Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/34352e3233312e35352e302f32342d3234203d3e20323636373139.roa
File:                     34352e3233312e35352e302f32342d3234203d3e20323636373139.roa (raw, json)
Hash identifier:          WQ9lNIZtXRm3XfF2GEN6GoSbsbWsOz7bVo0VSizyYX8=
Subject key identifier:   E9:4D:65:6F:0A:D6:56:AB:68:9A:DF:2B:61:3E:44:1C:35:2A:CB:AF
Certificate issuer:       /CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
Certificate serial:       57BAD208DEC2A67E96A89A0CB84164EAAF1C6DAC
Authority key identifier: 20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/34352e3233312e35352e302f32342d3234203d3e20323636373139.roa
Signing time:             Tue 04 Feb 2025 18:14:04 +0000
ROA not before:           Tue 04 Feb 2025 18:09:04 +0000
ROA not after:            Tue 03 Feb 2026 18:14:04 +0000
asID:                     266719
IP address blocks:        45.231.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ba:d2:08:de:c2:a6:7e:96:a8:9a:0c:b8:41:64:ea:af:1c:6d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
        Validity
            Not Before: Feb  4 18:09:04 2025 GMT
            Not After : Feb  3 18:14:04 2026 GMT
        Subject: CN=E94D656F0AD656AB689ADF2B613E441C352ACBAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2a:be:0a:58:fe:ad:17:d5:a0:c6:3a:d8:4a:
                    7e:a3:13:b3:02:02:b2:c4:4e:4f:39:d7:67:32:c3:
                    30:d9:5e:72:9d:f7:68:a7:4d:1f:56:02:3d:94:9f:
                    44:53:19:b1:3f:5e:8f:96:12:42:33:ba:aa:95:ba:
                    59:d5:6d:d5:a4:7d:61:75:21:f6:2e:1a:d5:44:19:
                    11:eb:85:83:d2:09:93:95:a2:bb:4b:52:03:c6:7d:
                    86:48:ae:d5:1b:26:60:84:fc:f4:b4:5b:ee:12:74:
                    da:f4:78:c0:ff:3f:ee:75:fb:a5:10:0a:55:af:9a:
                    27:81:17:27:84:31:a8:9d:26:70:fb:e2:74:79:06:
                    a1:fb:64:64:ee:86:58:99:b6:7b:d5:64:11:f0:95:
                    8b:80:ad:97:94:21:e5:92:d5:99:ee:66:ec:3f:2b:
                    1f:1a:63:4f:89:12:f4:4e:d3:02:94:79:9b:b4:b0:
                    b4:31:33:5a:91:76:5e:89:49:2c:23:55:6b:39:24:
                    55:91:e6:11:32:95:0d:fa:4d:17:40:6a:1b:75:26:
                    23:8b:09:49:d1:03:87:9c:d0:ae:81:c7:9f:de:e8:
                    91:d7:57:d8:40:78:74:f5:39:bd:bc:9a:c8:fc:ec:
                    7f:af:ce:dd:74:6a:6e:27:b2:e3:2b:b1:d9:e6:a3:
                    4a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4D:65:6F:0A:D6:56:AB:68:9A:DF:2B:61:3E:44:1C:35:2A:CB:AF
            X509v3 Authority Key Identifier:
                keyid:20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/34352e3233312e35352e302f32342d3234203d3e20323636373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:d5:e6:1a:07:ed:ac:0e:10:62:d2:b2:08:3a:7f:55:37:d6:
         28:26:53:64:95:25:f1:4f:c5:8f:04:86:7e:fa:53:9e:ef:45:
         13:5d:c0:36:0c:5b:f0:00:07:e4:93:db:05:d8:3d:46:de:df:
         a4:8d:69:76:d4:6d:04:bd:39:77:a2:3d:bb:f9:38:60:68:46:
         f3:2e:77:94:70:d2:46:67:44:12:e0:80:94:e6:05:34:56:06:
         3d:2c:f5:47:13:80:ef:cb:9b:a2:a3:31:2a:1b:af:9e:ce:60:
         46:03:79:9e:54:2c:64:e9:e9:6a:a5:d9:92:f2:65:03:9f:65:
         01:b0:29:b5:ab:b2:55:dc:c9:c5:14:61:81:07:fc:cb:8b:16:
         9b:c2:87:7d:54:1c:ba:3f:ed:cb:d0:06:0c:93:d3:6f:27:a2:
         d6:b4:2f:d5:f0:95:bf:11:73:2a:7b:25:87:7c:0d:af:02:ff:
         de:0b:04:1d:12:1c:5c:ea:43:0d:14:47:8a:41:a5:95:12:28:
         77:a6:5d:d9:c1:ed:a0:eb:63:37:9c:4f:02:99:32:30:a4:be:
         2f:8a:fc:24:e0:29:ef:82:63:98:cf:0e:48:cb:bc:a5:ab:a1:
         37:5e:3d:1e:23:83:5f:4f:fe:2e:1c:2e:a9:f6:f7:39:25:5a:
         b5:8c:f1:47
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUV7rSCN7Cpn6WqJoMuEFk6q8cbawwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBGMkQ1NTBEQTJGQUZFN0I2NEYzODUwRDlDNzM5Qjcx
RTYxRkQxODAeFw0yNTAyMDQxODA5MDRaFw0yNjAyMDMxODE0MDRaMDMxMTAvBgNV
BAMTKEU5NEQ2NTZGMEFENjU2QUI2ODlBREYyQjYxM0U0NDFDMzUyQUNCQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpKr4KWP6tF9WgxjrYSn6jE7MC
ArLETk8512cywzDZXnKd92inTR9WAj2Un0RTGbE/Xo+WEkIzuqqVulnVbdWkfWF1
IfYuGtVEGRHrhYPSCZOVortLUgPGfYZIrtUbJmCE/PS0W+4SdNr0eMD/P+51+6UQ
ClWvmieBFyeEMaidJnD74nR5BqH7ZGTuhliZtnvVZBHwlYuArZeUIeWS1ZnuZuw/
Kx8aY0+JEvRO0wKUeZu0sLQxM1qRdl6JSSwjVWs5JFWR5hEylQ36TRdAaht1JiOL
CUnRA4ec0K6Bx5/e6JHXV9hAeHT1Ob28msj87H+vzt10am4nsuMrsdnmo0pdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU6U1lbwrWVqtomt8rYT5EHDUqy68wHwYDVR0j
BBgwFoAUIPLVUNovr+e2TzhQ2cc5tx5h/RgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QjE1Qzk5QjYwQzM0NjdEQjcxMEYxNzZEOTQ2OUJFNjNC
NjQ1OEZFQTU4REYzRDZDNTQwRThFN0M2QzVBQkM1LzAvMjBGMkQ1NTBEQTJGQUZF
N0I2NEYzODUwRDlDNzM5QjcxRTYxRkQxOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEYyRDU1MERBMkZBRkU3QjY0
RjM4NTBEOUM3MzlCNzFFNjFGRDE4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0IxNUM5OUI2MEMzNDY3REI3MTBGMTc2RDk0NjlCRTYzQjY0NThGRUE1
OERGM0Q2QzU0MEU4RTdDNkM1QUJDNS8wLzM0MzUyZTMyMzMzMTJlMzUzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM3MzEzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3nNzAN
BgkqhkiG9w0BAQsFAAOCAQEAW9XmGgftrA4QYtKyCDp/VTfWKCZTZJUl8U/FjwSG
fvpTnu9FE13ANgxb8AAH5JPbBdg9Rt7fpI1pdtRtBL05d6I9u/k4YGhG8y53lHDS
RmdEEuCAlOYFNFYGPSz1RxOA78uboqMxKhuvns5gRgN5nlQsZOnpaqXZkvJlA59l
AbAptauyVdzJxRRhgQf8y4sWm8KHfVQcuj/ty9AGDJPTbyei1rQv1fCVvxFzKnsl
h3wNrwL/3gsEHRIcXOpDDRRHikGllRIod6Zd2cHtoOtjN5xPApkyMKS+L4r8JOAp
74JjmM8OSMu8pauhN149HiODX0/+Lhwuqfb3OSVatYzxRw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:56:50 2025 by rpki-client