Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232322e302f32332d3233203d3e20323636383139.roa
File:                     34352e3233372e3232322e302f32332d3233203d3e20323636383139.roa (raw, json)
Hash identifier:          PMUAqmCu4jLgGE4W1UfcbQhDKwanax0we0RQX2/iKas=
Subject key identifier:   C3:24:E1:B5:D8:46:E6:FF:64:95:52:18:36:59:08:A8:E9:EC:1A:38
Certificate issuer:       /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial:       77AB99233EEC08E4DA57187BA0ABD94DB71C928F
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232322e302f32332d3233203d3e20323636383139.roa
Signing time:             Tue 04 Feb 2025 18:04:23 +0000
ROA not before:           Tue 04 Feb 2025 17:59:23 +0000
ROA not after:            Tue 03 Feb 2026 18:04:23 +0000
asID:                     266819
IP address blocks:        45.237.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
                          rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ab:99:23:3e:ec:08:e4:da:57:18:7b:a0:ab:d9:4d:b7:1c:92:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
        Validity
            Not Before: Feb  4 17:59:23 2025 GMT
            Not After : Feb  3 18:04:23 2026 GMT
        Subject: CN=C324E1B5D846E6FF64955218365908A8E9EC1A38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e1:12:29:3a:66:b7:4a:35:e7:aa:ef:70:32:
                    eb:fe:3d:ff:1f:c0:58:83:d8:a7:3c:a7:49:ac:5d:
                    a1:a1:32:73:86:16:92:83:87:b0:28:15:08:32:3e:
                    83:2a:04:5a:5c:c3:6f:4d:75:13:95:4d:73:6a:ca:
                    87:bd:9f:a9:1e:15:78:4e:d6:47:88:61:97:5d:6b:
                    18:8f:0e:67:ab:19:0e:8f:01:42:94:72:a3:f7:0b:
                    2e:6d:ab:a2:e7:66:9c:7b:ed:62:a1:54:86:08:b7:
                    57:96:e1:7d:bf:c2:39:88:a8:d7:d2:6b:f2:66:26:
                    65:79:bb:97:68:dd:fb:87:0e:26:5b:4f:fb:8e:27:
                    ce:31:14:dd:f8:f1:45:b6:e4:a1:be:06:92:de:9f:
                    b7:df:8b:e2:55:7f:cd:57:09:5c:43:26:47:bc:ce:
                    20:07:88:bd:bd:99:fb:c0:9b:4e:08:6e:ad:77:b3:
                    4a:e7:2d:ea:9e:5b:4b:e2:27:61:f9:1c:43:16:fb:
                    d7:15:70:41:4b:8b:1b:a7:8c:08:3c:48:20:a9:84:
                    7e:9e:fe:95:4a:bb:a5:57:6a:f0:60:bc:ee:47:1a:
                    73:bd:97:ba:92:e1:93:86:74:3b:bb:6d:73:2f:f2:
                    40:78:73:7b:1b:af:e8:48:2b:5b:a2:49:b5:a0:6e:
                    d5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:24:E1:B5:D8:46:E6:FF:64:95:52:18:36:59:08:A8:E9:EC:1A:38
            X509v3 Authority Key Identifier:
                keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232322e302f32332d3233203d3e20323636383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:6a:39:f4:7f:b7:d0:03:66:c4:30:72:73:59:20:c3:0d:60:
