Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/34352e3136382e3139362e302f32322d3234203d3e20323637373430.roa
File:                     34352e3136382e3139362e302f32322d3234203d3e20323637373430.roa (raw, json)
Hash identifier:          Bgys9F3cFWsAjGMYqC/mRICZAYDsi4+CtIXRda8v+4w=
Subject key identifier:   2E:85:FA:35:42:CE:4B:DC:BE:22:48:52:DD:E1:D0:2B:5B:BD:C7:09
Certificate issuer:       /CN=5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2
Certificate serial:       7801DCAC84D8111FC2E182519E0C044E3A39D7D9
Authority key identifier: 5B:A4:CD:8B:65:E4:B3:ED:FA:83:BD:F4:08:BB:53:2E:A0:7C:6D:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/34352e3136382e3139362e302f32322d3234203d3e20323637373430.roa
Signing time:             Tue 04 Feb 2025 18:15:41 +0000
ROA not before:           Tue 04 Feb 2025 18:10:41 +0000
ROA not after:            Tue 03 Feb 2026 18:15:41 +0000
asID:                     267740
IP address blocks:        45.168.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:01:dc:ac:84:d8:11:1f:c2:e1:82:51:9e:0c:04:4e:3a:39:d7:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2
        Validity
            Not Before: Feb  4 18:10:41 2025 GMT
            Not After : Feb  3 18:15:41 2026 GMT
        Subject: CN=2E85FA3542CE4BDCBE224852DDE1D02B5BBDC709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:1a:98:e3:29:bd:02:c5:cf:f2:d9:ea:48:5a:
                    c6:20:47:c7:18:f0:38:17:29:65:15:46:09:84:c5:
                    cc:9e:7b:2e:71:e0:35:2e:a9:9c:dc:ee:c9:75:66:
                    8b:d7:6e:ac:66:20:ee:ac:31:ed:fc:83:4e:6a:56:
                    90:01:92:07:f9:74:64:1a:ec:72:e3:d7:1d:34:b2:
                    aa:c4:49:c7:13:f0:ae:97:84:93:74:70:fa:fe:d8:
                    7c:0d:af:c1:5a:9a:c5:eb:1a:0d:50:4a:2c:b8:d0:
                    ca:8b:27:08:fb:50:1a:3d:73:71:c3:eb:3f:50:2e:
                    e0:10:4f:fe:6f:35:98:ac:ff:e1:8c:c9:a0:9b:c7:
                    61:5d:23:3a:1a:46:79:74:62:a4:ad:6b:db:97:71:
                    9f:46:97:c7:13:b1:7c:9f:f7:09:95:b5:e3:e0:34:
                    49:ea:91:de:4d:73:f2:41:fc:97:d3:f0:b9:8c:57:
                    c2:47:79:73:c9:bb:97:33:be:99:87:cf:44:e4:06:
                    e9:d7:8c:1d:a2:49:77:30:cd:9a:a7:6a:a1:da:64:
                    9e:1c:7a:8d:b0:8f:4d:83:c8:7e:d4:e0:90:ce:93:
                    30:1d:16:8e:17:ac:14:cf:53:41:17:72:5f:a5:14:
                    5a:68:4b:cf:e9:88:b2:d4:80:18:96:9a:60:45:69:
                    6b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:85:FA:35:42:CE:4B:DC:BE:22:48:52:DD:E1:D0:2B:5B:BD:C7:09
            X509v3 Authority Key Identifier:
                keyid:5B:A4:CD:8B:65:E4:B3:ED:FA:83:BD:F4:08:BB:53:2E:A0:7C:6D:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/34352e3136382e3139362e302f32322d3234203d3e20323637373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:09:e9:f8:a6:99:6c:17:2c:b0:c3:e9:68:0f:0b:bc:0f:b4:
         23:d7:04:59:26:00:15:dd:d3:a3:d3:fd:22:94:a4:2f:d2:4f:
         a6:51:44:13:b2:5e:35:ac:91:9c:b6:93:c1:0c:eb:62:8c:48:
         01:08:ff:63:ed:1f:ee:90:9c:9f:a7:99:06:85:fa:c6:b6:b8:
         8a:9f:20:39:03:37:1f:d8:69:4a:e4:0d:6f:32:c8:17:ff:4d:
         1c:e0:43:4a:78:48:7b:b7:aa:b4:46:94:87:23:52:9c:10:47:
         99:ab:4a:3a:83:86:d0:16:bc:56:3d:ae:f7:1c:ff:15:df:4d:
         f7:60:c5:13:42:f3:19:15:3b:6c:25:76:6f:53:86:d0:ea:b7:
         74:88:34:8b:74:e6:fa:ed:9a:e1:3a:76:69:a9:cd:f3:68:c1:
         fb:0e:09:66:57:b6:53:e0:70:16:52:40:0f:02:05:60:f4:68:
         65:ea:b1:d7:60:a3:fc:4f:e1:a6:59:4c:cf:bf:9b:e1:77:ad:
         97:cf:09:19:3f:5b:98:9c:85:35:01:aa:f6:32:41:10:1f:60:
         6f:66:87:a3:fa:b9:ed:b4:a4:3c:77:21:d1:e0:9c:b4:30:c3:
         de:40:40:e4:0c:78:24:98:09:a4:86:e7:b5:8b:5b:61:79:6e:
         5c:88:e3:8e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUeAHcrITYER/C4YJRngwETjo519kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJBNENEOEI2NUU0QjNFREZBODNCREY0MDhCQjUzMkVB
MDdDNkRDMjAeFw0yNTAyMDQxODEwNDFaFw0yNjAyMDMxODE1NDFaMDMxMTAvBgNV
BAMTKDJFODVGQTM1NDJDRTRCRENCRTIyNDg1MkRERTFEMDJCNUJCREM3MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7GpjjKb0Cxc/y2epIWsYgR8cY
8DgXKWUVRgmExcyeey5x4DUuqZzc7sl1ZovXbqxmIO6sMe38g05qVpABkgf5dGQa
7HLj1x00sqrESccT8K6XhJN0cPr+2HwNr8FamsXrGg1QSiy40MqLJwj7UBo9c3HD
6z9QLuAQT/5vNZis/+GMyaCbx2FdIzoaRnl0YqSta9uXcZ9Gl8cTsXyf9wmVtePg
NEnqkd5Nc/JB/JfT8LmMV8JHeXPJu5czvpmHz0TkBunXjB2iSXcwzZqnaqHaZJ4c
eo2wj02DyH7U4JDOkzAdFo4XrBTPU0EXcl+lFFpoS8/piLLUgBiWmmBFaWvZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQULoX6NULOS9y+IkhS3eHQK1u9xwkwHwYDVR0j
BBgwFoAUW6TNi2Xks+36g730CLtTLqB8bcIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82OTMxODYyNUUyOTAwNEVGNjBDMTYwQkJEMjhCNjMzRjRG
MEYwQUU3OEU5REFEOTVCRjg4RDY5RDkzNzBDQTM3LzAvNUJBNENEOEI2NUU0QjNF
REZBODNCREY0MDhCQjUzMkVBMDdDNkRDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QkE0Q0Q4QjY1RTRCM0VERkE4
M0JERjQwOEJCNTMyRUEwN0M2REMyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjkzMTg2MjVFMjkwMDRFRjYwQzE2MEJCRDI4QjYzM0Y0RjBGMEFFNzhF
OURBRDk1QkY4OEQ2OUQ5MzcwQ0EzNy8wLzM0MzUyZTMxMzYzODJlMzEzOTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3MzczNDMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLajE
MA0GCSqGSIb3DQEBCwUAA4IBAQC+Cen4pplsFyyww+loDwu8D7Qj1wRZJgAV3dOj
0/0ilKQv0k+mUUQTsl41rJGctpPBDOtijEgBCP9j7R/ukJyfp5kGhfrGtriKnyA5
Azcf2GlK5A1vMsgX/00c4ENKeEh7t6q0RpSHI1KcEEeZq0o6g4bQFrxWPa73HP8V
3033YMUTQvMZFTtsJXZvU4bQ6rd0iDSLdOb67ZrhOnZpqc3zaMH7DglmV7ZT4HAW
UkAPAgVg9Ghl6rHXYKP8T+GmWUzPv5vhd62XzwkZP1uYnIU1Aar2MkEQH2BvZoej
+rnttKQ8dyHR4Jy0MMPeQEDkDHgkmAmkhue1i1theW5ciOOO
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:39 2025 by rpki-client