Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS272945.roa
File:                     AS272945.roa (raw, json)
Hash identifier:          1ZZeJdY5tYywmKEN+7BSoHpwqSPkPJsQgZU06rDfyBY=
Subject key identifier:   D0:CF:83:6B:60:A7:BC:1C:D7:C3:DF:DE:0C:A0:23:B8:AC:B6:1C:B3
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       6FC063A300C76ACF5B4DA4AACBE2B65CEA5AE944
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS272945.roa
Signing time:             Tue 04 Feb 2025 18:13:44 +0000
ROA not before:           Tue 04 Feb 2025 18:08:44 +0000
ROA not after:            Tue 03 Feb 2026 18:13:44 +0000
asID:                     272945
IP address blocks:        179.40.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c0:63:a3:00:c7:6a:cf:5b:4d:a4:aa:cb:e2:b6:5c:ea:5a:e9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Feb  4 18:08:44 2025 GMT
            Not After : Feb  3 18:13:44 2026 GMT
        Subject: CN=D0CF836B60A7BC1CD7C3DFDE0CA023B8ACB61CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ed:31:c5:a9:80:9d:28:45:b4:61:68:d9:71:
                    55:19:cb:2d:1a:ba:cd:57:52:17:5e:e3:b9:e5:08:
                    58:1c:f5:de:c9:6b:7e:8a:84:28:8c:d2:d8:bc:43:
                    71:49:b5:9f:56:57:40:d0:d4:3d:f3:df:f9:c8:b2:
                    1a:ea:32:f5:2c:1e:97:14:89:fc:cf:10:13:f7:33:
                    aa:70:f9:e4:44:c5:69:c2:45:11:87:b8:dc:39:67:
                    98:bf:08:da:f2:a0:9b:f7:01:10:94:b4:03:3d:73:
                    f6:7a:0f:d1:2b:5f:0b:61:58:da:68:e2:7c:60:fe:
                    ae:5f:f5:d3:19:6e:40:fa:46:b6:e4:3d:f6:9e:b6:
                    7a:6b:75:ce:82:10:46:e7:71:71:2e:74:cf:5d:16:
                    c5:d7:07:fb:18:68:bf:2d:76:79:4b:9d:7b:f4:30:
                    d8:d4:3f:bf:af:1e:4e:cb:f8:89:b8:14:26:30:8a:
                    9f:eb:1d:07:30:eb:37:bc:1f:c7:20:c3:b0:6f:f6:
                    0b:c9:2d:a8:d5:8e:98:49:fa:b8:ea:f4:f3:a9:f0:
                    5d:8d:84:f0:15:88:77:b3:f4:02:ca:2f:99:1d:14:
                    41:5c:88:39:3a:ca:1b:aa:fa:ac:0d:42:2b:ba:d4:
                    5f:9c:95:30:36:5e:fd:e7:5a:75:b2:d2:03:8f:3b:
                    d9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CF:83:6B:60:A7:BC:1C:D7:C3:DF:DE:0C:A0:23:B8:AC:B6:1C:B3
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS272945.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.40.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:fd:91:e1:e7:b4:4f:31:ae:59:6d:91:5f:2a:7f:5d:19:08:
         62:40:f9:ec:ae:cb:a7:c4:48:c0:47:b7:10:cc:07:ba:a1:b5:
