Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/34352e3136332e3134312e302f32342d3234203d3e20323637363836.roa
File:                     34352e3136332e3134312e302f32342d3234203d3e20323637363836.roa (raw, json)
Hash identifier:          gUSfEm0EyEsVY5OUx7FMVtkKONHNnt9W0lcvFZeLA0M=
Subject key identifier:   88:94:23:5F:D9:28:0F:4C:8B:EE:0E:31:67:CB:B1:C5:92:FF:2E:AD
Certificate issuer:       /CN=DA19E2D8391E84E168C007F85FDC2E229A1D9BC4
Certificate serial:       255A3294F770DDCC9106F5340A3BDD26FE9F9853
Authority key identifier: DA:19:E2:D8:39:1E:84:E1:68:C0:07:F8:5F:DC:2E:22:9A:1D:9B:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/34352e3136332e3134312e302f32342d3234203d3e20323637363836.roa
Signing time:             Tue 04 Feb 2025 18:11:30 +0000
ROA not before:           Tue 04 Feb 2025 18:06:30 +0000
ROA not after:            Tue 03 Feb 2026 18:11:30 +0000
asID:                     267686
IP address blocks:        45.163.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5a:32:94:f7:70:dd:cc:91:06:f5:34:0a:3b:dd:26:fe:9f:98:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA19E2D8391E84E168C007F85FDC2E229A1D9BC4
        Validity
            Not Before: Feb  4 18:06:30 2025 GMT
            Not After : Feb  3 18:11:30 2026 GMT
        Subject: CN=8894235FD9280F4C8BEE0E3167CBB1C592FF2EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:51:01:dd:4d:9a:62:16:4a:63:e3:16:0f:ce:
                    53:65:45:7f:d4:59:31:cb:4d:6e:96:cc:90:9d:b9:
                    2f:45:b7:8a:b7:a8:d8:17:c8:a6:05:8b:3e:c2:81:
                    ac:03:5b:56:c4:1e:0e:d4:6e:f5:9e:b8:24:7d:eb:
                    f6:31:85:b0:79:9b:94:c4:4a:cf:d8:4c:2b:df:f4:
                    8a:1d:d7:31:db:6a:36:1b:8a:bd:71:65:e3:1b:04:
                    05:3c:b7:fb:85:85:cf:03:7b:e8:f2:fe:1d:c4:fb:
                    92:e8:24:4e:a5:6d:df:98:ba:d7:e2:87:ff:de:6e:
                    0f:9d:c9:69:51:aa:64:cb:ad:9e:f1:61:82:d9:49:
                    48:59:ea:23:89:7d:56:5f:c4:1c:6d:22:6e:e3:39:
                    85:40:32:65:a2:1a:f1:36:9d:09:20:34:b7:85:c9:
                    4d:bb:f5:a1:ae:bd:a3:69:fd:d2:1b:88:01:32:2c:
                    38:85:0f:65:c8:56:56:4d:41:62:76:70:a1:3e:6f:
                    0b:0b:cb:e8:37:37:20:c3:e1:29:f4:3e:df:02:92:
                    b5:7b:64:2d:08:42:21:34:5f:6a:57:a0:47:86:d9:
                    09:e8:fe:86:c5:21:07:bd:a3:a1:2b:c5:d0:40:19:
                    ed:23:c5:bf:fc:40:1f:53:a2:40:d0:2d:c5:38:75:
                    6f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:94:23:5F:D9:28:0F:4C:8B:EE:0E:31:67:CB:B1:C5:92:FF:2E:AD
            X509v3 Authority Key Identifier:
                keyid:DA:19:E2:D8:39:1E:84:E1:68:C0:07:F8:5F:DC:2E:22:9A:1D:9B:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/34352e3136332e3134312e302f32342d3234203d3e20323637363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:ba:f3:3b:5a:50:6f:da:f4:3b:f8:87:02:4b:68:71:cb:0c:
         bf:24:ef:06:10:ee:24:84:9a:80:3b:44:46:b5:2c:4a:9a:69:
         34:95:6f:a0:15:5f:c3:ce:5c:43:08:4f:0a:70:c7:77:df:65:
         61:8e:41:82:4f:80:08:34:27:6f:c5:ab:e6:10:23:51:50:6b:
         67:be:e6:57:49:3e:8f:4b:1a:6a:a0:c6:6e:6c:f0:63:b9:f6:
         93:4a:fd:a8:bf:14:69:c7:78:25:27:25:4d:82:19:ff:6b:c5:
         e2:8f:74:6d:16:dd:d6:d8:a3:00:e6:7b:3f:b0:8f:05:8f:3f:
         a7:aa:c4:a9:27:a2:c4:cd:5f:79:56:cf:b6:4d:32:7d:dc:e3:
         9c:b5:71:b6:7d:fb:91:d0:02:8e:f9:64:68:5b:97:50:ed:83:
         11:a8:ef:c9:d7:7d:5d:e4:e3:20:5e:c9:e0:18:05:73:d2:be:
         90:68:2b:9c:3d:6a:87:3d:bb:7e:30:8f:e3:a7:96:fa:e6:20:
         c0:93:cf:80:ca:4e:fb:fb:01:f1:71:15:76:c1:01:e7:00:20:
         c2:05:92:fb:87:84:ff:2c:5e:61:cb:86:9a:17:92:5c:54:f7:
         02:a8:58:8f:0f:cb:14:bc:30:d9:dc:80:71:fa:d0:07:11:fe:
         c9:38:06:2c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJVoylPdw3cyRBvU0CjvdJv6fmFMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREExOUUyRDgzOTFFODRFMTY4QzAwN0Y4NUZEQzJFMjI5
QTFEOUJDNDAeFw0yNTAyMDQxODA2MzBaFw0yNjAyMDMxODExMzBaMDMxMTAvBgNV
BAMTKDg4OTQyMzVGRDkyODBGNEM4QkVFMEUzMTY3Q0JCMUM1OTJGRjJFQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVUQHdTZpiFkpj4xYPzlNlRX/U
WTHLTW6WzJCduS9Ft4q3qNgXyKYFiz7CgawDW1bEHg7UbvWeuCR96/YxhbB5m5TE
Ss/YTCvf9Iod1zHbajYbir1xZeMbBAU8t/uFhc8De+jy/h3E+5LoJE6lbd+Yutfi
h//ebg+dyWlRqmTLrZ7xYYLZSUhZ6iOJfVZfxBxtIm7jOYVAMmWiGvE2nQkgNLeF
yU279aGuvaNp/dIbiAEyLDiFD2XIVlZNQWJ2cKE+bwsLy+g3NyDD4Sn0Pt8CkrV7
ZC0IQiE0X2pXoEeG2Qno/obFIQe9o6ErxdBAGe0jxb/8QB9TokDQLcU4dW+dAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUiJQjX9koD0yL7g4xZ8uxxZL/Lq0wHwYDVR0j
BBgwFoAU2hni2DkehOFowAf4X9wuIpodm8QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRjk4QkZCRkQ2NkIxNzE2RUI5RTZEQjkxNEJGNTVDOTY1
RDA3QjVEOUFDMDg0QTc2NkUxQzlCMzc3MEI5NzJFLzAvREExOUUyRDgzOTFFODRF
MTY4QzAwN0Y4NUZEQzJFMjI5QTFEOUJDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTE5RTJEODM5MUU4NEUxNjhD
MDA3Rjg1RkRDMkUyMjlBMUQ5QkM0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEY5OEJGQkZENjZCMTcxNkVCOUU2REI5MTRCRjU1Qzk2NUQwN0I1RDlB
QzA4NEE3NjZFMUM5QjM3NzBCOTcyRS8wLzM0MzUyZTMxMzYzMzJlMzEzNDMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzYzODM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALaON
MA0GCSqGSIb3DQEBCwUAA4IBAQAWuvM7WlBv2vQ7+IcCS2hxywy/JO8GEO4khJqA
O0RGtSxKmmk0lW+gFV/DzlxDCE8KcMd332VhjkGCT4AINCdvxavmECNRUGtnvuZX
ST6PSxpqoMZubPBjufaTSv2ovxRpx3glJyVNghn/a8Xij3RtFt3W2KMA5ns/sI8F
jz+nqsSpJ6LEzV95Vs+2TTJ93OOctXG2ffuR0AKO+WRoW5dQ7YMRqO/J131d5OMg
XsngGAVz0r6QaCucPWqHPbt+MI/jp5b65iDAk8+Ayk77+wHxcRV2wQHnACDCBZL7
h4T/LF5hy4aaF5JcVPcCqFiPD8sUvDDZ3IBx+tAHEf7JOAYs
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:10:05 2025 by rpki-client