Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32302e302f32332d3234203d3e20323634363638.roa
File:                     34352e3232342e32302e302f32332d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          Q4+PaWS7Z4TtoOBMTI1KSRxRxh9DyJg0Ln+EQMGwO80=
Subject key identifier:   6B:DD:F3:79:B2:A3:7D:FF:85:9E:64:18:AC:26:43:12:37:68:2F:DA
Certificate issuer:       /CN=665E210B6EA50ABEA68925B6683D57E0A94D5CCF
Certificate serial:       5A14C12109783BF25CDDC6CF401EDF5CC576B6AB
Authority key identifier: 66:5E:21:0B:6E:A5:0A:BE:A6:89:25:B6:68:3D:57:E0:A9:4D:5C:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32302e302f32332d3234203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:16:51 +0000
ROA not before:           Tue 04 Feb 2025 18:11:51 +0000
ROA not after:            Tue 03 Feb 2026 18:16:51 +0000
asID:                     264668
IP address blocks:        45.224.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:14:c1:21:09:78:3b:f2:5c:dd:c6:cf:40:1e:df:5c:c5:76:b6:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665E210B6EA50ABEA68925B6683D57E0A94D5CCF
        Validity
            Not Before: Feb  4 18:11:51 2025 GMT
            Not After : Feb  3 18:16:51 2026 GMT
        Subject: CN=6BDDF379B2A37DFF859E6418AC26431237682FDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:3b:83:25:d2:bc:a1:96:46:99:67:0a:fe:
                    01:1c:b8:30:3b:c7:8d:c7:ea:66:3b:26:da:29:d8:
                    e3:fa:60:4d:30:15:62:24:86:f9:a9:16:33:1f:d3:
                    a0:07:fd:06:0c:08:57:9b:4b:96:31:4e:ed:e7:a0:
                    55:e5:b7:b5:6d:15:c7:ac:84:b3:85:63:ae:60:18:
                    07:e9:fc:b2:d3:23:d7:34:f4:4d:5d:7b:8a:b1:7b:
                    c4:8e:65:7b:74:db:a1:c0:23:51:b6:62:61:36:42:
                    ab:a5:01:a4:f7:c6:93:fe:72:91:16:6b:1c:b2:07:
                    65:4a:f6:e5:9d:0a:48:da:3a:d4:a6:13:c5:cc:cc:
                    89:f3:5d:be:53:94:6a:44:44:fc:0e:0b:23:e8:1d:
                    f9:7a:a6:65:a4:2d:da:d2:16:90:26:95:f4:f7:e4:
                    42:86:3b:8c:68:dc:3a:c6:3d:a6:68:d7:43:d5:ce:
                    36:4b:77:9d:1c:0a:3f:d5:a6:10:92:9f:ee:19:ca:
                    7d:20:4e:40:51:d9:cc:b9:4b:37:1e:a7:0d:d2:c4:
                    32:33:07:36:88:59:70:e8:23:00:95:f9:f7:b0:13:
                    29:f6:03:19:28:61:17:a3:0b:df:f5:0b:7e:be:91:
                    ac:7c:27:15:48:65:2d:90:e8:6f:f6:d9:5e:cc:21:
                    91:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DD:F3:79:B2:A3:7D:FF:85:9E:64:18:AC:26:43:12:37:68:2F:DA
            X509v3 Authority Key Identifier:
                keyid:66:5E:21:0B:6E:A5:0A:BE:A6:89:25:B6:68:3D:57:E0:A9:4D:5C:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32302e302f32332d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:96:58:99:c9:5e:3a:e3:12:56:26:60:a7:12:7f:88:e5:e2:
