Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139382e302f32342d3234203d3e20323639383538.roa
File:                     34352e3138392e3139382e302f32342d3234203d3e20323639383538.roa (raw, json)
Hash identifier:          41SOVAodcLKyryMiH1QxQTtYKkrqbxoQgUAQXwth9BY=
Subject key identifier:   57:73:0F:9A:4C:E6:24:6F:B3:73:4F:A4:97:9A:3A:BA:09:74:48:33
Certificate issuer:       /CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
Certificate serial:       4C13CD03BF77571C54051252D09AF227516BFBD6
Authority key identifier: 0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139382e302f32342d3234203d3e20323639383538.roa
Signing time:             Tue 04 Feb 2025 18:39:32 +0000
ROA not before:           Tue 04 Feb 2025 18:34:32 +0000
ROA not after:            Tue 03 Feb 2026 18:39:32 +0000
asID:                     269858
IP address blocks:        45.189.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:13:cd:03:bf:77:57:1c:54:05:12:52:d0:9a:f2:27:51:6b:fb:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
        Validity
            Not Before: Feb  4 18:34:32 2025 GMT
            Not After : Feb  3 18:39:32 2026 GMT
        Subject: CN=57730F9A4CE6246FB3734FA4979A3ABA09744833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:d6:f0:88:ba:43:06:19:cf:96:e8:ca:2e:
                    29:af:9e:8d:0a:8a:19:7b:93:3a:83:af:a1:78:be:
                    e9:ed:8f:63:a8:68:2e:2a:aa:34:22:c9:ae:2e:0e:
                    15:5a:e1:5f:84:36:2a:dd:69:f0:39:18:4b:80:26:
                    0d:70:c2:e8:55:fd:5c:4b:a3:14:dc:e9:7e:fc:99:
                    7b:2f:81:3a:07:55:96:fa:97:eb:2c:9c:e5:7a:5c:
                    bd:d4:87:46:ac:6b:13:f9:4e:e2:65:7b:4f:58:b0:
                    96:23:94:6e:99:9c:4f:8e:c0:46:7a:de:06:2b:0d:
                    e5:25:ff:ad:e2:80:53:0d:89:6e:e9:3b:a3:23:b9:
                    e7:0f:72:1a:ee:41:40:f5:cf:c6:b4:ca:b2:e4:59:
                    c3:1b:e6:9c:21:fd:a5:43:5a:f0:97:93:14:cf:d9:
                    e1:03:b6:5c:47:d3:5c:88:af:94:71:67:ff:02:82:
                    02:93:fa:0c:2b:53:bb:84:82:a7:56:63:98:74:a9:
                    4c:46:03:60:76:24:16:0a:5d:7d:8b:18:51:b3:48:
                    8b:81:4d:f0:97:ec:af:17:3d:e0:d6:51:36:09:50:
                    73:83:a2:39:95:54:b8:61:b3:b4:4f:08:87:d6:27:
                    e1:57:58:3a:eb:c9:34:b9:4e:97:b6:dc:55:26:76:
                    33:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:73:0F:9A:4C:E6:24:6F:B3:73:4F:A4:97:9A:3A:BA:09:74:48:33
            X509v3 Authority Key Identifier:
                keyid:0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139382e302f32342d3234203d3e20323639383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:d1:52:d4:01:46:b4:ed:c7:ed:7d:2d:25:b4:06:06:f9:32:
