Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32342d3234203d3e20323730303335.roa
File:                     34352e3136322e322e302f32342d3234203d3e20323730303335.roa (raw, json)
Hash identifier:          n/KBs6NHhzoZVv8tOb6YPdcqpi+Fq7Xqd/PnfK8ghP4=
Subject key identifier:   9E:53:7E:D5:CD:8A:BD:2E:E9:12:A8:ED:98:0D:E3:B8:00:54:39:DA
Certificate issuer:       /CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
Certificate serial:       36A8ECFBEA3B6C4CCA8B28E60610F99928503F14
Authority key identifier: E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32342d3234203d3e20323730303335.roa
Signing time:             Wed 26 Mar 2025 14:40:00 +0000
ROA not before:           Wed 26 Mar 2025 14:35:00 +0000
ROA not after:            Wed 25 Mar 2026 14:40:00 +0000
asID:                     270035
IP address blocks:        45.162.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a8:ec:fb:ea:3b:6c:4c:ca:8b:28:e6:06:10:f9:99:28:50:3f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
        Validity
            Not Before: Mar 26 14:35:00 2025 GMT
            Not After : Mar 25 14:40:00 2026 GMT
        Subject: CN=9E537ED5CD8ABD2EE912A8ED980DE3B8005439DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7d:9b:5d:04:91:8a:15:0d:71:e2:c3:00:39:
                    43:0b:55:42:21:f7:ea:94:e7:aa:5a:06:1b:9f:5f:
                    cf:0d:76:c9:06:44:f2:a0:6f:b6:c2:cd:06:3f:30:
                    38:e2:49:c0:84:8f:84:7c:d6:7f:33:02:3d:e4:4a:
                    4b:2b:ec:7d:23:35:38:fa:0e:59:d4:53:19:d3:a3:
                    5d:fa:33:3f:91:f8:07:11:b0:a1:91:c7:20:23:00:
                    57:81:65:5d:c9:b2:e5:5f:eb:65:13:98:68:59:d1:
                    74:81:58:56:e4:af:6f:05:76:ac:cb:98:b3:df:63:
                    1f:df:6b:da:0c:d7:7d:96:a1:33:87:9d:3b:74:c9:
                    c5:69:2a:98:a9:e3:54:45:bb:e4:73:5e:e6:15:9a:
                    b7:41:70:76:ee:31:6a:82:47:0e:27:eb:64:08:a4:
                    12:21:b9:a0:3c:94:c7:d7:79:24:fd:26:d8:cf:61:
                    7d:60:9f:ba:96:34:2d:5d:72:f3:a9:6b:e9:07:a4:
                    ae:73:f2:b8:fa:ac:4b:93:0c:ef:c3:da:0e:24:18:
                    6e:b2:e0:06:da:f4:6a:9a:41:a4:73:55:46:36:ef:
                    13:11:c0:94:a2:d4:d9:da:a3:bb:8e:b8:e8:50:fa:
                    08:5a:cc:fb:d7:ea:47:33:2b:69:d4:1d:d1:56:74:
                    21:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:53:7E:D5:CD:8A:BD:2E:E9:12:A8:ED:98:0D:E3:B8:00:54:39:DA
            X509v3 Authority Key Identifier:
                keyid:E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32342d3234203d3e20323730303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:59:18:1c:29:10:c8:45:63:df:04:2a:6c:2c:c7:64:4a:f9:
         13:2a:36:0b:8f:42:b6:f8:5b:66:1d:12:63:23:8c:ff:67:2f:
         a3:98:9c:2f:01:6a:2c:09:10:0d:e3:ef:f9:26:ec:2f:f1:dd:
         1a:1f:44:53:cc:25:53:7e:cc:52:63:24:64:14:77:a7:5e:48:
         c7:86:a0:07:54:ca:fa:38:94:2b:58:d4:88:bb:e2:c5:fc:34:
         7b:7d:b9:30:76:f8:d8:99:8f:47:2c:9f:0a:30:69:54:87:53:
         4e:1e:df:33:71:32:76:d0:9a:e6:f3:43:1d:39:31:3d:34:21:
         85:1a:0a:8e:28:32:ef:6a:a4:d8:6b:94:b0:54:93:fe:b6:9b:
         3d:8c:8f:b3:92:4c:a3:bc:2a:3e:cd:46:42:2b:c8:ed:a1:15:
         89:13:63:df:78:9a:07:29:79:81:96:fc:0b:b8:1a:1b:7c:15:
         f8:1b:1f:46:6b:44:b4:79:e5:da:6d:3d:f8:f6:d8:dd:31:4b:
         d6:dc:32:e9:83:88:7c:9c:65:28:c7:a0:a7:8f:3b:5c:92:88:
         f1:53:26:13:a5:6c:e9:1a:6e:8b:c4:56:b7:3d:fa:15:d4:78:
         dc:f9:63:c3:34:77:b7:c7:c0:8a:d2:8f:f7:e1:1f:e2:23:ea:
         c8:db:29:e5
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUNqjs++o7bEzKiyjmBhD5mShQPxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTgwNDZGQ0ZBMDkwRUQzMEE4MDAxNkYwQkM0NkFCMjg5
RTI1ODMxQTAeFw0yNTAzMjYxNDM1MDBaFw0yNjAzMjUxNDQwMDBaMDMxMTAvBgNV
BAMTKDlFNTM3RUQ1Q0Q4QUJEMkVFOTEyQThFRDk4MERFM0I4MDA1NDM5REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKfZtdBJGKFQ1x4sMAOUMLVUIh
9+qU56paBhufX88NdskGRPKgb7bCzQY/MDjiScCEj4R81n8zAj3kSksr7H0jNTj6
DlnUUxnTo136Mz+R+AcRsKGRxyAjAFeBZV3JsuVf62UTmGhZ0XSBWFbkr28FdqzL
mLPfYx/fa9oM132WoTOHnTt0ycVpKpip41RFu+RzXuYVmrdBcHbuMWqCRw4n62QI
pBIhuaA8lMfXeST9JtjPYX1gn7qWNC1dcvOpa+kHpK5z8rj6rEuTDO/D2g4kGG6y
4Aba9GqaQaRzVUY27xMRwJSi1Nnao7uOuOhQ+ghazPvX6kczK2nUHdFWdCE3AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUnlN+1c2KvS7pEqjtmA3juABUOdowHwYDVR0j
BBgwFoAU6ARvz6CQ7TCoABbwvEarKJ4lgxowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NzA0NzY0RURBQTAxRTg5MjI5NUZDOTIwMzlGREFBMDM4
N0YwMzc2Q0YwQkQ1RkQ4NjA0RjFBMzY1RDlDRkZGLzAvRTgwNDZGQ0ZBMDkwRUQz
MEE4MDAxNkYwQkM0NkFCMjg5RTI1ODMxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FODA0NkZDRkEwOTBFRDMwQTgw
MDE2RjBCQzQ2QUIyODlFMjU4MzFBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTcwNDc2NEVEQUEwMUU4OTIyOTVGQzkyMDM5RkRBQTAzODdGMDM3NkNG
MEJENUZEODYwNEYxQTM2NUQ5Q0ZGRi8wLzM0MzUyZTMxMzYzMjJlMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAzMDMzMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtogIwDQYJ
KoZIhvcNAQELBQADggEBAFFZGBwpEMhFY98EKmwsx2RK+RMqNguPQrb4W2YdEmMj
jP9nL6OYnC8BaiwJEA3j7/km7C/x3RofRFPMJVN+zFJjJGQUd6deSMeGoAdUyvo4
lCtY1Ii74sX8NHt9uTB2+NiZj0csnwowaVSHU04e3zNxMnbQmubzQx05MT00IYUa
Co4oMu9qpNhrlLBUk/62mz2Mj7OSTKO8Kj7NRkIryO2hFYkTY994mgcpeYGW/Au4
Ght8FfgbH0ZrRLR55dptPfj22N0xS9bcMumDiHycZSjHoKePO1ySiPFTJhOlbOka
bovEVrc9+hXUeNz5Y8M0d7fHwIrSj/fhH+Ij6sjbKeU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:07:29 2025 by rpki-client