Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/34352e3138332e35322e302f32322d3234203d3e20323639373539.roa
File:                     34352e3138332e35322e302f32322d3234203d3e20323639373539.roa (raw, json)
Hash identifier:          o5sPVj3JYgs64u+EOv8s2Rri+veHHZqm8wny0Ts486s=
Subject key identifier:   9B:63:DF:98:E2:85:83:D3:BC:16:FF:68:ED:F4:E4:78:CA:9B:41:D6
Certificate issuer:       /CN=FD653B1E827221FC7B80694271984B30114955E0
Certificate serial:       74FEF75EAD58725A4D0F00A0DA35F7D062B3CFF4
Authority key identifier: FD:65:3B:1E:82:72:21:FC:7B:80:69:42:71:98:4B:30:11:49:55:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD653B1E827221FC7B80694271984B30114955E0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/34352e3138332e35322e302f32322d3234203d3e20323639373539.roa
Signing time:             Tue 04 Feb 2025 18:33:19 +0000
ROA not before:           Tue 04 Feb 2025 18:28:19 +0000
ROA not after:            Tue 03 Feb 2026 18:33:19 +0000
asID:                     269759
IP address blocks:        45.183.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/FD653B1E827221FC7B80694271984B30114955E0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/FD653B1E827221FC7B80694271984B30114955E0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD653B1E827221FC7B80694271984B30114955E0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fe:f7:5e:ad:58:72:5a:4d:0f:00:a0:da:35:f7:d0:62:b3:cf:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD653B1E827221FC7B80694271984B30114955E0
        Validity
            Not Before: Feb  4 18:28:19 2025 GMT
            Not After : Feb  3 18:33:19 2026 GMT
        Subject: CN=9B63DF98E28583D3BC16FF68EDF4E478CA9B41D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:ef:30:af:4b:47:45:75:5a:3f:43:94:4d:
                    ec:fb:fe:73:e4:1e:e3:78:95:05:19:96:f2:9c:85:
                    48:4f:39:c2:8f:2b:40:ff:f9:fa:21:76:a2:b5:52:
                    9c:49:0b:6a:85:fb:03:b4:19:1e:db:48:3c:1a:9d:
                    f1:5d:e1:79:09:86:ec:61:2b:4e:b9:8f:e9:17:6e:
                    6b:2d:0d:de:25:c3:43:7f:d9:63:b0:99:d3:10:4b:
                    c7:e7:3f:91:89:b2:ca:1a:70:a5:7c:c8:d2:d7:70:
                    b3:45:e6:4b:a3:b6:66:23:d3:a7:ec:fb:48:15:3d:
                    fb:82:14:73:9f:d2:01:74:f3:1d:d0:76:71:7b:15:
                    8f:40:9e:3e:81:0b:b2:c1:51:b6:a8:93:4d:94:44:
                    ac:45:64:cd:1a:71:4c:45:22:43:fb:a8:8d:e5:ce:
                    44:ee:4f:55:21:15:ff:00:70:b7:0c:12:fa:ae:5e:
                    db:77:bb:24:8c:57:c7:f5:07:90:f4:c9:48:8e:d8:
                    a3:da:57:a0:12:f2:36:a8:34:f1:b7:d3:e3:06:9c:
                    97:37:bc:e3:aa:e6:06:87:1e:a9:61:55:27:ab:19:
                    ed:1c:fb:76:38:ba:6b:bb:41:b8:db:fd:03:62:a4:
                    44:74:1d:e0:ef:a8:0f:4e:55:7b:be:f1:6e:0e:d5:
                    06:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:63:DF:98:E2:85:83:D3:BC:16:FF:68:ED:F4:E4:78:CA:9B:41:D6
            X509v3 Authority Key Identifier:
                keyid:FD:65:3B:1E:82:72:21:FC:7B:80:69:42:71:98:4B:30:11:49:55:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/FD653B1E827221FC7B80694271984B30114955E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD653B1E827221FC7B80694271984B30114955E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/34352e3138332e35322e302f32322d3234203d3e20323639373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:92:61:2f:ba:87:2c:fb:9a:19:9a:5c:82:74:32:5d:88:4d:
         12:58:4a:11:7d:e9:4d:a2:65:0d:1c:a9:7b:8b:22:e8:d6:de:
         ac:d2:1f:1b:26:c4:a1:50:27:c2:19:56:00:68:dd:07:4f:0a:
         8b:c1:55:fa:3a:a5:c3:b2:cd:41:19:0f:48:a3:c9:e6:66:d2:
         6a:4e:16:b5:e2:28:3e:21:36:fa:68:9a:5f:2e:84:09:6e:1c:
         20:63:b9:90:09:9c:bb:df:1d:c4:18:0c:6c:6c:ce:9c:40:f6:
         d0:b6:34:62:70:56:6b:63:a8:7f:bf:6b:1f:20:6e:8b:99:d5:
         46:a4:90:e8:cd:d0:65:6a:b0:79:83:d3:50:a7:7c:f9:eb:2b:
         c4:1e:57:dc:00:7e:63:b6:77:d4:06:c2:83:01:37:f1:fd:1f:
         b2:a9:52:95:6d:83:b4:3b:e9:9b:61:5f:07:97:48:9d:68:f7:
         1a:80:fb:75:10:52:69:43:0d:8c:2e:a7:f5:61:40:c4:1b:fb:
         66:2f:63:7e:8c:9e:81:bd:c5:00:f6:1a:07:bc:21:38:73:7c:
         eb:f0:39:ab:1d:92:85:11:b2:28:c1:5c:c3:54:e0:db:df:10:
         87:19:36:b3:d7:3d:08:01:d9:d6:a3:3d:7e:ab:27:59:86:7a:
         e4:74:f3:09
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdP73Xq1YclpNDwCg2jX30GKzz/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ2NTNCMUU4MjcyMjFGQzdCODA2OTQyNzE5ODRCMzAx
MTQ5NTVFMDAeFw0yNTAyMDQxODI4MTlaFw0yNjAyMDMxODMzMTlaMDMxMTAvBgNV
BAMTKDlCNjNERjk4RTI4NTgzRDNCQzE2RkY2OEVERjRFNDc4Q0E5QjQxRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEpe8wr0tHRXVaP0OUTez7/nPk
HuN4lQUZlvKchUhPOcKPK0D/+fohdqK1UpxJC2qF+wO0GR7bSDwanfFd4XkJhuxh
K065j+kXbmstDd4lw0N/2WOwmdMQS8fnP5GJssoacKV8yNLXcLNF5kujtmYj06fs
+0gVPfuCFHOf0gF08x3QdnF7FY9Anj6BC7LBUbaok02URKxFZM0acUxFIkP7qI3l
zkTuT1UhFf8AcLcMEvquXtt3uySMV8f1B5D0yUiO2KPaV6AS8jaoNPG30+MGnJc3
vOOq5gaHHqlhVSerGe0c+3Y4umu7Qbjb/QNipER0HeDvqA9OVXu+8W4O1QahAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUm2PfmOKFg9O8Fv9o7fTkeMqbQdYwHwYDVR0j
BBgwFoAU/WU7HoJyIfx7gGlCcZhLMBFJVeAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMjkwMTJBNDgyMzJGQkJCMDdBMTUxMjA0QUFGMzRBOTI4
MERBNUVDMDc3MzZDNTQ5RDI4N0ZEQUEwODMxNzEzLzAvRkQ2NTNCMUU4MjcyMjFG
QzdCODA2OTQyNzE5ODRCMzAxMTQ5NTVFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRDY1M0IxRTgyNzIyMUZDN0I4
MDY5NDI3MTk4NEIzMDExNDk1NUUwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzI5MDEyQTQ4MjMyRkJCQjA3QTE1MTIwNEFBRjM0QTkyODBEQTVFQzA3
NzM2QzU0OUQyODdGREFBMDgzMTcxMy8wLzM0MzUyZTMxMzgzMzJlMzUzMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzOTM3MzUzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi23NDAN
BgkqhkiG9w0BAQsFAAOCAQEAC5JhL7qHLPuaGZpcgnQyXYhNElhKEX3pTaJlDRyp
e4si6NberNIfGybEoVAnwhlWAGjdB08Ki8FV+jqlw7LNQRkPSKPJ5mbSak4WteIo
PiE2+miaXy6ECW4cIGO5kAmcu98dxBgMbGzOnED20LY0YnBWa2Oof79rHyBui5nV
RqSQ6M3QZWqweYPTUKd8+esrxB5X3AB+Y7Z31AbCgwE38f0fsqlSlW2DtDvpm2Ff
B5dInWj3GoD7dRBSaUMNjC6n9WFAxBv7Zi9jfoyegb3FAPYaB7whOHN86/A5qx2S
hRGyKMFcw1Tg298Qhxk2s9c9CAHZ1qM9fqsnWYZ65HTzCQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:38:18 2025 by rpki-client