Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83B5586F0F077F1E1E66194862964C958AA2FF26481F8DB692B7A2B4434DFFF9/0/34352e37302e38382e302f32322d3234203d3e203532343737.roa
File:                     34352e37302e38382e302f32322d3234203d3e203532343737.roa (raw, json)
Hash identifier:          obE0y/0U7a0qfbP69igVE0QLTcGJgakNpNhIRedmTVA=
Subject key identifier:   50:2F:FE:27:1B:F3:6D:4D:04:18:9B:22:F6:B4:84:E2:A1:D1:20:C0
Certificate issuer:       /CN=598E51DA545EC07345EFDA9CFC6827DD00710573
Certificate serial:       609DDD736240FD6ACE926B0C67B25BE393F73CEE
Authority key identifier: 59:8E:51:DA:54:5E:C0:73:45:EF:DA:9C:FC:68:27:DD:00:71:05:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/598E51DA545EC07345EFDA9CFC6827DD00710573.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83B5586F0F077F1E1E66194862964C958AA2FF26481F8DB692B7A2B4434DFFF9/0/34352e37302e38382e302f32322d3234203d3e203532343737.roa
Signing time:             Tue 04 Feb 2025 18:19:20 +0000
ROA not before:           Tue 04 Feb 2025 18:14:20 +0000
ROA not after:            Tue 03 Feb 2026 18:19:20 +0000
asID:                     52477
IP address blocks:        45.70.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83B5586F0F077F1E1E66194862964C958AA2FF26481F8DB692B7A2B4434DFFF9/0/598E51DA545EC07345EFDA9CFC6827DD00710573.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83B5586F0F077F1E1E66194862964C958AA2FF26481F8DB692B7A2B4434DFFF9/0/598E51DA545EC07345EFDA9CFC6827DD00710573.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/598E51DA545EC07345EFDA9CFC6827DD00710573.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:9d:dd:73:62:40:fd:6a:ce:92:6b:0c:67:b2:5b:e3:93:f7:3c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598E51DA545EC07345EFDA9CFC6827DD00710573
        Validity
            Not Before: Feb  4 18:14:20 2025 GMT
            Not After : Feb  3 18:19:20 2026 GMT
        Subject: CN=502FFE271BF36D4D04189B22F6B484E2A1D120C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8e:21:95:a7:97:4c:6b:76:28:64:74:d0:1d:
                    86:70:3c:45:a7:87:b3:80:cd:26:75:e5:42:f4:97:
                    1b:70:18:13:d3:5b:93:6b:87:b8:1b:65:d0:f4:3e:
                    c0:d9:41:9f:72:10:48:43:d9:49:8c:a8:82:ad:6d:
                    17:d9:07:a1:49:c9:40:01:da:0e:ef:5b:3b:c8:49:
                    12:f8:ef:cd:02:21:2d:2c:00:cf:80:68:09:60:41:
                    1c:a6:65:d2:f8:1a:72:87:2f:0a:6d:e3:3c:b8:8f:
                    89:b7:1e:75:ef:1d:7c:64:40:dd:e4:14:d5:82:1b:
                    0e:85:0a:10:d2:82:e6:4e:80:3f:f4:70:e3:d2:3c:
                    6a:6e:17:ef:25:4c:40:29:49:cb:0f:1a:79:58:b3:
                    35:15:7a:86:e2:48:d0:8b:bd:81:bb:6d:44:ed:35:
                    35:1d:d8:cd:bf:d1:2b:14:f2:de:bb:15:95:4e:c9:
                    f6:46:1f:6a:8d:7e:82:0c:8b:3a:29:36:39:c4:f4:
                    f9:3c:c4:36:7e:54:42:1e:74:80:4e:f1:78:58:a3:
                    5e:ba:b7:30:ff:d1:ed:fb:4b:1f:da:71:fc:77:63:
                    0b:b7:5f:af:a8:2d:8d:2a:c8:8b:73:d5:12:63:70:
                    c9:eb:37:3e:ea:35:1e:db:40:cf:b7:b4:bd:76:90:
                    67:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2F:FE:27:1B:F3:6D:4D:04:18:9B:22:F6:B4:84:E2:A1:D1:20:C0
            X509v3 Authority Key Identifier:
