Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1559F2209C14CD903D7329EF42951AFB3388A93132E941F09C9362952F9154F6/0/34352e3137332e35362e302f32322d3234203d3e20323637383630.roa
File:                     34352e3137332e35362e302f32322d3234203d3e20323637383630.roa (raw, json)
Hash identifier:          PvRrNQJrGQa39/FtkfJa0Jr2sSbuF6DfC1fMZdiXB/Y=
Subject key identifier:   C4:FA:DB:23:93:31:B6:15:11:38:90:1E:1E:5F:84:AA:9A:FB:4A:DD
Certificate issuer:       /CN=918A5C11875DD4073ED693708755E20AA9FF3212
Certificate serial:       691F27667D774B7204B404401608BC31ABE7E9A8
Authority key identifier: 91:8A:5C:11:87:5D:D4:07:3E:D6:93:70:87:55:E2:0A:A9:FF:32:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/918A5C11875DD4073ED693708755E20AA9FF3212.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1559F2209C14CD903D7329EF42951AFB3388A93132E941F09C9362952F9154F6/0/34352e3137332e35362e302f32322d3234203d3e20323637383630.roa
Signing time:             Tue 04 Feb 2025 18:17:01 +0000
ROA not before:           Tue 04 Feb 2025 18:12:01 +0000
ROA not after:            Tue 03 Feb 2026 18:17:01 +0000
asID:                     267860
IP address blocks:        45.173.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1559F2209C14CD903D7329EF42951AFB3388A93132E941F09C9362952F9154F6/0/918A5C11875DD4073ED693708755E20AA9FF3212.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1559F2209C14CD903D7329EF42951AFB3388A93132E941F09C9362952F9154F6/0/918A5C11875DD4073ED693708755E20AA9FF3212.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/918A5C11875DD4073ED693708755E20AA9FF3212.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:1f:27:66:7d:77:4b:72:04:b4:04:40:16:08:bc:31:ab:e7:e9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918A5C11875DD4073ED693708755E20AA9FF3212
        Validity
            Not Before: Feb  4 18:12:01 2025 GMT
            Not After : Feb  3 18:17:01 2026 GMT
        Subject: CN=C4FADB239331B6151138901E1E5F84AA9AFB4ADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0f:6e:cc:fd:19:9a:4c:bd:02:16:dd:37:79:
                    95:08:ea:29:0b:14:fd:7c:1e:c4:93:7c:61:5d:66:
                    87:8f:cf:06:6b:b1:5e:a9:0a:13:98:6d:45:1d:6d:
                    4b:d2:28:46:79:77:30:ed:6b:89:81:4c:4f:e8:7e:
                    b7:07:83:df:9d:92:36:fd:a0:a4:9d:66:37:87:86:
                    76:f7:c9:79:f6:fc:7f:8c:b5:f9:c9:4c:a0:90:b0:
                    10:f6:f7:50:0f:ca:bd:e7:6c:98:5c:d9:69:1f:a8:
                    85:8a:2a:79:a1:19:18:d3:97:ee:21:65:1d:da:fd:
                    ed:fd:54:e2:0c:df:f1:fc:09:b2:62:09:69:71:6f:
                    95:59:8c:c6:77:e5:09:b4:c6:ef:54:62:66:6e:4f:
                    49:dc:65:b7:9c:ee:9a:13:f6:5a:4f:f9:30:5a:46:
                    75:fc:f4:bd:48:00:e5:42:c1:93:8a:fc:62:07:d0:
                    bf:46:5a:4e:95:66:68:d7:c3:b8:04:4d:8f:f4:93:
                    17:ce:7d:11:21:cc:8d:dc:7c:0b:d9:79:ae:51:e1:
                    29:9c:b9:cf:dd:63:e7:bc:9e:1d:b3:12:35:d2:ca:
                    a5:60:6e:58:f5:a2:d8:80:c4:99:0a:7b:63:9e:85:
                    1d:c0:3d:49:23:32:6a:6c:10:26:0a:cf:af:6f:cd:
                    ad:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FA:DB:23:93:31:B6:15:11:38:90:1E:1E:5F:84:AA:9A:FB:4A:DD
            X509v3 Authority Key Identifier:
