Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/34352e3136342e3130382e302f32322d3234203d3e203238343431.roa
File:                     34352e3136342e3130382e302f32322d3234203d3e203238343431.roa (raw, json)
Hash identifier:          FZ/ToJSDVA+/z6gj7agzP3+M2/gq86aV54y856+5jAs=
Subject key identifier:   D8:DF:C4:6B:D0:14:21:4F:46:7A:86:7B:31:F9:3E:62:92:4B:1F:74
Certificate issuer:       /CN=291BF264E3DFBE29A5D52AE24CE1243DF6F398C2
Certificate serial:       5B9149F7303BF83E870FF26899468DA14AFBAB21
Authority key identifier: 29:1B:F2:64:E3:DF:BE:29:A5:D5:2A:E2:4C:E1:24:3D:F6:F3:98:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/34352e3136342e3130382e302f32322d3234203d3e203238343431.roa
Signing time:             Tue 04 Feb 2025 18:45:43 +0000
ROA not before:           Tue 04 Feb 2025 18:40:43 +0000
ROA not after:            Tue 03 Feb 2026 18:45:43 +0000
asID:                     28441
IP address blocks:        45.164.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:91:49:f7:30:3b:f8:3e:87:0f:f2:68:99:46:8d:a1:4a:fb:ab:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291BF264E3DFBE29A5D52AE24CE1243DF6F398C2
        Validity
            Not Before: Feb  4 18:40:43 2025 GMT
            Not After : Feb  3 18:45:43 2026 GMT
        Subject: CN=D8DFC46BD014214F467A867B31F93E62924B1F74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:dc:0d:51:a9:11:4b:37:f9:5e:da:29:68:03:
                    e9:6e:cd:83:b4:37:ee:ff:7a:67:fd:02:b0:92:10:
                    88:1b:53:93:0d:d0:15:ae:db:10:c1:63:fb:a8:e7:
                    1c:37:d4:52:db:69:01:6c:fe:59:ee:01:8a:c6:d8:
                    11:8e:96:39:6b:99:6e:97:fb:d4:22:6e:9e:af:f9:
                    cc:89:56:e9:2c:11:b6:8e:c1:95:3f:92:75:e2:37:
                    47:1c:95:d7:80:b8:2c:06:d5:d2:b2:a8:49:af:3b:
                    fa:d2:38:b4:a3:67:a4:42:d0:2e:15:13:23:4d:41:
                    c1:25:48:f5:6d:0d:d0:a3:7b:89:a0:03:1a:1e:55:
                    74:d8:27:ba:3b:63:92:64:b4:c2:d7:37:a1:eb:d6:
                    05:d4:02:be:e8:bd:fb:39:72:33:f2:bc:bf:5e:7f:
                    a3:d5:93:dd:74:02:e3:cc:52:65:ca:10:ce:32:1f:
                    08:9b:b3:48:e7:ad:46:d4:fb:13:ba:18:c9:ed:9d:
                    48:44:8e:8b:88:c7:4b:50:0f:67:ca:d6:35:a3:81:
                    ac:09:46:2b:20:be:f3:ed:ff:2a:47:06:bd:20:5b:
                    20:e6:ee:13:0f:97:67:12:ba:2f:c7:91:6c:a2:e1:
                    e5:f6:9d:d7:6e:69:23:a9:90:dc:6b:d2:87:77:09:
                    5d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DF:C4:6B:D0:14:21:4F:46:7A:86:7B:31:F9:3E:62:92:4B:1F:74
            X509v3 Authority Key Identifier:
                keyid:29:1B:F2:64:E3:DF:BE:29:A5:D5:2A:E2:4C:E1:24:3D:F6:F3:98:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/34352e3136342e3130382e302f32322d3234203d3e203238343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:96:a7:77:0e:4c:35:9e:ab:61:f1:04:e9:35:80:cf:b0:be:
         a3:50:72:86:6a:b1:5c:fb:6f:39:87:32:88:2a:7f:2d:58:b0:
         b3:a7:aa:63:75:86:48:90:d7:47:c0:6a:d0:9a:5f:4f:c1:eb:
         56:84:7d:2c:fe:bd:b3:96:2b:5f:9a:7f:c3:71:1e:7b:12:31:
         bf:9f:65:b0:6b:6c:41:d8:9f:d2:42:de:51:24:ab:36:0c:8f:
         c6:93:24:0a:08:81:4b:1a:7b:4e:da:c1:cd:c2:d7:4f:4e:02:
         76:f3:a7:ad:fd:5a:77:83:55:12:d3:98:d5:9e:62:0d:0a:20:
         37:7d:65:07:07:23:5b:e8:af:93:66:92:44:c3:c3:bd:66:ff:
         c9:1f:40:5e:34:74:c4:f2:ce:45:d9:c8:02:2e:46:a0:2e:2d:
         6f:e3:11:18:1e:2b:b4:67:2f:8f:a4:5d:45:a0:18:4e:82:f3:
         55:18:7c:b6:f3:01:d3:e2:b6:71:45:25:b7:0b:29:e2:98:d8:
         cf:d6:57:0b:8f:61:57:a8:30:b2:de:29:bb:1d:46:b0:33:a5:
         1e:8d:93:fe:18:82:99:77:69:65:45:51:6c:b0:74:fe:e8:ca:
         ac:2a:3f:32:db:58:70:c5:4e:62:63:d7:63:ca:13:d6:60:20:
         9c:b0:f4:5f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUW5FJ9zA7+D6HD/JomUaNoUr7qyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkxQkYyNjRFM0RGQkUyOUE1RDUyQUUyNENFMTI0M0RG
NkYzOThDMjAeFw0yNTAyMDQxODQwNDNaFw0yNjAyMDMxODQ1NDNaMDMxMTAvBgNV
BAMTKEQ4REZDNDZCRDAxNDIxNEY0NjdBODY3QjMxRjkzRTYyOTI0QjFGNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO3A1RqRFLN/le2iloA+luzYO0
N+7/emf9ArCSEIgbU5MN0BWu2xDBY/uo5xw31FLbaQFs/lnuAYrG2BGOljlrmW6X
+9Qibp6v+cyJVuksEbaOwZU/knXiN0ccldeAuCwG1dKyqEmvO/rSOLSjZ6RC0C4V
EyNNQcElSPVtDdCje4mgAxoeVXTYJ7o7Y5JktMLXN6Hr1gXUAr7ovfs5cjPyvL9e
f6PVk910AuPMUmXKEM4yHwibs0jnrUbU+xO6GMntnUhEjouIx0tQD2fK1jWjgawJ
RisgvvPt/ypHBr0gWyDm7hMPl2cSui/HkWyi4eX2ndduaSOpkNxr0od3CV1pAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU2N/Ea9AUIU9GeoZ7Mfk+YpJLH3QwHwYDVR0j
BBgwFoAUKRvyZOPfviml1SriTOEkPfbzmMIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRkE3NzEzNzdBMzUzMDgxODg4MURDMjIyNjcwNUE1OEIx
OTVCRDZFQzAzNTEwMzgyMTE3RTkyRUU5NjFEM0E5LzAvMjkxQkYyNjRFM0RGQkUy
OUE1RDUyQUUyNENFMTI0M0RGNkYzOThDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTFCRjI2NEUzREZCRTI5QTVE
NTJBRTI0Q0UxMjQzREY2RjM5OEMyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0ZBNzcxMzc3QTM1MzA4MTg4ODFEQzIyMjY3MDVBNThCMTk1QkQ2RUMw
MzUxMDM4MjExN0U5MkVFOTYxRDNBOS8wLzM0MzUyZTMxMzYzNDJlMzEzMDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODM0MzQzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2kbDAN
BgkqhkiG9w0BAQsFAAOCAQEASJandw5MNZ6rYfEE6TWAz7C+o1ByhmqxXPtvOYcy
iCp/LViws6eqY3WGSJDXR8Bq0JpfT8HrVoR9LP69s5YrX5p/w3EeexIxv59lsGts
Qdif0kLeUSSrNgyPxpMkCgiBSxp7TtrBzcLXT04CdvOnrf1ad4NVEtOY1Z5iDQog
N31lBwcjW+ivk2aSRMPDvWb/yR9AXjR0xPLORdnIAi5GoC4tb+MRGB4rtGcvj6Rd
RaAYToLzVRh8tvMB0+K2cUUltwsp4pjYz9ZXC49hV6gwst4pux1GsDOlHo2T/hiC
mXdpZUVRbLB0/ujKrCo/MttYcMVOYmPXY8oT1mAgnLD0Xw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:05 2025 by rpki-client