         3e:f7:c8:b6:02:1a:fe:0f:03:81:a3:25:87:81:33:01:c1:77:
         63:91:23:a4:bc:e5:4e:eb:ae:ad:6d:22:43:a6:4b:5c:44:eb:
         00:d4:e6:79:c2:61:3b:d8:18:24:ee:59:df:7d:d1:61:e7:55:
         63:50:89:72:d8:37:f7:c9:bd:5c:a1:7a:1c:bb:ed:35:fa:f4:
         28:ab:7d:24:5a:70:e7:27:8b:55:1f:b7:98:12:eb:58:aa:dd:
         ee:30:fd:96:e8:58:0b:7b:19:44:23:97:16:69:25:ba:55:74:
         e6:3e:1e:4c:73:7a:bc:5e:13:b0:e4:d0:a6:68:d7:f2:6e:d7:
         8f:de:1c:40:2e:bf:00:c9:05:a0:35:dd:48:de:5c:a1:28:72:
         8a:66:ab:8a:9f:a6:5a:c4:29:44:8d:9c:06:09:55:47:84:17:
         23:35:91:f1:84:9f:c3:b2:c7:b5:23:cd:b8:29:2b:99:38:1f:
         c5:db:1c:e6:74:c2:39:3d:e2:26:f2:2e:a7:f7:ec:90:93:bf:
         4f:3b:7d:99:52:6b:cf:af:af:4c:d0:02:db:ee:53:4b:f5:f5:
         e5:8f:aa:79:f4:ef:d7:f8:43:ec:81:cc:f3:35:64:09:b6:6c:
         f2:35:20:50
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWhTBIQl4O/Jc3cbPQB7fXMV2tqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY1RTIxMEI2RUE1MEFCRUE2ODkyNUI2NjgzRDU3RTBB
OTRENUNDRjAeFw0yNTAyMDQxODExNTFaFw0yNjAyMDMxODE2NTFaMDMxMTAvBgNV
BAMTKDZCRERGMzc5QjJBMzdERkY4NTlFNjQxOEFDMjY0MzEyMzc2ODJGREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBUDuDJdK8oZZGmWcK/gEcuDA7
x43H6mY7Jtop2OP6YE0wFWIkhvmpFjMf06AH/QYMCFebS5YxTu3noFXlt7VtFces
hLOFY65gGAfp/LLTI9c09E1de4qxe8SOZXt026HAI1G2YmE2QqulAaT3xpP+cpEW
axyyB2VK9uWdCkjaOtSmE8XMzInzXb5TlGpERPwOCyPoHfl6pmWkLdrSFpAmlfT3
5EKGO4xo3DrGPaZo10PVzjZLd50cCj/VphCSn+4Zyn0gTkBR2cy5Szcepw3SxDIz
BzaIWXDoIwCV+fewEyn2AxkoYRejC9/1C36+kax8JxVIZS2Q6G/22V7MIZGxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUa93zebKjff+FnmQYrCZDEjdoL9owHwYDVR0j
BBgwFoAUZl4hC26lCr6miSW2aD1X4KlNXM8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTY4M0RCMkVCRTQ4NEM3QTM1MzZDMzRDMTU4MjA2Qjg0
M0QzQ0VGOTExNDZDNDlDRjk3RkM0NjY4RkFENDFDLzAvNjY1RTIxMEI2RUE1MEFC
RUE2ODkyNUI2NjgzRDU3RTBBOTRENUNDRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NjVFMjEwQjZFQTUwQUJFQTY4
OTI1QjY2ODNENTdFMEE5NEQ1Q0NGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E2ODNEQjJFQkU0ODRDN0EzNTM2QzM0QzE1ODIwNkI4NDNEM0NFRjkx
MTQ2QzQ5Q0Y5N0ZDNDY2OEZBRDQxQy8wLzM0MzUyZTMyMzIzNDJlMzIzMDJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYzNDM2MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS3gFDAN
BgkqhkiG9w0BAQsFAAOCAQEAl5ZYmcleOuMSViZgpxJ/iOXiPvfItgIa/g8DgaMl
h4EzAcF3Y5EjpLzlTuuurW0iQ6ZLXETrANTmecJhO9gYJO5Z333RYedVY1CJctg3
98m9XKF6HLvtNfr0KKt9JFpw5yeLVR+3mBLrWKrd7jD9luhYC3sZRCOXFmklulV0
5j4eTHN6vF4TsOTQpmjX8m7Xj94cQC6/AMkFoDXdSN5coShyimarip+mWsQpRI2c
BglVR4QXIzWR8YSfw7LHtSPNuCkrmTgfxdsc5nTCOT3iJvIup/fskJO/Tzt9mVJr
z6+vTNAC2+5TS/X15Y+qefTv1/hD7IHM8zVkCbZs8jUgUA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:03 2025 by rpki-client