Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/34352e362e382e302f32322d3234203d3e20323635383139.roa
File:                     34352e362e382e302f32322d3234203d3e20323635383139.roa (raw, json)
Hash identifier:          +1jICB551XZkifSe63JerrmsY24WhRnJicsJpyC0LhU=
Subject key identifier:   17:38:9E:F6:0A:CE:FB:EB:76:1C:78:09:56:94:8C:C1:94:87:4D:0A
Certificate issuer:       /CN=16423C98CF2548839D74EFD9FB7304F4DAB4AE75
Certificate serial:       6A4B96F6734D8FC1CE56E663B57116ED2F268D88
Authority key identifier: 16:42:3C:98:CF:25:48:83:9D:74:EF:D9:FB:73:04:F4:DA:B4:AE:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/34352e362e382e302f32322d3234203d3e20323635383139.roa
Signing time:             Sat 01 Feb 2025 00:05:00 +0000
ROA not before:           Sat 01 Feb 2025 00:00:00 +0000
ROA not after:            Sat 31 Jan 2026 00:05:00 +0000
asID:                     265819
IP address blocks:        45.6.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.crl
                          rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4b:96:f6:73:4d:8f:c1:ce:56:e6:63:b5:71:16:ed:2f:26:8d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16423C98CF2548839D74EFD9FB7304F4DAB4AE75
        Validity
            Not Before: Feb  1 00:00:00 2025 GMT
            Not After : Jan 31 00:05:00 2026 GMT
        Subject: CN=17389EF60ACEFBEB761C780956948CC194874D0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:14:b5:b6:34:4a:11:3d:20:2f:70:67:b4:
                    78:4f:f9:fc:96:dc:13:be:f0:9f:89:c5:7a:d2:23:
                    eb:31:35:c3:33:d7:24:fb:b1:8e:eb:45:8d:bf:c3:
                    fd:81:81:78:27:c0:98:6f:4b:da:24:c2:46:16:e8:
                    14:17:03:a0:85:32:55:d7:b7:2d:5c:f3:03:20:76:
                    24:72:0d:ed:e4:0b:e4:12:be:18:5c:2f:fa:00:50:
                    62:02:49:7b:64:be:c7:3f:0b:93:50:d9:d8:c4:b2:
                    81:ea:cf:cb:f8:f2:33:f5:72:61:c6:d6:2f:f1:58:
                    cc:9b:80:47:1f:6f:ff:73:06:18:32:27:c1:9f:15:
                    c4:59:a6:12:e3:63:51:da:42:45:ce:82:29:52:1c:
                    28:7a:88:b9:24:2f:8e:3c:1c:fd:fc:78:4e:ca:87:
                    b1:d1:05:39:d4:07:78:00:2e:d5:68:c1:46:2b:82:
                    26:6f:be:32:8d:0b:0e:c3:64:4d:83:0a:42:b5:3d:
                    18:6b:aa:38:da:59:70:4e:ba:6d:3d:e1:d4:d7:c7:
                    49:25:b5:b4:92:1c:c2:8f:74:31:20:fc:dc:95:3b:
                    a8:e5:af:04:fc:8a:66:39:81:75:cb:7c:7d:5e:06:
                    b3:68:c2:1a:35:60:f3:8b:c5:ba:8f:4d:35:45:8d:
                    0b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:38:9E:F6:0A:CE:FB:EB:76:1C:78:09:56:94:8C:C1:94:87:4D:0A
            X509v3 Authority Key Identifier:
                keyid:16:42:3C:98:CF:25:48:83:9D:74:EF:D9:FB:73:04:F4:DA:B4:AE:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/34352e362e382e302f32322d3234203d3e20323635383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:10:37:5b:32:bb:f8:23:72:80:ea:0c:6f:53:7b:01:89:37:
         1f:06:65:37:25:80:3f:c8:34:d5:f6:e2:d8:a2:83:93:07:87:
         25:68:39:19:81:13:60:f2:1a:3d:fc:dd:fb:47:26:30:74:cc:
         b8:10:5c:69:e6:a0:bf:cd:a8:36:8b:0b:05:94:b4:89:36:f5:
         91:0b:41:ef:fc:6a:b2:c2:7d:5d:66:40:ab:af:b6:b6:68:4f:
         f0:fd:ae:03:1b:8c:4f:01:e1:c3:a2:8f:23:c3:82:c9:f3:76:
         20:f5:4a:55:de:f8:c6:c0:2b:41:fd:63:85:1d:e7:f7:ba:92:
         f5:03:5b:f3:1c:c4:81:48:ec:d4:3e:23:6f:23:65:f3:2b:16:
         1e:77:16:53:5f:22:31:4a:26:7e:00:14:3c:3c:23:85:0a:33:
         82:c8:97:28:32:f2:cd:ac:0a:b6:e6:08:56:7f:2e:61:52:25:
         29:d2:97:da:0a:d7:46:ba:8b:bd:f1:f4:5a:3b:e0:c3:ca:fd:
         47:f1:f1:f2:e5:e8:cc:0c:81:6d:f9:a3:12:77:4a:2c:dc:60:
         cd:19:8c:b6:21:6b:0e:ed:c8:d9:04:03:ea:60:fb:d5:2f:04:
         90:29:fb:ef:ee:31:c4:ba:28:6d:c4:c6:69:a7:20:ab:43:25:
         0f:df:de:fe
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUakuW9nNNj8HOVuZjtXEW7S8mjYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY0MjNDOThDRjI1NDg4MzlENzRFRkQ5RkI3MzA0RjRE
QUI0QUU3NTAeFw0yNTAyMDEwMDAwMDBaFw0yNjAxMzEwMDA1MDBaMDMxMTAvBgNV
BAMTKDE3Mzg5RUY2MEFDRUZCRUI3NjFDNzgwOTU2OTQ4Q0MxOTQ4NzREMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8GBS1tjRKET0gL3BntHhP+fyW
3BO+8J+JxXrSI+sxNcMz1yT7sY7rRY2/w/2BgXgnwJhvS9okwkYW6BQXA6CFMlXX
ty1c8wMgdiRyDe3kC+QSvhhcL/oAUGICSXtkvsc/C5NQ2djEsoHqz8v48jP1cmHG
1i/xWMybgEcfb/9zBhgyJ8GfFcRZphLjY1HaQkXOgilSHCh6iLkkL448HP38eE7K
h7HRBTnUB3gALtVowUYrgiZvvjKNCw7DZE2DCkK1PRhrqjjaWXBOum094dTXx0kl
tbSSHMKPdDEg/NyVO6jlrwT8imY5gXXLfH1eBrNowho1YPOLxbqPTTVFjQu5AgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUFzie9grO++t2HHgJVpSMwZSHTQowHwYDVR0j
BBgwFoAUFkI8mM8lSIOddO/Z+3ME9Nq0rnUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MUEyNjZGODE1MkNCQjEwNkYxRkVGRTE2NzIwMUIyREY4
MUNFMzg1MDJFQjgzNEZGOUU0MjFEODNFNzI4NDY5LzAvMTY0MjNDOThDRjI1NDg4
MzlENzRFRkQ5RkI3MzA0RjREQUI0QUU3NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNjQyM0M5OENGMjU0ODgzOUQ3
NEVGRDlGQjczMDRGNERBQjRBRTc1LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODFBMjY2RjgxNTJDQkIxMDZGMUZFRkUxNjcyMDFCMkRGODFDRTM4NTAy
RUI4MzRGRjlFNDIxRDgzRTcyODQ2OS8wLzM0MzUyZTM2MmUzODJlMzAyZjMyMzIy
ZDMyMzQyMDNkM2UyMDMyMzYzNTM4MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi0GCDANBgkqhkiG
9w0BAQsFAAOCAQEASBA3WzK7+CNygOoMb1N7AYk3HwZlNyWAP8g01fbi2KKDkweH
JWg5GYETYPIaPfzd+0cmMHTMuBBcaeagv82oNosLBZS0iTb1kQtB7/xqssJ9XWZA
q6+2tmhP8P2uAxuMTwHhw6KPI8OCyfN2IPVKVd74xsArQf1jhR3n97qS9QNb8xzE
gUjs1D4jbyNl8ysWHncWU18iMUomfgAUPDwjhQozgsiXKDLyzawKtuYIVn8uYVIl
KdKX2grXRrqLvfH0Wjvgw8r9R/Hx8uXozAyBbfmjEndKLNxgzRmMtiFrDu3I2QQD
6mD71S8EkCn77+4xxLoobcTGaacgq0MlD9/e/g==
-----END CERTIFICATE-----
Generated at Mon Apr 14 17:31:08 2025 by rpki-client