Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/450E7E5D1A2CC466DA072F633B637CE5BC517E3E75035D45B8CB8D8BCA85C19B/0/34352e342e3136382e302f32322d3234203d3e20323635363738.roa
File:                     34352e342e3136382e302f32322d3234203d3e20323635363738.roa (raw, json)
Hash identifier:          +u3ds1VGdeHH/CWsbVJK8GLh4u3yhFf5/3TkdD+I3e0=
Subject key identifier:   79:4B:B9:4D:79:69:B5:63:E7:99:72:F3:14:2D:5D:EF:F4:68:8A:D2
Certificate issuer:       /CN=85A05B4BE012BF18A1139686B06217D2F16BE873
Certificate serial:       7A0570F05925AD0F992B9F81AE850F4A84083456
Authority key identifier: 85:A0:5B:4B:E0:12:BF:18:A1:13:96:86:B0:62:17:D2:F1:6B:E8:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85A05B4BE012BF18A1139686B06217D2F16BE873.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/450E7E5D1A2CC466DA072F633B637CE5BC517E3E75035D45B8CB8D8BCA85C19B/0/34352e342e3136382e302f32322d3234203d3e20323635363738.roa
Signing time:             Tue 04 Feb 2025 20:06:25 +0000
ROA not before:           Tue 04 Feb 2025 20:01:25 +0000
ROA not after:            Tue 03 Feb 2026 20:06:25 +0000
asID:                     265678
IP address blocks:        45.4.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/450E7E5D1A2CC466DA072F633B637CE5BC517E3E75035D45B8CB8D8BCA85C19B/0/85A05B4BE012BF18A1139686B06217D2F16BE873.crl
                          rsync://repository.lacnic.net/rpki/lacnic/450E7E5D1A2CC466DA072F633B637CE5BC517E3E75035D45B8CB8D8BCA85C19B/0/85A05B4BE012BF18A1139686B06217D2F16BE873.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85A05B4BE012BF18A1139686B06217D2F16BE873.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 10:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:05:70:f0:59:25:ad:0f:99:2b:9f:81:ae:85:0f:4a:84:08:34:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85A05B4BE012BF18A1139686B06217D2F16BE873
        Validity
            Not Before: Feb  4 20:01:25 2025 GMT
            Not After : Feb  3 20:06:25 2026 GMT
        Subject: CN=794BB94D7969B563E79972F3142D5DEFF4688AD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:80:de:c8:d7:7e:08:bb:68:bb:fc:b9:95:90:
                    63:1a:38:18:6f:d2:35:bd:e8:30:19:f0:c4:d2:6b:
                    ea:49:ab:b9:30:3f:e5:86:4f:de:b5:f5:96:a6:eb:
                    63:e2:75:73:ac:bc:a3:c0:71:2a:7c:27:18:ae:5a:
                    66:10:c8:35:23:91:d1:6d:89:e5:66:e6:16:9c:25:
                    07:a8:80:8e:71:af:b0:4d:1d:fa:3a:b1:27:4d:17:
                    54:8e:12:ef:cb:ad:62:e0:af:d6:20:4a:2b:df:1e:
                    a6:b3:09:6f:84:05:9e:5a:21:b6:c4:a8:03:a1:43:
                    9c:a2:7e:48:0e:9d:11:03:e9:a7:01:10:8d:74:c4:
                    01:d5:e3:1c:5e:26:eb:a2:dc:01:d2:4b:69:c4:5b:
                    ba:e5:4d:cf:57:24:89:0f:ad:0b:d2:14:f0:23:5b:
                    d1:2e:de:82:9e:63:79:48:fd:c3:17:31:9e:ee:8b:
                    a6:2c:9e:19:28:f0:97:dc:e4:b5:3f:1e:c6:10:e5:
                    0b:0e:60:a7:3c:cb:6e:1b:a9:51:a7:44:73:d4:c6:
                    ae:d1:5a:26:b0:44:0e:25:a2:08:28:7b:6b:73:f7:
                    72:a7:d2:50:64:d9:02:b2:2c:9c:19:f6:43:d1:86:
                    a6:0c:ff:04:ce:31:17:70:2f:18:88:53:2d:c1:d9:
                    ff:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4B:B9:4D:79:69:B5:63:E7:99:72:F3:14:2D:5D:EF:F4:68:8A:D2
            X509v3 Authority Key Identifier:
