Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/34352e3138332e36312e302f32342d3234203d3e20323733303233.roa
File:                     34352e3138332e36312e302f32342d3234203d3e20323733303233.roa (raw, json)
Hash identifier:          CibewfQdaN1SHHW1rNI1ZIAWnjJR8QHncyCI5nKKnBs=
Subject key identifier:   81:5E:22:FB:D9:C9:73:1A:02:23:C5:0B:2B:AA:66:78:8B:B3:2A:94
Certificate issuer:       /CN=352876AA3B7BD34529C4806D306052CF8D3D5515
Certificate serial:       128D3431BD2CB749ECCFA871E5CAF5BE19FDE38C
Authority key identifier: 35:28:76:AA:3B:7B:D3:45:29:C4:80:6D:30:60:52:CF:8D:3D:55:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/352876AA3B7BD34529C4806D306052CF8D3D5515.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/34352e3138332e36312e302f32342d3234203d3e20323733303233.roa
Signing time:             Tue 04 Feb 2025 17:59:53 +0000
ROA not before:           Tue 04 Feb 2025 17:54:53 +0000
ROA not after:            Tue 03 Feb 2026 17:59:53 +0000
asID:                     273023
IP address blocks:        45.183.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.crl
                          rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/352876AA3B7BD34529C4806D306052CF8D3D5515.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 20:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8d:34:31:bd:2c:b7:49:ec:cf:a8:71:e5:ca:f5:be:19:fd:e3:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=352876AA3B7BD34529C4806D306052CF8D3D5515
        Validity
            Not Before: Feb  4 17:54:53 2025 GMT
            Not After : Feb  3 17:59:53 2026 GMT
        Subject: CN=815E22FBD9C9731A0223C50B2BAA66788BB32A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4b:e7:a2:f7:24:5d:82:4a:5f:ff:d4:d9:b6:
                    9b:ff:47:81:f4:95:34:7a:46:d1:b7:c6:8d:b8:81:
                    38:28:e2:61:0f:2c:44:b4:87:ac:1c:d3:10:3f:1c:
                    2b:50:2c:ab:ae:70:dd:b3:56:d9:c2:e9:b5:da:c5:
                    87:b8:0d:be:eb:11:ae:68:e9:c3:30:f6:a0:ae:41:
                    81:1a:3a:96:bf:e8:77:32:25:dc:a8:4f:c9:3f:0c:
                    24:dd:82:bc:b4:54:63:98:ed:10:86:a6:cf:a4:eb:
                    8e:25:c6:72:83:70:da:56:8d:98:b2:31:d3:6a:08:
                    ce:43:fd:44:8e:e4:d3:70:0a:83:2e:df:cc:7e:2f:
                    21:50:9b:81:68:f4:45:c1:32:5c:36:73:f5:c0:11:
                    38:e5:75:b2:d1:93:12:09:f2:a7:2b:a5:c3:33:ef:
                    b8:91:27:28:72:f2:e7:e5:f3:38:69:ae:7f:b4:f9:
                    5d:d8:d4:a3:03:ff:00:d5:5d:d4:2e:31:aa:0c:dc:
                    9f:78:37:9c:85:75:b5:f2:4e:76:2d:a9:4c:5d:e3:
                    76:d2:8b:5d:e4:5e:b6:76:0f:fd:2f:84:b8:d6:6f:
                    ad:e5:bc:a1:85:3c:31:c3:fb:1b:4f:6d:25:0b:47:
                    3a:26:37:40:7e:9b:c8:18:dd:04:3b:aa:1e:97:fb:
                    07:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5E:22:FB:D9:C9:73:1A:02:23:C5:0B:2B:AA:66:78:8B:B3:2A:94
            X509v3 Authority Key Identifier:
                keyid:35:28:76:AA:3B:7B:D3:45:29:C4:80:6D:30:60:52:CF:8D:3D:55:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/352876AA3B7BD34529C4806D306052CF8D3D5515.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/34352e3138332e36312e302f32342d3234203d3e20323733303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:4d:43:c8:1b:dc:ae:83:39:f0:2e:4f:dd:80:72:66:ac:bc:
         e3:3c:56:c8:2e:ef:61:a9:3c:1d:02:b1:a7:c6:e6:8d:df:61:
         b2:d2:1a:e0:b2:65:75:03:56:47:7d:04:4e:26:94:ca:a0:ef:
         ff:6f:76:07:71:4f:f7:5c:50:cc:3b:99:32:33:ec:97:4f:f8:
         9c:f3:c8:e5:60:e5:0f:cd:f6:af:12:16:1b:6c:81:f4:7f:3f:
         ae:94:4c:19:d0:f5:d3:03:df:d5:d1:97:68:82:41:5c:52:cb:
         5e:9c:0a:5c:f2:f9:4c:f3:83:da:43:7a:da:75:d3:f8:ed:2f:
         4c:32:d8:6e:51:63:cf:a3:51:f9:f5:82:75:80:ae:f4:b9:55:
         18:76:2c:60:82:65:b6:7e:0c:23:da:75:7f:b1:df:b5:e6:22:
         17:ea:df:19:78:d4:96:07:19:f0:7b:24:ce:3c:28:1f:74:69:
         5d:71:63:d0:27:39:9c:bb:ce:4d:52:2c:da:b4:ea:13:e9:69:
         01:ba:3d:cf:2f:06:b0:74:1b:a7:19:40:15:14:8d:5f:27:78:
         a0:71:c0:7d:bb:49:7b:ba:e3:08:46:01:ed:e6:e1:12:fa:08:
         1b:cc:40:4f:c6:82:f5:f9:11:84:12:b1:66:82:ea:3f:68:a5:
         e7:0b:b6:09
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEo00Mb0st0nsz6hx5cr1vhn944wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUyODc2QUEzQjdCRDM0NTI5QzQ4MDZEMzA2MDUyQ0Y4
RDNENTUxNTAeFw0yNTAyMDQxNzU0NTNaFw0yNjAyMDMxNzU5NTNaMDMxMTAvBgNV
BAMTKDgxNUUyMkZCRDlDOTczMUEwMjIzQzUwQjJCQUE2Njc4OEJCMzJBOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmS+ei9yRdgkpf/9TZtpv/R4H0
lTR6RtG3xo24gTgo4mEPLES0h6wc0xA/HCtQLKuucN2zVtnC6bXaxYe4Db7rEa5o
6cMw9qCuQYEaOpa/6HcyJdyoT8k/DCTdgry0VGOY7RCGps+k644lxnKDcNpWjZiy
MdNqCM5D/USO5NNwCoMu38x+LyFQm4Fo9EXBMlw2c/XAETjldbLRkxIJ8qcrpcMz
77iRJyhy8ufl8zhprn+0+V3Y1KMD/wDVXdQuMaoM3J94N5yFdbXyTnYtqUxd43bS
i13kXrZ2D/0vhLjWb63lvKGFPDHD+xtPbSULRzomN0B+m8gY3QQ7qh6X+wePAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUgV4i+9nJcxoCI8ULK6pmeIuzKpQwHwYDVR0j
BBgwFoAUNSh2qjt700UpxIBtMGBSz409VRUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDhCMUMwOTYyRDJCRTJGNjc4MDUwMEYyMzY0OTVBNzg0
NUY0MzNEM0FDNzg0NDkyOTkyQzI5Qzg4MDQ2MUY1LzAvMzUyODc2QUEzQjdCRDM0
NTI5QzQ4MDZEMzA2MDUyQ0Y4RDNENTUxNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNTI4NzZBQTNCN0JEMzQ1MjlD
NDgwNkQzMDYwNTJDRjhEM0Q1NTE1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ4QjFDMDk2MkQyQkUyRjY3ODA1MDBGMjM2NDk1QTc4NDVGNDMzRDNB
Qzc4NDQ5Mjk5MkMyOUM4ODA0NjFGNS8wLzM0MzUyZTMxMzgzMzJlMzYzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMzMwMzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC23PTAN
BgkqhkiG9w0BAQsFAAOCAQEAzk1DyBvcroM58C5P3YByZqy84zxWyC7vYak8HQKx
p8bmjd9hstIa4LJldQNWR30ETiaUyqDv/292B3FP91xQzDuZMjPsl0/4nPPI5WDl
D832rxIWG2yB9H8/rpRMGdD10wPf1dGXaIJBXFLLXpwKXPL5TPOD2kN62nXT+O0v
TDLYblFjz6NR+fWCdYCu9LlVGHYsYIJltn4MI9p1f7HfteYiF+rfGXjUlgcZ8Hsk
zjwoH3RpXXFj0Cc5nLvOTVIs2rTqE+lpAbo9zy8GsHQbpxlAFRSNXyd4oHHAfbtJ
e7rjCEYB7ebhEvoIG8xAT8aC9fkRhBKxZoLqP2il5wu2CQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 14:17:56 2025 by rpki-client