Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3550B7AE8DCD874D7FFA3A6D40723D4C1B616BA57DE88EFDDFEF6DCD9DA4FDDB/0/34352e3136372e3234382e302f32342d3234203d3e20323732393239.roa
File:                     34352e3136372e3234382e302f32342d3234203d3e20323732393239.roa (raw, json)
Hash identifier:          GwvmSdnfBzOxIpi0xfH2HDLgs88/DGL1WKblYFqF/4A=
Subject key identifier:   EA:7F:8D:BE:D7:AE:25:96:26:5C:76:C5:DA:97:0E:FF:A0:9A:D3:A8
Certificate issuer:       /CN=A18333048C43710CA4783E73FD39659E7AC094BD
Certificate serial:       2F460116B8E23075268B088EEC106425396E19A6
Authority key identifier: A1:83:33:04:8C:43:71:0C:A4:78:3E:73:FD:39:65:9E:7A:C0:94:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A18333048C43710CA4783E73FD39659E7AC094BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3550B7AE8DCD874D7FFA3A6D40723D4C1B616BA57DE88EFDDFEF6DCD9DA4FDDB/0/34352e3136372e3234382e302f32342d3234203d3e20323732393239.roa
Signing time:             Tue 04 Feb 2025 18:19:10 +0000
ROA not before:           Tue 04 Feb 2025 18:14:10 +0000
ROA not after:            Tue 03 Feb 2026 18:19:10 +0000
asID:                     272929
IP address blocks:        45.167.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3550B7AE8DCD874D7FFA3A6D40723D4C1B616BA57DE88EFDDFEF6DCD9DA4FDDB/0/A18333048C43710CA4783E73FD39659E7AC094BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3550B7AE8DCD874D7FFA3A6D40723D4C1B616BA57DE88EFDDFEF6DCD9DA4FDDB/0/A18333048C43710CA4783E73FD39659E7AC094BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A18333048C43710CA4783E73FD39659E7AC094BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:46:01:16:b8:e2:30:75:26:8b:08:8e:ec:10:64:25:39:6e:19:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A18333048C43710CA4783E73FD39659E7AC094BD
        Validity
            Not Before: Feb  4 18:14:10 2025 GMT
            Not After : Feb  3 18:19:10 2026 GMT
        Subject: CN=EA7F8DBED7AE2596265C76C5DA970EFFA09AD3A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3f:d5:ea:7b:0e:ec:1b:5d:64:24:e3:f0:84:
                    42:b6:81:a0:ad:b8:4a:46:7c:f9:24:82:98:ee:f0:
                    7f:35:d5:0a:42:32:cd:56:71:99:37:b0:6b:5e:bc:
                    ec:6a:cc:17:47:1a:73:ef:76:99:be:f6:5a:d7:98:
                    bd:b3:fe:80:9c:40:32:ea:7a:f3:28:84:02:5d:b5:
                    80:2f:b0:39:a9:ac:a9:ba:43:c4:c8:b6:69:d7:95:
                    fb:57:85:4f:ce:d3:b2:52:e8:4a:0c:01:34:f4:7c:
                    c9:69:73:5c:ad:fe:0c:f2:83:26:58:78:8e:c3:19:
                    0b:c3:57:46:74:1d:09:e4:2b:76:c8:dd:ab:d6:fd:
                    38:71:90:0c:c3:2e:66:16:28:56:56:1d:8c:90:a6:
                    6d:8a:78:27:9c:97:d3:56:fb:f7:51:d6:a1:9e:77:
                    01:44:73:19:5b:f8:0a:f1:a8:99:19:c0:ea:87:16:
                    2d:6f:44:92:89:17:5e:8a:e0:83:fc:65:35:3f:69:
                    b6:cf:c8:c1:69:9a:dd:cd:4e:89:eb:ed:da:74:71:
                    ca:c9:05:68:02:43:0f:4f:8a:15:c1:a4:52:41:62:
                    29:88:97:56:62:30:63:78:c3:49:d3:04:44:35:12:
                    f5:34:5f:a2:12:96:66:8c:81:65:30:56:50:2d:55:
                    b9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7F:8D:BE:D7:AE:25:96:26:5C:76:C5:DA:97:0E:FF:A0:9A:D3:A8
            X509v3 Authority Key Identifier:
