Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/34352e37312e3131322e302f32322d3234203d3e20323634363638.roa
File:                     34352e37312e3131322e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          qwaVs42G1qpqXa0HOnnMhJy8CEQgartaDae1HO0rT0I=
Subject key identifier:   C4:96:88:B5:34:C2:A1:09:8B:8D:5D:16:E7:EA:59:74:4C:B1:EA:7F
Certificate issuer:       /CN=BC6522E3C11015B5E5613800EF79B4EAC428C2BA
Certificate serial:       5E30CD005852A945313B0F913791C72E3D112694
Authority key identifier: BC:65:22:E3:C1:10:15:B5:E5:61:38:00:EF:79:B4:EA:C4:28:C2:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/34352e37312e3131322e302f32322d3234203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:56:14 +0000
ROA not before:           Tue 04 Feb 2025 18:51:14 +0000
ROA not after:            Tue 03 Feb 2026 18:56:14 +0000
asID:                     264668
IP address blocks:        45.71.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:30:cd:00:58:52:a9:45:31:3b:0f:91:37:91:c7:2e:3d:11:26:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC6522E3C11015B5E5613800EF79B4EAC428C2BA
        Validity
            Not Before: Feb  4 18:51:14 2025 GMT
            Not After : Feb  3 18:56:14 2026 GMT
        Subject: CN=C49688B534C2A1098B8D5D16E7EA59744CB1EA7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b5:3a:69:39:cd:37:67:ef:0b:ef:25:ec:f2:
                    88:27:87:72:a1:3e:f5:32:f5:de:dc:f5:ad:8a:22:
                    84:0d:b6:a9:48:24:ef:d7:b2:01:4b:bd:b7:ed:92:
                    79:bb:22:21:db:2b:05:1d:d9:2f:65:2c:04:89:ca:
                    20:7d:65:e5:47:cb:ab:cf:8d:61:da:c6:8f:50:93:
                    8f:ef:e4:25:2d:3b:de:f6:81:1b:98:9c:90:97:4b:
                    74:fe:b9:63:0a:d4:fe:bd:cd:48:50:c2:3b:7f:ab:
                    f1:1b:dd:bc:93:a4:f6:c3:af:b4:99:0d:e4:8a:9f:
                    f6:09:31:b8:b9:f4:7b:a2:8b:04:17:b8:5c:f6:db:
                    55:d2:2e:f7:73:68:75:14:c1:99:a9:35:50:1a:16:
                    bf:ab:bb:44:f7:1c:58:2d:37:91:b1:67:ed:94:98:
                    ce:a1:f8:16:dc:5b:12:85:83:d6:54:50:f4:20:f7:
                    c5:0e:05:82:ca:f1:95:3b:e5:84:23:5a:ae:a1:61:
                    d1:1e:bf:f4:61:19:80:2b:75:91:9d:b9:70:e2:3e:
                    b4:2d:44:f2:65:bb:85:ba:52:79:df:58:a8:9d:c2:
                    03:d5:ce:77:d1:d6:05:2e:4e:b7:b8:bb:ed:8c:e0:
                    dd:19:f5:a7:da:19:dd:57:d9:f4:6f:08:d4:c8:13:
                    11:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:96:88:B5:34:C2:A1:09:8B:8D:5D:16:E7:EA:59:74:4C:B1:EA:7F
            X509v3 Authority Key Identifier:
                keyid:BC:65:22:E3:C1:10:15:B5:E5:61:38:00:EF:79:B4:EA:C4:28:C2:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/34352e37312e3131322e302f32322d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:f8:ab:aa:5f:7a:21:2b:3b:eb:74:2e:30:3e:8a:62:67:90:
         c4:0f:81:a3:5e:5b:94:d0:ee:56:70:ae:b4:d6:68:2e:d1:49:
         ed:ad:13:8d:3b:ff:2e:e6:5d:18:31:86:60:ab:b2:06:68:aa:
         7f:31:98:f8:d6:d1:8b:a8:69:b5:4b:c1:29:e7:13:86:e7:78:
         90:9a:01:4f:9d:c6:43:6d:08:9a:4a:8c:df:85:82:84:b5:e3:
         ac:6d:be:86:20:44:0f:f6:27:7c:25:e8:c7:fb:70:d3:67:a6:
         e6:99:ce:12:7d:f8:66:aa:ca:17:0e:ab:dc:7b:09:08:f1:4c:
         af:9a:5e:b3:24:11:1b:96:58:48:44:51:8f:bf:80:c9:9d:31:
         ab:bb:f8:99:59:ff:ac:c1:07:99:4d:e9:69:d1:24:11:90:27:
         c5:ec:91:5b:de:09:63:d1:80:2e:51:28:c8:3d:70:2f:b7:f9:
         fe:07:5b:7a:15:e7:dd:2f:a7:4a:f5:27:48:1e:59:74:d9:fd:
         4d:91:e9:fc:df:b4:c3:b7:d5:fd:d2:0f:c7:d3:65:9d:db:31:
         c1:98:56:16:e4:b0:35:bf:1e:c5:d5:b4:76:47:2b:de:8f:7e:
         7b:30:d8:03:3c:96:7a:4f:d4:32:48:5c:69:53:37:b7:58:42:
         d1:45:b0:8d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXjDNAFhSqUUxOw+RN5HHLj0RJpQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM2NTIyRTNDMTEwMTVCNUU1NjEzODAwRUY3OUI0RUFD
NDI4QzJCQTAeFw0yNTAyMDQxODUxMTRaFw0yNjAyMDMxODU2MTRaMDMxMTAvBgNV
BAMTKEM0OTY4OEI1MzRDMkExMDk4QjhENUQxNkU3RUE1OTc0NENCMUVBN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCAtTppOc03Z+8L7yXs8ognh3Kh
PvUy9d7c9a2KIoQNtqlIJO/XsgFLvbftknm7IiHbKwUd2S9lLASJyiB9ZeVHy6vP
jWHaxo9Qk4/v5CUtO972gRuYnJCXS3T+uWMK1P69zUhQwjt/q/Eb3byTpPbDr7SZ
DeSKn/YJMbi59HuiiwQXuFz221XSLvdzaHUUwZmpNVAaFr+ru0T3HFgtN5GxZ+2U
mM6h+BbcWxKFg9ZUUPQg98UOBYLK8ZU75YQjWq6hYdEev/RhGYArdZGduXDiPrQt
RPJlu4W6UnnfWKidwgPVznfR1gUuTre4u+2M4N0Z9afaGd1X2fRvCNTIExFHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUxJaItTTCoQmLjV0W5+pZdEyx6n8wHwYDVR0j
BBgwFoAUvGUi48EQFbXlYTgA73m06sQowrowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMTQ1MjRFODZDQkVEQjFCQkJBNkI1NTY4RTk3NTk5RUMw
MjYwMUI4MjYzQkJFM0M2MTMyRTlENzg3MzIxRTAwLzAvQkM2NTIyRTNDMTEwMTVC
NUU1NjEzODAwRUY3OUI0RUFDNDI4QzJCQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQzY1MjJFM0MxMTAxNUI1RTU2
MTM4MDBFRjc5QjRFQUM0MjhDMkJBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTE0NTI0RTg2Q0JFREIxQkJCQTZCNTU2OEU5NzU5OUVDMDI2MDFCODI2
M0JCRTNDNjEzMkU5RDc4NzMyMUUwMC8wLzM0MzUyZTM3MzEyZTMxMzEzMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNDM2MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1HcDAN
BgkqhkiG9w0BAQsFAAOCAQEAlPirql96ISs763QuMD6KYmeQxA+Bo15blNDuVnCu
tNZoLtFJ7a0TjTv/LuZdGDGGYKuyBmiqfzGY+NbRi6hptUvBKecThud4kJoBT53G
Q20ImkqM34WChLXjrG2+hiBED/YnfCXox/tw02em5pnOEn34ZqrKFw6r3HsJCPFM
r5pesyQRG5ZYSERRj7+AyZ0xq7v4mVn/rMEHmU3padEkEZAnxeyRW94JY9GALlEo
yD1wL7f5/gdbehXn3S+nSvUnSB5ZdNn9TZHp/N+0w7fV/dIPx9NlndsxwZhWFuSw
Nb8exdW0dkcr3o9+ezDYAzyWek/UMkhcaVM3t1hC0UWwjQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:37 2025 by rpki-client