Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F1A4C7477FCA32AE59DF430EB6B4E46023A9340755706B493F9775064B1BD16/0/34352e3138332e3234372e302f32342d3234203d3e20323639373737.roa
File:                     34352e3138332e3234372e302f32342d3234203d3e20323639373737.roa (raw, json)
Hash identifier:          AyzOr/yvtKyuNCi+4egYIr7BE2jXGSKOCVPblMjaCs4=
Subject key identifier:   51:9E:BE:B2:A5:21:FE:FF:4A:9F:B3:5B:E0:80:D0:7A:3F:7C:83:30
Certificate issuer:       /CN=A03E273474BBDFDE62E65D4B92BF09E5B6DC6421
Certificate serial:       517E874FA4ED54D66A49475F4C06A9128F968E3A
Authority key identifier: A0:3E:27:34:74:BB:DF:DE:62:E6:5D:4B:92:BF:09:E5:B6:DC:64:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A03E273474BBDFDE62E65D4B92BF09E5B6DC6421.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F1A4C7477FCA32AE59DF430EB6B4E46023A9340755706B493F9775064B1BD16/0/34352e3138332e3234372e302f32342d3234203d3e20323639373737.roa
Signing time:             Tue 04 Feb 2025 18:00:15 +0000
ROA not before:           Tue 04 Feb 2025 17:55:15 +0000
ROA not after:            Tue 03 Feb 2026 18:00:15 +0000
asID:                     269777
IP address blocks:        45.183.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F1A4C7477FCA32AE59DF430EB6B4E46023A9340755706B493F9775064B1BD16/0/A03E273474BBDFDE62E65D4B92BF09E5B6DC6421.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F1A4C7477FCA32AE59DF430EB6B4E46023A9340755706B493F9775064B1BD16/0/A03E273474BBDFDE62E65D4B92BF09E5B6DC6421.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A03E273474BBDFDE62E65D4B92BF09E5B6DC6421.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7e:87:4f:a4:ed:54:d6:6a:49:47:5f:4c:06:a9:12:8f:96:8e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A03E273474BBDFDE62E65D4B92BF09E5B6DC6421
        Validity
            Not Before: Feb  4 17:55:15 2025 GMT
            Not After : Feb  3 18:00:15 2026 GMT
        Subject: CN=519EBEB2A521FEFF4A9FB35BE080D07A3F7C8330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:4c:ad:9d:58:29:ac:47:94:c5:e1:40:74:dd:
                    f6:4e:ed:fe:88:54:4b:93:34:62:62:de:97:98:d5:
                    3f:69:c3:db:20:b1:69:dd:dc:bd:81:aa:e1:39:84:
                    52:98:84:ac:78:dd:8f:ba:9e:a3:4d:28:cd:11:5e:
                    23:e0:35:ce:42:9a:51:42:8c:05:50:b6:47:c0:91:
                    ab:ee:16:37:46:fa:3a:7c:0d:d3:b3:37:7d:ce:b2:
                    26:9f:93:1d:20:77:52:70:88:86:ed:25:31:fd:77:
                    67:2f:80:4d:5c:b1:60:91:74:6b:28:4a:c3:bd:ea:
                    c4:90:1e:e2:4f:be:a8:c9:cc:f3:34:f5:ca:38:40:
                    2f:df:de:5e:7f:76:eb:36:03:4d:0d:85:9f:7c:50:
                    9c:75:42:03:bc:54:ed:58:86:68:52:1c:dd:da:6a:
                    f8:9d:fe:e7:c3:6b:1d:bd:77:66:66:70:74:c7:69:
                    0d:0d:60:5f:68:80:d7:50:bf:c3:45:c6:52:01:51:
                    fb:3c:90:29:d4:21:52:aa:3c:7c:79:92:82:bf:99:
                    0b:3d:71:61:61:44:33:80:2c:f6:16:19:49:5a:c3:
                    d4:bb:b8:37:bb:53:f0:70:d6:a0:fc:9c:99:ba:33:
                    be:44:d8:ca:b6:9e:bd:21:cb:8e:57:2f:b8:4d:23:
                    c2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9E:BE:B2:A5:21:FE:FF:4A:9F:B3:5B:E0:80:D0:7A:3F:7C:83:30
            X509v3 Authority Key Identifier:
