Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/34352e3138342e3132342e302f32322d3234203d3e20323635353938.roa
File:                     34352e3138342e3132342e302f32322d3234203d3e20323635353938.roa (raw, json)
Hash identifier:          uKlYknlH6eACUcPldvmZgtLq4BGG754AwHjUVlk6W6w=
Subject key identifier:   7E:A4:8F:33:E6:B2:07:6F:FA:FB:6E:AA:07:10:76:82:A7:53:3C:88
Certificate issuer:       /CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9
Certificate serial:       5ED00C7A557EDDCBFF028E2C2FBCF92FA49DB00C
Authority key identifier: D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/34352e3138342e3132342e302f32322d3234203d3e20323635353938.roa
Signing time:             Tue 04 Feb 2025 18:27:45 +0000
ROA not before:           Tue 04 Feb 2025 18:22:45 +0000
ROA not after:            Tue 03 Feb 2026 18:27:45 +0000
asID:                     265598
IP address blocks:        45.184.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d0:0c:7a:55:7e:dd:cb:ff:02:8e:2c:2f:bc:f9:2f:a4:9d:b0:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9
        Validity
            Not Before: Feb  4 18:22:45 2025 GMT
            Not After : Feb  3 18:27:45 2026 GMT
        Subject: CN=7EA48F33E6B2076FFAFB6EAA07107682A7533C88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:10:9e:52:89:fb:ef:57:f9:bd:e0:88:23:2f:
                    b9:39:26:28:59:cd:f3:82:3c:37:f2:f8:e0:25:e7:
                    af:2b:4a:bb:c7:e3:bd:e6:e8:62:19:12:95:71:5d:
                    f3:5c:75:55:0f:f4:69:99:57:00:01:8b:f7:ad:c7:
                    70:f7:6e:59:95:78:b4:88:e0:dd:13:8a:15:94:b0:
                    17:d8:43:33:6a:3d:14:9a:0c:6e:4b:30:79:67:9a:
                    e9:55:2e:cc:99:03:75:22:f9:6e:f7:03:3e:9b:c1:
                    75:19:37:f8:ba:41:c4:86:73:ff:74:fd:ae:62:95:
                    c4:33:64:64:46:62:fb:b6:b1:aa:8c:8d:8c:5d:f6:
                    f0:41:15:cc:b8:db:52:d6:8b:d8:2a:4a:11:db:be:
                    84:da:37:78:e9:dc:cc:2b:e3:ec:c1:9c:cc:ae:b1:
                    79:e4:dc:71:d6:c6:42:5d:4e:a2:52:77:f0:25:2f:
                    4b:12:b1:f2:f6:51:c3:59:a4:ba:c5:a9:df:ee:7f:
                    30:65:7a:d9:cf:f1:75:dc:7b:ef:54:2b:07:02:2f:
                    29:5c:8a:04:96:64:fc:73:0e:9c:55:66:df:28:9b:
                    25:bb:cc:a4:68:b3:9b:f6:af:76:a7:e5:7a:37:17:
                    e1:8a:ef:d8:9d:4e:e7:03:fd:f2:20:37:03:51:38:
                    81:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A4:8F:33:E6:B2:07:6F:FA:FB:6E:AA:07:10:76:82:A7:53:3C:88
            X509v3 Authority Key Identifier:
                keyid:D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/34352e3138342e3132342e302f32322d3234203d3e20323635353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:61:e2:ff:a5:7b:86:e7:49:07:65:27:3e:f3:67:bc:62:fe:
         bd:c8:d6:fa:a0:fc:07:01:62:db:e9:7a:75:40:42:50:20:93:
         f1:c1:dd:cc:eb:19:de:50:fb:7a:68:ba:c0:ca:f5:ec:d7:58:
         c3:ec:1f:ab:27:11:3c:d5:fb:c8:f1:be:20:ec:c6:59:51:5e:
         3a:e6:44:d7:07:68:a5:4b:fd:0d:15:10:0a:c2:81:6b:02:a5:
         48:63:2b:46:83:f5:97:87:35:68:89:74:dd:f5:60:2a:b5:82:
         56:50:02:4b:06:9c:ae:f2:f0:4c:45:d0:81:5f:ff:0a:df:c8:
         cf:79:59:e9:a8:d8:6c:8d:33:a4:af:29:94:90:ff:57:35:b0:
         42:c3:e7:81:ad:2e:98:f4:4b:f2:d0:78:fd:ef:23:ab:8a:e3:
         43:fe:1c:2c:84:15:b9:a8:02:80:38:9f:ac:c7:d4:d7:2f:10:
         35:4f:6b:0f:8c:0f:68:6d:3d:e4:f8:08:8e:ca:5b:24:e9:e9:
         57:4f:e2:b6:b8:38:ee:9b:be:6e:09:3c:90:7a:36:d2:c2:d8:
         28:3a:26:23:ad:91:82:a6:92:6f:e1:a7:58:49:7a:23:df:8b:
         f8:9f:11:8a:87:91:0d:ce:69:83:16:e1:1e:b8:72:12:65:22:
         fa:34:1f:39
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXtAMelV+3cv/Ao4sL7z5L6SdsAwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg2RjBDMEJERkRBNzFBRkI0Rjc1NzQ3Rjc2QTlBRjdG
MzU5RkFEOTAeFw0yNTAyMDQxODIyNDVaFw0yNjAyMDMxODI3NDVaMDMxMTAvBgNV
BAMTKDdFQTQ4RjMzRTZCMjA3NkZGQUZCNkVBQTA3MTA3NjgyQTc1MzNDODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcEJ5SifvvV/m94IgjL7k5JihZ
zfOCPDfy+OAl568rSrvH473m6GIZEpVxXfNcdVUP9GmZVwABi/etx3D3blmVeLSI
4N0TihWUsBfYQzNqPRSaDG5LMHlnmulVLsyZA3Ui+W73Az6bwXUZN/i6QcSGc/90
/a5ilcQzZGRGYvu2saqMjYxd9vBBFcy421LWi9gqShHbvoTaN3jp3Mwr4+zBnMyu
sXnk3HHWxkJdTqJSd/AlL0sSsfL2UcNZpLrFqd/ufzBletnP8XXce+9UKwcCLylc
igSWZPxzDpxVZt8omyW7zKRos5v2r3an5Xo3F+GK79idTucD/fIgNwNROIHfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUfqSPM+ayB2/6+26qBxB2gqdTPIgwHwYDVR0j
BBgwFoAU2G8MC9/aca+091dH92qa9/NZ+tkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80M0EyMUFBOTU5REI2QjFBMDI2RkQ4MTM0QzU3MzlEMkM1
MkUxMThDNzQzMzgyQUI2NTdFNTc2NTE4Qzk4N0JFLzAvRDg2RjBDMEJERkRBNzFB
RkI0Rjc1NzQ3Rjc2QTlBRjdGMzU5RkFEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODZGMEMwQkRGREE3MUFGQjRG
NzU3NDdGNzZBOUFGN0YzNTlGQUQ5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDNBMjFBQTk1OURCNkIxQTAyNkZEODEzNEM1NzM5RDJDNTJFMTE4Qzc0
MzM4MkFCNjU3RTU3NjUxOEM5ODdCRS8wLzM0MzUyZTMxMzgzNDJlMzEzMjM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzUzOTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLbh8
MA0GCSqGSIb3DQEBCwUAA4IBAQBOYeL/pXuG50kHZSc+82e8Yv69yNb6oPwHAWLb
6Xp1QEJQIJPxwd3M6xneUPt6aLrAyvXs11jD7B+rJxE81fvI8b4g7MZZUV465kTX
B2ilS/0NFRAKwoFrAqVIYytGg/WXhzVoiXTd9WAqtYJWUAJLBpyu8vBMRdCBX/8K
38jPeVnpqNhsjTOkrymUkP9XNbBCw+eBrS6Y9Evy0Hj97yOriuND/hwshBW5qAKA
OJ+sx9TXLxA1T2sPjA9obT3k+AiOylsk6elXT+K2uDjum75uCTyQejbSwtgoOiYj
rZGCppJv4adYSXoj34v4nxGKh5ENzmmDFuEeuHISZSL6NB85
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:50:39 2025 by rpki-client