Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131382e302f32342d3234203d3e20323635363834.roa
File:                     34352e352e3131382e302f32342d3234203d3e20323635363834.roa (raw, json)
Hash identifier:          Yyml+SUwX6zjAUAY6LW+aRqfPaA6MTQigfwy2AJXfrQ=
Subject key identifier:   D6:4F:4A:C5:24:33:04:2D:31:95:97:49:0C:2B:FF:7D:3F:E8:5D:C6
Certificate issuer:       /CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
Certificate serial:       49E321DCE7551D90678463FD0C6CA09F8E363F9E
Authority key identifier: F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131382e302f32342d3234203d3e20323635363834.roa
Signing time:             Thu 20 Feb 2025 20:10:32 +0000
ROA not before:           Thu 20 Feb 2025 20:05:32 +0000
ROA not after:            Thu 19 Feb 2026 20:10:32 +0000
asID:                     265684
IP address blocks:        45.5.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e3:21:dc:e7:55:1d:90:67:84:63:fd:0c:6c:a0:9f:8e:36:3f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
        Validity
            Not Before: Feb 20 20:05:32 2025 GMT
            Not After : Feb 19 20:10:32 2026 GMT
        Subject: CN=D64F4AC52433042D319597490C2BFF7D3FE85DC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5c:15:f0:e2:e3:6e:e4:78:ad:b3:e7:8a:42:
                    c8:ac:a4:50:50:be:7c:88:43:eb:84:31:ce:b2:08:
                    5f:8d:15:2f:55:e8:9c:f2:66:92:82:b5:34:6a:c8:
                    33:db:ff:09:33:1b:f2:66:5c:a7:85:75:3f:4c:0d:
                    97:c5:ab:74:6d:a4:d5:91:3c:2e:ae:42:9b:67:67:
                    ad:ff:3d:fb:b1:65:68:81:6a:bd:3b:78:64:9a:bd:
                    b3:34:32:44:bc:5f:e5:32:dd:b0:46:c3:06:ab:44:
                    b8:3f:e8:96:5e:e0:c2:60:42:31:a6:f3:1e:e1:61:
                    6a:82:3e:3d:21:84:2b:6c:9d:23:a3:89:b8:a9:10:
                    9e:69:e4:dc:63:58:0c:c1:71:04:ab:9d:b9:02:de:
                    03:79:1e:a7:6c:e9:dc:03:c1:aa:55:06:a0:36:77:
                    9d:2b:02:68:c9:82:21:75:d4:43:c4:86:f2:71:d3:
                    b1:bf:74:d8:08:cf:08:8d:30:e8:de:90:6d:45:46:
                    52:e5:b6:25:e5:26:e0:5b:46:4c:ff:1d:4b:fa:2a:
                    41:10:f1:7b:4c:1a:38:8b:6e:92:3a:14:b0:1a:c9:
                    ba:88:71:f4:da:cf:92:28:2e:c6:ab:cc:35:49:bb:
                    bc:8f:1a:6c:ec:34:ed:14:06:7e:cd:43:d5:0b:85:
                    64:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4F:4A:C5:24:33:04:2D:31:95:97:49:0C:2B:FF:7D:3F:E8:5D:C6
            X509v3 Authority Key Identifier:
                keyid:F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131382e302f32342d3234203d3e20323635363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:31:93:b2:a7:89:51:2e:6c:d0:65:de:77:0b:f3:59:ef:85:
