Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138382e302f32342d3234203d3e20323636373036.roa
File:                     34352e3232392e3138382e302f32342d3234203d3e20323636373036.roa (raw, json)
Hash identifier:          +gp+nVFgHvlbQDwBw8l90JcbDYFqIVwQN8Q6fIVq9g4=
Subject key identifier:   71:28:6E:71:42:31:05:78:95:4E:87:F9:14:DC:E0:24:41:92:BF:C1
Certificate issuer:       /CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8
Certificate serial:       0C3E53E9FC8FD49E516E1A3C52FE563E30E3CDFF
Authority key identifier: BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138382e302f32342d3234203d3e20323636373036.roa
Signing time:             Tue 04 Feb 2025 20:04:56 +0000
ROA not before:           Tue 04 Feb 2025 19:59:56 +0000
ROA not after:            Tue 03 Feb 2026 20:04:56 +0000
asID:                     266706
IP address blocks:        45.229.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 00:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:3e:53:e9:fc:8f:d4:9e:51:6e:1a:3c:52:fe:56:3e:30:e3:cd:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8
        Validity
            Not Before: Feb  4 19:59:56 2025 GMT
            Not After : Feb  3 20:04:56 2026 GMT
        Subject: CN=71286E7142310578954E87F914DCE0244192BFC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f9:46:bf:df:14:29:92:8e:47:95:a0:fb:ef:
                    90:c6:5a:28:b8:68:87:ad:43:4d:32:f5:4f:19:c3:
                    38:1a:72:4b:a2:a7:44:e0:4e:83:d3:84:c1:c8:b5:
                    58:3c:14:35:83:d5:38:24:20:8d:cf:19:08:7a:88:
                    63:73:ad:aa:a2:2f:3e:a7:a8:17:40:86:24:f6:4d:
                    3f:41:74:fd:08:4f:25:f3:e3:09:96:d5:2c:16:af:
                    ed:6a:de:74:c2:9e:a2:d9:22:e0:b4:ce:80:f1:fe:
                    50:f3:27:39:db:8f:b0:12:c6:68:70:22:5a:ac:f2:
                    13:78:38:00:30:eb:31:3f:ae:a3:57:f1:19:37:4e:
                    38:3b:19:47:b8:9b:e2:2d:0e:2b:ef:ef:9f:c8:6c:
                    6a:a1:f7:5c:32:ce:59:5f:01:f3:9c:19:1b:44:14:
                    8f:6f:a7:0b:b5:37:d1:b1:1b:42:40:e7:2e:ab:73:
                    e6:26:1b:ed:5b:17:bc:55:39:61:c7:33:62:ff:34:
                    1b:50:10:79:da:b9:5c:51:1c:e3:09:1b:13:83:0a:
                    66:ec:53:10:eb:6d:b3:42:ed:3a:0c:04:01:05:53:
                    ea:e4:4e:53:42:68:47:64:e4:16:ef:ec:5a:95:79:
                    d7:67:13:28:ed:51:e3:b2:b3:db:b2:20:b0:ff:3c:
                    0d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:28:6E:71:42:31:05:78:95:4E:87:F9:14:DC:E0:24:41:92:BF:C1
            X509v3 Authority Key Identifier:
                keyid:BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138382e302f32342d3234203d3e20323636373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:f3:72:ea:f7:8e:4f:5d:d9:d5:e1:7f:9a:df:c5:ca:4f:c7:
         e3:00:7a:d7:d9:b7:ba:96:07:b0:82:6d:9b:ca:6a:69:6c:b3:
         cd:3f:ea:09:b9:e3:24:8c:52:0c:46:8a:0d:e9:b5:f3:6d:c3:
         1a:f4:fc:da:f1:05:09:99:d7:1d:99:40:34:e7:d6:35:11:e7:
         a4:fe:0d:72:45:53:c4:13:3c:b7:7c:84:f4:e7:c2:82:e6:f9:
         fd:8e:3a:23:7a:7a:76:1b:ed:4f:14:6c:60:2d:f1:3a:bc:1b:
         cf:bb:c9:8a:c8:ea:ea:42:e7:bb:1a:2d:d2:d6:6a:68:84:30:
         b5:db:51:d4:f4:e1:91:d8:90:3f:0d:43:db:1f:e7:14:dd:30:
         0d:b6:78:80:56:2c:eb:da:41:8b:ec:28:2c:76:ac:2b:e2:cd:
         ae:34:91:67:c6:ab:74:d0:e1:f2:80:f4:86:fe:a7:29:37:0d:
         9f:e5:f6:38:f7:c8:43:04:4b:03:b9:c9:77:60:ec:32:53:70:
         3e:20:08:97:1a:94:ef:ae:03:03:3e:d1:b1:5e:2c:44:2f:01:
         17:57:f2:27:73:3c:70:dc:57:5a:9d:c3:18:65:10:a8:93:fa:
         c7:59:8d:fb:16:e7:da:fc:d7:bd:91:e7:18:6b:37:a0:fd:1b:
         a7:ea:bb:78
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUDD5T6fyP1J5Rbho8Uv5WPjDjzf8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZGMTI4MDRBRDdBNkI2N0RCMzNDQTUwNEJDQzJCQUMz
NEE4NTBEODAeFw0yNTAyMDQxOTU5NTZaFw0yNjAyMDMyMDA0NTZaMDMxMTAvBgNV
BAMTKDcxMjg2RTcxNDIzMTA1Nzg5NTRFODdGOTE0RENFMDI0NDE5MkJGQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM+Ua/3xQpko5HlaD775DGWii4
aIetQ00y9U8Zwzgackuip0TgToPThMHItVg8FDWD1TgkII3PGQh6iGNzraqiLz6n
qBdAhiT2TT9BdP0ITyXz4wmW1SwWr+1q3nTCnqLZIuC0zoDx/lDzJznbj7ASxmhw
Ilqs8hN4OAAw6zE/rqNX8Rk3Tjg7GUe4m+ItDivv75/IbGqh91wyzllfAfOcGRtE
FI9vpwu1N9GxG0JA5y6rc+YmG+1bF7xVOWHHM2L/NBtQEHnauVxRHOMJGxODCmbs
UxDrbbNC7ToMBAEFU+rkTlNCaEdk5Bbv7FqVeddnEyjtUeOys9uyILD/PA0BAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUcShucUIxBXiVTof5FNzgJEGSv8EwHwYDVR0j
BBgwFoAUv/EoBK16a2fbM8pQS8wrrDSoUNgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NzMzNUY4RkRGMTcxNDAyMEY5RTFBRTY5RDc2NzA1NUMz
OEZBNzg3N0ExRDJENjUyN0VDODRBRUI0RDM1NEEyLzAvQkZGMTI4MDRBRDdBNkI2
N0RCMzNDQTUwNEJDQzJCQUMzNEE4NTBEOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkYxMjgwNEFEN0E2QjY3REIz
M0NBNTA0QkNDMkJBQzM0QTg1MEQ4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTczMzVGOEZERjE3MTQwMjBGOUUxQUU2OUQ3NjcwNTVDMzhGQTc4NzdB
MUQyRDY1MjdFQzg0QUVCNEQzNTRBMi8wLzM0MzUyZTMyMzIzOTJlMzEzODM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzczMDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeW8
MA0GCSqGSIb3DQEBCwUAA4IBAQB483Lq945PXdnV4X+a38XKT8fjAHrX2be6lgew
gm2bymppbLPNP+oJueMkjFIMRooN6bXzbcMa9Pza8QUJmdcdmUA059Y1Eeek/g1y
RVPEEzy3fIT058KC5vn9jjojenp2G+1PFGxgLfE6vBvPu8mKyOrqQue7Gi3S1mpo
hDC121HU9OGR2JA/DUPbH+cU3TANtniAVizr2kGL7Cgsdqwr4s2uNJFnxqt00OHy
gPSG/qcpNw2f5fY498hDBEsDucl3YOwyU3A+IAiXGpTvrgMDPtGxXixELwEXV/In
czxw3FdancMYZRCok/rHWY37Fufa/Ne9kecYazeg/Run6rt4
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:25:00 2025 by rpki-client