                keyid:85:A0:5B:4B:E0:12:BF:18:A1:13:96:86:B0:62:17:D2:F1:6B:E8:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/450E7E5D1A2CC466DA072F633B637CE5BC517E3E75035D45B8CB8D8BCA85C19B/0/85A05B4BE012BF18A1139686B06217D2F16BE873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85A05B4BE012BF18A1139686B06217D2F16BE873.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/450E7E5D1A2CC466DA072F633B637CE5BC517E3E75035D45B8CB8D8BCA85C19B/0/34352e342e3136382e302f32322d3234203d3e20323635363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:cd:6f:8d:07:b1:ec:f3:39:74:9c:18:6e:89:63:16:7f:66:
         0b:f1:3d:1e:26:43:96:5f:ab:d0:4c:26:1c:62:64:ab:f0:bf:
         49:1f:0f:77:6a:0e:23:a2:d7:ab:97:54:6d:05:b8:e2:cb:a7:
         ac:2b:c3:c6:d7:5e:bd:21:1c:8d:1e:26:c0:e4:ce:30:4a:65:
         fe:b4:7a:dd:32:eb:a0:40:89:ef:d1:0e:e0:6a:1c:09:e2:19:
         74:42:d3:9a:c9:d2:72:56:fd:89:c3:09:8a:7b:0e:4f:20:d4:
         83:80:35:6f:0c:e5:67:fe:21:d5:20:8b:ec:28:6c:fd:95:29:
         04:90:60:20:a6:bb:39:b3:de:1f:2c:96:dd:13:73:0d:57:12:
         34:0c:74:6a:c4:d5:c1:d4:3d:cb:c1:77:cf:e5:80:85:d1:64:
         81:6b:26:b2:75:76:b2:e0:37:96:70:52:6d:fe:4b:dc:42:7d:
         18:12:27:26:3d:d3:46:28:0b:0a:22:48:f5:5e:50:69:8a:c2:
         84:47:6c:5b:6a:4a:92:52:50:10:cc:a8:d5:48:a2:85:45:df:
         9c:54:44:11:d9:c4:3f:50:e0:80:cf:21:08:98:a2:f6:e2:b9:
         7a:5d:4c:d8:56:40:c6:e7:6f:f5:93:d0:24:9c:e5:4f:3a:14:
         61:a7:29:b9
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUegVw8FklrQ+ZK5+BroUPSoQINFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVBMDVCNEJFMDEyQkYxOEExMTM5Njg2QjA2MjE3RDJG
MTZCRTg3MzAeFw0yNTAyMDQyMDAxMjVaFw0yNjAyMDMyMDA2MjVaMDMxMTAvBgNV
BAMTKDc5NEJCOTRENzk2OUI1NjNFNzk5NzJGMzE0MkQ1REVGRjQ2ODhBRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcgN7I134Iu2i7/LmVkGMaOBhv
0jW96DAZ8MTSa+pJq7kwP+WGT9619Zam62PidXOsvKPAcSp8JxiuWmYQyDUjkdFt
ieVm5hacJQeogI5xr7BNHfo6sSdNF1SOEu/LrWLgr9YgSivfHqazCW+EBZ5aIbbE
qAOhQ5yifkgOnRED6acBEI10xAHV4xxeJuui3AHSS2nEW7rlTc9XJIkPrQvSFPAj
W9Eu3oKeY3lI/cMXMZ7ui6Ysnhko8Jfc5LU/HsYQ5QsOYKc8y24bqVGnRHPUxq7R
WiawRA4loggoe2tz93Kn0lBk2QKyLJwZ9kPRhqYM/wTOMRdwLxiIUy3B2f93AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUeUu5TXlptWPnmXLzFC1d7/RoitIwHwYDVR0j
BBgwFoAUhaBbS+ASvxihE5aGsGIX0vFr6HMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NTBFN0U1RDFBMkNDNDY2REEwNzJGNjMzQjYzN0NFNUJD
NTE3RTNFNzUwMzVENDVCOENCOEQ4QkNBODVDMTlCLzAvODVBMDVCNEJFMDEyQkYx
OEExMTM5Njg2QjA2MjE3RDJGMTZCRTg3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUEwNUI0QkUwMTJCRjE4QTEx
Mzk2ODZCMDYyMTdEMkYxNkJFODczLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDUwRTdFNUQxQTJDQzQ2NkRBMDcyRjYzM0I2MzdDRTVCQzUxN0UzRTc1
MDM1RDQ1QjhDQjhEOEJDQTg1QzE5Qi8wLzM0MzUyZTM0MmUzMTM2MzgyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMjM2MzUzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItBKgwDQYJ
KoZIhvcNAQELBQADggEBAIrNb40HsezzOXScGG6JYxZ/ZgvxPR4mQ5Zfq9BMJhxi
ZKvwv0kfD3dqDiOi16uXVG0FuOLLp6wrw8bXXr0hHI0eJsDkzjBKZf60et0y66BA
ie/RDuBqHAniGXRC05rJ0nJW/YnDCYp7Dk8g1IOANW8M5Wf+IdUgi+wobP2VKQSQ
YCCmuzmz3h8slt0Tcw1XEjQMdGrE1cHUPcvBd8/lgIXRZIFrJrJ1drLgN5ZwUm3+
S9xCfRgSJyY900YoCwoiSPVeUGmKwoRHbFtqSpJSUBDMqNVIooVF35xURBHZxD9Q
4IDPIQiYovbiuXpdTNhWQMbnb/WT0CSc5U86FGGnKbk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:52 2025 by rpki-client