         f7:31:c0:03:c1:89:88:c4:13:2d:3d:66:42:fa:d1:12:1a:9f:
         15:ab:a8:fa:24:72:98:9d:9f:18:86:ea:07:c7:d4:47:0b:81:
         97:2c:b5:55:23:0c:1e:db:0b:49:77:0c:e9:be:08:7c:06:66:
         21:63:ba:6a:c3:ba:ab:b8:6c:69:42:c7:00:ee:40:ad:79:c5:
         1d:c6:60:75:cf:2e:b3:e5:1b:18:e1:db:de:6f:06:c4:38:bc:
         1f:2b:cf:22:b6:e2:67:67:7b:e0:0e:77:b7:8b:1c:48:54:c8:
         0c:40:17:88:72:8b:dc:f4:ff:58:eb:43:c8:5d:a8:b0:62:31:
         34:74:41:27:b0:07:48:a9:30:36:3d:3a:60:1d:08:ca:e5:ed:
         cd:2c:2b:83:f2:cd:81:15:c5:f8:6a:cf:19:c4:1f:b1:42:35:
         8b:8c:91:97:6e:98:21:7a:95:40:f4:c5:e7:b8:c3:26:94:bc:
         58:eb:74:94:5f:d2:e3:19:ed:57:67:83:10:2d:6b:66:74:dc:
         ef:8d:9f:49:3c:f8:f6:a7:45:71:89:ee:ba:0c:77:54:f2:9c:
         48:67:62:28
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUb8BjowDHas9bTaSqy+K2XOpa6UQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEwODE5QzdDOUI0Qzg1Q0UwQjFEMjI3NDFCRTVFNDBB
MUYwRTdCMTAeFw0yNTAyMDQxODA4NDRaFw0yNjAyMDMxODEzNDRaMDMxMTAvBgNV
BAMTKEQwQ0Y4MzZCNjBBN0JDMUNEN0MzREZERTBDQTAyM0I4QUNCNjFDQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl7THFqYCdKEW0YWjZcVUZyy0a
us1XUhde47nlCFgc9d7Ja36KhCiM0ti8Q3FJtZ9WV0DQ1D3z3/nIshrqMvUsHpcU
ifzPEBP3M6pw+eRExWnCRRGHuNw5Z5i/CNryoJv3ARCUtAM9c/Z6D9ErXwthWNpo
4nxg/q5f9dMZbkD6RrbkPfaetnprdc6CEEbncXEudM9dFsXXB/sYaL8tdnlLnXv0
MNjUP7+vHk7L+Im4FCYwip/rHQcw6ze8H8cgw7Bv9gvJLajVjphJ+rjq9POp8F2N
hPAViHez9ALKL5kdFEFciDk6yhuq+qwNQiu61F+clTA2Xv3nWnWy0gOPO9nhAgMB
AAGjggKZMIIClTAdBgNVHQ4EFgQU0M+Da2CnvBzXw9/eDKAjuKy2HLMwHwYDVR0j
BBgwFoAUQQgZx8m0yFzgsdInQb5eQKHw57EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMw
NDFDQ0YwNjQwODAzODQzODk4QkU1NkM0REY2QzMyLzAvNDEwODE5QzdDOUI0Qzg1
Q0UwQjFEMjI3NDFCRTVFNDBBMUYwRTdCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MTA4MTlDN0M5QjRDODVDRTBC
MUQyMjc0MUJFNUU0MEExRjBFN0IxLmNlcjCBmAYIKwYBBQUHAQsEgYswgYgwgYUG
CCsGAQUFBzALhnlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMwNDFDQ0YwNjQw
ODAzODQzODk4QkU1NkM0REY2QzMyLzAvQVMyNzI5NDUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACzKC0w
DQYJKoZIhvcNAQELBQADggEBAJX9keHntE8xrlltkV8qf10ZCGJA+eyuy6fESMBH
txDMB7qhtfcxwAPBiYjEEy09ZkL60RIanxWrqPokcpidnxiG6gfH1EcLgZcstVUj
DB7bC0l3DOm+CHwGZiFjumrDuqu4bGlCxwDuQK15xR3GYHXPLrPlGxjh295vBsQ4
vB8rzyK24mdne+AOd7eLHEhUyAxAF4hyi9z0/1jrQ8hdqLBiMTR0QSewB0ipMDY9
OmAdCMrl7c0sK4PyzYEVxfhqzxnEH7FCNYuMkZdumCF6lUD0xee4wyaUvFjrdJRf
0uMZ7VdngxAta2Z03O+Nn0k8+PanRXGJ7roMd1TynEhnYig=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:48 2025 by rpki-client