Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/34352e3137352e3136342e302f32342d3234203d3e20323637383439.roa
File:                     34352e3137352e3136342e302f32342d3234203d3e20323637383439.roa (raw, json)
Hash identifier:          IJbgT+kdK/CmVY/UES/B1MdzxT57LJcOr18+bVlxJaY=
Subject key identifier:   93:7F:EE:FB:1E:7A:FF:9B:A2:DB:28:DA:BB:CC:6F:BE:E0:6C:63:56
Certificate issuer:       /CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
Certificate serial:       32C355B3BA1D43618626812C4C764DA82FE3DEDC
Authority key identifier: 7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/34352e3137352e3136342e302f32342d3234203d3e20323637383439.roa
Signing time:             Tue 04 Feb 2025 18:43:40 +0000
ROA not before:           Tue 04 Feb 2025 18:38:40 +0000
ROA not after:            Tue 03 Feb 2026 18:43:40 +0000
asID:                     267849
IP address blocks:        45.175.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c3:55:b3:ba:1d:43:61:86:26:81:2c:4c:76:4d:a8:2f:e3:de:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
        Validity
            Not Before: Feb  4 18:38:40 2025 GMT
            Not After : Feb  3 18:43:40 2026 GMT
        Subject: CN=937FEEFB1E7AFF9BA2DB28DABBCC6FBEE06C6356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a8:01:de:9a:b4:fd:e5:52:5e:c0:e7:8e:ab:
                    29:64:ee:fd:af:79:e9:a1:8a:52:6d:a6:1b:c0:2b:
                    de:4b:1f:e9:5b:63:4c:0c:b2:6f:e2:68:38:d9:f3:
                    3d:8b:5c:10:06:b2:2f:8e:74:af:2a:f4:8d:60:f5:
                    fc:59:aa:d6:44:3e:bb:4f:ae:ad:25:94:a0:30:b9:
                    50:69:de:77:56:81:63:3a:07:b7:25:0a:c0:02:13:
                    3d:ff:8b:21:21:bf:f3:33:ea:d7:bf:b8:84:a9:4f:
                    df:47:ab:a5:a9:32:93:0d:b5:4f:a2:29:9a:27:64:
                    48:db:d8:9a:a1:1b:31:4d:7b:52:7e:9b:41:e8:eb:
                    52:21:3a:9b:d4:b1:d1:9c:04:9e:39:e6:30:fd:1c:
                    9e:5e:25:26:f2:3a:05:72:bd:ee:7d:ff:e1:d0:35:
                    0a:b5:12:fc:d6:21:a5:c0:19:55:52:1c:49:01:8b:
                    a2:2e:aa:88:4f:76:6f:4b:1e:c4:8f:20:50:35:83:
                    61:2f:9a:7f:ce:ec:99:00:cf:51:cd:8b:a1:5d:5b:
                    5d:26:ef:21:f7:d5:7b:ab:b0:9b:60:8a:8a:f1:9a:
                    25:b2:fc:72:f8:83:6e:b9:e9:1f:f0:7e:5e:78:a8:
                    3b:fc:88:0a:93:0e:e4:1d:39:03:0c:f0:93:63:80:
                    55:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7F:EE:FB:1E:7A:FF:9B:A2:DB:28:DA:BB:CC:6F:BE:E0:6C:63:56
            X509v3 Authority Key Identifier:
                keyid:7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/34352e3137352e3136342e302f32342d3234203d3e20323637383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:3b:db:ce:03:89:a7:c3:e9:56:d7:91:17:ee:7d:30:90:75:
