Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12BFC8B83F04859CAA6621546AFA4FDD5F2B46FF56BB11B54B9C8C5C69E14896/0/34352e352e3231362e302f32322d3234203d3e20323731393338.roa
File:                     34352e352e3231362e302f32322d3234203d3e20323731393338.roa (raw, json)
Hash identifier:          VLsndZ1L5aP+LqIVDWBC1uBkQ3hj5o7WE57ILj4Rzhg=
Subject key identifier:   65:DB:0F:E6:A8:F4:C0:74:49:B2:9A:57:72:C8:5A:3B:D0:0C:24:05
Certificate issuer:       /CN=F34C10A8E61B1A7D6AA9D69C9B3D25B12ABA955E
Certificate serial:       2494ADD9FBA0229D111A89AE6E999C884EA3F57B
Authority key identifier: F3:4C:10:A8:E6:1B:1A:7D:6A:A9:D6:9C:9B:3D:25:B1:2A:BA:95:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F34C10A8E61B1A7D6AA9D69C9B3D25B12ABA955E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12BFC8B83F04859CAA6621546AFA4FDD5F2B46FF56BB11B54B9C8C5C69E14896/0/34352e352e3231362e302f32322d3234203d3e20323731393338.roa
Signing time:             Tue 04 Feb 2025 19:58:12 +0000
ROA not before:           Tue 04 Feb 2025 19:53:12 +0000
ROA not after:            Tue 03 Feb 2026 19:58:12 +0000
asID:                     271938
IP address blocks:        45.5.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/12BFC8B83F04859CAA6621546AFA4FDD5F2B46FF56BB11B54B9C8C5C69E14896/0/F34C10A8E61B1A7D6AA9D69C9B3D25B12ABA955E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/12BFC8B83F04859CAA6621546AFA4FDD5F2B46FF56BB11B54B9C8C5C69E14896/0/F34C10A8E61B1A7D6AA9D69C9B3D25B12ABA955E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F34C10A8E61B1A7D6AA9D69C9B3D25B12ABA955E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:94:ad:d9:fb:a0:22:9d:11:1a:89:ae:6e:99:9c:88:4e:a3:f5:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F34C10A8E61B1A7D6AA9D69C9B3D25B12ABA955E
        Validity
            Not Before: Feb  4 19:53:12 2025 GMT
            Not After : Feb  3 19:58:12 2026 GMT
        Subject: CN=65DB0FE6A8F4C07449B29A5772C85A3BD00C2405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:58:d3:df:6e:f8:1c:94:31:04:5c:e3:94:
                    62:03:b6:b5:f0:fc:0a:4c:bc:86:cd:29:f3:77:de:
                    f4:56:66:3f:fa:ca:69:13:29:19:3a:f2:4c:64:99:
                    34:56:42:22:8e:b5:cd:8a:36:e3:f0:82:9e:e0:76:
                    a5:cb:8a:bf:22:76:ea:8d:bc:63:81:00:b9:a8:c8:
                    6c:a9:df:b6:f0:fd:22:29:af:dc:71:ff:92:19:d0:
                    d9:a5:a6:89:08:ec:ba:16:87:74:62:96:bd:2c:93:
                    21:d7:57:da:a5:cf:5c:3b:4a:fc:68:f7:bb:6b:f8:
                    3d:0b:d3:27:51:c0:9f:29:9d:7a:03:c6:49:3c:dc:
                    0f:49:1a:4a:56:4f:b1:b8:8e:7e:0c:5e:54:32:9f:
                    9b:1b:d7:a3:8e:02:5b:4c:e9:7f:5d:64:d3:4b:42:
                    c7:81:b3:5c:0b:c1:25:35:74:cd:c7:3b:65:85:17:
                    21:a7:86:a6:18:df:72:5d:1b:0d:83:0a:63:c3:41:
                    f8:46:60:35:7f:fe:03:39:68:e3:ce:62:83:40:66:
                    37:1c:fd:1a:c1:ca:ce:fc:75:66:c9:47:59:29:ca:
                    9f:e5:62:16:61:4a:1b:e7:96:7e:a1:66:9a:4d:f4:
                    05:e5:ae:17:d4:d5:d0:8c:31:60:49:71:11:75:f0:
                    c2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DB:0F:E6:A8:F4:C0:74:49:B2:9A:57:72:C8:5A:3B:D0:0C:24:05
            X509v3 Authority Key Identifier:
                keyid:F3:4C:10:A8:E6:1B:1A:7D:6A:A9:D6:9C:9B:3D:25:B1:2A:BA:95:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12BFC8B83F04859CAA6621546AFA4FDD5F2B46FF56BB11B54B9C8C5C69E14896/0/F34C10A8E61B1A7D6AA9D69C9B3D25B12ABA955E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F34C10A8E61B1A7D6AA9D69C9B3D25B12ABA955E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12BFC8B83F04859CAA6621546AFA4FDD5F2B46FF56BB11B54B9C8C5C69E14896/0/34352e352e3231362e302f32322d3234203d3e20323731393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e0:d6:a3:63:15:5f:3b:17:87:20:7f:02:9b:89:67:ef:2a:9b:
         3d:ed:eb:88:18:2d:36:29:ea:70:b0:a5:5b:b8:5c:23:29:1e:
         43:0d:3e:13:91:97:fa:89:28:89:66:c2:c9:d8:a6:55:f9:4b:
         53:14:3d:7d:5d:a1:3d:db:37:bd:29:eb:88:e6:aa:5e:77:69:
         4d:9b:30:af:b6:9c:7e:ab:01:9f:e6:ba:1b:9e:32:43:da:ee:
         51:8c:79:0c:c5:63:70:d5:31:6b:4e:da:7c:0c:75:4e:d0:21:
         b9:6d:7b:59:8b:77:29:3b:87:ba:31:db:44:aa:8f:bc:8d:8d:
         54:d8:4f:97:19:d1:f5:97:6a:2e:bf:46:3f:18:0c:2e:5a:7a:
         10:07:3b:76:63:06:44:49:55:9b:06:94:59:a4:9f:89:aa:60:
         44:55:86:53:fb:32:ef:77:f4:6a:08:b5:49:ca:bb:e4:40:f1:
         e4:dc:5b:f2:13:3d:c0:05:0d:08:0f:7c:27:22:c0:a5:a7:cc:
         6b:5f:68:14:61:68:1c:45:d3:65:b7:a1:93:6b:c5:48:d3:30:
         e8:48:84:70:a3:1a:bb:10:c1:68:df:96:f0:f6:24:9c:89:27:
         5a:5c:78:da:2e:09:ff:ec:9b:1d:e3:f7:c4:32:98:6d:71:fe:
         e7:14:e4:ac
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUJJSt2fugIp0RGomubpmciE6j9XswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM0QzEwQThFNjFCMUE3RDZBQTlENjlDOUIzRDI1QjEy
QUJBOTU1RTAeFw0yNTAyMDQxOTUzMTJaFw0yNjAyMDMxOTU4MTJaMDMxMTAvBgNV
BAMTKDY1REIwRkU2QThGNEMwNzQ0OUIyOUE1NzcyQzg1QTNCRDAwQzI0MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC971jT3274HJQxBFzjlGIDtrXw
/ApMvIbNKfN33vRWZj/6ymkTKRk68kxkmTRWQiKOtc2KNuPwgp7gdqXLir8iduqN
vGOBALmoyGyp37bw/SIpr9xx/5IZ0NmlpokI7LoWh3Rilr0skyHXV9qlz1w7Svxo
97tr+D0L0ydRwJ8pnXoDxkk83A9JGkpWT7G4jn4MXlQyn5sb16OOAltM6X9dZNNL
QseBs1wLwSU1dM3HO2WFFyGnhqYY33JdGw2DCmPDQfhGYDV//gM5aOPOYoNAZjcc
/RrBys78dWbJR1kpyp/lYhZhShvnln6hZppN9AXlrhfU1dCMMWBJcRF18MLzAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUZdsP5qj0wHRJsppXcshaO9AMJAUwHwYDVR0j
BBgwFoAU80wQqOYbGn1qqdacmz0lsSq6lV4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMkJGQzhCODNGMDQ4NTlDQUE2NjIxNTQ2QUZBNEZERDVG
MkI0NkZGNTZCQjExQjU0QjlDOEM1QzY5RTE0ODk2LzAvRjM0QzEwQThFNjFCMUE3
RDZBQTlENjlDOUIzRDI1QjEyQUJBOTU1RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMzRDMTBBOEU2MUIxQTdENkFB
OUQ2OUM5QjNEMjVCMTJBQkE5NTVFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTJCRkM4QjgzRjA0ODU5Q0FBNjYyMTU0NkFGQTRGREQ1RjJCNDZGRjU2
QkIxMUI1NEI5QzhDNUM2OUUxNDg5Ni8wLzM0MzUyZTM1MmUzMjMxMzYyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMjM3MzEzOTMzMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItBdgwDQYJ
KoZIhvcNAQELBQADggEBAODWo2MVXzsXhyB/ApuJZ+8qmz3t64gYLTYp6nCwpVu4
XCMpHkMNPhORl/qJKIlmwsnYplX5S1MUPX1doT3bN70p64jmql53aU2bMK+2nH6r
AZ/muhueMkPa7lGMeQzFY3DVMWtO2nwMdU7QIblte1mLdyk7h7ox20Sqj7yNjVTY
T5cZ0fWXai6/Rj8YDC5aehAHO3ZjBkRJVZsGlFmkn4mqYERVhlP7Mu939GoItUnK
u+RA8eTcW/ITPcAFDQgPfCciwKWnzGtfaBRhaBxF02W3oZNrxUjTMOhIhHCjGrsQ
wWjflvD2JJyJJ1pceNouCf/smx3j98QymG1x/ucU5Kw=
-----END CERTIFICATE-----
Generated at Wed Apr 23 10:32:40 2025 by rpki-client