Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa
File:                     34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa (raw, json)
Hash identifier:          H8ah+1UhN/eq5WKFT0vmFxrRSA6J3Cu5+ERJLv9mNDM=
Subject key identifier:   1B:1D:CE:E4:24:48:F9:47:50:D7:9F:15:72:D8:F8:E3:D0:E3:CE:C2
Certificate issuer:       /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial:       4B2B897D40F10811C59822F1B7B73AED6D290F16
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa
Signing time:             Tue 04 Feb 2025 18:04:22 +0000
ROA not before:           Tue 04 Feb 2025 17:59:22 +0000
ROA not after:            Tue 03 Feb 2026 18:04:22 +0000
asID:                     266819
IP address blocks:        45.237.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
                          rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:2b:89:7d:40:f1:08:11:c5:98:22:f1:b7:b7:3a:ed:6d:29:0f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
        Validity
            Not Before: Feb  4 17:59:22 2025 GMT
            Not After : Feb  3 18:04:22 2026 GMT
        Subject: CN=1B1DCEE42448F94750D79F1572D8F8E3D0E3CEC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c3:d4:a1:e1:26:4d:66:63:de:c2:f8:12:08:
                    cc:1d:05:85:e4:88:fe:82:07:b6:db:a7:3e:eb:f9:
                    9d:0c:5f:cd:f5:cb:7e:8a:f7:c2:d9:dd:46:ee:b6:
                    29:b3:d8:65:91:dc:2c:24:8a:7a:ab:85:44:ab:f8:
                    1e:bb:89:7a:e6:41:7f:d4:79:10:19:a4:39:20:ab:
                    a1:df:63:d9:99:58:4a:67:31:6b:1c:56:83:9c:7e:
                    50:e8:da:f3:60:e9:b3:09:2f:ec:fa:aa:e8:c2:77:
                    20:eb:1a:eb:11:e4:0b:50:c5:81:e8:b9:33:fb:af:
                    81:ce:ed:2b:88:4e:a8:38:e5:78:23:c7:a0:ae:a2:
                    11:b6:c4:2c:61:08:2d:02:cf:24:83:1d:45:f8:9d:
                    62:b6:d4:c2:51:70:cf:e6:7e:3f:69:ed:63:b9:53:
                    ed:25:3f:b6:b7:a4:a6:74:f5:5f:63:19:05:66:8c:
                    06:5a:0e:54:89:b1:c7:4b:ec:e4:38:1f:f3:5f:51:
                    b2:23:0a:58:1c:88:e0:ec:24:bf:b3:1a:56:91:9f:
                    8d:8a:36:fb:d5:8f:86:c0:e6:a1:0f:13:09:0f:72:
                    79:e1:2c:f9:52:89:fa:47:4a:9b:32:f3:33:dc:29:
                    77:87:95:20:c7:a2:e4:84:c6:8e:02:00:3c:50:12:
                    43:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1D:CE:E4:24:48:F9:47:50:D7:9F:15:72:D8:F8:E3:D0:E3:CE:C2
            X509v3 Authority Key Identifier:
                keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:41:be:9e:ec:b0:c2:c1:d2:f1:8f:45:a4:39:5e:00:8a:04:
         10:42:46:9c:3a:1b:e3:00:bc:3a:03:50:5e:6b:00:6a:a0:a6:
         a9:90:09:20:56:fb:35:6f:f0:c0:07:51:a1:7e:db:e7:72:0a:
         e6:f3:e5:fd:59:88:4f:07:be:95:d5:d5:3a:99:50:2a:ba:6c:
         16:78:13:29:3a:af:20:10:81:c0:16:31:97:30:27:aa:af:42:
         71:ee:53:85:51:a4:94:85:94:ec:c3:9b:c2:0d:37:23:1e:91:
         a0:26:3f:2b:bf:b1:9c:dd:70:dc:1a:4c:c6:ed:01:86:f6:58:
         24:3b:41:6f:ed:5b:50:84:f8:c5:ff:98:eb:3c:16:06:f3:8e:
         d4:33:a5:5a:4f:05:60:29:27:20:bf:9f:4f:b8:6f:7a:17:7b:
         35:bf:86:fe:46:e8:a9:6a:dd:3b:78:0a:31:ad:69:46:c8:6a:
         c6:1a:ba:63:f7:8d:77:bf:2a:44:34:e1:7e:26:33:f3:cf:8a:
         10:8a:b7:01:37:2b:1d:e6:57:c9:11:e0:07:01:09:98:c9:a4:
         5f:07:dc:47:b2:48:33:42:1c:60:56:37:8b:5b:b3:1e:e5:74:
         5b:94:18:44:23:20:45:d6:dc:af:38:7d:4f:88:83:5f:cb:4e:
         f7:3b:6e:4f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUSyuJfUDxCBHFmCLxt7c67W0pDxYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUEyMzM4QjY2NjMyRDgyM0Y3NzA3MjEyNTExMkI1QkYx
RjcyMTc2OTAeFw0yNTAyMDQxNzU5MjJaFw0yNjAyMDMxODA0MjJaMDMxMTAvBgNV
BAMTKDFCMURDRUU0MjQ0OEY5NDc1MEQ3OUYxNTcyRDhGOEUzRDBFM0NFQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7w9Sh4SZNZmPewvgSCMwdBYXk
iP6CB7bbpz7r+Z0MX831y36K98LZ3Ubutimz2GWR3CwkinqrhUSr+B67iXrmQX/U
eRAZpDkgq6HfY9mZWEpnMWscVoOcflDo2vNg6bMJL+z6qujCdyDrGusR5AtQxYHo
uTP7r4HO7SuITqg45Xgjx6CuohG2xCxhCC0CzySDHUX4nWK21MJRcM/mfj9p7WO5
U+0lP7a3pKZ09V9jGQVmjAZaDlSJscdL7OQ4H/NfUbIjClgciODsJL+zGlaRn42K
NvvVj4bA5qEPEwkPcnnhLPlSifpHSpsy8zPcKXeHlSDHouSExo4CADxQEkMxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUGx3O5CRI+UdQ158Vctj449DjzsIwHwYDVR0j
BBgwFoAUqiM4tmYy2CP3cHISURK1vx9yF2kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODZBODdDMDI2MEY3ODcwOTU0QzAxNjQ4RDNFMjk3MzIz
OUQwMzM2OTRBQTQwRDk4NzIzNTI1RjIxMTYyRDc4LzAvQUEyMzM4QjY2NjMyRDgy
M0Y3NzA3MjEyNTExMkI1QkYxRjcyMTc2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTIzMzhCNjY2MzJEODIzRjc3
MDcyMTI1MTEyQjVCRjFGNzIxNzY5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg2QTg3QzAyNjBGNzg3MDk1NEMwMTY0OEQzRTI5NzMyMzlEMDMzNjk0
QUE0MEQ5ODcyMzUyNUYyMTE2MkQ3OC8wLzM0MzUyZTMyMzMzNzJlMzIzMjMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzgzMTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALe3f
MA0GCSqGSIb3DQEBCwUAA4IBAQBDQb6e7LDCwdLxj0WkOV4AigQQQkacOhvjALw6
A1BeawBqoKapkAkgVvs1b/DAB1Ghftvncgrm8+X9WYhPB76V1dU6mVAqumwWeBMp
Oq8gEIHAFjGXMCeqr0Jx7lOFUaSUhZTsw5vCDTcjHpGgJj8rv7Gc3XDcGkzG7QGG
9lgkO0Fv7VtQhPjF/5jrPBYG847UM6VaTwVgKScgv59PuG96F3s1v4b+Ruipat07
eAoxrWlGyGrGGrpj9413vypENOF+JjPzz4oQircBNysd5lfJEeAHAQmYyaRfB9xH
skgzQhxgVjeLW7Me5XRblBhEIyBF1tyvOH1PiINfy073O25P
-----END CERTIFICATE-----
Generated at Wed Apr 23 07:42:03 2025 by rpki-client