Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa
File:                     34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa (raw, json)
Hash identifier:          sdD+4az659s6PD/uvKDKPjyLukQcDb0M4eaD4Sw7zZo=
Subject key identifier:   B7:6A:7D:DC:E7:56:D8:DF:F5:3B:5C:CC:84:2D:07:74:4A:91:08:FA
Certificate issuer:       /CN=2972ACC0C3AE4707691E50A6D4988851DC5598D4
Certificate serial:       277A31AE1B67B2BE04A128A20885B7A3758E2830
Authority key identifier: 29:72:AC:C0:C3:AE:47:07:69:1E:50:A6:D4:98:88:51:DC:55:98:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa
Signing time:             Tue 04 Feb 2025 18:54:45 +0000
ROA not before:           Tue 04 Feb 2025 18:49:45 +0000
ROA not after:            Tue 03 Feb 2026 18:54:45 +0000
asID:                     267776
IP address blocks:        45.171.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 03:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:7a:31:ae:1b:67:b2:be:04:a1:28:a2:08:85:b7:a3:75:8e:28:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2972ACC0C3AE4707691E50A6D4988851DC5598D4
        Validity
            Not Before: Feb  4 18:49:45 2025 GMT
            Not After : Feb  3 18:54:45 2026 GMT
        Subject: CN=B76A7DDCE756D8DFF53B5CCC842D07744A9108FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b6:e8:29:7a:7b:cd:d9:b3:21:a6:17:db:59:
                    a7:b0:b6:ca:ca:7a:b5:79:49:ce:05:cb:89:6a:21:
                    39:f9:3e:75:09:d6:fb:92:db:51:04:50:ce:39:a9:
                    af:be:1f:37:20:6b:a3:12:74:8b:be:7f:40:43:50:
                    a3:36:94:d0:95:63:72:8d:b0:ed:78:97:61:ec:23:
                    8a:17:05:0d:d1:80:35:1e:3b:48:90:83:bb:06:ea:
                    a7:90:c7:ab:32:d7:c3:9f:f7:a4:d9:ca:6b:67:94:
                    92:4c:67:2c:e0:a3:5c:4a:6e:9d:72:c5:d7:0b:58:
                    ee:85:47:d7:36:75:f8:7b:d0:e0:ba:3b:ff:ce:d8:
                    1a:16:9e:0f:9e:b1:b6:12:36:36:b8:aa:ac:ae:b8:
                    86:ba:94:b9:df:c6:16:0c:3b:25:b1:c9:07:70:4a:
                    e2:bd:b6:f5:44:a3:28:51:26:2d:87:d7:82:e0:aa:
                    fd:86:17:90:71:1d:45:d1:00:e1:01:b0:8b:87:14:
                    7d:e0:83:0e:17:de:97:36:e4:a3:68:e6:15:43:60:
                    89:cd:08:c3:4e:1b:3b:86:bc:bb:fe:d3:c0:da:5a:
                    cf:ea:a4:2c:3a:ed:39:f7:8f:6f:13:b0:e3:27:1a:
                    c2:05:56:3b:4f:c8:2c:3c:66:c2:bc:08:f9:9d:1b:
                    38:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6A:7D:DC:E7:56:D8:DF:F5:3B:5C:CC:84:2D:07:74:4A:91:08:FA
            X509v3 Authority Key Identifier:
                keyid:29:72:AC:C0:C3:AE:47:07:69:1E:50:A6:D4:98:88:51:DC:55:98:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:60:81:f2:68:23:ab:5c:8a:eb:5f:05:d2:f9:b0:4b:17:b5:
         bb:f6:fd:b7:46:03:ac:86:36:b6:8f:80:b5:64:b3:57:73:bb:
         78:06:11:09:fe:0b:0a:9b:2e:30:94:ea:66:c1:5d:02:2a:02:
         71:a0:0a:68:40:46:cc:5e:fc:1d:af:ba:5b:83:2f:e3:8d:18:
         02:a0:92:69:fa:ea:a3:c7:52:1a:8e:4a:d8:94:2a:b7:4d:81:
         56:5b:5d:b3:85:5b:4e:af:62:b7:c0:42:cb:99:e2:5f:b9:81:
         df:45:5c:63:7b:98:fe:de:e7:1d:8a:be:15:a6:ce:e2:8b:a8:
         89:80:b0:dd:f4:de:46:7b:60:b7:6a:8a:b4:0f:86:de:89:ca:
         62:40:3f:83:5a:c4:25:5e:a0:43:b3:9c:cd:ee:c5:bf:f5:dd:
         71:0a:1c:ff:b8:7b:52:5e:a1:01:10:1e:41:88:99:43:0b:b6:
         c2:46:b2:a7:85:33:f2:0b:55:f3:e5:d0:38:21:a1:a7:49:97:
         72:26:fc:80:73:50:29:ae:f8:bd:92:76:a2:b9:63:c0:23:ba:
         14:c4:f2:9b:7f:93:ea:ea:7d:f7:b2:60:71:20:01:b9:e6:40:
         85:3d:97:e8:70:45:ae:52:66:3f:67:7f:59:22:bc:6d:51:2c:
         de:2d:7a:51
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJ3oxrhtnsr4EoSiiCIW3o3WOKDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk3MkFDQzBDM0FFNDcwNzY5MUU1MEE2RDQ5ODg4NTFE
QzU1OThENDAeFw0yNTAyMDQxODQ5NDVaFw0yNjAyMDMxODU0NDVaMDMxMTAvBgNV
BAMTKEI3NkE3RERDRTc1NkQ4REZGNTNCNUNDQzg0MkQwNzc0NEE5MTA4RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwtugpenvN2bMhphfbWaewtsrK
erV5Sc4Fy4lqITn5PnUJ1vuS21EEUM45qa++Hzcga6MSdIu+f0BDUKM2lNCVY3KN
sO14l2HsI4oXBQ3RgDUeO0iQg7sG6qeQx6sy18Of96TZymtnlJJMZyzgo1xKbp1y
xdcLWO6FR9c2dfh70OC6O//O2BoWng+esbYSNja4qqyuuIa6lLnfxhYMOyWxyQdw
SuK9tvVEoyhRJi2H14Lgqv2GF5BxHUXRAOEBsIuHFH3ggw4X3pc25KNo5hVDYInN
CMNOGzuGvLv+08DaWs/qpCw67Tn3j28TsOMnGsIFVjtPyCw8ZsK8CPmdGzhtAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUt2p93OdW2N/1O1zMhC0HdEqRCPowHwYDVR0j
BBgwFoAUKXKswMOuRwdpHlCm1JiIUdxVmNQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wODlCMDhEQjZFNjM5RDAxQzE0RkIxNzFGRjQzMzg5NDVD
NjJFM0VCRDJDQTU4OEEwQzZCMDBFMzVDNjlBQUE5LzAvMjk3MkFDQzBDM0FFNDcw
NzY5MUU1MEE2RDQ5ODg4NTFEQzU1OThENC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTcyQUNDMEMzQUU0NzA3Njkx
RTUwQTZENDk4ODg1MURDNTU5OEQ0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDg5QjA4REI2RTYzOUQwMUMxNEZCMTcxRkY0MzM4OTQ1QzYyRTNFQkQy
Q0E1ODhBMEM2QjAwRTM1QzY5QUFBOS8wLzM0MzUyZTMxMzczMTJlMzIzMjMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3MzczNzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLavc
MA0GCSqGSIb3DQEBCwUAA4IBAQA+YIHyaCOrXIrrXwXS+bBLF7W79v23RgOshja2
j4C1ZLNXc7t4BhEJ/gsKmy4wlOpmwV0CKgJxoApoQEbMXvwdr7pbgy/jjRgCoJJp
+uqjx1IajkrYlCq3TYFWW12zhVtOr2K3wELLmeJfuYHfRVxje5j+3ucdir4Vps7i
i6iJgLDd9N5Ge2C3aoq0D4beicpiQD+DWsQlXqBDs5zN7sW/9d1xChz/uHtSXqEB
EB5BiJlDC7bCRrKnhTPyC1Xz5dA4IaGnSZdyJvyAc1Aprvi9knaiuWPAI7oUxPKb
f5Pq6n33smBxIAG55kCFPZfocEWuUmY/Z39ZIrxtUSzeLXpR
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:59:25 2025 by rpki-client