Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/34352e3232382e31392e302f32342d3234203d3e20323636363835.roa
File:                     34352e3232382e31392e302f32342d3234203d3e20323636363835.roa (raw, json)
Hash identifier:          Di86jexrGFfUowJdmg7gxPep7N2tzS8nNmyjChHIj20=
Subject key identifier:   0E:FA:5D:0D:46:43:49:12:20:4C:E2:D2:8E:96:7D:87:7D:11:A5:E2
Certificate issuer:       /CN=A91EA82506B0E7F6BACFA600950807C98CE9C2B3
Certificate serial:       3387500ADCBF81F431950F6A98F074FA8BC6DD04
Authority key identifier: A9:1E:A8:25:06:B0:E7:F6:BA:CF:A6:00:95:08:07:C9:8C:E9:C2:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/34352e3232382e31392e302f32342d3234203d3e20323636363835.roa
Signing time:             Tue 04 Feb 2025 18:41:55 +0000
ROA not before:           Tue 04 Feb 2025 18:36:55 +0000
ROA not after:            Tue 03 Feb 2026 18:41:55 +0000
asID:                     266685
IP address blocks:        45.228.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:87:50:0a:dc:bf:81:f4:31:95:0f:6a:98:f0:74:fa:8b:c6:dd:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA82506B0E7F6BACFA600950807C98CE9C2B3
        Validity
            Not Before: Feb  4 18:36:55 2025 GMT
            Not After : Feb  3 18:41:55 2026 GMT
        Subject: CN=0EFA5D0D46434912204CE2D28E967D877D11A5E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:db:21:81:58:00:1f:d1:fc:1a:f2:be:b3:6d:
                    e1:5e:30:2a:6f:a6:95:ab:8a:0d:cb:40:b2:26:e4:
                    65:e4:64:d6:1b:6b:f8:30:49:c9:58:73:94:4e:68:
                    9b:de:b8:69:6b:3e:13:95:d2:ef:a9:d7:f9:79:b1:
                    25:e0:b1:77:49:5f:27:4a:47:2f:2c:02:2a:a7:77:
                    38:26:29:b4:ea:66:44:59:52:61:1a:4c:0c:10:ee:
                    4f:82:80:1c:be:48:19:df:c5:8d:d5:59:31:2a:ae:
                    3f:01:0a:55:86:ff:a7:8b:63:b8:a6:ba:4e:d7:3d:
                    c2:90:46:dd:70:4a:0b:93:19:14:85:ce:14:db:07:
                    1c:75:7e:91:4f:97:8c:70:40:30:a6:7f:ff:43:5d:
                    fa:65:bd:b2:0f:13:e3:54:fb:f2:23:48:fc:89:ff:
                    4f:2f:2a:56:bd:c2:69:83:3a:89:7a:c5:e4:65:e4:
                    3d:7c:5c:54:b4:a5:0b:43:e0:86:3a:e7:d5:d1:a2:
                    26:43:4c:42:a2:01:d9:80:a5:c6:ab:c6:41:dd:c1:
                    fc:e7:b5:5a:51:e2:78:ca:9c:2a:7b:7b:8e:f8:24:
                    11:a2:ad:80:b1:26:ed:f2:fc:50:fd:3b:77:5b:d4:
                    76:32:38:1e:aa:10:94:8a:7a:8c:ab:b9:52:35:03:
                    73:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FA:5D:0D:46:43:49:12:20:4C:E2:D2:8E:96:7D:87:7D:11:A5:E2
            X509v3 Authority Key Identifier:
                keyid:A9:1E:A8:25:06:B0:E7:F6:BA:CF:A6:00:95:08:07:C9:8C:E9:C2:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/34352e3232382e31392e302f32342d3234203d3e20323636363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:bc:11:c9:b1:c2:0b:0e:d1:ac:2e:94:d4:b4:b6:9a:45:14:
         da:52:43:dc:66:13:e4:17:06:61:f6:3a:4c:45:35:5b:e8:b0:
         62:d6:28:1f:2e:ab:c8:6f:7a:d6:18:8c:81:5f:0a:8d:5d:3d:
         f4:2f:3c:97:9f:6e:73:7a:30:9c:52:b9:2b:cb:fe:c9:73:96:
         1b:16:af:3b:5d:6b:32:2e:5f:c7:2e:fe:57:c9:48:01:31:fb:
         62:63:80:5b:46:69:73:ce:1a:7f:b6:6b:10:27:bc:a7:80:99:
         02:b9:e5:b2:fc:4e:65:43:58:c5:99:f9:f4:26:f3:1e:99:a0:
         2d:9a:75:3d:b3:04:fe:c2:c6:50:eb:d9:6a:c0:1e:f6:9c:8f:
         0a:dd:d6:01:e9:d2:79:e1:59:3b:ef:63:09:07:7f:29:68:9a:
         57:d8:5c:0e:ee:b4:1d:4f:8b:79:55:e8:40:37:da:9c:3f:d1:
         3e:32:3c:5c:16:20:3b:00:38:52:a4:d1:cf:dc:f2:eb:d6:a1:
         1f:6d:1e:fb:7e:4d:ac:b5:c2:a0:77:35:fb:9a:42:6b:ec:14:
         14:57:6e:fe:03:3a:f7:ba:40:67:b6:ca:1a:c3:d8:c9:95:84:
         58:62:0a:4c:c1:e5:93:fa:df:f1:0b:76:79:39:49:39:21:99:
         e6:e1:d4:87
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUM4dQCty/gfQxlQ9qmPB0+ovG3QQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTkxRUE4MjUwNkIwRTdGNkJBQ0ZBNjAwOTUwODA3Qzk4
Q0U5QzJCMzAeFw0yNTAyMDQxODM2NTVaFw0yNjAyMDMxODQxNTVaMDMxMTAvBgNV
BAMTKDBFRkE1RDBENDY0MzQ5MTIyMDRDRTJEMjhFOTY3RDg3N0QxMUE1RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf2yGBWAAf0fwa8r6zbeFeMCpv
ppWrig3LQLIm5GXkZNYba/gwSclYc5ROaJveuGlrPhOV0u+p1/l5sSXgsXdJXydK
Ry8sAiqndzgmKbTqZkRZUmEaTAwQ7k+CgBy+SBnfxY3VWTEqrj8BClWG/6eLY7im
uk7XPcKQRt1wSguTGRSFzhTbBxx1fpFPl4xwQDCmf/9DXfplvbIPE+NU+/IjSPyJ
/08vKla9wmmDOol6xeRl5D18XFS0pQtD4IY659XRoiZDTEKiAdmApcarxkHdwfzn
tVpR4njKnCp7e474JBGirYCxJu3y/FD9O3db1HYyOB6qEJSKeoyruVI1A3OnAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUDvpdDUZDSRIgTOLSjpZ9h30RpeIwHwYDVR0j
BBgwFoAUqR6oJQaw5/a6z6YAlQgHyYzpwrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQjQ1OTJFQTFGQkU5OUJCMEU2RTE1MjQzMzVENDVDRTYw
MjVBMkE3Mzk5RDMyMDZGREY4QzExMUQ3RDkwRTQ1LzAvQTkxRUE4MjUwNkIwRTdG
NkJBQ0ZBNjAwOTUwODA3Qzk4Q0U5QzJCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BOTFFQTgyNTA2QjBFN0Y2QkFD
RkE2MDA5NTA4MDdDOThDRTlDMkIzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEI0NTkyRUExRkJFOTlCQjBFNkUxNTI0MzM1RDQ1Q0U2MDI1QTJBNzM5
OUQzMjA2RkRGOEMxMTFEN0Q5MEU0NS8wLzM0MzUyZTMyMzIzODJlMzEzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM2MzgzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3kEzAN
BgkqhkiG9w0BAQsFAAOCAQEAn7wRybHCCw7RrC6U1LS2mkUU2lJD3GYT5BcGYfY6
TEU1W+iwYtYoHy6ryG961hiMgV8KjV099C88l59uc3ownFK5K8v+yXOWGxavO11r
Mi5fxy7+V8lIATH7YmOAW0Zpc84af7ZrECe8p4CZArnlsvxOZUNYxZn59CbzHpmg
LZp1PbME/sLGUOvZasAe9pyPCt3WAenSeeFZO+9jCQd/KWiaV9hcDu60HU+LeVXo
QDfanD/RPjI8XBYgOwA4UqTRz9zy69ahH20e+35NrLXCoHc1+5pCa+wUFFdu/gM6
97pAZ7bKGsPYyZWEWGIKTMHlk/rf8Qt2eTlJOSGZ5uHUhw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:19:46 2025 by rpki-client