Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e312e302f32342d3234203d3e203139353531.roa
File:                     34352e3136322e312e302f32342d3234203d3e203139353531.roa (raw, json)
Hash identifier:          rknB80/HLax/eLgHlhWoUxBJ8eBOYn4sWsJ2pekjsrk=
Subject key identifier:   E8:74:35:E0:0A:79:D7:36:15:2B:11:2D:E7:BD:17:20:AE:BC:7F:EF
Certificate issuer:       /CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
Certificate serial:       4AB0EDAB44BB08B0DACFCFC2AF1C19F0C3623939
Authority key identifier: E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e312e302f32342d3234203d3e203139353531.roa
Signing time:             Mon 19 May 2025 20:19:43 +0000
ROA not before:           Mon 19 May 2025 20:14:43 +0000
ROA not after:            Mon 18 May 2026 20:19:43 +0000
asID:                     19551
IP address blocks:        45.162.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b0:ed:ab:44:bb:08:b0:da:cf:cf:c2:af:1c:19:f0:c3:62:39:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
        Validity
            Not Before: May 19 20:14:43 2025 GMT
            Not After : May 18 20:19:43 2026 GMT
        Subject: CN=E87435E00A79D736152B112DE7BD1720AEBC7FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fe:03:34:5b:1d:11:58:16:ff:7b:fa:d5:e9:
                    fd:1a:52:81:7c:68:9c:32:ec:3c:71:26:a2:aa:8c:
                    c7:16:cb:10:53:67:a2:fd:e9:e9:25:eb:06:54:a3:
                    d9:93:7b:37:00:a1:08:cd:28:a8:62:a0:15:cb:62:
                    48:2d:70:16:7d:b4:aa:a4:ae:49:d5:8d:90:50:43:
                    64:a8:6d:05:c9:10:ee:b6:7b:24:46:62:64:88:25:
                    f7:24:3e:ff:6d:df:16:4b:52:5f:15:4e:f5:12:cb:
                    73:c3:72:f2:4f:35:9f:8e:de:2f:32:a5:1a:f8:58:
                    61:2d:3f:91:fe:ac:5c:ba:bc:2f:a9:53:3b:62:7b:
                    73:05:69:8c:8a:c2:44:83:22:3f:f5:86:2a:45:19:
                    04:bf:89:35:c6:c3:b1:f3:52:38:3c:c5:ad:9a:c2:
                    1e:8a:58:3e:ba:80:e7:89:04:0c:ef:03:44:b8:b5:
                    c9:2b:be:00:93:2f:fc:1c:fa:38:5f:c8:ba:3a:52:
                    c8:4f:26:fb:27:66:20:ac:fb:d9:09:86:82:47:72:
                    e1:25:ba:24:2e:87:7d:23:f3:37:a1:2b:f8:3d:86:
                    63:51:64:59:a0:44:f0:5a:f3:80:a4:ff:e4:77:8b:
                    6d:a7:ab:c7:6d:33:65:e2:8b:e5:cd:f3:ca:5b:56:
                    8d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:74:35:E0:0A:79:D7:36:15:2B:11:2D:E7:BD:17:20:AE:BC:7F:EF
            X509v3 Authority Key Identifier:
                keyid:E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e312e302f32342d3234203d3e203139353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:ae:15:e7:e4:18:f8:83:08:1f:bd:cb:6c:41:99:48:24:ee:
         b9:07:c8:fb:cb:88:92:3f:7f:98:c9:89:b5:9b:d2:d8:96:95:
         40:06:d5:25:6f:3c:89:15:e7:23:a0:7b:75:24:38:8f:ee:24:
         c3:52:e9:da:c7:ff:66:c5:08:9e:10:ac:44:52:f4:42:6c:fa:
         70:f3:7f:84:91:68:ab:54:84:f5:5a:41:50:b9:b5:7e:90:0a:
         f6:9c:fd:ee:32:8b:61:a4:00:de:28:03:8d:c8:00:e7:bb:67:
         4e:95:2f:81:50:29:dc:b2:12:d1:a5:43:de:d8:61:01:fb:5d:
         ea:38:eb:a3:de:85:59:61:c5:50:d9:79:88:e6:98:aa:91:5d:
         17:ed:e8:59:86:c1:7c:6a:52:40:e2:f0:d8:d1:c0:b0:4a:5a:
         fa:49:d4:8a:88:24:9b:0c:30:b0:cb:36:2f:d9:5c:44:13:00:
         36:f9:4e:30:ed:bf:31:c1:0c:44:3e:03:73:6c:1a:9a:10:67:
         e8:66:e5:f2:4e:31:e0:6c:a8:f5:a3:d2:40:01:b0:4e:ab:b2:
         e3:ce:64:fd:6c:19:f3:0a:85:b0:6f:c0:a7:7f:44:98:5c:43:
         75:93:e0:be:22:00:85:03:84:9d:37:49:a3:f0:cc:4a:5a:15:
         c1:01:65:e8
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUSrDtq0S7CLDaz8/CrxwZ8MNiOTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTgwNDZGQ0ZBMDkwRUQzMEE4MDAxNkYwQkM0NkFCMjg5
RTI1ODMxQTAeFw0yNTA1MTkyMDE0NDNaFw0yNjA1MTgyMDE5NDNaMDMxMTAvBgNV
BAMTKEU4NzQzNUUwMEE3OUQ3MzYxNTJCMTEyREU3QkQxNzIwQUVCQzdGRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj/gM0Wx0RWBb/e/rV6f0aUoF8
aJwy7DxxJqKqjMcWyxBTZ6L96ekl6wZUo9mTezcAoQjNKKhioBXLYkgtcBZ9tKqk
rknVjZBQQ2SobQXJEO62eyRGYmSIJfckPv9t3xZLUl8VTvUSy3PDcvJPNZ+O3i8y
pRr4WGEtP5H+rFy6vC+pUztie3MFaYyKwkSDIj/1hipFGQS/iTXGw7HzUjg8xa2a
wh6KWD66gOeJBAzvA0S4tckrvgCTL/wc+jhfyLo6UshPJvsnZiCs+9kJhoJHcuEl
uiQuh30j8zehK/g9hmNRZFmgRPBa84Ck/+R3i22nq8dtM2Xii+XN88pbVo1dAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU6HQ14Ap51zYVKxEt570XIK68f+8wHwYDVR0j
BBgwFoAU6ARvz6CQ7TCoABbwvEarKJ4lgxowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NzA0NzY0RURBQTAxRTg5MjI5NUZDOTIwMzlGREFBMDM4
N0YwMzc2Q0YwQkQ1RkQ4NjA0RjFBMzY1RDlDRkZGLzAvRTgwNDZGQ0ZBMDkwRUQz
MEE4MDAxNkYwQkM0NkFCMjg5RTI1ODMxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FODA0NkZDRkEwOTBFRDMwQTgw
MDE2RjBCQzQ2QUIyODlFMjU4MzFBLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTcwNDc2NEVEQUEwMUU4OTIyOTVGQzkyMDM5RkRBQTAzODdGMDM3NkNG
MEJENUZEODYwNEYxQTM2NUQ5Q0ZGRi8wLzM0MzUyZTMxMzYzMjJlMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM5MzUzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALaIBMA0GCSqG
SIb3DQEBCwUAA4IBAQAwrhXn5Bj4gwgfvctsQZlIJO65B8j7y4iSP3+YyYm1m9LY
lpVABtUlbzyJFecjoHt1JDiP7iTDUunax/9mxQieEKxEUvRCbPpw83+EkWirVIT1
WkFQubV+kAr2nP3uMothpADeKAONyADnu2dOlS+BUCncshLRpUPe2GEB+13qOOuj
3oVZYcVQ2XmI5piqkV0X7ehZhsF8alJA4vDY0cCwSlr6SdSKiCSbDDCwyzYv2VxE
EwA2+U4w7b8xwQxEPgNzbBqaEGfoZuXyTjHgbKj1o9JAAbBOq7LjzmT9bBnzCoWw
b8Cnf0SYXEN1k+C+IgCFA4SdN0mj8MxKWhXBAWXo
-----END CERTIFICATE-----
Generated at Fri Jun 6 20:22:29 2025 by rpki-client