                keyid:91:8A:5C:11:87:5D:D4:07:3E:D6:93:70:87:55:E2:0A:A9:FF:32:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1559F2209C14CD903D7329EF42951AFB3388A93132E941F09C9362952F9154F6/0/918A5C11875DD4073ED693708755E20AA9FF3212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/918A5C11875DD4073ED693708755E20AA9FF3212.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1559F2209C14CD903D7329EF42951AFB3388A93132E941F09C9362952F9154F6/0/34352e3137332e35362e302f32322d3234203d3e20323637383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:5d:61:7f:1f:ae:06:70:1e:d6:17:9f:68:20:6c:7e:d7:e9:
         9f:6e:d7:a0:aa:cd:c3:60:36:da:d2:c2:48:a8:ed:e0:fa:e0:
         0e:e2:36:5e:a0:a2:86:d2:c9:a6:a3:e9:e1:0b:de:cf:94:7f:
         60:fa:c5:50:7f:c4:b1:05:65:5c:69:f5:71:48:bc:c3:81:77:
         65:e1:06:f2:03:65:5b:60:e5:5e:f8:01:da:81:34:00:22:a5:
         34:d2:18:33:d4:06:02:78:b7:3d:85:62:b1:a9:3d:01:c6:77:
         73:62:67:43:47:59:d5:79:5f:f9:31:5b:4d:13:bd:94:29:f6:
         81:06:2c:cf:8e:c6:57:ad:73:d8:ba:29:3d:0d:ad:43:79:74:
         ae:64:1f:68:2e:2e:d5:8a:c3:6e:e9:48:f8:7b:23:93:80:1a:
         e7:04:14:06:98:bf:95:6b:97:8e:50:79:2a:7f:86:92:46:08:
         bc:a4:75:09:e5:b8:c9:09:ec:17:e0:ee:f7:ae:ee:a1:0b:ff:
         cf:ff:f3:a0:75:62:2f:9f:21:c3:de:56:a2:89:6b:4a:42:54:
         25:ca:53:67:2e:c5:10:8b:bb:3c:7d:b6:49:9d:9a:7a:4b:b8:
         d0:90:38:8d:d2:b5:81:43:f3:b9:e9:28:41:60:2e:1c:74:c1:
         41:21:b5:42
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUaR8nZn13S3IEtARAFgi8Mavn6agwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE4QTVDMTE4NzVERDQwNzNFRDY5MzcwODc1NUUyMEFB
OUZGMzIxMjAeFw0yNTAyMDQxODEyMDFaFw0yNjAyMDMxODE3MDFaMDMxMTAvBgNV
BAMTKEM0RkFEQjIzOTMzMUI2MTUxMTM4OTAxRTFFNUY4NEFBOUFGQjRBREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjD27M/RmaTL0CFt03eZUI6ikL
FP18HsSTfGFdZoePzwZrsV6pChOYbUUdbUvSKEZ5dzDta4mBTE/ofrcHg9+dkjb9
oKSdZjeHhnb3yXn2/H+MtfnJTKCQsBD291APyr3nbJhc2WkfqIWKKnmhGRjTl+4h
ZR3a/e39VOIM3/H8CbJiCWlxb5VZjMZ35Qm0xu9UYmZuT0ncZbec7poT9lpP+TBa
RnX89L1IAOVCwZOK/GIH0L9GWk6VZmjXw7gETY/0kxfOfREhzI3cfAvZea5R4Smc
uc/dY+e8nh2zEjXSyqVgblj1otiAxJkKe2OehR3APUkjMmpsECYKz69vza01AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUxPrbI5MxthUROJAeHl+Eqpr7St0wHwYDVR0j
BBgwFoAUkYpcEYdd1Ac+1pNwh1XiCqn/MhIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNTU5RjIyMDlDMTRDRDkwM0Q3MzI5RUY0Mjk1MUFGQjMz
ODhBOTMxMzJFOTQxRjA5QzkzNjI5NTJGOTE1NEY2LzAvOTE4QTVDMTE4NzVERDQw
NzNFRDY5MzcwODc1NUUyMEFBOUZGMzIxMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MThBNUMxMTg3NURENDA3M0VE
NjkzNzA4NzU1RTIwQUE5RkYzMjEyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTU1OUYyMjA5QzE0Q0Q5MDNENzMyOUVGNDI5NTFBRkIzMzg4QTkzMTMy
RTk0MUYwOUM5MzYyOTUyRjkxNTRGNi8wLzM0MzUyZTMxMzczMzJlMzUzNjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNzM4MzYzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2tODAN
BgkqhkiG9w0BAQsFAAOCAQEAGV1hfx+uBnAe1hefaCBsftfpn27XoKrNw2A22tLC
SKjt4PrgDuI2XqCihtLJpqPp4Qvez5R/YPrFUH/EsQVlXGn1cUi8w4F3ZeEG8gNl
W2DlXvgB2oE0ACKlNNIYM9QGAni3PYVisak9AcZ3c2JnQ0dZ1Xlf+TFbTRO9lCn2
gQYsz47GV61z2LopPQ2tQ3l0rmQfaC4u1YrDbulI+Hsjk4Aa5wQUBpi/lWuXjlB5
Kn+GkkYIvKR1CeW4yQnsF+Du967uoQv/z//zoHViL58hw95WoolrSkJUJcpTZy7F
EIu7PH22SZ2aeku40JA4jdK1gUPzuekoQWAuHHTBQSG1Qg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:13:36 2025 by rpki-client