         06:eb:93:7e:c9:b4:a3:d3:80:f2:15:00:a1:cc:a9:6a:2f:b3:
         36:b7:43:b5:a2:b9:7d:26:19:47:64:5b:c4:30:0b:5d:15:8b:
         27:60:7f:96:17:47:76:80:bd:20:aa:e6:c4:8d:e5:c2:e6:e0:
         88:5b:c6:0d:30:ac:9d:b6:0c:8a:43:fb:e1:72:da:d5:5c:0b:
         68:00:e1:54:9d:a0:cc:e9:6a:50:27:b0:c3:e2:1c:a7:29:74:
         ad:fe:80:a2:4a:c4:8a:95:ac:1c:f8:23:40:c7:a2:f4:fd:a9:
         f1:98:79:71:86:98:3e:de:4c:69:e9:b4:f7:0d:be:aa:40:3f:
         ab:f8:7c:d6:a4:69:2c:e2:a3:ba:7f:b9:a3:fe:05:f9:1b:53:
         b0:ee:ba:2f:0f:6c:ae:aa:b5:eb:1c:22:b5:ca:19:ac:37:6b:
         8a:68:b3:cd:5f:b5:47:9c:06:da:b9:54:5c:bf:19:0e:af:4c:
         9a:01:0c:38:ae:9c:fd:58:48:aa:96:cd:76:6a:1c:e5:af:44:
         3f:86:dc:b1:5f:39:66:70:48:19:4a:04:84:e4:9c:62:6c:87:
         fb:ef:9b:4b:c6:1d:31:36:27:a0:d9:c8:86:b9:89:c2:d5:c4:
         51:97:96:76
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUd6uZIz7sCOTaVxh7oKvZTbccko8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUEyMzM4QjY2NjMyRDgyM0Y3NzA3MjEyNTExMkI1QkYx
RjcyMTc2OTAeFw0yNTAyMDQxNzU5MjNaFw0yNjAyMDMxODA0MjNaMDMxMTAvBgNV
BAMTKEMzMjRFMUI1RDg0NkU2RkY2NDk1NTIxODM2NTkwOEE4RTlFQzFBMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh4RIpOma3SjXnqu9wMuv+Pf8f
wFiD2Kc8p0msXaGhMnOGFpKDh7AoFQgyPoMqBFpcw29NdROVTXNqyoe9n6keFXhO
1keIYZddaxiPDmerGQ6PAUKUcqP3Cy5tq6LnZpx77WKhVIYIt1eW4X2/wjmIqNfS
a/JmJmV5u5do3fuHDiZbT/uOJ84xFN348UW25KG+BpLen7ffi+JVf81XCVxDJke8
ziAHiL29mfvAm04Ibq13s0rnLeqeW0viJ2H5HEMW+9cVcEFLixunjAg8SCCphH6e
/pVKu6VXavBgvO5HGnO9l7qS4ZOGdDu7bXMv8kB4c3sbr+hIK1uiSbWgbtX5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUwyThtdhG5v9klVIYNlkIqOnsGjgwHwYDVR0j
BBgwFoAUqiM4tmYy2CP3cHISURK1vx9yF2kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODZBODdDMDI2MEY3ODcwOTU0QzAxNjQ4RDNFMjk3MzIz
OUQwMzM2OTRBQTQwRDk4NzIzNTI1RjIxMTYyRDc4LzAvQUEyMzM4QjY2NjMyRDgy
M0Y3NzA3MjEyNTExMkI1QkYxRjcyMTc2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTIzMzhCNjY2MzJEODIzRjc3
MDcyMTI1MTEyQjVCRjFGNzIxNzY5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg2QTg3QzAyNjBGNzg3MDk1NEMwMTY0OEQzRTI5NzMyMzlEMDMzNjk0
QUE0MEQ5ODcyMzUyNUYyMTE2MkQ3OC8wLzM0MzUyZTMyMzMzNzJlMzIzMjMyMmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM2MzgzMTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLe3e
MA0GCSqGSIb3DQEBCwUAA4IBAQATajn0f7fQA2bEMHJzWSDDDWAG65N+ybSj04Dy
FQChzKlqL7M2t0O1orl9JhlHZFvEMAtdFYsnYH+WF0d2gL0gqubEjeXC5uCIW8YN
MKydtgyKQ/vhctrVXAtoAOFUnaDM6WpQJ7DD4hynKXSt/oCiSsSKlawc+CNAx6L0
/anxmHlxhpg+3kxp6bT3Db6qQD+r+HzWpGks4qO6f7mj/gX5G1Ow7rovD2yuqrXr
HCK1yhmsN2uKaLPNX7VHnAbauVRcvxkOr0yaAQw4rpz9WEiqls12ahzlr0Q/htyx
XzlmcEgZSgSE5JxibIf775tLxh0xNieg2ciGuYnC1cRRl5Z2
-----END CERTIFICATE-----
Generated at Wed Apr 23 02:04:52 2025 by rpki-client