Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/34352e3232372e38382e302f32322d3234203d3e203233303539.roa
File:                     34352e3232372e38382e302f32322d3234203d3e203233303539.roa (raw, json)
Hash identifier:          uLQMOzyXpBh04Ko4U811aTYfrpcEzL7RPj3SU2seJJE=
Subject key identifier:   A0:C9:90:BA:07:AC:15:F5:4B:E0:9F:7B:8B:18:24:A6:CE:39:3B:80
Certificate issuer:       /CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
Certificate serial:       24E88F25617DD1DD60151EF94366C373279313BC
Authority key identifier: FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/34352e3232372e38382e302f32322d3234203d3e203233303539.roa
Signing time:             Tue 04 Feb 2025 18:18:43 +0000
ROA not before:           Tue 04 Feb 2025 18:13:43 +0000
ROA not after:            Tue 03 Feb 2026 18:18:43 +0000
asID:                     23059
IP address blocks:        45.227.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e8:8f:25:61:7d:d1:dd:60:15:1e:f9:43:66:c3:73:27:93:13:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
        Validity
            Not Before: Feb  4 18:13:43 2025 GMT
            Not After : Feb  3 18:18:43 2026 GMT
        Subject: CN=A0C990BA07AC15F54BE09F7B8B1824A6CE393B80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:53:7d:ab:9b:93:1c:9f:59:6a:6d:38:8f:b4:
                    be:6c:a0:a7:e1:5a:34:25:43:7f:99:99:f2:10:62:
                    2d:51:47:a2:03:0c:85:78:e2:2a:34:73:cb:99:ad:
                    88:63:35:46:92:e4:e1:05:04:1d:a5:5f:17:2e:78:
                    d4:aa:39:f4:7a:06:76:1d:49:b7:3c:39:30:fa:cd:
                    87:81:5e:d0:87:cd:52:26:e9:4c:6a:77:99:4c:ce:
                    90:b0:bd:d0:5b:73:df:15:ef:0a:98:78:2e:ce:d1:
                    4e:e7:c8:60:88:1d:ef:07:11:fa:cf:e3:31:70:b0:
                    c1:d1:3c:22:31:5f:b2:d4:52:e1:fb:d3:13:91:dd:
                    bd:a1:d9:05:a6:51:cd:53:c9:4a:68:c5:7f:29:aa:
                    56:7f:95:c9:fc:9c:69:64:ae:5e:17:60:a8:5c:a2:
                    64:8e:90:55:b3:c9:7b:16:67:b2:4d:97:09:2f:e5:
                    6f:a3:5f:39:13:52:4a:0d:8c:1b:1d:d0:fb:d0:b2:
                    c7:87:8c:79:e5:74:c0:22:8e:d5:de:75:56:9f:87:
                    28:94:14:bb:cf:60:40:3d:3b:32:bd:d3:eb:98:dd:
                    80:ee:40:bd:d5:75:bd:d2:2e:b1:66:7a:dc:57:03:
                    69:58:69:3e:35:23:cd:d1:cc:86:3a:93:aa:5d:55:
                    51:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C9:90:BA:07:AC:15:F5:4B:E0:9F:7B:8B:18:24:A6:CE:39:3B:80
            X509v3 Authority Key Identifier:
                keyid:FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/34352e3232372e38382e302f32322d3234203d3e203233303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:eb:ed:d7:a0:ea:ce:6c:97:a4:80:b0:bf:fd:c2:32:f6:dc:
         aa:b3:37:73:67:d8:fe:cb:f2:96:49:68:a6:e8:49:98:a3:47:
         cc:dc:3c:d0:d6:8d:94:1f:43:1e:df:d8:33:a8:b1:e1:76:d7:
         c9:6f:6b:ce:95:ee:11:1d:b2:0c:81:d2:da:34:9b:fc:5f:f5:
         00:e1:11:d3:3e:43:f3:58:a7:f9:85:f9:32:e4:9c:30:48:f1:
         07:f9:93:ec:23:ce:26:26:c1:c2:51:a1:e5:4e:52:97:e6:8b:
         e6:be:7b:96:31:0d:56:e5:3c:f3:34:ec:43:8b:86:9e:c3:55:
         63:ab:2a:63:3f:85:52:9e:64:47:80:06:43:f1:b8:cd:09:3d:
         ce:59:ce:45:5e:a6:f3:57:4c:32:24:a5:14:92:ef:4e:3e:0e:
         7c:fd:d8:64:d9:68:09:93:ed:c7:93:94:cc:47:76:50:fb:87:
         e5:0d:79:90:4b:7e:0c:51:32:9c:fd:4b:1a:4a:07:01:88:38:
         d5:d8:6d:63:1e:ef:c7:4e:04:90:1b:09:a3:c7:7a:4f:f6:08:
         c6:bd:49:f3:da:d8:af:f7:5c:52:87:e4:dc:27:c1:fa:d3:8f:
         7d:c5:11:44:ce:ef:5d:6c:f8:ec:f2:30:8d:ee:d4:88:19:2a:
         07:21:a5:a3
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUJOiPJWF90d1gFR75Q2bDcyeTE7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxQUUxRTE0QzVBMzNFREVERTk3NzI4NUM3QjEwN0U1
MzQ1MDRFQTAeFw0yNTAyMDQxODEzNDNaFw0yNjAyMDMxODE4NDNaMDMxMTAvBgNV
BAMTKEEwQzk5MEJBMDdBQzE1RjU0QkUwOUY3QjhCMTgyNEE2Q0UzOTNCODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaU32rm5Mcn1lqbTiPtL5soKfh
WjQlQ3+ZmfIQYi1RR6IDDIV44io0c8uZrYhjNUaS5OEFBB2lXxcueNSqOfR6BnYd
Sbc8OTD6zYeBXtCHzVIm6Uxqd5lMzpCwvdBbc98V7wqYeC7O0U7nyGCIHe8HEfrP
4zFwsMHRPCIxX7LUUuH70xOR3b2h2QWmUc1TyUpoxX8pqlZ/lcn8nGlkrl4XYKhc
omSOkFWzyXsWZ7JNlwkv5W+jXzkTUkoNjBsd0PvQsseHjHnldMAijtXedVafhyiU
FLvPYEA9OzK90+uY3YDuQL3Vdb3SLrFmetxXA2lYaT41I83RzIY6k6pdVVHVAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUoMmQugesFfVL4J97ixgkps45O4AwHwYDVR0j
BBgwFoAU+xrh4UxaM+3t6XcoXHsQflNFBOowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMTA4RUY3NzEwOENCNDNFRTFGMzBGNUM5Qzc2RkJERjI3
Nzc5RkNFM0UyOUE4NDI2MjNEODI5NjhCMzYxNkRCLzAvRkIxQUUxRTE0QzVBMzNF
REVERTk3NzI4NUM3QjEwN0U1MzQ1MDRFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQjFBRTFFMTRDNUEzM0VERURF
OTc3Mjg1QzdCMTA3RTUzNDUwNEVBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjEwOEVGNzcxMDhDQjQzRUUxRjMwRjVDOUM3NkZCREYyNzc3OUZDRTNF
MjlBODQyNjIzRDgyOTY4QjM2MTZEQi8wLzM0MzUyZTMyMzIzNzJlMzgzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzMzMDM1Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIt41gwDQYJ
KoZIhvcNAQELBQADggEBAKHr7deg6s5sl6SAsL/9wjL23KqzN3Nn2P7L8pZJaKbo
SZijR8zcPNDWjZQfQx7f2DOoseF218lva86V7hEdsgyB0to0m/xf9QDhEdM+Q/NY
p/mF+TLknDBI8Qf5k+wjziYmwcJRoeVOUpfmi+a+e5YxDVblPPM07EOLhp7DVWOr
KmM/hVKeZEeABkPxuM0JPc5ZzkVepvNXTDIkpRSS704+Dnz92GTZaAmT7ceTlMxH
dlD7h+UNeZBLfgxRMpz9SxpKBwGIONXYbWMe78dOBJAbCaPHek/2CMa9SfPa2K/3
XFKH5NwnwfrTj33FEUTO711s+OzyMI3u1IgZKgchpaM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:14:56 2025 by rpki-client