Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/34352e3233372e35322e302f32332d3233203d3e203532333138.roa
File:                     34352e3233372e35322e302f32332d3233203d3e203532333138.roa (raw, json)
Hash identifier:          Qpc8Xafi+7AHWwwtWYDUOqS8hu5mKTz8j5YiTyl4194=
Subject key identifier:   36:5C:5D:E9:0E:97:F1:C8:01:96:BA:9F:41:0E:98:01:AF:1C:36:55
Certificate issuer:       /CN=3802AD95B7CACA97DDF17AEBD1AAA914EE988E98
Certificate serial:       5FE824FAB1FA7680F804DCE691D236DEEC0ED01A
Authority key identifier: 38:02:AD:95:B7:CA:CA:97:DD:F1:7A:EB:D1:AA:A9:14:EE:98:8E:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/34352e3233372e35322e302f32332d3233203d3e203532333138.roa
Signing time:             Tue 04 Feb 2025 18:19:55 +0000
ROA not before:           Tue 04 Feb 2025 18:14:55 +0000
ROA not after:            Tue 03 Feb 2026 18:19:55 +0000
asID:                     52318
IP address blocks:        45.237.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 09:37:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e8:24:fa:b1:fa:76:80:f8:04:dc:e6:91:d2:36:de:ec:0e:d0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3802AD95B7CACA97DDF17AEBD1AAA914EE988E98
        Validity
            Not Before: Feb  4 18:14:55 2025 GMT
            Not After : Feb  3 18:19:55 2026 GMT
        Subject: CN=365C5DE90E97F1C80196BA9F410E9801AF1C3655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d7:33:54:f9:c3:eb:35:c9:45:2e:5c:d3:55:
                    a7:be:36:6b:38:02:d2:d1:9b:30:aa:57:0f:38:ec:
                    e3:9f:47:f2:2a:0c:21:21:36:56:85:c5:ab:11:cc:
                    ce:48:22:31:8a:11:a3:61:e0:4e:35:1c:cb:d9:88:
                    cf:78:7c:3f:60:0a:d5:b4:71:d9:0f:81:9b:47:bf:
                    d6:5a:1f:e4:a8:43:b8:a3:46:4e:3e:17:6b:60:ab:
                    bb:d6:9e:8a:d2:e2:86:5b:14:f9:8a:2b:e3:e6:b4:
                    c8:56:7a:e4:c1:dc:ab:34:34:20:07:7f:40:bd:b7:
                    a2:46:f1:ce:76:c0:a1:e6:2f:2d:a2:3b:53:bb:ad:
                    0a:43:cd:38:a8:20:c7:ae:c0:4d:7c:09:57:2a:91:
                    86:2e:85:dd:81:a0:a8:89:9c:ff:8a:4e:26:2b:94:
                    f4:02:c7:c1:1d:cb:fc:df:76:0d:82:d3:1c:d4:4e:
                    74:30:c1:4f:31:90:5b:9b:13:8a:a7:81:38:a9:3a:
                    08:cf:50:15:eb:2a:50:a4:e9:02:c5:f6:95:70:66:
                    f6:27:ce:36:4c:d3:17:d6:1c:74:3b:27:4a:f1:f4:
                    d0:07:74:16:9d:7c:d6:bc:bd:e9:9d:5d:6f:dd:b4:
                    46:aa:d1:d3:16:35:32:70:70:68:a7:1a:ea:b8:5c:
                    b2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5C:5D:E9:0E:97:F1:C8:01:96:BA:9F:41:0E:98:01:AF:1C:36:55
            X509v3 Authority Key Identifier:
                keyid:38:02:AD:95:B7:CA:CA:97:DD:F1:7A:EB:D1:AA:A9:14:EE:98:8E:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/34352e3233372e35322e302f32332d3233203d3e203532333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:7c:01:2c:da:0c:52:c8:ea:f1:37:af:87:13:23:df:4d:f5:
         2e:e1:68:16:7a:79:00:b1:fd:0d:e0:06:12:ac:c5:48:60:ed:
         ca:9b:26:f8:7c:13:30:a0:4c:31:e1:0b:60:7f:79:1d:99:b2:
         84:5c:5a:02:ce:35:a1:20:81:e9:8e:49:10:0a:c0:46:78:cf:
         18:20:7e:9a:7a:61:6b:25:33:ef:04:f4:7d:f2:47:36:b2:16:
         c5:c5:3b:9f:58:0f:d9:d0:14:b8:07:2f:35:56:07:ad:56:4c:
         11:4b:f4:ba:62:ce:bb:f2:58:db:85:18:0d:d9:4b:71:83:6e:
         c2:d4:70:f3:02:1a:db:0a:bc:a8:cf:5a:82:12:16:c3:4d:4d:
         48:39:ae:48:2c:75:52:15:49:bb:e2:05:23:3f:43:4e:15:ca:
         7e:da:bc:0c:e0:c2:91:c7:ed:7e:07:85:b1:81:14:34:79:81:
         97:bb:f8:66:fd:73:5e:27:c5:59:ac:81:65:bc:56:b6:b5:3a:
         74:7f:be:06:1b:14:18:30:a1:aa:f7:97:17:ea:2c:db:5e:aa:
         4f:61:0a:fd:03:65:3c:9f:e4:82:23:52:ab:c5:77:9d:af:76:
         1e:28:a2:4e:19:bb:92:29:33:6f:38:6f:d2:5b:c8:38:33:e9:
         6e:20:34:ef
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUX+gk+rH6doD4BNzmkdI23uwO0BowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzgwMkFEOTVCN0NBQ0E5N0RERjE3QUVCRDFBQUE5MTRF
RTk4OEU5ODAeFw0yNTAyMDQxODE0NTVaFw0yNjAyMDMxODE5NTVaMDMxMTAvBgNV
BAMTKDM2NUM1REU5MEU5N0YxQzgwMTk2QkE5RjQxMEU5ODAxQUYxQzM2NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX1zNU+cPrNclFLlzTVae+Nms4
AtLRmzCqVw847OOfR/IqDCEhNlaFxasRzM5IIjGKEaNh4E41HMvZiM94fD9gCtW0
cdkPgZtHv9ZaH+SoQ7ijRk4+F2tgq7vWnorS4oZbFPmKK+PmtMhWeuTB3Ks0NCAH
f0C9t6JG8c52wKHmLy2iO1O7rQpDzTioIMeuwE18CVcqkYYuhd2BoKiJnP+KTiYr
lPQCx8Edy/zfdg2C0xzUTnQwwU8xkFubE4qngTipOgjPUBXrKlCk6QLF9pVwZvYn
zjZM0xfWHHQ7J0rx9NAHdBadfNa8vemdXW/dtEaq0dMWNTJwcGinGuq4XLKhAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUNlxd6Q6X8cgBlrqfQQ6YAa8cNlUwHwYDVR0j
BBgwFoAUOAKtlbfKypfd8Xrr0aqpFO6YjpgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RDVCREM0MDA2QjJEN0VBOUU1OUQ1NEI0NTIwMDVDNTFB
MjYwREQ0N0NDNkNBQkE3RDU3N0QxQ0UyRDEzODAxLzAvMzgwMkFEOTVCN0NBQ0E5
N0RERjE3QUVCRDFBQUE5MTRFRTk4OEU5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zODAyQUQ5NUI3Q0FDQTk3RERG
MTdBRUJEMUFBQTkxNEVFOTg4RTk4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUQ1QkRDNDAwNkIyRDdFQTlFNTlENTRCNDUyMDA1QzUxQTI2MERENDdD
QzZDQUJBN0Q1NzdEMUNFMkQxMzgwMS8wLzM0MzUyZTMyMzMzNzJlMzUzMjJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDM1MzIzMzMxMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEt7TQwDQYJ
KoZIhvcNAQELBQADggEBAA98ASzaDFLI6vE3r4cTI99N9S7haBZ6eQCx/Q3gBhKs
xUhg7cqbJvh8EzCgTDHhC2B/eR2ZsoRcWgLONaEggemOSRAKwEZ4zxggfpp6YWsl
M+8E9H3yRzayFsXFO59YD9nQFLgHLzVWB61WTBFL9LpizrvyWNuFGA3ZS3GDbsLU
cPMCGtsKvKjPWoISFsNNTUg5rkgsdVIVSbviBSM/Q04Vyn7avAzgwpHH7X4HhbGB
FDR5gZe7+Gb9c14nxVmsgWW8Vra1OnR/vgYbFBgwoar3lxfqLNteqk9hCv0DZTyf
5IIjUqvFd52vdh4ook4Zu5IpM284b9JbyDgz6W4gNO8=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:28:53 2025 by rpki-client