Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138312e3230342e302f32332d3234203d3e20323639373436.roa
File:                     34352e3138312e3230342e302f32332d3234203d3e20323639373436.roa (raw, json)
Hash identifier:          G9GHB2iCx0BlHU25PNAu40ReCv3EHcD4+OZtoY3DqSM=
Subject key identifier:   DC:86:E1:7B:67:6D:58:39:CE:83:F0:59:E1:B5:64:6A:38:A9:C3:B0
Certificate issuer:       /CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
Certificate serial:       223FE937D8C4F40DD5FD6D9C46D075FC67AC298C
Authority key identifier: 7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138312e3230342e302f32332d3234203d3e20323639373436.roa
Signing time:             Tue 04 Feb 2025 18:27:40 +0000
ROA not before:           Tue 04 Feb 2025 18:22:40 +0000
ROA not after:            Tue 03 Feb 2026 18:27:40 +0000
asID:                     269746
IP address blocks:        45.181.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:3f:e9:37:d8:c4:f4:0d:d5:fd:6d:9c:46:d0:75:fc:67:ac:29:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
        Validity
            Not Before: Feb  4 18:22:40 2025 GMT
            Not After : Feb  3 18:27:40 2026 GMT
        Subject: CN=DC86E17B676D5839CE83F059E1B5646A38A9C3B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:ce:a1:90:b6:96:71:9a:63:9b:f9:dd:d0:
                    0c:2c:97:45:6d:44:ac:5d:78:e5:4b:e4:13:14:ed:
                    20:8d:0f:cf:31:75:07:26:e7:94:82:20:fa:ac:6a:
                    17:d8:e7:d6:d7:50:ff:66:b4:94:89:48:7d:b3:4e:
                    25:48:e8:e0:a5:8a:4d:66:6d:33:79:69:5d:fa:ea:
                    c0:dd:e5:ea:51:0a:e6:49:a6:d1:09:4c:a7:48:7c:
                    50:3b:3e:77:2a:0d:be:9e:14:c7:e1:3d:b8:15:b2:
                    aa:8f:c1:6c:0b:cb:26:18:a0:31:df:10:0d:f4:31:
                    af:4a:e0:ed:67:79:3a:90:c9:cf:0d:aa:51:13:db:
                    43:10:75:14:87:c2:d4:b9:08:10:a0:15:5d:16:22:
                    13:13:44:be:b5:db:41:d1:98:e7:6c:79:dd:a5:af:
                    af:4c:c0:88:fa:17:d2:17:95:8c:19:ca:48:d8:30:
                    84:f9:0a:0b:8c:49:16:8a:21:a3:2a:64:ed:53:8b:
                    68:49:6f:9a:6e:e0:f1:7c:c6:53:67:75:2a:67:9d:
                    4b:65:35:9b:59:c6:cc:a6:74:81:9d:d2:e1:20:87:
                    63:5d:5b:dc:64:86:43:8a:19:b8:27:bd:3f:37:da:
                    a7:f1:b6:5b:f5:7f:76:00:02:a9:dc:e3:22:f8:79:
                    a2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:86:E1:7B:67:6D:58:39:CE:83:F0:59:E1:B5:64:6A:38:A9:C3:B0
            X509v3 Authority Key Identifier:
                keyid:7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138312e3230342e302f32332d3234203d3e20323639373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:27:e1:a1:17:ea:2b:91:d7:1d:46:c2:cd:3d:82:3e:d7:11:
