Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/34352e3136372e3135382e302f32342d3234203d3e20323633313537.roa
File:                     34352e3136372e3135382e302f32342d3234203d3e20323633313537.roa (raw, json)
Hash identifier:          Kz1/0X+uJKzXFAtLfFogOPWPvnzYg/J2jrZw7uCurpo=
Subject key identifier:   48:17:1B:6C:43:6B:81:B4:16:86:82:65:08:7F:1C:C2:32:99:E0:AA
Certificate issuer:       /CN=097FC81A5EA49A88FF4BBF238B0B99886A82A6A4
Certificate serial:       4E412D27CB6DAF0514EA6C8513DB14D588533E2B
Authority key identifier: 09:7F:C8:1A:5E:A4:9A:88:FF:4B:BF:23:8B:0B:99:88:6A:82:A6:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/34352e3136372e3135382e302f32342d3234203d3e20323633313537.roa
Signing time:             Tue 04 Feb 2025 18:24:20 +0000
ROA not before:           Tue 04 Feb 2025 18:19:20 +0000
ROA not after:            Tue 03 Feb 2026 18:24:20 +0000
asID:                     263157
IP address blocks:        45.167.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:41:2d:27:cb:6d:af:05:14:ea:6c:85:13:db:14:d5:88:53:3e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097FC81A5EA49A88FF4BBF238B0B99886A82A6A4
        Validity
            Not Before: Feb  4 18:19:20 2025 GMT
            Not After : Feb  3 18:24:20 2026 GMT
        Subject: CN=48171B6C436B81B416868265087F1CC23299E0AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:70:fb:d8:9b:6a:e1:f6:a1:0f:34:a3:46:de:
                    fa:0d:be:b9:fe:61:7d:b0:48:07:43:39:1d:45:19:
                    40:d0:73:4f:1f:ba:ab:52:a6:e2:4f:ba:67:ad:de:
                    95:5c:32:6b:f3:fb:39:96:3d:0a:5c:d3:3f:d3:58:
                    98:44:9f:46:b5:43:32:4d:95:5e:23:18:77:fe:c9:
                    a7:fa:b2:4c:70:e1:ef:cf:20:58:45:61:a5:18:6d:
                    0a:63:d2:5e:dc:cb:94:cc:4f:1e:1d:19:55:7f:bf:
                    9f:79:8d:ff:34:e9:a8:d5:ab:28:15:a4:d1:af:d8:
                    46:d1:00:c2:fa:e4:9c:51:99:00:8e:c2:d6:1c:d8:
                    8b:a1:81:03:c9:8c:53:81:11:3f:2e:57:6d:16:23:
                    40:7e:a3:05:d5:6d:83:f5:b5:f8:aa:f8:ae:b5:71:
                    6e:19:d5:18:34:a4:d3:d7:7c:de:32:6c:8c:4c:69:
                    76:f0:78:87:50:9a:7c:31:ca:77:21:d5:b9:27:83:
                    9b:c0:30:94:fc:58:a9:e5:fe:51:6f:39:d4:3e:2c:
                    d4:bb:a7:21:37:7e:d8:1e:44:8e:21:97:99:c3:b4:
                    33:f1:26:d3:0a:23:39:1a:7c:03:57:ce:11:68:0e:
                    06:48:94:6a:6d:db:6f:6f:ab:38:4a:1f:f6:db:0a:
                    18:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:17:1B:6C:43:6B:81:B4:16:86:82:65:08:7F:1C:C2:32:99:E0:AA
            X509v3 Authority Key Identifier:
                keyid:09:7F:C8:1A:5E:A4:9A:88:FF:4B:BF:23:8B:0B:99:88:6A:82:A6:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/34352e3136372e3135382e302f32342d3234203d3e20323633313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:28:0f:b9:c5:dd:3e:f5:39:63:88:60:33:12:d4:a9:45:7d:
         b2:c1:e3:f5:96:b5:c9:8c:84:7d:9f:8e:82:93:e1:78:58:0a:
         03:e0:7a:fc:be:dd:f8:ff:d4:5c:c1:43:41:29:8c:48:2e:55:
         da:50:e8:7d:94:fe:60:85:17:85:9f:ed:f5:9c:53:3b:cd:ac:
         e9:73:3b:78:55:2d:5e:04:70:43:4d:ec:93:9e:88:a8:ab:35:
         f2:1d:a3:3b:65:23:53:7e:94:f4:24:39:55:9f:09:ce:27:63:
         c1:3b:97:c1:07:f1:a2:a1:7e:a1:d0:1a:55:36:a3:75:3a:1f:
         bb:ea:65:7c:06:a9:03:df:65:a8:d2:df:cf:a0:ad:c6:54:eb:
         05:20:6b:34:4e:d1:af:ef:5a:bd:6a:d0:fc:75:54:83:bf:48:
         6a:2d:a9:71:3b:f7:d0:8e:7a:0d:68:fd:93:19:cc:1e:11:4a:
         73:62:eb:b6:33:54:54:a5:38:7f:99:0f:01:1a:2f:4c:cf:51:
         6d:0e:be:27:4d:7b:62:a4:f0:5c:40:29:3c:e3:1b:55:97:58:
         91:fe:78:0a:13:d3:8b:2d:46:96:90:96:39:b3:51:eb:bd:3f:
         17:7f:f3:a6:47:1d:79:13:f6:36:52:3f:b1:fe:ec:bd:bb:88:
         36:db:cb:6b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTkEtJ8ttrwUU6myFE9sU1YhTPiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3RkM4MUE1RUE0OUE4OEZGNEJCRjIzOEIwQjk5ODg2
QTgyQTZBNDAeFw0yNTAyMDQxODE5MjBaFw0yNjAyMDMxODI0MjBaMDMxMTAvBgNV
BAMTKDQ4MTcxQjZDNDM2QjgxQjQxNjg2ODI2NTA4N0YxQ0MyMzI5OUUwQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRcPvYm2rh9qEPNKNG3voNvrn+
YX2wSAdDOR1FGUDQc08fuqtSpuJPumet3pVcMmvz+zmWPQpc0z/TWJhEn0a1QzJN
lV4jGHf+yaf6skxw4e/PIFhFYaUYbQpj0l7cy5TMTx4dGVV/v595jf806ajVqygV
pNGv2EbRAML65JxRmQCOwtYc2IuhgQPJjFOBET8uV20WI0B+owXVbYP1tfiq+K61
cW4Z1Rg0pNPXfN4ybIxMaXbweIdQmnwxynch1bkng5vAMJT8WKnl/lFvOdQ+LNS7
pyE3ftgeRI4hl5nDtDPxJtMKIzkafANXzhFoDgZIlGpt229vqzhKH/bbChhLAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUSBcbbENrgbQWhoJlCH8cwjKZ4KowHwYDVR0j
BBgwFoAUCX/IGl6kmoj/S78jiwuZiGqCpqQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85Qzk5MjMxNTgwQkQ2OUI5NUY4NTI3MkQxMzczNENDODRE
OUVDNjVBMzlBQjkzNEY0ODUyQTYxRUFGOTc1NjA2LzAvMDk3RkM4MUE1RUE0OUE4
OEZGNEJCRjIzOEIwQjk5ODg2QTgyQTZBNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOTdGQzgxQTVFQTQ5QTg4RkY0
QkJGMjM4QjBCOTk4ODZBODJBNkE0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUM5OTIzMTU4MEJENjlCOTVGODUyNzJEMTM3MzRDQzg0RDlFQzY1QTM5
QUI5MzRGNDg1MkE2MUVBRjk3NTYwNi8wLzM0MzUyZTMxMzYzNzJlMzEzNTM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzEzNTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALaee
MA0GCSqGSIb3DQEBCwUAA4IBAQAsKA+5xd0+9TljiGAzEtSpRX2yweP1lrXJjIR9
n46Ck+F4WAoD4Hr8vt34/9RcwUNBKYxILlXaUOh9lP5ghReFn+31nFM7zazpczt4
VS1eBHBDTeyTnoioqzXyHaM7ZSNTfpT0JDlVnwnOJ2PBO5fBB/GioX6h0BpVNqN1
Oh+76mV8BqkD32Wo0t/PoK3GVOsFIGs0TtGv71q9atD8dVSDv0hqLalxO/fQjnoN
aP2TGcweEUpzYuu2M1RUpTh/mQ8BGi9Mz1FtDr4nTXtipPBcQCk84xtVl1iR/ngK
E9OLLUaWkJY5s1HrvT8Xf/OmRx15E/Y2Uj+x/uy9u4g228tr
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:22 2025 by rpki-client