Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/34352e3138372e3230382e302f32332d3234203d3e20323639393131.roa
File:                     34352e3138372e3230382e302f32332d3234203d3e20323639393131.roa (raw, json)
Hash identifier:          zDbXMpnyQYiZ6Us70ahGcIiZ1F1FGHLw1988EA8LiSY=
Subject key identifier:   58:EB:A2:D5:FA:CD:CC:90:B0:1E:1D:AC:2D:04:88:8C:3B:51:34:E7
Certificate issuer:       /CN=9C3198E65C783AF99D6A743D993E0C3770B76EE2
Certificate serial:       16D1A586C7A07A668438EDB802FA90440B64F456
Authority key identifier: 9C:31:98:E6:5C:78:3A:F9:9D:6A:74:3D:99:3E:0C:37:70:B7:6E:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/34352e3138372e3230382e302f32332d3234203d3e20323639393131.roa
Signing time:             Tue 04 Feb 2025 19:57:09 +0000
ROA not before:           Tue 04 Feb 2025 19:52:09 +0000
ROA not after:            Tue 03 Feb 2026 19:57:09 +0000
asID:                     269911
IP address blocks:        45.187.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d1:a5:86:c7:a0:7a:66:84:38:ed:b8:02:fa:90:44:0b:64:f4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C3198E65C783AF99D6A743D993E0C3770B76EE2
        Validity
            Not Before: Feb  4 19:52:09 2025 GMT
            Not After : Feb  3 19:57:09 2026 GMT
        Subject: CN=58EBA2D5FACDCC90B01E1DAC2D04888C3B5134E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7f:ec:dd:c7:11:e8:e6:f0:e4:02:b7:51:3c:
                    06:03:7d:bf:31:da:58:7c:0d:33:58:19:ac:c2:49:
                    24:11:34:62:4c:3f:20:b9:c0:40:f0:fc:07:65:dc:
                    01:ee:43:08:95:28:d5:f5:93:09:be:ab:4c:14:9c:
                    bd:d5:a4:3e:88:29:32:d2:fe:33:6e:a9:9d:db:16:
                    a1:29:f3:d9:93:38:21:96:82:52:95:ae:e0:a5:58:
                    81:23:93:f4:ce:26:0f:6b:e3:ad:97:a2:34:b4:9b:
                    16:eb:3b:fa:b8:a2:c1:84:27:51:a2:af:b7:48:62:
                    98:0e:f6:bb:a9:cd:03:32:3e:26:f6:a0:a0:4a:66:
                    74:4c:2c:8a:3b:0f:c4:4c:63:2b:b8:0d:e3:5d:4e:
                    a6:c8:c9:57:5b:15:c2:4b:84:94:46:43:69:e5:d9:
                    62:34:9a:c8:89:7c:4e:44:a5:76:31:cd:85:3d:85:
                    05:82:47:29:fe:7d:60:54:ed:f0:bf:fc:76:d8:4b:
                    20:1c:2d:ca:2f:33:a6:e8:b6:bb:f3:fd:50:48:9b:
                    76:d5:be:19:16:ea:2b:31:c0:6e:26:ed:eb:76:ef:
                    d5:0c:12:b4:4d:9f:45:7d:0a:55:04:df:25:50:ec:
                    15:98:ae:2e:36:13:f6:22:6d:8d:00:a1:36:ae:2b:
                    22:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EB:A2:D5:FA:CD:CC:90:B0:1E:1D:AC:2D:04:88:8C:3B:51:34:E7
            X509v3 Authority Key Identifier:
                keyid:9C:31:98:E6:5C:78:3A:F9:9D:6A:74:3D:99:3E:0C:37:70:B7:6E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C3198E65C783AF99D6A743D993E0C3770B76EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/133EF50A79B0938E55BA32D12DE23B91A1D2C72F227F4248346FD02785C24A87/0/34352e3138372e3230382e302f32332d3234203d3e20323639393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:62:ea:a1:ea:c9:ae:a1:1e:86:e6:ff:d5:31:26:d3:dd:d1:
         3f:c8:5b:2a:97:2e:d8:94:60:20:c6:4c:13:c9:b0:f1:da:9a:
         78:b4:5e:13:cf:52:c7:39:b8:f6:15:7d:8c:0b:d4:03:3f:c8:
         d6:e5:39:e8:3c:aa:38:fd:a1:f9:d2:c0:24:80:47:f4:f3:6b:
         0f:1e:be:cb:de:a5:c5:e5:52:6b:a3:07:12:29:d9:13:63:b9:
         22:a5:c4:24:f6:8f:81:4c:15:d7:da:22:60:d1:92:4d:91:99:
         e9:0c:e6:e0:83:84:d9:d4:e4:4a:74:9e:20:41:94:75:1e:48:
         23:82:e3:3b:af:5c:ff:93:ac:c6:07:2d:99:c3:27:30:94:86:
         db:04:b2:7a:22:99:8c:e4:1d:bf:52:ae:90:79:c9:f4:c6:af:
         68:ff:a5:0b:e7:0f:a6:51:b3:80:59:aa:da:88:3a:bb:d9:5b:
         fc:4c:e4:f5:e2:56:88:81:ae:d3:3b:9d:5c:cb:6c:53:58:11:
         73:ff:4c:78:0c:19:9e:db:da:d9:3b:0d:32:55:9c:54:38:ce:
         61:41:97:8d:f9:83:25:18:93:81:be:d8:7b:1e:69:41:b6:8b:
         c8:89:52:d0:0b:d9:d5:20:2d:cb:fc:04:b8:f1:04:05:b7:aa:
         9a:db:d8:7e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFtGlhsegemaEOO24AvqQRAtk9FYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUMzMTk4RTY1Qzc4M0FGOTlENkE3NDNEOTkzRTBDMzc3
MEI3NkVFMjAeFw0yNTAyMDQxOTUyMDlaFw0yNjAyMDMxOTU3MDlaMDMxMTAvBgNV
BAMTKDU4RUJBMkQ1RkFDRENDOTBCMDFFMURBQzJEMDQ4ODhDM0I1MTM0RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdf+zdxxHo5vDkArdRPAYDfb8x
2lh8DTNYGazCSSQRNGJMPyC5wEDw/Adl3AHuQwiVKNX1kwm+q0wUnL3VpD6IKTLS
/jNuqZ3bFqEp89mTOCGWglKVruClWIEjk/TOJg9r462XojS0mxbrO/q4osGEJ1Gi
r7dIYpgO9rupzQMyPib2oKBKZnRMLIo7D8RMYyu4DeNdTqbIyVdbFcJLhJRGQ2nl
2WI0msiJfE5EpXYxzYU9hQWCRyn+fWBU7fC//HbYSyAcLcovM6botrvz/VBIm3bV
vhkW6isxwG4m7et279UMErRNn0V9ClUE3yVQ7BWYri42E/YibY0AoTauKyIXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUWOui1frNzJCwHh2sLQSIjDtRNOcwHwYDVR0j
BBgwFoAUnDGY5lx4OvmdanQ9mT4MN3C3buIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMzNFRjUwQTc5QjA5MzhFNTVCQTMyRDEyREUyM0I5MUEx
RDJDNzJGMjI3RjQyNDgzNDZGRDAyNzg1QzI0QTg3LzAvOUMzMTk4RTY1Qzc4M0FG
OTlENkE3NDNEOTkzRTBDMzc3MEI3NkVFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QzMxOThFNjVDNzgzQUY5OUQ2
QTc0M0Q5OTNFMEMzNzcwQjc2RUUyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTMzRUY1MEE3OUIwOTM4RTU1QkEzMkQxMkRFMjNCOTFBMUQyQzcyRjIy
N0Y0MjQ4MzQ2RkQwMjc4NUMyNEE4Ny8wLzM0MzUyZTMxMzgzNzJlMzIzMDM4MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM5MzkzMTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLbvQ
MA0GCSqGSIb3DQEBCwUAA4IBAQC0Yuqh6smuoR6G5v/VMSbT3dE/yFsqly7YlGAg
xkwTybDx2pp4tF4Tz1LHObj2FX2MC9QDP8jW5TnoPKo4/aH50sAkgEf082sPHr7L
3qXF5VJrowcSKdkTY7kipcQk9o+BTBXX2iJg0ZJNkZnpDObgg4TZ1ORKdJ4gQZR1
HkgjguM7r1z/k6zGBy2ZwycwlIbbBLJ6IpmM5B2/Uq6Qecn0xq9o/6UL5w+mUbOA
WaraiDq72Vv8TOT14laIga7TO51cy2xTWBFz/0x4DBme29rZOw0yVZxUOM5hQZeN
+YMlGJOBvth7HmlBtovIiVLQC9nVIC3L/AS48QQFt6qa29h+
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:49:39 2025 by rpki-client