         3f:a8:ab:ad:e5:39:07:07:e5:e4:2d:ba:40:06:76:22:43:cd:
         61:69:7f:9b:c1:38:8b:5a:f3:ab:a2:3e:2f:fe:7a:40:cf:f3:
         40:28:42:97:dc:83:c7:1f:64:b9:73:5c:e4:ea:d5:0d:83:45:
         e1:5c:b2:ab:b4:eb:a8:7a:6a:b6:e1:b2:3d:c9:eb:01:c4:d4:
         84:60:45:6c:8c:0c:f3:47:b3:06:cc:1a:26:43:c2:ac:8f:c8:
         48:af:a5:05:76:b1:65:5b:b0:6c:0f:fd:4f:3c:48:e7:45:8b:
         bf:2e:ea:8a:7a:95:cf:b9:0c:55:a7:33:11:c4:8c:4b:89:31:
         56:d6:81:09:57:16:93:71:84:2f:1b:ba:e3:1e:3e:b5:b2:9a:
         76:5b:1f:c1:dc:df:7d:1e:b9:84:38:30:00:aa:c4:c7:23:37:
         69:8f:71:05:31:90:47:07:df:d4:15:f7:54:de:be:93:4e:8e:
         22:a1:98:56:e3:6a:76:a0:b0:5f:1e:fc:0a:11:79:b9:11:0b:
         00:d9:b8:17:57:dd:c5:fa:05:89:c4:ab:01:28:64:33:11:95:
         b8:72:20:48:d1:b6:19:e5:94:cf:ed:96:22:16:ea:f2:78:11:
         20:c5:a9:4d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUSeMh3OdVHZBnhGP9DGygn442P54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA0RTYyRjQyRThDNzU0MTMyQzQxMzc1MjE4NzNDRkNF
M0MyQkI0ODAeFw0yNTAyMjAyMDA1MzJaFw0yNjAyMTkyMDEwMzJaMDMxMTAvBgNV
BAMTKEQ2NEY0QUM1MjQzMzA0MkQzMTk1OTc0OTBDMkJGRjdEM0ZFODVEQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoXBXw4uNu5Hits+eKQsispFBQ
vnyIQ+uEMc6yCF+NFS9V6JzyZpKCtTRqyDPb/wkzG/JmXKeFdT9MDZfFq3RtpNWR
PC6uQptnZ63/PfuxZWiBar07eGSavbM0MkS8X+Uy3bBGwwarRLg/6JZe4MJgQjGm
8x7hYWqCPj0hhCtsnSOjibipEJ5p5NxjWAzBcQSrnbkC3gN5Hqds6dwDwapVBqA2
d50rAmjJgiF11EPEhvJx07G/dNgIzwiNMOjekG1FRlLltiXlJuBbRkz/HUv6KkEQ
8XtMGjiLbpI6FLAaybqIcfTaz5IoLsarzDVJu7yPGmzsNO0UBn7NQ9ULhWQnAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU1k9KxSQzBC0xlZdJDCv/fT/oXcYwHwYDVR0j
BBgwFoAU8E5i9C6MdUEyxBN1IYc8/OPCu0gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85REQwOEI1NDU4M0U0MkI0Nzc2MkE0QTlCQjA0MjMyOTAx
N0ZEQjQ0NTRFQzExNDNBN0E2MjU1RDNBOTdFQjM2LzAvRjA0RTYyRjQyRThDNzU0
MTMyQzQxMzc1MjE4NzNDRkNFM0MyQkI0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMDRFNjJGNDJFOEM3NTQxMzJD
NDEzNzUyMTg3M0NGQ0UzQzJCQjQ4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUREMDhCNTQ1ODNFNDJCNDc3NjJBNEE5QkIwNDIzMjkwMTdGREI0NDU0
RUMxMTQzQTdBNjI1NUQzQTk3RUIzNi8wLzM0MzUyZTM1MmUzMTMxMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNjM4MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtBXYwDQYJ
KoZIhvcNAQELBQADggEBAHsxk7KniVEubNBl3ncL81nvhT+oq63lOQcH5eQtukAG
diJDzWFpf5vBOIta86uiPi/+ekDP80AoQpfcg8cfZLlzXOTq1Q2DReFcsqu066h6
arbhsj3J6wHE1IRgRWyMDPNHswbMGiZDwqyPyEivpQV2sWVbsGwP/U88SOdFi78u
6op6lc+5DFWnMxHEjEuJMVbWgQlXFpNxhC8buuMePrWymnZbH8Hc330euYQ4MACq
xMcjN2mPcQUxkEcH39QV91TevpNOjiKhmFbjanagsF8e/AoRebkRCwDZuBdX3cX6
BYnEqwEoZDMRlbhyIEjRthnllM/tliIW6vJ4ESDFqU0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:30 2025 by rpki-client