         cb:25:f1:7a:5b:eb:7e:b5:4e:a5:04:00:d1:39:5b:b4:89:d6:
         6a:83:06:7b:69:9d:a8:4f:f8:97:3e:5b:aa:60:32:c8:44:54:
         46:8b:28:69:aa:70:2b:43:bb:ec:75:7e:59:7a:7e:45:4d:43:
         b3:b3:ec:68:36:1e:16:7e:51:22:6f:a2:49:d0:42:c9:3f:69:
         74:48:8e:04:88:b5:fd:7b:e5:5b:fb:89:55:42:4f:ac:bb:19:
         e8:26:7d:37:d9:fb:94:2e:aa:8b:93:2a:57:c8:d5:2a:20:4d:
         05:a0:03:24:8b:d9:2d:93:98:ce:c7:64:e8:e7:7b:3f:a2:63:
         78:0c:e9:3c:32:d8:b3:81:1e:da:db:58:55:b9:1f:02:b0:5f:
         6b:c6:ec:da:53:06:fd:25:d9:8e:ee:11:cc:f2:42:83:aa:89:
         18:d2:f2:77:ef:19:41:2d:62:9b:e7:27:39:f4:22:a1:d2:05:
         ca:6e:ff:c0:5d:fd:73:53:52:83:91:29:84:1c:8f:b0:86:17:
         06:06:dd:95:34:e9:05:3a:12:c7:36:45:60:56:2c:8a:b4:e3:
         95:88:8e:64:6e:b3:0b:35:cb:8e:58:db:59:b2:a6:e0:06:36:
         82:c9:56:99
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMsNVs7odQ2GGJoEsTHZNqC/j3twwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0RBNTkyMkNBRjkyMTRDNkU0NTQ1NzI0RkZFOTNGQzE4
MDMzMUU5NjAeFw0yNTAyMDQxODM4NDBaFw0yNjAyMDMxODQzNDBaMDMxMTAvBgNV
BAMTKDkzN0ZFRUZCMUU3QUZGOUJBMkRCMjhEQUJCQ0M2RkJFRTA2QzYzNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDqAHemrT95VJewOeOqylk7v2v
eemhilJtphvAK95LH+lbY0wMsm/iaDjZ8z2LXBAGsi+OdK8q9I1g9fxZqtZEPrtP
rq0llKAwuVBp3ndWgWM6B7clCsACEz3/iyEhv/Mz6te/uISpT99Hq6WpMpMNtU+i
KZonZEjb2JqhGzFNe1J+m0Ho61IhOpvUsdGcBJ455jD9HJ5eJSbyOgVyve59/+HQ
NQq1EvzWIaXAGVVSHEkBi6IuqohPdm9LHsSPIFA1g2Evmn/O7JkAz1HNi6FdW10m
7yH31XursJtgiorxmiWy/HL4g2656R/wfl54qDv8iAqTDuQdOQMM8JNjgFXHAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUk3/u+x56/5ui2yjau8xvvuBsY1YwHwYDVR0j
BBgwFoAUfaWSLK+SFMbkVFck/+k/wYAzHpYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRDRFOTYxQTIzMUNEMTNBNzZFRUIyOEY0NEJENEM3QkU5
Qzg2QjY0MjEzMTI0QTEyQkFEMkNERDdEQzYxNTg2LzAvN0RBNTkyMkNBRjkyMTRD
NkU0NTQ1NzI0RkZFOTNGQzE4MDMzMUU5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83REE1OTIyQ0FGOTIxNEM2RTQ1
NDU3MjRGRkU5M0ZDMTgwMzMxRTk2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUQ0RTk2MUEyMzFDRDEzQTc2RUVCMjhGNDRCRDRDN0JFOUM4NkI2NDIx
MzEyNEExMkJBRDJDREQ3REM2MTU4Ni8wLzM0MzUyZTMxMzczNTJlMzEzNjM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzgzNDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALa+k
MA0GCSqGSIb3DQEBCwUAA4IBAQByO9vOA4mnw+lW15EX7n0wkHXLJfF6W+t+tU6l
BADROVu0idZqgwZ7aZ2oT/iXPluqYDLIRFRGiyhpqnArQ7vsdX5Zen5FTUOzs+xo
Nh4WflEib6JJ0ELJP2l0SI4EiLX9e+Vb+4lVQk+suxnoJn032fuULqqLkypXyNUq
IE0FoAMki9ktk5jOx2To53s/omN4DOk8MtizgR7a21hVuR8CsF9rxuzaUwb9JdmO
7hHM8kKDqokY0vJ37xlBLWKb5yc59CKh0gXKbv/AXf1zU1KDkSmEHI+whhcGBt2V
NOkFOhLHNkVgViyKtOOViI5kbrMLNcuOWNtZsqbgBjaCyVaZ
-----END CERTIFICATE-----
Generated at Fri Apr 18 17:45:10 2025 by rpki-client