Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/34352e3138302e36302e302f32342d3234203d3e20323639373738.roa
File:                     34352e3138302e36302e302f32342d3234203d3e20323639373738.roa (raw, json)
Hash identifier:          VP0xD4+tBTdORLIj2sNj1wDU4nNIl/YcDJJa/dJO+s0=
Subject key identifier:   7D:71:6D:D2:F5:BD:30:82:5A:26:0D:3C:C6:B8:C0:C0:12:EF:49:49
Certificate issuer:       /CN=33331641F47777E6D39D660CBD610B3AC5C71200
Certificate serial:       5AA7A1ECDB23E904F2FEBE144F6F9A94F86799D6
Authority key identifier: 33:33:16:41:F4:77:77:E6:D3:9D:66:0C:BD:61:0B:3A:C5:C7:12:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33331641F47777E6D39D660CBD610B3AC5C71200.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/34352e3138302e36302e302f32342d3234203d3e20323639373738.roa
Signing time:             Sat 21 Dec 2024 04:30:00 +0000
ROA not before:           Sat 21 Dec 2024 04:25:00 +0000
ROA not after:            Sat 20 Dec 2025 04:30:00 +0000
asID:                     269778
IP address blocks:        45.180.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/33331641F47777E6D39D660CBD610B3AC5C71200.crl
                          rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/33331641F47777E6D39D660CBD610B3AC5C71200.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33331641F47777E6D39D660CBD610B3AC5C71200.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a7:a1:ec:db:23:e9:04:f2:fe:be:14:4f:6f:9a:94:f8:67:99:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33331641F47777E6D39D660CBD610B3AC5C71200
        Validity
            Not Before: Dec 21 04:25:00 2024 GMT
            Not After : Dec 20 04:30:00 2025 GMT
        Subject: CN=7D716DD2F5BD30825A260D3CC6B8C0C012EF4949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:a7:7e:c3:5e:06:4d:6d:a5:09:78:29:c6:
                    d3:85:ad:b6:7f:d2:11:89:ff:04:22:e6:c0:1d:08:
                    3a:0c:3e:a2:fc:43:84:62:9f:0c:81:da:b0:09:bd:
                    67:95:cd:04:94:99:7b:37:ba:d0:73:fa:61:a0:97:
                    f3:d4:0e:f4:b3:82:85:56:89:6c:a3:25:b9:0d:f8:
                    34:24:47:fa:b1:87:5d:fa:40:0c:99:1b:79:f5:9b:
                    c2:7b:45:3b:35:2c:64:f5:40:fd:e5:8e:b2:10:74:
                    1c:87:11:d9:26:d7:76:ad:a4:ba:b5:9d:16:94:e4:
                    42:ef:9c:2a:5a:0c:e8:e7:b3:7a:a7:a5:c3:36:a8:
                    a9:ec:a4:25:b7:27:57:dc:82:2c:0e:64:61:97:a4:
                    2c:6c:70:78:a1:d5:86:bd:aa:53:3e:76:1f:8a:77:
                    91:8e:c6:1f:99:e8:0f:3f:23:70:d5:20:4b:f9:f9:
                    ba:92:60:db:33:d4:86:dd:50:21:4c:d8:87:64:12:
                    07:07:e5:6e:7b:fa:b0:c1:88:5f:b6:6f:05:86:f1:
                    4f:71:f3:ca:a2:22:64:d6:dc:89:2f:ad:cf:ad:26:
                    03:65:ae:a5:ab:06:24:f4:0a:c2:a6:32:76:01:a4:
                    64:1c:2a:8e:8c:cb:05:2a:c1:f9:eb:3d:6a:4f:b8:
                    38:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:71:6D:D2:F5:BD:30:82:5A:26:0D:3C:C6:B8:C0:C0:12:EF:49:49
            X509v3 Authority Key Identifier:
                keyid:33:33:16:41:F4:77:77:E6:D3:9D:66:0C:BD:61:0B:3A:C5:C7:12:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/33331641F47777E6D39D660CBD610B3AC5C71200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33331641F47777E6D39D660CBD610B3AC5C71200.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/34352e3138302e36302e302f32342d3234203d3e20323639373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:83:32:38:fa:89:fd:22:c6:74:22:52:ed:d8:ef:45:ac:dd:
         3d:f2:38:16:20:f6:8f:2e:63:71:31:5f:b0:78:ba:22:59:71:
         5f:5e:e2:bf:f1:cc:b6:62:2e:5e:67:b0:15:de:5e:18:cb:be:
         61:ef:a2:7d:22:db:7e:f3:a1:d3:ef:87:0d:9a:c6:9c:0d:3c:
         86:8f:0a:52:3f:d1:fa:dd:b4:59:82:2f:35:83:94:df:cc:cb:
         eb:ea:cf:d5:dc:d4:26:c5:56:c3:da:66:ec:d0:0a:4e:fc:b2:
         95:14:d1:29:c0:12:a2:aa:9f:43:62:ff:55:72:e1:a2:03:90:
         a1:06:e4:ef:4e:e8:4d:72:9e:a3:35:02:15:fa:4f:c2:e3:59:
         f5:b7:bb:b1:62:6d:52:3c:7a:91:0f:9a:e1:e9:55:45:ac:5d:
         95:51:cc:84:a2:45:23:0e:0e:50:fc:14:6e:61:17:bb:d2:b4:
         47:15:f1:30:f2:34:e4:0c:73:2e:87:73:21:24:a6:68:fe:32:
         8e:78:98:dc:3a:3b:50:b0:6f:2b:b3:21:8f:7a:8d:92:5d:eb:
         8c:9e:56:d2:84:c7:b3:7d:f2:2a:25:3a:01:ea:8c:e4:75:5b:
         0c:bc:44:de:e7:9e:ac:d9:55:a1:43:ef:4d:54:ae:58:e9:43:
         b9:1f:2f:d5
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWqeh7Nsj6QTy/r4UT2+alPhnmdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzMzMzE2NDFGNDc3NzdFNkQzOUQ2NjBDQkQ2MTBCM0FD
NUM3MTIwMDAeFw0yNDEyMjEwNDI1MDBaFw0yNTEyMjAwNDMwMDBaMDMxMTAvBgNV
BAMTKDdENzE2REQyRjVCRDMwODI1QTI2MEQzQ0M2QjhDMEMwMTJFRjQ5NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/ad+w14GTW2lCXgpxtOFrbZ/
0hGJ/wQi5sAdCDoMPqL8Q4RinwyB2rAJvWeVzQSUmXs3utBz+mGgl/PUDvSzgoVW
iWyjJbkN+DQkR/qxh136QAyZG3n1m8J7RTs1LGT1QP3ljrIQdByHEdkm13atpLq1
nRaU5ELvnCpaDOjns3qnpcM2qKnspCW3J1fcgiwOZGGXpCxscHih1Ya9qlM+dh+K
d5GOxh+Z6A8/I3DVIEv5+bqSYNsz1IbdUCFM2IdkEgcH5W57+rDBiF+2bwWG8U9x
88qiImTW3Ikvrc+tJgNlrqWrBiT0CsKmMnYBpGQcKo6MywUqwfnrPWpPuDgJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUfXFt0vW9MIJaJg08xrjAwBLvSUkwHwYDVR0j
BBgwFoAUMzMWQfR3d+bTnWYMvWELOsXHEgAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NzRERTM1RUQ1OUQxREQ3MzQ1NkU1QUQ3M0M3QUJDMUU3
RjYzRTA3NTc3MzEzQUIzMjk3MzA2NDUzQTI5MzZELzAvMzMzMzE2NDFGNDc3NzdF
NkQzOUQ2NjBDQkQ2MTBCM0FDNUM3MTIwMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMzMzMTY0MUY0Nzc3N0U2RDM5
RDY2MENCRDYxMEIzQUM1QzcxMjAwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzc0REUzNUVENTlEMURENzM0NTZFNUFENzNDN0FCQzFFN0Y2M0UwNzU3
NzMxM0FCMzI5NzMwNjQ1M0EyOTM2RC8wLzM0MzUyZTMxMzgzMDJlMzYzMDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTM3MzczOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC20PDAN
BgkqhkiG9w0BAQsFAAOCAQEAg4MyOPqJ/SLGdCJS7djvRazdPfI4FiD2jy5jcTFf
sHi6IllxX17iv/HMtmIuXmewFd5eGMu+Ye+ifSLbfvOh0++HDZrGnA08ho8KUj/R
+t20WYIvNYOU38zL6+rP1dzUJsVWw9pm7NAKTvyylRTRKcASoqqfQ2L/VXLhogOQ
oQbk707oTXKeozUCFfpPwuNZ9be7sWJtUjx6kQ+a4elVRaxdlVHMhKJFIw4OUPwU
bmEXu9K0RxXxMPI05AxzLodzISSmaP4yjniY3Do7ULBvK7Mhj3qNkl3rjJ5W0oTH
s33yKiU6AeqM5HVbDLxE3ueerNlVoUPvTVSuWOlDuR8v1Q==
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:26:44 2025 by rpki-client