         77:59:b4:49:1b:61:63:bd:ff:95:5d:6b:40:8b:7a:4b:c2:89:
         43:2e:06:f7:f7:73:5a:47:c5:c9:0e:bc:c5:8b:a9:db:48:b8:
         03:bc:16:08:d0:0c:c1:2d:1a:f5:bc:00:6d:2a:2f:83:45:a1:
         c1:e0:c8:e8:30:3d:9d:f4:7c:fe:25:ed:64:6a:f1:88:14:ba:
         b8:74:75:d5:cb:b6:c2:42:5e:c1:d6:d4:fe:e7:f4:9f:be:ae:
         6c:80:5a:55:bb:39:e3:8e:7b:88:ac:2a:c0:bf:01:6b:6b:40:
         01:70:93:0f:6e:98:c0:37:3b:6b:26:a7:3f:5b:b3:40:07:52:
         6b:3c:f4:55:b3:37:92:5b:a4:14:d0:c1:41:c4:5e:ee:6f:98:
         b6:ff:d2:af:6c:ed:68:02:da:af:17:46:a2:ac:6e:6a:12:4f:
         f8:dd:4c:4a:a8:75:a8:0a:ef:7b:71:41:2f:2e:89:1a:e2:d7:
         a3:1d:84:cf:57:44:5e:da:bb:a2:35:90:86:b8:98:41:ad:c1:
         cc:75:1f:e7:50:03:bb:90:81:55:30:f2:d7:9d:77:92:ff:2d:
         e4:6e:aa:8b:c1:d3:5c:ea:01:af:4e:cb:44:94:03:b6:5c:11:
         c9:85:bc:9e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTBPNA793VxxUBRJS0JryJ1Fr+9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE5N0I3RDlEQkQyNzBBNTYwNjRCNTYwRTMyQzQ2QTVF
MkJEODU3RDAeFw0yNTAyMDQxODM0MzJaFw0yNjAyMDMxODM5MzJaMDMxMTAvBgNV
BAMTKDU3NzMwRjlBNENFNjI0NkZCMzczNEZBNDk3OUEzQUJBMDk3NDQ4MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyftbwiLpDBhnPlujKLimvno0K
ihl7kzqDr6F4vuntj2OoaC4qqjQiya4uDhVa4V+ENirdafA5GEuAJg1wwuhV/VxL
oxTc6X78mXsvgToHVZb6l+ssnOV6XL3Uh0asaxP5TuJle09YsJYjlG6ZnE+OwEZ6
3gYrDeUl/63igFMNiW7pO6MjuecPchruQUD1z8a0yrLkWcMb5pwh/aVDWvCXkxTP
2eEDtlxH01yIr5RxZ/8CggKT+gwrU7uEgqdWY5h0qUxGA2B2JBYKXX2LGFGzSIuB
TfCX7K8XPeDWUTYJUHODojmVVLhhs7RPCIfWJ+FXWDrryTS5Tpe23FUmdjMJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUV3MPmkzmJG+zc0+kl5o6ugl0SDMwHwYDVR0j
BBgwFoAUCpe32dvScKVgZLVg4yxGpeK9hX0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMjg0ODBGMTg1NTA2NzNDQTc0MDQyQTk2MUQ3RjU3MEUz
RTM5NTZBQzhFQjRBRjJCRUIxODgyRjM3NkM5OUUzLzAvMEE5N0I3RDlEQkQyNzBB
NTYwNjRCNTYwRTMyQzQ2QTVFMkJEODU3RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQTk3QjdEOURCRDI3MEE1NjA2
NEI1NjBFMzJDNDZBNUUyQkQ4NTdELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjI4NDgwRjE4NTUwNjczQ0E3NDA0MkE5NjFEN0Y1NzBFM0UzOTU2QUM4
RUI0QUYyQkVCMTg4MkYzNzZDOTlFMy8wLzM0MzUyZTMxMzgzOTJlMzEzOTM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzgzNTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALb3G
MA0GCSqGSIb3DQEBCwUAA4IBAQBk0VLUAUa07cftfS0ltAYG+TJ3WbRJG2Fjvf+V
XWtAi3pLwolDLgb393NaR8XJDrzFi6nbSLgDvBYI0AzBLRr1vABtKi+DRaHB4Mjo
MD2d9Hz+Je1kavGIFLq4dHXVy7bCQl7B1tT+5/Sfvq5sgFpVuznjjnuIrCrAvwFr
a0ABcJMPbpjANztrJqc/W7NAB1JrPPRVszeSW6QU0MFBxF7ub5i2/9KvbO1oAtqv
F0airG5qEk/43UxKqHWoCu97cUEvLoka4tejHYTPV0Re2ruiNZCGuJhBrcHMdR/n
UAO7kIFVMPLXnXeS/y3kbqqLwdNc6gGvTstElAO2XBHJhbye
-----END CERTIFICATE-----
Generated at Wed Apr 23 06:20:40 2025 by rpki-client