Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32342d3234203d3e203532343638.roa
File:                     34352e3136322e322e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          smwtXoXcgH+Ky/WLCh1Fjh4RV2Wiv5bFlGff3woPgF8=
Subject key identifier:   30:4B:BA:AA:74:53:34:4B:3F:89:DF:82:BC:37:65:1B:EF:E1:A9:7A
Certificate issuer:       /CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
Certificate serial:       6CE21B23E5EF5557663F5ABC61799FA523C056B2
Authority key identifier: E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32342d3234203d3e203532343638.roa
Signing time:             Wed 26 Mar 2025 14:45:00 +0000
ROA not before:           Wed 26 Mar 2025 14:40:00 +0000
ROA not after:            Wed 25 Mar 2026 14:45:00 +0000
asID:                     52468
IP address blocks:        45.162.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e2:1b:23:e5:ef:55:57:66:3f:5a:bc:61:79:9f:a5:23:c0:56:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
        Validity
            Not Before: Mar 26 14:40:00 2025 GMT
            Not After : Mar 25 14:45:00 2026 GMT
        Subject: CN=304BBAAA7453344B3F89DF82BC37651BEFE1A97A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:34:e1:2d:22:4f:c8:2c:6c:02:5e:82:08:e3:
                    ce:fd:d4:7c:f9:c3:39:8b:4f:b1:d7:95:be:97:cf:
                    b8:3a:4a:88:81:f7:40:0d:a0:fa:ea:df:e2:f5:74:
                    c6:7f:ea:bb:1f:54:a9:14:3a:01:40:f6:80:20:0f:
                    ad:51:cc:69:6d:d3:1f:c9:55:65:8a:a1:f0:ff:d0:
                    95:23:18:78:79:ea:4a:fb:db:47:3d:5e:55:ca:b9:
                    40:9e:be:3c:56:54:1f:90:98:f9:27:91:dc:82:5e:
                    b6:13:b8:7d:a7:67:5d:73:9f:66:f2:0f:d0:5a:2e:
                    bd:95:9d:5b:d1:5b:1b:e7:0f:fc:b8:7a:15:77:30:
                    41:39:71:d6:7c:28:69:e6:c0:c9:7f:8f:bc:dc:66:
                    8b:c8:8f:f1:4b:ad:83:a5:7f:2a:5b:66:26:9c:91:
                    60:cd:f1:76:56:f5:6a:e5:7a:90:f1:3a:47:b3:f5:
                    6c:7b:e5:63:f7:51:d4:25:9e:3d:9f:fc:bb:ab:10:
                    05:44:58:6e:50:29:70:00:cb:a5:9e:c7:64:b3:0f:
                    5d:62:40:78:d4:98:46:08:fa:f8:c7:0f:1d:17:c5:
                    86:f1:07:92:5a:51:a2:af:ed:32:db:87:fa:f7:36:
                    f7:5e:ed:46:46:84:82:5c:85:e3:41:c0:02:ac:89:
                    b2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4B:BA:AA:74:53:34:4B:3F:89:DF:82:BC:37:65:1B:EF:E1:A9:7A
            X509v3 Authority Key Identifier:
                keyid:E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:95:23:52:a7:9f:b1:12:7e:d0:2b:6c:d9:42:6d:81:6c:6a:
         ab:53:20:21:a6:ae:f5:43:00:19:c9:0f:13:29:ff:3b:23:f8:
         6f:d2:86:07:b9:35:48:39:e9:a6:5d:df:86:39:41:de:87:02:
         7b:0c:72:b4:aa:4b:70:1e:c4:58:a1:9b:cf:84:35:5a:4d:1e:
         16:fb:c8:20:72:89:d1:2c:ce:a6:05:91:1e:38:f2:2f:81:2d:
         db:02:d2:16:87:35:29:74:7c:05:a7:a6:a8:5c:82:99:ad:81:
         2f:ae:85:b1:69:04:88:15:1d:00:0d:4f:54:0b:b5:29:4d:d9:
         e3:10:5b:7f:b4:f7:92:96:4d:c7:a6:a1:ec:59:48:d4:b1:97:
         44:04:ba:05:e5:1c:fd:7c:e4:fc:f6:be:9e:19:ef:63:09:3f:
         2c:60:0c:d2:d1:ce:c7:1e:e8:7a:a6:bd:ca:e1:ab:ce:72:5f:
         6b:97:87:7a:97:a2:6b:65:52:81:ab:10:ec:af:55:83:05:1a:
         c2:ee:dc:49:f9:9c:85:ab:e4:23:35:5d:3f:1e:3c:3c:a9:14:
         8a:09:29:4d:d5:67:ab:6e:76:69:2b:b6:51:c8:fb:f0:e1:eb:
         71:10:69:27:b0:cc:f6:04:bc:a1:cf:29:05:d3:b0:58:e0:c9:
         8e:10:30:15
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUbOIbI+XvVVdmP1q8YXmfpSPAVrIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTgwNDZGQ0ZBMDkwRUQzMEE4MDAxNkYwQkM0NkFCMjg5
RTI1ODMxQTAeFw0yNTAzMjYxNDQwMDBaFw0yNjAzMjUxNDQ1MDBaMDMxMTAvBgNV
BAMTKDMwNEJCQUFBNzQ1MzM0NEIzRjg5REY4MkJDMzc2NTFCRUZFMUE5N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjNOEtIk/ILGwCXoII48791Hz5
wzmLT7HXlb6Xz7g6SoiB90ANoPrq3+L1dMZ/6rsfVKkUOgFA9oAgD61RzGlt0x/J
VWWKofD/0JUjGHh56kr720c9XlXKuUCevjxWVB+QmPknkdyCXrYTuH2nZ11zn2by
D9BaLr2VnVvRWxvnD/y4ehV3MEE5cdZ8KGnmwMl/j7zcZovIj/FLrYOlfypbZiac
kWDN8XZW9WrlepDxOkez9Wx75WP3UdQlnj2f/LurEAVEWG5QKXAAy6Wex2SzD11i
QHjUmEYI+vjHDx0XxYbxB5JaUaKv7TLbh/r3Nvde7UZGhIJcheNBwAKsibLJAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUMEu6qnRTNEs/id+CvDdlG+/hqXowHwYDVR0j
BBgwFoAU6ARvz6CQ7TCoABbwvEarKJ4lgxowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NzA0NzY0RURBQTAxRTg5MjI5NUZDOTIwMzlGREFBMDM4
N0YwMzc2Q0YwQkQ1RkQ4NjA0RjFBMzY1RDlDRkZGLzAvRTgwNDZGQ0ZBMDkwRUQz
MEE4MDAxNkYwQkM0NkFCMjg5RTI1ODMxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FODA0NkZDRkEwOTBFRDMwQTgw
MDE2RjBCQzQ2QUIyODlFMjU4MzFBLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTcwNDc2NEVEQUEwMUU4OTIyOTVGQzkyMDM5RkRBQTAzODdGMDM3NkNG
MEJENUZEODYwNEYxQTM2NUQ5Q0ZGRi8wLzM0MzUyZTMxMzYzMjJlMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALaICMA0GCSqG
SIb3DQEBCwUAA4IBAQAxlSNSp5+xEn7QK2zZQm2BbGqrUyAhpq71QwAZyQ8TKf87
I/hv0oYHuTVIOemmXd+GOUHehwJ7DHK0qktwHsRYoZvPhDVaTR4W+8ggconRLM6m
BZEeOPIvgS3bAtIWhzUpdHwFp6aoXIKZrYEvroWxaQSIFR0ADU9UC7UpTdnjEFt/
tPeSlk3HpqHsWUjUsZdEBLoF5Rz9fOT89r6eGe9jCT8sYAzS0c7HHuh6pr3K4avO
cl9rl4d6l6JrZVKBqxDsr1WDBRrC7txJ+ZyFq+QjNV0/Hjw8qRSKCSlN1WerbnZp
K7ZRyPvw4etxEGknsMz2BLyhzykF07BY4MmOEDAV
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:23 2025 by rpki-client