                keyid:59:8E:51:DA:54:5E:C0:73:45:EF:DA:9C:FC:68:27:DD:00:71:05:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83B5586F0F077F1E1E66194862964C958AA2FF26481F8DB692B7A2B4434DFFF9/0/598E51DA545EC07345EFDA9CFC6827DD00710573.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/598E51DA545EC07345EFDA9CFC6827DD00710573.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83B5586F0F077F1E1E66194862964C958AA2FF26481F8DB692B7A2B4434DFFF9/0/34352e37302e38382e302f32322d3234203d3e203532343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:6c:15:24:6f:c0:de:dc:bd:68:42:84:a7:8d:c5:33:fa:c1:
         4b:a0:4d:85:8b:47:3a:ab:64:56:a8:ef:30:d3:bf:15:fa:d9:
         44:bd:58:23:cd:78:66:d0:8e:16:57:6e:85:67:cd:48:d1:14:
         ad:01:3b:ec:50:6b:8e:48:0a:d0:41:da:a9:be:2d:74:e6:4e:
         30:1d:75:ee:7c:9e:dc:85:83:0c:af:0a:5d:c2:12:d3:ec:6f:
         dc:d7:5f:4b:95:66:7a:f9:d6:8e:89:55:ae:f4:bc:ad:77:7e:
         33:6c:a8:ce:d0:fd:7c:6a:80:b2:0a:4d:a8:1e:0d:a9:0f:35:
         33:de:5f:9f:73:60:dc:c3:fe:df:7a:bf:b8:c2:f2:e8:c4:a9:
         3f:f8:b3:61:f2:71:2d:57:36:21:55:63:27:6f:89:21:18:1a:
         e6:98:39:f3:62:0a:ff:2d:2c:a4:d3:9e:63:bd:30:68:c6:cf:
         09:e7:bd:98:1e:d9:5d:62:38:c8:68:85:c5:8c:5b:ef:66:c1:
         e0:9f:5f:18:a0:9e:9e:8e:d3:6e:5c:6b:2c:8d:90:aa:2e:8a:
         37:f8:8a:4a:1d:0e:d9:17:a0:e2:e3:a6:49:b1:5e:ee:9d:9a:
         47:c9:cd:ee:8b:40:66:42:e0:da:97:99:3d:d2:4b:74:26:d2:
         17:2f:b5:ef
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUYJ3dc2JA/WrOkmsMZ7Jb45P3PO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk4RTUxREE1NDVFQzA3MzQ1RUZEQTlDRkM2ODI3REQw
MDcxMDU3MzAeFw0yNTAyMDQxODE0MjBaFw0yNjAyMDMxODE5MjBaMDMxMTAvBgNV
BAMTKDUwMkZGRTI3MUJGMzZENEQwNDE4OUIyMkY2QjQ4NEUyQTFEMTIwQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbjiGVp5dMa3YoZHTQHYZwPEWn
h7OAzSZ15UL0lxtwGBPTW5Nrh7gbZdD0PsDZQZ9yEEhD2UmMqIKtbRfZB6FJyUAB
2g7vWzvISRL4780CIS0sAM+AaAlgQRymZdL4GnKHLwpt4zy4j4m3HnXvHXxkQN3k
FNWCGw6FChDSguZOgD/0cOPSPGpuF+8lTEApScsPGnlYszUVeobiSNCLvYG7bUTt
NTUd2M2/0SsU8t67FZVOyfZGH2qNfoIMizopNjnE9Pk8xDZ+VEIedIBO8XhYo166
tzD/0e37Sx/acfx3Ywu3X6+oLY0qyItz1RJjcMnrNz7qNR7bQM+3tL12kGfrAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUUC/+JxvzbU0EGJsi9rSE4qHRIMAwHwYDVR0j
BBgwFoAUWY5R2lRewHNF79qc/Ggn3QBxBXMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84M0I1NTg2RjBGMDc3RjFFMUU2NjE5NDg2Mjk2NEM5NThB
QTJGRjI2NDgxRjhEQjY5MkI3QTJCNDQzNERGRkY5LzAvNTk4RTUxREE1NDVFQzA3
MzQ1RUZEQTlDRkM2ODI3REQwMDcxMDU3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OThFNTFEQTU0NUVDMDczNDVF
RkRBOUNGQzY4MjdERDAwNzEwNTczLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODNCNTU4NkYwRjA3N0YxRTFFNjYxOTQ4NjI5NjRDOTU4QUEyRkYyNjQ4
MUY4REI2OTJCN0EyQjQ0MzRERkZGOS8wLzM0MzUyZTM3MzAyZTM4MzgyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNTMyMzQzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLUZYMA0GCSqG
SIb3DQEBCwUAA4IBAQBNbBUkb8De3L1oQoSnjcUz+sFLoE2Fi0c6q2RWqO8w078V
+tlEvVgjzXhm0I4WV26FZ81I0RStATvsUGuOSArQQdqpvi105k4wHXXufJ7chYMM
rwpdwhLT7G/c119LlWZ6+daOiVWu9Lytd34zbKjO0P18aoCyCk2oHg2pDzUz3l+f
c2Dcw/7fer+4wvLoxKk/+LNh8nEtVzYhVWMnb4khGBrmmDnzYgr/LSyk055jvTBo
xs8J572YHtldYjjIaIXFjFvvZsHgn18YoJ6ejtNuXGssjZCqLoo3+IpKHQ7ZF6Di
46ZJsV7unZpHyc3ui0BmQuDal5k90kt0JtIXL7Xv
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:42 2025 by rpki-client