Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/34352e3232392e34332e302f32342d3234203d3e203233323433.roa
File:                     34352e3232392e34332e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          ZM5gcS0jU6GO6iSIAp+xkoBPu9dwYvpywaP3SNCocjY=
Subject key identifier:   20:69:09:D8:F4:8D:0B:80:27:B2:E2:73:8F:B4:CD:C2:AD:B2:9F:61
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       29161CF50650E396B50436B593CA72E4073967E5
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/34352e3232392e34332e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 04 Feb 2025 18:06:36 +0000
ROA not before:           Tue 04 Feb 2025 18:01:36 +0000
ROA not after:            Tue 03 Feb 2026 18:06:36 +0000
asID:                     23243
IP address blocks:        45.229.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:16:1c:f5:06:50:e3:96:b5:04:36:b5:93:ca:72:e4:07:39:67:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Feb  4 18:01:36 2025 GMT
            Not After : Feb  3 18:06:36 2026 GMT
        Subject: CN=206909D8F48D0B8027B2E2738FB4CDC2ADB29F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:98:39:c1:4c:34:80:c3:95:04:d7:30:7d:97:
                    f8:75:24:9a:e9:bf:03:ac:15:43:e0:e7:f4:6c:10:
                    9f:c5:66:df:a2:69:10:32:47:0e:fb:65:6c:02:60:
                    e0:62:c8:be:91:9c:55:f4:18:06:4f:b1:dc:d6:f3:
                    09:0c:ca:7e:af:ec:d3:84:2f:21:a5:69:84:1b:55:
                    d7:e5:92:5a:8a:3b:e8:27:00:ea:09:ce:56:4b:a4:
                    4a:c5:5f:01:6d:77:7d:b1:db:be:b1:c2:33:ff:55:
                    89:1e:d4:b0:25:ab:bb:dc:0f:b9:18:d5:eb:a1:ac:
                    a1:3d:b1:d5:f6:12:07:68:3a:f3:08:59:5b:52:4a:
                    b9:a5:6c:a1:33:c1:04:c4:96:2d:e2:d8:7b:0a:f3:
                    6b:e9:44:c8:31:f7:31:73:12:8f:a6:2a:25:9f:62:
                    b9:9b:d0:55:a7:9b:2d:dc:10:9a:34:b8:af:80:31:
                    4b:3f:7b:4a:ac:30:c5:fd:df:ff:93:1f:37:d0:51:
                    42:38:a8:a3:37:df:40:71:ed:45:ba:8f:1f:09:2f:
                    e2:a7:b6:0f:62:a6:ed:12:4d:5e:c9:cf:4e:28:7c:
                    f9:d9:a9:c7:3f:5e:99:60:73:b0:60:da:b7:f7:09:
                    de:23:92:16:0d:d2:f5:3b:88:47:8f:6f:bd:77:f0:
                    12:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:69:09:D8:F4:8D:0B:80:27:B2:E2:73:8F:B4:CD:C2:AD:B2:9F:61
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/34352e3232392e34332e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:9e:cb:65:c6:45:68:4c:80:91:ad:ce:35:8e:aa:b2:ae:43:
         22:ac:a6:81:54:77:c4:7d:3c:ea:59:c8:58:90:ca:11:b9:b4:
         23:67:b0:2e:f9:51:aa:17:b8:ee:23:1e:29:fa:3e:f3:da:3a:
         3e:6f:be:60:af:03:fd:46:d0:1c:2e:31:31:d2:d7:e5:84:1c:
         d0:fd:71:93:fd:04:3d:46:db:4f:54:aa:2f:a4:d5:53:c0:3a:
         bf:17:eb:28:7d:03:1b:ab:24:ff:02:0e:6b:f6:c8:ac:f6:1e:
         7d:b4:50:05:79:34:ae:9d:6c:e0:8a:0b:37:59:1d:cb:0a:ae:
         bb:b2:2d:d7:c8:a1:f4:f8:e3:8a:be:e2:e8:bd:86:6e:70:27:
         72:6f:26:c0:10:59:65:92:5a:e4:44:c4:c4:f3:5f:25:ae:dc:
         17:68:06:c2:a4:45:ca:fa:da:02:a9:b8:20:6b:09:ab:36:8f:
         43:6d:75:49:1a:bf:e7:7d:5a:55:cc:7f:a1:77:17:63:6a:77:
         29:c2:31:f3:fc:2f:41:ba:74:fc:4c:c9:a2:10:21:f2:8b:64:
         52:55:fd:3c:d6:ce:41:72:2e:22:e3:2f:fe:95:87:70:3c:48:
         4f:32:11:dc:19:66:1d:2a:16:82:b1:6e:91:4a:2b:5a:af:f3:
         f4:0d:6b:25
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUKRYc9QZQ45a1BDa1k8py5Ac5Z+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRFNDFDMERBREIxMjQ2NUFGRjVDRjdBMzg5MzA1ODJF
NDQ5OTA4MzAeFw0yNTAyMDQxODAxMzZaFw0yNjAyMDMxODA2MzZaMDMxMTAvBgNV
BAMTKDIwNjkwOUQ4RjQ4RDBCODAyN0IyRTI3MzhGQjRDREMyQURCMjlGNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQmDnBTDSAw5UE1zB9l/h1JJrp
vwOsFUPg5/RsEJ/FZt+iaRAyRw77ZWwCYOBiyL6RnFX0GAZPsdzW8wkMyn6v7NOE
LyGlaYQbVdflklqKO+gnAOoJzlZLpErFXwFtd32x276xwjP/VYke1LAlq7vcD7kY
1euhrKE9sdX2EgdoOvMIWVtSSrmlbKEzwQTEli3i2HsK82vpRMgx9zFzEo+mKiWf
Yrmb0FWnmy3cEJo0uK+AMUs/e0qsMMX93/+THzfQUUI4qKM330Bx7UW6jx8JL+Kn
tg9ipu0STV7Jz04ofPnZqcc/Xplgc7Bg2rf3Cd4jkhYN0vU7iEePb7138BKbAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUIGkJ2PSNC4AnsuJzj7TNwq2yn2EwHwYDVR0j
BBgwFoAUVOQcDa2xJGWv9c96OJMFguRJkIMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NTZFMkQ2OUE5NDJCMzNDN0M0ODFGMDhGRDBFN0FFQTVE
RkFFNDRGNDg1RDA3RUQwQTc0MDY0RERFQ0E2MzMzLzAvNTRFNDFDMERBREIxMjQ2
NUFGRjVDRjdBMzg5MzA1ODJFNDQ5OTA4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NEU0MUMwREFEQjEyNDY1QUZG
NUNGN0EzODkzMDU4MkU0NDk5MDgzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDU2RTJENjlBOTQyQjMzQzdDNDgxRjA4RkQwRTdBRUE1REZBRTQ0RjQ4
NUQwN0VEMEE3NDA2NERERUNBNjMzMy8wLzM0MzUyZTMyMzIzOTJlMzQzMzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzMzMjM0MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt5SswDQYJ
KoZIhvcNAQELBQADggEBAISey2XGRWhMgJGtzjWOqrKuQyKspoFUd8R9POpZyFiQ
yhG5tCNnsC75UaoXuO4jHin6PvPaOj5vvmCvA/1G0BwuMTHS1+WEHND9cZP9BD1G
209Uqi+k1VPAOr8X6yh9AxurJP8CDmv2yKz2Hn20UAV5NK6dbOCKCzdZHcsKrruy
LdfIofT444q+4ui9hm5wJ3JvJsAQWWWSWuRExMTzXyWu3BdoBsKkRcr62gKpuCBr
Cas2j0NtdUkav+d9WlXMf6F3F2NqdynCMfP8L0G6dPxMyaIQIfKLZFJV/TzWzkFy
LiLjL/6Vh3A8SE8yEdwZZh0qFoKxbpFKK1qv8/QNayU=
-----END CERTIFICATE-----
Generated at Mon Apr 14 13:43:13 2025 by rpki-client