                keyid:A1:83:33:04:8C:43:71:0C:A4:78:3E:73:FD:39:65:9E:7A:C0:94:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3550B7AE8DCD874D7FFA3A6D40723D4C1B616BA57DE88EFDDFEF6DCD9DA4FDDB/0/A18333048C43710CA4783E73FD39659E7AC094BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A18333048C43710CA4783E73FD39659E7AC094BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3550B7AE8DCD874D7FFA3A6D40723D4C1B616BA57DE88EFDDFEF6DCD9DA4FDDB/0/34352e3136372e3234382e302f32342d3234203d3e20323732393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:9b:8e:38:d3:8f:68:5b:58:3b:73:cd:8f:06:7d:5f:12:e7:
         25:69:ea:30:93:05:01:0b:c6:e8:36:b1:3c:69:68:bd:fd:0e:
         df:68:77:f1:bd:fb:06:25:b8:2f:43:83:1f:c4:1d:9d:f0:60:
         a6:43:7c:82:b7:5a:74:91:62:2c:55:ad:f2:f6:38:6b:98:1f:
         6b:de:0c:e2:88:fb:60:65:84:5b:e9:ef:1e:e8:5a:be:38:b2:
         c5:4f:ae:19:a3:0c:87:ec:13:2b:29:d4:eb:16:2c:24:41:dd:
         85:f8:1d:6c:01:4f:38:3d:ac:77:ea:83:0a:b6:58:a4:b3:19:
         92:c7:65:90:b2:81:c9:97:70:86:2c:62:62:ea:5a:2b:09:ff:
         98:03:20:47:84:73:a6:31:46:77:c4:a8:2e:20:cb:88:71:60:
         28:c1:7e:d5:08:29:ff:ec:42:f8:02:d3:b1:14:10:b1:39:48:
         16:16:57:c3:d6:4b:20:5f:94:72:68:c8:92:25:2c:4f:81:ae:
         db:0c:7c:04:49:ee:62:7d:78:26:8d:bc:5e:cc:72:95:9b:e2:
         d5:f7:5f:15:05:d5:1c:a7:ae:1f:e4:4d:f7:3a:81:f9:3d:18:
         45:20:26:48:9a:be:7f:b9:d2:7f:3e:c3:c5:cd:6b:74:a3:8d:
         3b:96:5c:2b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUL0YBFrjiMHUmiwiO7BBkJTluGaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE4MzMzMDQ4QzQzNzEwQ0E0NzgzRTczRkQzOTY1OUU3
QUMwOTRCRDAeFw0yNTAyMDQxODE0MTBaFw0yNjAyMDMxODE5MTBaMDMxMTAvBgNV
BAMTKEVBN0Y4REJFRDdBRTI1OTYyNjVDNzZDNURBOTcwRUZGQTA5QUQzQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3P9Xqew7sG11kJOPwhEK2gaCt
uEpGfPkkgpju8H811QpCMs1WcZk3sGtevOxqzBdHGnPvdpm+9lrXmL2z/oCcQDLq
evMohAJdtYAvsDmprKm6Q8TItmnXlftXhU/O07JS6EoMATT0fMlpc1yt/gzygyZY
eI7DGQvDV0Z0HQnkK3bI3avW/ThxkAzDLmYWKFZWHYyQpm2KeCecl9NW+/dR1qGe
dwFEcxlb+ArxqJkZwOqHFi1vRJKJF16K4IP8ZTU/abbPyMFpmt3NTonr7dp0ccrJ
BWgCQw9PihXBpFJBYimIl1ZiMGN4w0nTBEQ1EvU0X6ISlmaMgWUwVlAtVblXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU6n+NvteuJZYmXHbF2pcO/6Ca06gwHwYDVR0j
BBgwFoAUoYMzBIxDcQykeD5z/TllnnrAlL0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNTUwQjdBRThEQ0Q4NzREN0ZGQTNBNkQ0MDcyM0Q0QzFC
NjE2QkE1N0RFODhFRkRERkVGNkRDRDlEQTRGRERCLzAvQTE4MzMzMDQ4QzQzNzEw
Q0E0NzgzRTczRkQzOTY1OUU3QUMwOTRCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMTgzMzMwNDhDNDM3MTBDQTQ3
ODNFNzNGRDM5NjU5RTdBQzA5NEJELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzU1MEI3QUU4RENEODc0RDdGRkEzQTZENDA3MjNENEMxQjYxNkJBNTdE
RTg4RUZEREZFRjZEQ0Q5REE0RkREQi8wLzM0MzUyZTMxMzYzNzJlMzIzNDM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzkzMjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALaf4
MA0GCSqGSIb3DQEBCwUAA4IBAQAgm444049oW1g7c82PBn1fEuclaeowkwUBC8bo
NrE8aWi9/Q7faHfxvfsGJbgvQ4MfxB2d8GCmQ3yCt1p0kWIsVa3y9jhrmB9r3gzi
iPtgZYRb6e8e6Fq+OLLFT64ZowyH7BMrKdTrFiwkQd2F+B1sAU84Pax36oMKtlik
sxmSx2WQsoHJl3CGLGJi6lorCf+YAyBHhHOmMUZ3xKguIMuIcWAowX7VCCn/7EL4
AtOxFBCxOUgWFlfD1ksgX5RyaMiSJSxPga7bDHwESe5ifXgmjbxezHKVm+LV918V
BdUcp64f5E33OoH5PRhFICZImr5/udJ/PsPFzWt0o407llwr
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:07 2025 by rpki-client