Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CE6E20C116E5A9F92FBE3E25065E299302A1B43902DE463F5886132211AB173/0/34352e3136392e3131322e302f32322d3234203d3e20323633373137.roa
File:                     34352e3136392e3131322e302f32322d3234203d3e20323633373137.roa (raw, json)
Hash identifier:          etXhZgCdhVNs6hrNAcHC9DupLip9kTGkiu6Kd+zhZC8=
Subject key identifier:   7E:BA:BD:9C:0C:DE:7C:EB:AD:85:4D:EC:CC:F3:E6:3A:E5:BD:65:E3
Certificate issuer:       /CN=779FD79B3FB43C63E9163A966DC931D9CEE17BC0
Certificate serial:       5AC2BE04B64BE0681C2D9A2506C0A2EE609E1DB6
Authority key identifier: 77:9F:D7:9B:3F:B4:3C:63:E9:16:3A:96:6D:C9:31:D9:CE:E1:7B:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/779FD79B3FB43C63E9163A966DC931D9CEE17BC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CE6E20C116E5A9F92FBE3E25065E299302A1B43902DE463F5886132211AB173/0/34352e3136392e3131322e302f32322d3234203d3e20323633373137.roa
Signing time:             Thu 03 Apr 2025 16:55:01 +0000
ROA not before:           Thu 03 Apr 2025 16:50:01 +0000
ROA not after:            Thu 02 Apr 2026 16:55:01 +0000
asID:                     263717
IP address blocks:        45.169.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CE6E20C116E5A9F92FBE3E25065E299302A1B43902DE463F5886132211AB173/0/779FD79B3FB43C63E9163A966DC931D9CEE17BC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CE6E20C116E5A9F92FBE3E25065E299302A1B43902DE463F5886132211AB173/0/779FD79B3FB43C63E9163A966DC931D9CEE17BC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/779FD79B3FB43C63E9163A966DC931D9CEE17BC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c2:be:04:b6:4b:e0:68:1c:2d:9a:25:06:c0:a2:ee:60:9e:1d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=779FD79B3FB43C63E9163A966DC931D9CEE17BC0
        Validity
            Not Before: Apr  3 16:50:01 2025 GMT
            Not After : Apr  2 16:55:01 2026 GMT
        Subject: CN=7EBABD9C0CDE7CEBAD854DECCCF3E63AE5BD65E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:45:74:2a:32:a3:5c:ad:54:90:07:88:f5:e2:
                    23:27:ca:48:b5:f7:e3:16:04:dd:59:26:51:5b:45:
                    a7:34:5b:06:89:a2:8d:c6:27:35:88:56:8f:cf:51:
                    8f:5d:5d:37:79:81:a6:e2:99:92:59:a6:32:52:50:
                    f9:62:ab:96:56:10:ac:8e:e9:ad:8c:61:52:7e:5c:
                    19:9e:0b:eb:59:7e:70:34:aa:d8:55:1c:15:14:f2:
                    a3:b2:0d:e3:62:9d:00:d9:f0:94:3c:0d:d3:48:de:
                    48:21:13:37:55:cd:6b:ef:9a:d5:e5:05:ad:66:d7:
                    02:dd:7a:a0:e6:fd:27:f1:4b:47:90:93:72:9f:5d:
                    16:3a:9a:74:a5:f2:f1:d2:dc:be:fa:d3:5c:b5:24:
                    bc:c7:cd:c8:9b:d5:dd:c6:ca:d6:34:c1:57:3f:44:
                    fb:40:08:b6:cc:e4:15:94:b4:74:ce:fa:14:cf:be:
                    27:e8:01:0f:96:b8:39:3f:6e:05:51:24:de:c5:ad:
                    ab:12:3d:d7:b0:2e:de:c2:5d:75:60:0c:b1:93:e7:
                    42:db:e7:4c:e0:41:cb:b4:9f:5c:ca:32:33:92:0a:
                    d5:27:f4:36:4a:cf:fa:2e:a8:32:49:2f:ca:9d:ad:
                    e6:dd:4b:e4:1f:18:ad:fc:20:fd:b2:16:2f:38:3b:
                    48:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BA:BD:9C:0C:DE:7C:EB:AD:85:4D:EC:CC:F3:E6:3A:E5:BD:65:E3
            X509v3 Authority Key Identifier:
                keyid:77:9F:D7:9B:3F:B4:3C:63:E9:16:3A:96:6D:C9:31:D9:CE:E1:7B:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CE6E20C116E5A9F92FBE3E25065E299302A1B43902DE463F5886132211AB173/0/779FD79B3FB43C63E9163A966DC931D9CEE17BC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/779FD79B3FB43C63E9163A966DC931D9CEE17BC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CE6E20C116E5A9F92FBE3E25065E299302A1B43902DE463F5886132211AB173/0/34352e3136392e3131322e302f32322d3234203d3e20323633373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:46:f9:1a:d8:d7:b4:8b:90:f8:9c:8d:80:ca:7b:89:f1:01:
         c9:b6:bb:cd:11:26:56:76:8f:09:26:64:80:cd:68:f3:98:a0:
         12:f9:dd:90:63:79:b8:82:a3:8b:09:6e:07:10:31:64:cf:a4:
         57:0e:0b:0b:bc:6b:f9:2d:da:2e:71:81:a5:26:ee:c7:42:f2:
         db:24:ac:63:f2:cf:99:71:cf:77:e8:dd:c5:fa:0a:f9:59:1d:
         dc:26:37:8f:21:a6:86:35:cf:f9:d6:81:6a:d3:20:cb:e0:de:
         a2:ae:6f:38:61:c2:ad:a5:b5:d6:71:b5:c7:bc:ee:d5:c5:16:
         53:14:b7:e7:2c:18:e7:dc:1b:08:94:f6:d1:52:41:34:0e:c8:
         f6:a0:20:4b:63:a0:46:31:b6:f9:34:0b:5e:84:92:ca:96:5a:
         61:09:fe:1b:e6:30:07:a0:b6:d7:4e:a7:82:f9:40:40:ee:a6:
         ba:4c:f1:39:f7:28:ca:b8:ff:d3:33:93:45:64:84:19:19:c3:
         81:d1:0c:35:e3:cf:63:af:80:dc:76:2b:7e:8c:f6:64:0e:fc:
         37:01:f5:f8:b9:99:f1:b0:1a:aa:31:50:e8:8d:5c:be:40:a2:
         49:4f:43:11:ed:a7:c1:b4:ca:de:8f:47:29:05:16:12:c6:a0:
         c0:4d:d8:2c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUWsK+BLZL4GgcLZolBsCi7mCeHbYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc5RkQ3OUIzRkI0M0M2M0U5MTYzQTk2NkRDOTMxRDlD
RUUxN0JDMDAeFw0yNTA0MDMxNjUwMDFaFw0yNjA0MDIxNjU1MDFaMDMxMTAvBgNV
BAMTKDdFQkFCRDlDMENERTdDRUJBRDg1NERFQ0NDRjNFNjNBRTVCRDY1RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6RXQqMqNcrVSQB4j14iMnyki1
9+MWBN1ZJlFbRac0WwaJoo3GJzWIVo/PUY9dXTd5gabimZJZpjJSUPliq5ZWEKyO
6a2MYVJ+XBmeC+tZfnA0qthVHBUU8qOyDeNinQDZ8JQ8DdNI3kghEzdVzWvvmtXl
Ba1m1wLdeqDm/SfxS0eQk3KfXRY6mnSl8vHS3L7601y1JLzHzcib1d3GytY0wVc/
RPtACLbM5BWUtHTO+hTPvifoAQ+WuDk/bgVRJN7FrasSPdewLt7CXXVgDLGT50Lb
50zgQcu0n1zKMjOSCtUn9DZKz/ouqDJJL8qdrebdS+QfGK38IP2yFi84O0hpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUfrq9nAzefOuthU3szPPmOuW9ZeMwHwYDVR0j
BBgwFoAUd5/Xmz+0PGPpFjqWbckx2c7he8AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81Q0U2RTIwQzExNkU1QTlGOTJGQkUzRTI1MDY1RTI5OTMw
MkExQjQzOTAyREU0NjNGNTg4NjEzMjIxMUFCMTczLzAvNzc5RkQ3OUIzRkI0M0M2
M0U5MTYzQTk2NkRDOTMxRDlDRUUxN0JDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NzlGRDc5QjNGQjQzQzYzRTkx
NjNBOTY2REM5MzFEOUNFRTE3QkMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUNFNkUyMEMxMTZFNUE5RjkyRkJFM0UyNTA2NUUyOTkzMDJBMUI0Mzkw
MkRFNDYzRjU4ODYxMzIyMTFBQjE3My8wLzM0MzUyZTMxMzYzOTJlMzEzMTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzczMTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLalw
MA0GCSqGSIb3DQEBCwUAA4IBAQBYRvka2Ne0i5D4nI2AynuJ8QHJtrvNESZWdo8J
JmSAzWjzmKAS+d2QY3m4gqOLCW4HEDFkz6RXDgsLvGv5LdoucYGlJu7HQvLbJKxj
8s+Zcc936N3F+gr5WR3cJjePIaaGNc/51oFq0yDL4N6irm84YcKtpbXWcbXHvO7V
xRZTFLfnLBjn3BsIlPbRUkE0Dsj2oCBLY6BGMbb5NAtehJLKllphCf4b5jAHoLbX
TqeC+UBA7qa6TPE59yjKuP/TM5NFZIQZGcOB0Qw1489jr4Dcdit+jPZkDvw3AfX4
uZnxsBqqMVDojVy+QKJJT0MR7afBtMrej0cpBRYSxqDATdgs
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:10:36 2025 by rpki-client