPYARrrpdFhMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNkJBRDcxN0M4RTczQUY2NTdERTgyRjc4NjYzMDc4ODZF
N0NBQzgwN0YyQjRDRTRBMzEzQ0U2ODY0NkVGRjZFLzAvQ0JGMzE0NDdCNTY0MjY0
RDBBMzQ3RjMyM0Q4MDExQUVCQTVEMTYxMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkYzMTQ0N0I1NjQyNjREMEEz
NDdGMzIzRDgwMTFBRUJBNUQxNjEzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDZCQUQ3MTdDOEU3M0FGNjU3REU4MkY3ODY2MzA3ODg2RTdDQUM4MDdG
MkI0Q0U0QTMxM0NFNjg2NDZFRkY2RS8wLzM0MzUyZTMyMzMzNTJlMzEzMzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt6w0wDQYJ
KoZIhvcNAQELBQADggEBAIMj2sUEWlMw2pSeawmb8bY+PjFkAdDLdUXNpnyQMjFs
eF9VSFSWEA/8mD9NeXZwriqppE/KCuLGp3MM6ibXafQ1RCPQOrljdnqutV2AgFWH
u5ljU4jHgXy3ZWrCFU3vdDQely6Z+pit0h41Cg6iUkDNaHk2J2PVZtdbdL7tnE48
y5cb+9hYgFpa+EN91+sDo04N2W0RFY22V6pyOQ4Qgfc85M1LooyUsWBGcLBnMd0I
RcEkmnf03egX04VnblxamThOoFo6Jqysy7+HHkwL8od3/15ZOcylWJpWWYLp5XN5
BpkP5Xoy78+XpmbOk+efaGMKHtlqG40Y8QFiGDid3lY=
-----END CERTIFICATE-----
Generated at Wed Feb 5 13:04:49 2025 by rpki-client