Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88F80F579AF7E1C81D6A41C9EDB358BE2C0714245B4A38D498B0EDAB1D495743/0/34352e3138342e3232362e302f32332d3234203d3e20323635363637.roa
File:                     34352e3138342e3232362e302f32332d3234203d3e20323635363637.roa (raw, json)
Hash identifier:          OiEFkHauF111KxOJjEK1hScEUA/nB+En5B4s8niPjjc=
Subject key identifier:   59:D0:D4:0B:6E:FD:B5:C8:9C:36:72:28:92:B9:01:A4:7F:57:FA:80
Certificate issuer:       /CN=F50ADDDC0B66C2E5F6DA307482F6ECFE7F060D0F
Certificate serial:       6AEACDA6D0107AD1D887C8DD532B6AF9C5BBDBEE
Authority key identifier: F5:0A:DD:DC:0B:66:C2:E5:F6:DA:30:74:82:F6:EC:FE:7F:06:0D:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F50ADDDC0B66C2E5F6DA307482F6ECFE7F060D0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88F80F579AF7E1C81D6A41C9EDB358BE2C0714245B4A38D498B0EDAB1D495743/0/34352e3138342e3232362e302f32332d3234203d3e20323635363637.roa
Signing time:             Tue 04 Feb 2025 18:16:53 +0000
ROA not before:           Tue 04 Feb 2025 18:11:53 +0000
ROA not after:            Tue 03 Feb 2026 18:16:53 +0000
asID:                     265667
IP address blocks:        45.184.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88F80F579AF7E1C81D6A41C9EDB358BE2C0714245B4A38D498B0EDAB1D495743/0/F50ADDDC0B66C2E5F6DA307482F6ECFE7F060D0F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88F80F579AF7E1C81D6A41C9EDB358BE2C0714245B4A38D498B0EDAB1D495743/0/F50ADDDC0B66C2E5F6DA307482F6ECFE7F060D0F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F50ADDDC0B66C2E5F6DA307482F6ECFE7F060D0F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ea:cd:a6:d0:10:7a:d1:d8:87:c8:dd:53:2b:6a:f9:c5:bb:db:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F50ADDDC0B66C2E5F6DA307482F6ECFE7F060D0F
        Validity
            Not Before: Feb  4 18:11:53 2025 GMT
            Not After : Feb  3 18:16:53 2026 GMT
        Subject: CN=59D0D40B6EFDB5C89C36722892B901A47F57FA80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e1:bb:ef:3e:61:67:00:89:72:73:1f:e1:88:
                    aa:cf:a3:79:ff:02:ea:8e:68:d1:50:88:f9:0a:c9:
                    3e:f5:06:e5:57:6b:26:24:31:24:97:30:79:3c:cd:
                    83:19:68:4b:e5:1d:6f:8e:93:3a:45:65:c3:88:36:
                    8b:39:b5:c2:92:4d:ed:67:de:c9:2d:ed:db:b3:8e:
                    aa:77:df:92:7e:3e:f6:65:56:ae:f2:9c:fe:fc:63:
                    ea:5e:38:a5:9d:e6:64:4d:ed:ba:27:50:78:e2:ab:
                    48:6e:13:e9:43:d0:96:7b:80:74:5b:8c:ca:41:69:
                    02:c3:49:79:e7:91:43:45:f9:fb:b7:a9:01:76:f9:
                    a6:59:80:28:84:bf:ea:17:99:00:1f:ab:e5:6b:fb:
                    9d:aa:af:e5:39:73:cd:47:cf:dc:35:60:6a:05:bf:
                    2a:cf:c1:a1:8b:43:cc:b8:92:d8:18:42:d7:a9:69:
                    ab:43:8a:fa:53:3a:b9:5b:dc:bf:36:7e:38:2c:2c:
                    68:57:ba:09:72:32:c4:dc:d9:c0:36:be:8f:3f:7f:
                    46:7b:ab:9e:28:05:77:e5:99:2c:46:57:58:85:c3:
                    88:2e:96:43:12:53:93:e3:0a:e4:c2:39:25:00:fb:
                    6c:58:92:f1:3e:20:34:7d:5d:8e:60:f9:ed:df:c2:
                    26:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D0:D4:0B:6E:FD:B5:C8:9C:36:72:28:92:B9:01:A4:7F:57:FA:80
            X509v3 Authority Key Identifier:
                keyid:F5:0A:DD:DC:0B:66:C2:E5:F6:DA:30:74:82:F6:EC:FE:7F:06:0D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88F80F579AF7E1C81D6A41C9EDB358BE2C0714245B4A38D498B0EDAB1D495743/0/F50ADDDC0B66C2E5F6DA307482F6ECFE7F060D0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F50ADDDC0B66C2E5F6DA307482F6ECFE7F060D0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88F80F579AF7E1C81D6A41C9EDB358BE2C0714245B4A38D498B0EDAB1D495743/0/34352e3138342e3232362e302f32332d3234203d3e20323635363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:4c:12:ee:ca:b4:1e:22:77:45:d6:d2:41:01:96:49:64:04:
         ff:43:e7:21:14:d1:29:01:23:28:d6:7d:20:cc:eb:4a:a7:00:
         6c:99:6f:c9:2c:aa:bd:cf:24:b7:f3:ea:49:6b:39:a8:af:1c:
         c5:46:f2:c5:d8:ab:15:d4:f1:aa:17:28:35:58:70:4d:94:27:
         04:45:cc:25:e6:ba:cd:68:b4:40:48:e7:99:e4:8f:fc:c7:c9:
         dd:ab:ea:97:2b:17:41:72:63:51:3f:56:19:cd:d0:d5:5c:70:
         e7:10:16:05:58:2f:54:01:10:99:35:8d:80:2f:06:cc:df:67:
         39:a4:76:19:1a:f7:9e:14:1c:e7:c9:9f:fb:72:3a:03:f0:15:
         7a:c5:73:06:29:91:04:16:ff:23:13:ab:92:40:1c:f8:7a:e9:
         79:0f:4d:a3:41:e0:7c:8c:cd:f9:22:12:84:b2:9d:7f:0d:b4:
         1a:4e:6c:35:04:df:c8:bb:cd:a8:6a:14:0e:fb:2d:58:bf:c7:
         87:19:06:e8:2d:97:88:16:61:74:c7:d7:dd:2d:cf:4a:8f:b1:
         f9:3c:d9:da:14:b8:76:a9:2e:79:02:d1:a4:9b:e0:83:40:ad:
         3d:04:8f:c4:5c:47:ff:25:ac:41:86:74:fc:09:81:d8:e1:c7:
         12:cf:79:13
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUaurNptAQetHYh8jdUytq+cW72+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUwQUREREMwQjY2QzJFNUY2REEzMDc0ODJGNkVDRkU3
RjA2MEQwRjAeFw0yNTAyMDQxODExNTNaFw0yNjAyMDMxODE2NTNaMDMxMTAvBgNV
BAMTKDU5RDBENDBCNkVGREI1Qzg5QzM2NzIyODkyQjkwMUE0N0Y1N0ZBODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr4bvvPmFnAIlycx/hiKrPo3n/
AuqOaNFQiPkKyT71BuVXayYkMSSXMHk8zYMZaEvlHW+OkzpFZcOINos5tcKSTe1n
3skt7duzjqp335J+PvZlVq7ynP78Y+peOKWd5mRN7bonUHjiq0huE+lD0JZ7gHRb
jMpBaQLDSXnnkUNF+fu3qQF2+aZZgCiEv+oXmQAfq+Vr+52qr+U5c81Hz9w1YGoF
vyrPwaGLQ8y4ktgYQtepaatDivpTOrlb3L82fjgsLGhXuglyMsTc2cA2vo8/f0Z7
q54oBXflmSxGV1iFw4gulkMSU5PjCuTCOSUA+2xYkvE+IDR9XY5g+e3fwiZdAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUWdDUC279tcicNnIokrkBpH9X+oAwHwYDVR0j
BBgwFoAU9Qrd3AtmwuX22jB0gvbs/n8GDQ8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OEY4MEY1NzlBRjdFMUM4MUQ2QTQxQzlFREIzNThCRTJD
MDcxNDI0NUI0QTM4RDQ5OEIwRURBQjFENDk1NzQzLzAvRjUwQUREREMwQjY2QzJF
NUY2REEzMDc0ODJGNkVDRkU3RjA2MEQwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTBBREREQzBCNjZDMkU1RjZE
QTMwNzQ4MkY2RUNGRTdGMDYwRDBGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODhGODBGNTc5QUY3RTFDODFENkE0MUM5RURCMzU4QkUyQzA3MTQyNDVC
NEEzOEQ0OThCMEVEQUIxRDQ5NTc0My8wLzM0MzUyZTMxMzgzNDJlMzIzMjM2MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzNjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLbji
MA0GCSqGSIb3DQEBCwUAA4IBAQBXTBLuyrQeIndF1tJBAZZJZAT/Q+chFNEpASMo
1n0gzOtKpwBsmW/JLKq9zyS38+pJazmorxzFRvLF2KsV1PGqFyg1WHBNlCcERcwl
5rrNaLRASOeZ5I/8x8ndq+qXKxdBcmNRP1YZzdDVXHDnEBYFWC9UARCZNY2ALwbM
32c5pHYZGveeFBznyZ/7cjoD8BV6xXMGKZEEFv8jE6uSQBz4eul5D02jQeB8jM35
IhKEsp1/DbQaTmw1BN/Iu82oahQO+y1Yv8eHGQboLZeIFmF0x9fdLc9Kj7H5PNna
FLh2qS55AtGkm+CDQK09BI/EXEf/JaxBhnT8CYHY4ccSz3kT
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:23:58 2025 by rpki-client