         2b:2a:50:71:43:08:a8:74:62:d5:9d:3f:70:a0:fd:65:89:47:
         12:f1:58:09:6c:7b:17:0d:58:f5:69:2b:57:2e:49:42:bc:17:
         ca:37:e1:34:d3:dc:b8:27:3e:6d:40:82:0a:fa:53:70:6d:46:
         3e:e2:7c:5d:bd:ee:2a:56:a9:e3:98:c9:ad:14:50:cd:2f:27:
         63:73:09:24:df:11:97:a0:0f:20:0b:da:30:79:84:2f:a9:dd:
         75:26:c6:ab:68:8e:d8:e3:91:05:24:6a:49:e1:08:04:d6:dc:
         e3:3c:42:70:3e:9c:6b:24:e4:1c:a5:5d:66:38:85:d9:29:98:
         69:5e:60:60:bf:39:5d:46:92:c7:00:ec:13:1f:14:4b:d8:0e:
         2f:14:ed:d2:b2:d2:88:c9:67:ec:b3:4e:6a:70:ac:7d:fd:d8:
         61:9f:5f:3e:7d:79:fe:d4:ee:80:bd:ed:f3:be:0c:9c:9f:92:
         40:11:fc:47:56:cb:ee:bb:39:f6:0f:a8:57:43:ef:af:20:bb:
         13:5f:66:12:94:9a:99:c6:2b:b0:fb:02:8e:2d:ab:93:67:a7:
         3e:9b:ea:ba:04:01:df:44:73:f4:53:c9:4d:70:0e:66:ac:ee:
         a4:02:bf:fb
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIj/pN9jE9A3V/W2cRtB1/GesKYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U2NTY0MThGQkQ2RjUxOUU4Q0ExNDZFMDYxQ0Y1NTNB
RkU0ODBGMTAeFw0yNTAyMDQxODIyNDBaFw0yNjAyMDMxODI3NDBaMDMxMTAvBgNV
BAMTKERDODZFMTdCNjc2RDU4MzlDRTgzRjA1OUUxQjU2NDZBMzhBOUMzQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOc6hkLaWcZpjm/nd0Awsl0Vt
RKxdeOVL5BMU7SCND88xdQcm55SCIPqsahfY59bXUP9mtJSJSH2zTiVI6OClik1m
bTN5aV366sDd5epRCuZJptEJTKdIfFA7PncqDb6eFMfhPbgVsqqPwWwLyyYYoDHf
EA30Ma9K4O1neTqQyc8NqlET20MQdRSHwtS5CBCgFV0WIhMTRL6120HRmOdsed2l
r69MwIj6F9IXlYwZykjYMIT5CguMSRaKIaMqZO1Ti2hJb5pu4PF8xlNndSpnnUtl
NZtZxsymdIGd0uEgh2NdW9xkhkOKGbgnvT832qfxtlv1f3YAAqnc4yL4eaIbAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU3Ibhe2dtWDnOg/BZ4bVkajipw7AwHwYDVR0j
BBgwFoAUfmVkGPvW9RnoyhRuBhz1U6/kgPEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEM1QUMzOUI1REI3MjVGNzZBQ0UyNTdBQjgxN0FFQzU4
RDM4Q0JBNDRGMjJCMzM4Nzk2NkI0QUI5QTIyOTZELzAvN0U2NTY0MThGQkQ2RjUx
OUU4Q0ExNDZFMDYxQ0Y1NTNBRkU0ODBGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RTY1NjQxOEZCRDZGNTE5RThD
QTE0NkUwNjFDRjU1M0FGRTQ4MEYxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRDNUFDMzlCNURCNzI1Rjc2QUNFMjU3QUI4MTdBRUM1OEQzOENCQTQ0
RjIyQjMzODc5NjZCNEFCOUEyMjk2RC8wLzM0MzUyZTMxMzgzMTJlMzIzMDM0MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM5MzczNDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLbXM
MA0GCSqGSIb3DQEBCwUAA4IBAQCTJ+GhF+orkdcdRsLNPYI+1xErKlBxQwiodGLV
nT9woP1liUcS8VgJbHsXDVj1aStXLklCvBfKN+E009y4Jz5tQIIK+lNwbUY+4nxd
ve4qVqnjmMmtFFDNLydjcwkk3xGXoA8gC9oweYQvqd11JsaraI7Y45EFJGpJ4QgE
1tzjPEJwPpxrJOQcpV1mOIXZKZhpXmBgvzldRpLHAOwTHxRL2A4vFO3SstKIyWfs
s05qcKx9/dhhn18+fXn+1O6Ave3zvgycn5JAEfxHVsvuuzn2D6hXQ++vILsTX2YS
lJqZxiuw+wKOLauTZ6c+m+q6BAHfRHP0U8lNcA5mrO6kAr/7
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:09 2025 by rpki-client