Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/34352e3233352e3134302e302f32322d3233203d3e203631343638.roa
File:                     34352e3233352e3134302e302f32322d3233203d3e203631343638.roa (raw, json)
Hash identifier:          vGqh02ddfNfxoE6PZuEU7ErlXM8YWJxB/2leEurRkBU=
Subject key identifier:   3C:55:34:0C:A2:35:59:17:69:02:01:41:B0:84:22:CF:BB:6C:14:6A
Certificate issuer:       /CN=851D006BBDF702AC914FD79F2055A11E9699775D
Certificate serial:       4EBF1131D916A10C2F6BEF45AF09EBE7AA5A8D16
Authority key identifier: 85:1D:00:6B:BD:F7:02:AC:91:4F:D7:9F:20:55:A1:1E:96:99:77:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/34352e3233352e3134302e302f32322d3233203d3e203631343638.roa
Signing time:             Tue 04 Feb 2025 18:05:39 +0000
ROA not before:           Tue 04 Feb 2025 18:00:39 +0000
ROA not after:            Tue 03 Feb 2026 18:05:39 +0000
asID:                     61468
IP address blocks:        45.235.140.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:bf:11:31:d9:16:a1:0c:2f:6b:ef:45:af:09:eb:e7:aa:5a:8d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851D006BBDF702AC914FD79F2055A11E9699775D
        Validity
            Not Before: Feb  4 18:00:39 2025 GMT
            Not After : Feb  3 18:05:39 2026 GMT
        Subject: CN=3C55340CA235591769020141B08422CFBB6C146A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:73:19:a4:47:c4:b8:99:aa:cc:0f:2d:c1:b5:
                    bf:cc:e8:4b:05:b1:57:82:12:ef:aa:25:d6:6b:4e:
                    ff:af:6a:b1:45:c8:50:87:d2:19:48:aa:04:be:cd:
                    af:ec:86:70:1d:32:1e:78:19:87:6e:df:c9:c9:44:
                    42:f7:c4:70:5e:96:06:d8:f6:e3:40:42:a7:be:d4:
                    74:54:2d:bc:e1:68:a1:b6:67:ae:43:56:24:f5:3b:
                    3d:2a:e9:bd:ef:11:6f:95:0c:76:25:38:71:e8:a7:
                    c8:df:8f:aa:af:95:84:81:8b:df:d0:db:d3:95:57:
                    b5:e7:fc:99:af:5d:2c:8b:b5:38:42:58:cf:24:b8:
                    b9:42:05:77:76:9a:cb:21:cc:e5:90:50:31:be:8c:
                    d3:35:c9:f8:48:14:6e:a2:3b:4c:26:a4:26:3c:39:
                    57:21:16:94:6c:a2:e2:78:5f:e1:43:5a:ab:50:d4:
                    de:ab:3e:01:13:a6:0b:10:a5:08:01:4b:e2:ca:ed:
                    ab:1b:c9:31:31:74:38:33:bc:94:d6:a0:51:a9:d8:
                    fa:ce:4e:19:f9:22:73:17:7a:1d:ea:27:1b:5e:56:
                    93:23:f4:13:c2:5a:aa:c0:20:84:15:ba:54:80:b7:
                    41:ae:57:f6:e0:36:21:61:0f:c1:d6:71:b1:29:57:
                    1b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:55:34:0C:A2:35:59:17:69:02:01:41:B0:84:22:CF:BB:6C:14:6A
            X509v3 Authority Key Identifier:
                keyid:85:1D:00:6B:BD:F7:02:AC:91:4F:D7:9F:20:55:A1:1E:96:99:77:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/34352e3233352e3134302e302f32322d3233203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:1b:01:75:99:37:81:5d:e9:22:ca:d0:07:74:89:a0:15:15:
         50:a0:70:3d:9c:01:75:8a:15:e2:be:d6:f2:d5:fb:52:47:43:
         cd:2b:57:b2:60:88:61:bb:9d:b6:0d:58:d0:4e:9f:f3:ba:3b:
         d0:65:1e:7c:18:3e:27:c4:95:75:a5:32:ce:15:68:65:8a:30:
         e2:f4:84:a1:85:76:ea:94:ea:8c:a7:52:4c:22:12:f8:19:03:
         48:45:9e:0b:54:62:e7:d4:b1:81:e0:73:ba:63:ba:c4:10:b7:
         02:34:89:a1:c5:a6:77:c2:4e:ee:6f:4e:f0:60:cd:67:72:99:
         9e:88:e8:1c:c2:92:20:84:b9:51:3e:51:1c:28:3e:2e:b3:0a:
         db:d0:a2:d7:6a:66:21:b3:19:c5:5a:0b:e8:70:a0:fc:75:21:
         71:a2:33:63:a4:d3:e4:46:8c:52:7a:15:9e:7c:93:04:61:2d:
         4f:48:76:4d:3e:fc:56:e1:f3:3b:1f:20:d1:7a:96:cc:f9:83:
         38:39:2a:33:61:85:7c:b7:08:28:54:8c:30:41:67:16:5c:53:
         ca:f6:8a:97:d9:9d:6b:dd:14:29:4a:6c:63:f6:b8:a4:0c:bd:
         05:6f:e0:a7:4f:2d:15:cd:aa:c2:56:af:71:94:75:8a:9d:0e:
         25:c0:82:95
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTr8RMdkWoQwva+9Frwnr56pajRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUxRDAwNkJCREY3MDJBQzkxNEZENzlGMjA1NUExMUU5
Njk5Nzc1RDAeFw0yNTAyMDQxODAwMzlaFw0yNjAyMDMxODA1MzlaMDMxMTAvBgNV
BAMTKDNDNTUzNDBDQTIzNTU5MTc2OTAyMDE0MUIwODQyMkNGQkI2QzE0NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkcxmkR8S4marMDy3Btb/M6EsF
sVeCEu+qJdZrTv+varFFyFCH0hlIqgS+za/shnAdMh54GYdu38nJREL3xHBelgbY
9uNAQqe+1HRULbzhaKG2Z65DViT1Oz0q6b3vEW+VDHYlOHHop8jfj6qvlYSBi9/Q
29OVV7Xn/JmvXSyLtThCWM8kuLlCBXd2msshzOWQUDG+jNM1yfhIFG6iO0wmpCY8
OVchFpRsouJ4X+FDWqtQ1N6rPgETpgsQpQgBS+LK7asbyTExdDgzvJTWoFGp2PrO
Thn5InMXeh3qJxteVpMj9BPCWqrAIIQVulSAt0GuV/bgNiFhD8HWcbEpVxs/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUPFU0DKI1WRdpAgFBsIQiz7tsFGowHwYDVR0j
BBgwFoAUhR0Aa733AqyRT9efIFWhHpaZd10wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjQyQzBBNTk0NEUyNDU2RjEyQUJCNThFMkZFMEFDMUU1
REQ0MUQzMzA2MjA1RTQ5NzRFREZFOEVFRjdENjlFLzAvODUxRDAwNkJCREY3MDJB
QzkxNEZENzlGMjA1NUExMUU5Njk5Nzc1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTFEMDA2QkJERjcwMkFDOTE0
RkQ3OUYyMDU1QTExRTk2OTk3NzVELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI0MkMwQTU5NDRFMjQ1NkYxMkFCQjU4RTJGRTBBQzFFNURENDFEMzMw
NjIwNUU0OTc0RURGRThFRUY3RDY5RS8wLzM0MzUyZTMyMzMzNTJlMzEzNDMwMmUz
MDJmMzIzMjJkMzIzMzIwM2QzZTIwMzYzMTM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3rjDAN
BgkqhkiG9w0BAQsFAAOCAQEAOBsBdZk3gV3pIsrQB3SJoBUVUKBwPZwBdYoV4r7W
8tX7UkdDzStXsmCIYbudtg1Y0E6f87o70GUefBg+J8SVdaUyzhVoZYow4vSEoYV2
6pTqjKdSTCIS+BkDSEWeC1Ri59SxgeBzumO6xBC3AjSJocWmd8JO7m9O8GDNZ3KZ
nojoHMKSIIS5UT5RHCg+LrMK29Ci12pmIbMZxVoL6HCg/HUhcaIzY6TT5EaMUnoV
nnyTBGEtT0h2TT78VuHzOx8g0XqWzPmDODkqM2GFfLcIKFSMMEFnFlxTyvaKl9md
a90UKUpsY/a4pAy9BW/gp08tFc2qwlavcZR1ip0OJcCClQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 13:44:09 2025 by rpki-client