                keyid:A0:3E:27:34:74:BB:DF:DE:62:E6:5D:4B:92:BF:09:E5:B6:DC:64:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F1A4C7477FCA32AE59DF430EB6B4E46023A9340755706B493F9775064B1BD16/0/A03E273474BBDFDE62E65D4B92BF09E5B6DC6421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A03E273474BBDFDE62E65D4B92BF09E5B6DC6421.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F1A4C7477FCA32AE59DF430EB6B4E46023A9340755706B493F9775064B1BD16/0/34352e3138332e3234372e302f32342d3234203d3e20323639373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:ed:8a:bb:58:36:c7:11:84:aa:8f:8d:c3:80:33:92:9e:3b:
         4f:e5:2d:bc:b3:e1:c5:2e:26:0e:0f:0a:87:37:55:3b:e0:9f:
         da:a4:e4:d1:aa:49:87:a3:54:01:8f:a8:5b:8f:59:24:ff:29:
         29:95:e6:c5:5c:c2:3a:e0:2b:53:d6:49:0b:93:ae:42:50:8d:
         08:19:28:a0:2c:ac:50:d6:d9:ca:f6:83:d1:ab:44:20:fb:ba:
         4c:9f:27:99:a6:30:7b:8c:b3:d6:31:c8:e4:5d:e9:30:98:9e:
         ea:b5:50:15:e8:4f:5b:63:dd:5c:e7:d2:31:5a:25:d9:22:b6:
         f1:38:ee:8e:19:20:d4:a6:28:57:b7:1c:0a:ae:f1:f9:78:79:
         87:9a:b3:c7:77:24:37:d7:66:d7:bf:1d:74:50:0b:48:5b:d1:
         72:73:f2:ac:ff:7a:e0:69:6a:2d:c1:db:e8:97:10:7c:c5:5c:
         71:fc:c6:39:d9:ee:80:85:df:cb:b2:b0:7e:8b:74:39:ff:91:
         0d:2f:26:64:3d:4c:46:8f:d3:aa:47:37:6f:1a:bd:a2:57:f5:
         54:ad:bb:38:3d:c2:93:b0:98:0c:8a:aa:e0:61:c0:f2:15:4b:
         fc:5b:ab:4b:69:0f:98:bf:9e:21:6a:45:82:d8:13:1b:a0:1c:
         96:e3:80:40
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUX6HT6TtVNZqSUdfTAapEo+WjjowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTAzRTI3MzQ3NEJCREZERTYyRTY1RDRCOTJCRjA5RTVC
NkRDNjQyMTAeFw0yNTAyMDQxNzU1MTVaFw0yNjAyMDMxODAwMTVaMDMxMTAvBgNV
BAMTKDUxOUVCRUIyQTUyMUZFRkY0QTlGQjM1QkUwODBEMDdBM0Y3QzgzMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxTK2dWCmsR5TF4UB03fZO7f6I
VEuTNGJi3peY1T9pw9sgsWnd3L2BquE5hFKYhKx43Y+6nqNNKM0RXiPgNc5CmlFC
jAVQtkfAkavuFjdG+jp8DdOzN33Osiafkx0gd1JwiIbtJTH9d2cvgE1csWCRdGso
SsO96sSQHuJPvqjJzPM09co4QC/f3l5/dus2A00NhZ98UJx1QgO8VO1YhmhSHN3a
avid/ufDax29d2ZmcHTHaQ0NYF9ogNdQv8NFxlIBUfs8kCnUIVKqPHx5koK/mQs9
cWFhRDOALPYWGUlaw9S7uDe7U/Bw1qD8nJm6M75E2Mq2nr0hy45XL7hNI8LdAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUUZ6+sqUh/v9Kn7Nb4IDQej98gzAwHwYDVR0j
BBgwFoAUoD4nNHS7395i5l1Lkr8J5bbcZCEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRjFBNEM3NDc3RkNBMzJBRTU5REY0MzBFQjZCNEU0NjAy
M0E5MzQwNzU1NzA2QjQ5M0Y5Nzc1MDY0QjFCRDE2LzAvQTAzRTI3MzQ3NEJCREZE
RTYyRTY1RDRCOTJCRjA5RTVCNkRDNjQyMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMDNFMjczNDc0QkJERkRFNjJF
NjVENEI5MkJGMDlFNUI2REM2NDIxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkYxQTRDNzQ3N0ZDQTMyQUU1OURGNDMwRUI2QjRFNDYwMjNBOTM0MDc1
NTcwNkI0OTNGOTc3NTA2NEIxQkQxNi8wLzM0MzUyZTMxMzgzMzJlMzIzNDM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzczNzM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALbf3
MA0GCSqGSIb3DQEBCwUAA4IBAQBu7Yq7WDbHEYSqj43DgDOSnjtP5S28s+HFLiYO
DwqHN1U74J/apOTRqkmHo1QBj6hbj1kk/ykplebFXMI64CtT1kkLk65CUI0IGSig
LKxQ1tnK9oPRq0Qg+7pMnyeZpjB7jLPWMcjkXekwmJ7qtVAV6E9bY91c59IxWiXZ
IrbxOO6OGSDUpihXtxwKrvH5eHmHmrPHdyQ312bXvx10UAtIW9Fyc/Ks/3rgaWot
wdvolxB8xVxx/MY52e6Ahd/LsrB+i3Q5/5ENLyZkPUxGj9OqRzdvGr2iV/VUrbs4
PcKTsJgMiqrgYcDyFUv8W6tLaQ+Yv54hakWC2BMboByW44BA
-----END CERTIFICATE-----
Generated at Fri Apr 18 06:35:40 2025 by rpki-client