Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/34352e36352e3138382e302f32322d3234203d3e20323636383533.roa
File:                     34352e36352e3138382e302f32322d3234203d3e20323636383533.roa (raw, json)
Hash identifier:          2gLOTF84dWOyFKH3Fxa+HJKFRiAuMdNk3RSwEb343Sg=
Subject key identifier:   1D:4E:70:30:DA:63:E1:13:C7:97:C2:0A:0D:E9:DE:9A:2E:28:AD:77
Certificate issuer:       /CN=AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B
Certificate serial:       5401D5530EB35EAE0F8CB1E915B3BA459A7ED6FB
Authority key identifier: AB:80:66:3E:BC:1B:B5:44:C5:5B:4C:E0:0C:58:BC:03:8F:2B:BB:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/34352e36352e3138382e302f32322d3234203d3e20323636383533.roa
Signing time:             Tue 04 Feb 2025 18:54:57 +0000
ROA not before:           Tue 04 Feb 2025 18:49:57 +0000
ROA not after:            Tue 03 Feb 2026 18:54:57 +0000
asID:                     266853
IP address blocks:        45.65.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:01:d5:53:0e:b3:5e:ae:0f:8c:b1:e9:15:b3:ba:45:9a:7e:d6:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B
        Validity
            Not Before: Feb  4 18:49:57 2025 GMT
            Not After : Feb  3 18:54:57 2026 GMT
        Subject: CN=1D4E7030DA63E113C797C20A0DE9DE9A2E28AD77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7f:b2:83:dd:29:c8:f8:d4:81:15:5d:c4:a4:
                    0b:f4:0a:7b:05:75:64:88:3e:de:cd:a4:e9:1c:2d:
                    bb:df:f5:08:c6:e5:96:a3:82:fe:40:32:c2:38:a8:
                    c4:ae:e0:5a:60:4f:fa:d8:42:36:a9:e8:c2:46:86:
                    ed:45:a3:29:8b:5e:bc:20:08:ad:e4:9f:58:a5:5e:
                    3b:9b:57:b5:f0:b1:de:97:e1:0e:f2:a1:68:42:91:
                    78:c2:dc:2b:e9:a2:12:2e:3a:74:50:c6:07:16:ab:
                    bd:87:67:b0:7f:e9:16:54:7a:20:42:76:62:4e:42:
                    79:12:47:2e:08:96:e6:71:11:ba:0d:69:81:65:b9:
                    ee:d5:2b:95:7d:3d:17:1c:89:b9:40:24:97:79:13:
                    39:05:1f:da:64:ed:c4:3c:f4:d6:a8:f1:01:9a:89:
                    a4:1a:11:e6:4e:dc:cb:4d:5c:ad:d5:58:2f:87:0f:
                    6a:f9:d4:5e:05:87:74:3f:f4:36:e0:0c:e0:39:d8:
                    5a:a9:b4:c6:ce:f5:8a:9c:a7:6d:be:27:14:16:b7:
                    74:a7:ff:86:b7:a3:72:e3:eb:d6:36:30:58:bc:f0:
                    3f:f3:b2:cd:f3:e5:73:e3:05:11:e8:f6:1f:67:51:
                    db:1d:6b:c0:50:df:f2:12:0b:1e:f6:aa:de:18:36:
                    62:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4E:70:30:DA:63:E1:13:C7:97:C2:0A:0D:E9:DE:9A:2E:28:AD:77
            X509v3 Authority Key Identifier:
                keyid:AB:80:66:3E:BC:1B:B5:44:C5:5B:4C:E0:0C:58:BC:03:8F:2B:BB:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/34352e36352e3138382e302f32322d3234203d3e20323636383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:c4:c8:0d:f9:0d:d9:d5:fb:50:db:c4:3a:fa:ac:ed:23:1d:
         03:22:fd:98:aa:11:f2:b2:a8:16:9d:5f:a2:96:8b:11:d8:72:
         ce:70:1e:13:da:83:d5:17:79:39:9c:60:b3:a5:ad:45:f4:6c:
         1f:82:db:ad:6d:e1:43:ae:6f:88:49:48:36:f7:57:23:5f:c4:
         3e:8b:05:5c:65:54:44:db:cc:93:c7:5e:cd:05:07:9b:d4:d4:
         01:a4:31:6d:c2:d7:9c:c1:df:b3:0a:70:01:60:dd:07:4b:2f:
         2c:a5:c5:ab:98:33:54:51:b9:4b:f4:95:1a:20:3a:ac:74:b5:
         8c:8c:27:26:27:61:bc:81:c6:7b:97:b9:bd:dc:00:f5:66:8e:
         ab:5e:23:88:d4:98:6f:40:b5:d0:1a:99:aa:14:55:59:75:fc:
         a7:e6:02:ca:e9:cc:28:dd:5e:8c:46:8e:b2:a4:4c:50:aa:cc:
         0c:d6:f8:13:47:61:ed:e2:67:c5:59:74:15:63:9e:cb:be:a5:
         94:db:72:27:ea:6b:6f:69:0a:96:fd:1c:b4:99:9f:f6:64:e3:
         cd:6d:8f:fc:eb:8d:3b:14:37:9b:b4:53:fd:09:aa:9a:63:3c:
         e2:c2:47:cc:d2:90:1e:33:71:02:46:b1:51:ab:0c:69:d8:99:
         8b:e8:cf:4c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVAHVUw6zXq4PjLHpFbO6RZp+1vswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI4MDY2M0VCQzFCQjU0NEM1NUI0Q0UwMEM1OEJDMDM4
RjJCQkI2QjAeFw0yNTAyMDQxODQ5NTdaFw0yNjAyMDMxODU0NTdaMDMxMTAvBgNV
BAMTKDFENEU3MDMwREE2M0UxMTNDNzk3QzIwQTBERTlERTlBMkUyOEFENzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlf7KD3SnI+NSBFV3EpAv0CnsF
dWSIPt7NpOkcLbvf9QjG5Zajgv5AMsI4qMSu4FpgT/rYQjap6MJGhu1FoymLXrwg
CK3kn1ilXjubV7Xwsd6X4Q7yoWhCkXjC3CvpohIuOnRQxgcWq72HZ7B/6RZUeiBC
dmJOQnkSRy4IluZxEboNaYFlue7VK5V9PRcciblAJJd5EzkFH9pk7cQ89Nao8QGa
iaQaEeZO3MtNXK3VWC+HD2r51F4Fh3Q/9DbgDOA52FqptMbO9Yqcp22+JxQWt3Sn
/4a3o3Lj69Y2MFi88D/zss3z5XPjBRHo9h9nUdsda8BQ3/ISCx72qt4YNmINAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUHU5wMNpj4RPHl8IKDenemi4orXcwHwYDVR0j
BBgwFoAUq4BmPrwbtUTFW0zgDFi8A48ru2swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MzJEQzhDNjdCNjUzRDI2QTA0QTk3MzQwQjk4NEUyODNC
NTFCNjQ4ODI2NDQ1NjFCNDc1MTU3MDZGNDk5OTcwLzAvQUI4MDY2M0VCQzFCQjU0
NEM1NUI0Q0UwMEM1OEJDMDM4RjJCQkI2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQjgwNjYzRUJDMUJCNTQ0QzU1
QjRDRTAwQzU4QkMwMzhGMkJCQjZCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDMyREM4QzY3QjY1M0QyNkEwNEE5NzM0MEI5ODRFMjgzQjUxQjY0ODgy
NjQ0NTYxQjQ3NTE1NzA2RjQ5OTk3MC8wLzM0MzUyZTM2MzUyZTMxMzgzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM4MzUzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1BvDAN
BgkqhkiG9w0BAQsFAAOCAQEAMsTIDfkN2dX7UNvEOvqs7SMdAyL9mKoR8rKoFp1f
opaLEdhyznAeE9qD1Rd5OZxgs6WtRfRsH4LbrW3hQ65viElINvdXI1/EPosFXGVU
RNvMk8dezQUHm9TUAaQxbcLXnMHfswpwAWDdB0svLKXFq5gzVFG5S/SVGiA6rHS1
jIwnJidhvIHGe5e5vdwA9WaOq14jiNSYb0C10BqZqhRVWXX8p+YCyunMKN1ejEaO
sqRMUKrMDNb4E0dh7eJnxVl0FWOey76llNtyJ+prb2kKlv0ctJmf9mTjzW2P/OuN
OxQ3m7RT/QmqmmM84sJHzNKQHjNxAkaxUasMadiZi+jPTA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 06:12:55 2025 by rpki-client