Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e36392e302f32342d3234203d3e20323634373538.roa
File:                     34352e3137382e36392e302f32342d3234203d3e20323634373538.roa (raw, json)
Hash identifier:          K0LeNs9HjCaGqxnvzoaHCLHFezfnHVeiGr6ITtCcZ/4=
Subject key identifier:   D7:79:9C:6E:AB:1D:30:FC:A8:38:04:A9:76:A8:B4:89:9B:DD:3B:C2
Certificate issuer:       /CN=DB636261E4B370BE1ABAE7E5B50921E00A6D5979
Certificate serial:       7F0CAA003C4ED6DAD1FA40F9F29CF7E1E2317DD8
Authority key identifier: DB:63:62:61:E4:B3:70:BE:1A:BA:E7:E5:B5:09:21:E0:0A:6D:59:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e36392e302f32342d3234203d3e20323634373538.roa
Signing time:             Tue 04 Feb 2025 18:33:56 +0000
ROA not before:           Tue 04 Feb 2025 18:28:56 +0000
ROA not after:            Tue 03 Feb 2026 18:33:56 +0000
asID:                     264758
IP address blocks:        45.178.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 06:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0c:aa:00:3c:4e:d6:da:d1:fa:40:f9:f2:9c:f7:e1:e2:31:7d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB636261E4B370BE1ABAE7E5B50921E00A6D5979
        Validity
            Not Before: Feb  4 18:28:56 2025 GMT
            Not After : Feb  3 18:33:56 2026 GMT
        Subject: CN=D7799C6EAB1D30FCA83804A976A8B4899BDD3BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:b8:fd:aa:21:7d:95:ab:67:12:a5:bb:a8:
                    83:b8:72:9d:05:d9:bc:e9:1d:3f:54:2b:19:a7:86:
                    7c:1b:f2:30:bf:e7:03:7b:db:3a:99:88:a4:5e:0a:
                    b5:05:be:ec:75:a9:32:e8:55:82:dc:8b:45:65:b9:
                    c0:af:29:f8:7d:a8:80:04:94:b5:85:bd:d1:41:91:
                    fc:76:df:a7:8b:33:03:60:0a:fc:93:c1:2e:85:09:
                    09:6f:f4:09:bd:04:39:fd:bd:26:43:77:49:e6:64:
                    1d:aa:80:ea:b4:dd:94:8e:3a:e9:3c:09:4b:67:3c:
                    31:c6:ae:96:ce:16:23:98:71:5e:86:3d:bf:1f:e5:
                    fc:4c:9e:de:61:49:cf:3d:d6:7f:62:cc:71:4b:e7:
                    83:dc:d9:af:1a:06:50:82:ad:d5:6d:7a:8a:4e:2f:
                    f2:22:75:ee:1e:d0:5c:54:cc:be:99:33:b8:4e:1e:
                    28:b8:e8:8d:85:da:22:97:3a:6c:b3:df:96:da:55:
                    e4:49:10:1b:79:5f:f4:cf:78:2a:b2:f5:66:a8:9a:
                    24:5c:50:76:14:b7:ad:2c:23:b8:cd:92:5b:f3:71:
                    ff:c5:b3:2b:7b:14:a9:20:60:bc:e1:f2:cf:45:00:
                    69:3f:f0:aa:93:55:b0:e0:2e:e2:f1:a1:07:3d:db:
                    2d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:79:9C:6E:AB:1D:30:FC:A8:38:04:A9:76:A8:B4:89:9B:DD:3B:C2
            X509v3 Authority Key Identifier:
                keyid:DB:63:62:61:E4:B3:70:BE:1A:BA:E7:E5:B5:09:21:E0:0A:6D:59:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e36392e302f32342d3234203d3e20323634373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:ac:41:ed:19:82:3c:f4:8c:2e:fb:c5:04:54:d0:9d:32:f2:
         ad:6a:d3:fb:31:e3:99:0d:63:5f:43:12:32:c3:2b:11:1a:8a:
         6a:19:27:69:93:30:97:56:6f:9b:bd:91:1d:d0:6a:d7:35:75:
         41:7a:ae:10:70:5d:12:1c:f6:5e:73:ee:a1:8a:f1:20:e7:c1:
         5a:e4:1c:13:74:2d:dc:e0:c1:e5:d3:c6:2e:23:82:b8:ba:a4:
         1c:d5:59:c9:0e:79:0a:8e:5e:4e:68:5b:82:e8:25:2a:72:63:
         9d:a7:ab:64:1c:a4:f5:c6:8c:30:30:ed:b9:96:a4:c8:49:f2:
         37:3f:7a:7c:de:da:8d:e0:7e:fc:bb:3a:a6:8a:99:a1:d5:dc:
         d1:c0:d6:51:f8:57:7c:0e:e2:74:c2:4b:09:70:6f:e6:57:d4:
         a3:58:ff:3f:56:e5:e0:69:c7:2f:8f:30:c1:19:8b:32:76:ca:
         7d:6d:2f:fb:f2:d8:54:27:d6:61:cb:5d:f5:fd:54:10:27:87:
         2c:1a:9d:fe:fc:ab:6a:5a:53:69:75:c7:2e:32:92:58:ef:e4:
         43:a8:ac:6f:27:23:6f:fd:f9:88:16:cb:2a:85:88:e5:ac:54:
         f8:55:13:2f:da:08:2e:ef:dc:9d:83:fb:85:b7:ac:77:ad:54:
         9d:91:5d:97
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfwyqADxO1trR+kD58pz34eIxfdgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI2MzYyNjFFNEIzNzBCRTFBQkFFN0U1QjUwOTIxRTAw
QTZENTk3OTAeFw0yNTAyMDQxODI4NTZaFw0yNjAyMDMxODMzNTZaMDMxMTAvBgNV
BAMTKEQ3Nzk5QzZFQUIxRDMwRkNBODM4MDRBOTc2QThCNDg5OUJERDNCQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwl7j9qiF9latnEqW7qIO4cp0F
2bzpHT9UKxmnhnwb8jC/5wN72zqZiKReCrUFvux1qTLoVYLci0VlucCvKfh9qIAE
lLWFvdFBkfx236eLMwNgCvyTwS6FCQlv9Am9BDn9vSZDd0nmZB2qgOq03ZSOOuk8
CUtnPDHGrpbOFiOYcV6GPb8f5fxMnt5hSc891n9izHFL54Pc2a8aBlCCrdVteopO
L/Iide4e0FxUzL6ZM7hOHii46I2F2iKXOmyz35baVeRJEBt5X/TPeCqy9WaomiRc
UHYUt60sI7jNklvzcf/Fsyt7FKkgYLzh8s9FAGk/8KqTVbDgLuLxoQc92y3ZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU13mcbqsdMPyoOASpdqi0iZvdO8IwHwYDVR0j
BBgwFoAU22NiYeSzcL4auufltQkh4AptWXkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zREYxMDcwNTczMEExRTREOEM0OTNGMjc5MEI2RjY5RDZD
MTNBMTREMTExRTkxMjg0REY4OEZBQkFCRUEyRTgyLzAvREI2MzYyNjFFNEIzNzBC
RTFBQkFFN0U1QjUwOTIxRTAwQTZENTk3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjYzNjI2MUU0QjM3MEJFMUFC
QUU3RTVCNTA5MjFFMDBBNkQ1OTc5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0RGMTA3MDU3MzBBMUU0RDhDNDkzRjI3OTBCNkY2OUQ2QzEzQTE0RDEx
MUU5MTI4NERGODhGQUJBQkVBMkU4Mi8wLzM0MzUyZTMxMzczODJlMzYzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNDM3MzUzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2yRTAN
BgkqhkiG9w0BAQsFAAOCAQEA36xB7RmCPPSMLvvFBFTQnTLyrWrT+zHjmQ1jX0MS
MsMrERqKahknaZMwl1Zvm72RHdBq1zV1QXquEHBdEhz2XnPuoYrxIOfBWuQcE3Qt
3ODB5dPGLiOCuLqkHNVZyQ55Co5eTmhbguglKnJjnaerZByk9caMMDDtuZakyEny
Nz96fN7ajeB+/Ls6poqZodXc0cDWUfhXfA7idMJLCXBv5lfUo1j/P1bl4GnHL48w
wRmLMnbKfW0v+/LYVCfWYctd9f1UECeHLBqd/vyralpTaXXHLjKSWO/kQ6isbycj
b/35iBbLKoWI5axU+FUTL9oILu/cnYP7hbesd61UnZFdlw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:05 2025 by rpki-client