Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/34352e3232382e3138302e302f32342d3234203d3e20323634383336.roa
File:                     34352e3232382e3138302e302f32342d3234203d3e20323634383336.roa (raw, json)
Hash identifier:          igELAkpd+3LIk8zSpZg7p7D8crZuks4tVHQYy0ZHMrY=
Subject key identifier:   00:05:29:F8:9F:66:66:EC:7C:35:00:BD:A0:62:AF:40:DB:19:81:F0
Certificate issuer:       /CN=260895D787D39C6EC70E61B3A77A0B956804C253
Certificate serial:       5BB7534CB0715B86F355AF236EF9E98A8FBBB003
Authority key identifier: 26:08:95:D7:87:D3:9C:6E:C7:0E:61:B3:A7:7A:0B:95:68:04:C2:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260895D787D39C6EC70E61B3A77A0B956804C253.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/34352e3232382e3138302e302f32342d3234203d3e20323634383336.roa
Signing time:             Tue 04 Feb 2025 18:24:38 +0000
ROA not before:           Tue 04 Feb 2025 18:19:38 +0000
ROA not after:            Tue 03 Feb 2026 18:24:38 +0000
asID:                     264836
IP address blocks:        45.228.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/260895D787D39C6EC70E61B3A77A0B956804C253.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/260895D787D39C6EC70E61B3A77A0B956804C253.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260895D787D39C6EC70E61B3A77A0B956804C253.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b7:53:4c:b0:71:5b:86:f3:55:af:23:6e:f9:e9:8a:8f:bb:b0:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260895D787D39C6EC70E61B3A77A0B956804C253
        Validity
            Not Before: Feb  4 18:19:38 2025 GMT
            Not After : Feb  3 18:24:38 2026 GMT
        Subject: CN=000529F89F6666EC7C3500BDA062AF40DB1981F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c7:f9:7d:03:31:36:d2:a8:98:ba:6f:66:d5:
                    f1:25:c6:78:43:93:a9:17:1c:35:28:4f:f5:7e:f7:
                    e3:05:c6:c2:c3:ab:d4:55:2c:62:ce:f5:22:13:bc:
                    42:35:42:38:ca:b5:93:7f:0d:fc:68:6c:db:2f:58:
                    d5:15:11:50:2e:60:10:3d:db:b0:9b:b5:c4:e8:8a:
                    0d:8f:a2:e3:51:fa:f0:46:61:7e:56:6b:23:41:b5:
                    c0:47:f6:7d:37:69:a1:22:42:54:04:87:12:79:8d:
                    02:7c:90:e3:ce:d0:63:43:98:39:79:06:05:7d:40:
                    b3:6f:5e:25:69:78:fb:33:bb:06:02:da:3a:ba:50:
                    db:2a:64:0a:4b:1b:d6:3d:76:4f:20:7b:4f:42:16:
                    45:51:ca:42:38:31:b0:80:74:59:62:e6:f6:07:0a:
                    b8:a9:74:2e:76:d9:c0:4d:11:16:b0:ec:1b:54:2f:
                    bb:d4:a4:a2:13:0c:2c:54:0b:17:c4:14:6c:7d:f5:
                    16:e9:ff:a3:cb:ae:f1:5d:e9:ac:ab:25:64:c2:d0:
                    76:7a:90:fe:03:ca:b8:5d:e9:81:79:18:50:38:de:
                    49:bd:71:48:80:cb:85:ce:2e:fb:cf:27:a0:af:40:
                    81:9f:1c:b3:c2:4c:4e:36:f6:61:26:cb:40:d0:56:
                    88:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:05:29:F8:9F:66:66:EC:7C:35:00:BD:A0:62:AF:40:DB:19:81:F0
            X509v3 Authority Key Identifier:
                keyid:26:08:95:D7:87:D3:9C:6E:C7:0E:61:B3:A7:7A:0B:95:68:04:C2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/260895D787D39C6EC70E61B3A77A0B956804C253.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260895D787D39C6EC70E61B3A77A0B956804C253.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/34352e3232382e3138302e302f32342d3234203d3e20323634383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:e0:40:64:99:6e:1f:21:49:65:19:44:4f:b6:f8:43:5a:1b:
         cc:ef:ee:08:31:91:de:31:b8:f7:07:4a:46:9a:6a:12:fb:72:
         75:4a:24:be:81:a5:c8:95:b8:58:10:bf:23:8d:bf:00:49:5c:
         e9:94:82:44:b2:44:b8:fd:c1:8f:87:56:12:57:f6:dd:a2:1d:
         c0:65:cd:2c:f9:26:ec:e2:6e:61:29:4d:0d:aa:da:31:ab:b0:
         1c:a3:57:0d:d7:84:69:7c:1c:99:11:0d:a2:5a:49:02:96:48:
         5a:59:75:b8:ee:05:ec:5b:03:33:57:b6:bd:34:9b:96:52:ba:
         f3:f3:3a:43:fd:8b:44:de:8b:4b:bf:e0:36:fe:60:d6:aa:3d:
         62:0c:24:e3:b9:ca:63:04:7b:e4:b0:26:4b:ed:90:bc:c6:1a:
         93:b3:69:09:fd:9d:87:93:6c:73:90:c0:e8:72:16:b3:e3:3b:
         aa:83:61:35:d0:43:c8:16:b9:c3:67:cb:a0:da:24:b7:d5:a9:
         2e:02:ba:d1:d2:cd:a8:0d:51:e6:e8:73:7a:ff:be:ae:03:59:
         a5:f0:1b:c8:59:db:08:e0:6e:d4:91:e0:78:60:a4:53:36:24:
         d1:9b:c9:8e:57:1d:dd:c3:15:b1:24:cc:4d:42:64:e6:75:ed:
         4c:f5:f3:81
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUW7dTTLBxW4bzVa8jbvnpio+7sAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYwODk1RDc4N0QzOUM2RUM3MEU2MUIzQTc3QTBCOTU2
ODA0QzI1MzAeFw0yNTAyMDQxODE5MzhaFw0yNjAyMDMxODI0MzhaMDMxMTAvBgNV
BAMTKDAwMDUyOUY4OUY2NjY2RUM3QzM1MDBCREEwNjJBRjQwREIxOTgxRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqx/l9AzE20qiYum9m1fElxnhD
k6kXHDUoT/V+9+MFxsLDq9RVLGLO9SITvEI1QjjKtZN/DfxobNsvWNUVEVAuYBA9
27CbtcToig2PouNR+vBGYX5WayNBtcBH9n03aaEiQlQEhxJ5jQJ8kOPO0GNDmDl5
BgV9QLNvXiVpePszuwYC2jq6UNsqZApLG9Y9dk8ge09CFkVRykI4MbCAdFli5vYH
CripdC522cBNERaw7BtUL7vUpKITDCxUCxfEFGx99Rbp/6PLrvFd6ayrJWTC0HZ6
kP4Dyrhd6YF5GFA43km9cUiAy4XOLvvPJ6CvQIGfHLPCTE429mEmy0DQVoj/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUAAUp+J9mZux8NQC9oGKvQNsZgfAwHwYDVR0j
BBgwFoAUJgiV14fTnG7HDmGzp3oLlWgEwlMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wOEZGQjE4NjI1NEI5QTZGRjNEMDY0QTcxN0Q5NTk2OEEz
N0RGRkJCMDhBOTFENzM3MjY1OEZCNUJCQjdENjNDLzAvMjYwODk1RDc4N0QzOUM2
RUM3MEU2MUIzQTc3QTBCOTU2ODA0QzI1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNjA4OTVENzg3RDM5QzZFQzcw
RTYxQjNBNzdBMEI5NTY4MDRDMjUzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDhGRkIxODYyNTRCOUE2RkYzRDA2NEE3MTdEOTU5NjhBMzdERkZCQjA4
QTkxRDczNzI2NThGQjVCQkI3RDYzQy8wLzM0MzUyZTMyMzIzODJlMzEzODMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0MzgzMzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeS0
MA0GCSqGSIb3DQEBCwUAA4IBAQBU4EBkmW4fIUllGURPtvhDWhvM7+4IMZHeMbj3
B0pGmmoS+3J1SiS+gaXIlbhYEL8jjb8ASVzplIJEskS4/cGPh1YSV/bdoh3AZc0s
+Sbs4m5hKU0Nqtoxq7Aco1cN14RpfByZEQ2iWkkClkhaWXW47gXsWwMzV7a9NJuW
Urrz8zpD/YtE3otLv+A2/mDWqj1iDCTjucpjBHvksCZL7ZC8xhqTs2kJ/Z2Hk2xz
kMDochaz4zuqg2E10EPIFrnDZ8ug2iS31akuArrR0s2oDVHm6HN6/76uA1ml8BvI
WdsI4G7UkeB4YKRTNiTRm8mOVx3dwxWxJMxNQmTmde1M9fOB
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:39 2025 by rpki-client