Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/34352e3233302e36342e302f32322d3234203d3e20323636373032.roa
File:                     34352e3233302e36342e302f32322d3234203d3e20323636373032.roa (raw, json)
Hash identifier:          RGRr48EU6Haa20jdq7TY3ILRE3tO4D4cxR/arOOGQZE=
Subject key identifier:   C0:A0:36:20:76:B2:77:90:18:00:0D:C7:8F:49:C9:97:A5:30:6D:94
Certificate issuer:       /CN=27FE79291A5C3D66DAA7564D181C08DDA1B23D02
Certificate serial:       244DE76FA8C989461E4497637FB20E0F356747FF
Authority key identifier: 27:FE:79:29:1A:5C:3D:66:DA:A7:56:4D:18:1C:08:DD:A1:B2:3D:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/34352e3233302e36342e302f32322d3234203d3e20323636373032.roa
Signing time:             Tue 04 Feb 2025 20:01:20 +0000
ROA not before:           Tue 04 Feb 2025 19:56:20 +0000
ROA not after:            Tue 03 Feb 2026 20:01:20 +0000
asID:                     266702
IP address blocks:        45.230.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4d:e7:6f:a8:c9:89:46:1e:44:97:63:7f:b2:0e:0f:35:67:47:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27FE79291A5C3D66DAA7564D181C08DDA1B23D02
        Validity
            Not Before: Feb  4 19:56:20 2025 GMT
            Not After : Feb  3 20:01:20 2026 GMT
        Subject: CN=C0A0362076B2779018000DC78F49C997A5306D94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:17:e8:16:fc:f7:ac:77:34:b2:f5:65:1b:
                    e8:ed:03:e3:b4:1d:a3:46:91:5c:3d:a0:a5:9c:c8:
                    2e:2a:97:8a:aa:10:cf:72:35:65:1b:5b:84:95:e6:
                    15:21:a4:7f:c2:dc:69:be:ee:36:c0:14:79:f7:15:
                    10:d9:2b:1b:45:4a:b9:41:92:4e:b7:42:a7:fb:4e:
                    e8:6d:7c:bb:30:d8:33:6c:70:2c:41:97:32:e7:03:
                    42:f8:4c:a1:16:90:8a:fb:20:fb:93:0e:a0:99:ce:
                    fd:c3:fd:75:da:14:94:2b:46:c0:7f:ce:03:0c:26:
                    cb:eb:2d:d4:a5:e6:1f:d3:8f:07:7d:c4:8a:b0:7f:
                    35:07:f2:13:a7:9a:49:9c:b0:f5:12:61:7c:55:57:
                    31:5f:36:de:9d:f5:08:1e:3f:d1:19:15:82:0c:82:
                    b8:ea:06:ef:f5:9e:49:27:1a:59:d8:81:d5:4d:8a:
                    e7:5d:3f:5e:d8:52:30:7d:1f:5d:81:a8:88:ff:11:
                    c8:92:30:a3:38:83:98:ff:79:3d:2a:8b:ca:fb:58:
                    85:76:71:60:67:03:43:02:0f:18:b1:cd:c6:5b:e7:
                    42:2d:23:5b:61:40:d6:c9:e8:2e:2f:98:9d:ad:68:
                    e6:cc:67:49:d2:d8:33:67:c9:31:bc:e6:5b:a8:15:
                    45:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A0:36:20:76:B2:77:90:18:00:0D:C7:8F:49:C9:97:A5:30:6D:94
            X509v3 Authority Key Identifier:
                keyid:27:FE:79:29:1A:5C:3D:66:DA:A7:56:4D:18:1C:08:DD:A1:B2:3D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/34352e3233302e36342e302f32322d3234203d3e20323636373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:c5:2e:3e:ff:d1:f4:0f:62:4b:3b:f5:af:22:36:23:2e:1f:
         67:92:d5:2d:96:a5:69:10:dc:85:15:e5:d7:b9:0f:85:51:f0:
         f8:3b:c5:9b:ea:1b:76:70:92:82:25:11:aa:3b:71:b9:31:0d:
         15:6f:0d:32:55:2c:2a:fe:52:3b:fb:42:d7:0a:c3:99:50:17:
         4e:f6:47:71:d8:b0:42:2f:6a:12:d8:0d:41:14:0c:09:df:5f:
         91:df:9e:42:d8:87:ad:d5:16:3a:8f:01:12:36:89:fb:dc:ef:
         a2:18:7d:a5:1e:ee:6e:19:e7:07:4c:a8:54:dc:74:8c:d5:0d:
         16:47:48:1a:52:10:e0:4c:08:11:17:b7:fb:25:d9:2f:30:88:
         db:08:63:6a:e2:84:00:d3:c1:4c:d0:6b:58:32:48:1d:0b:15:
         18:7f:b3:40:ba:d8:f1:ae:53:0f:79:5b:9a:e9:12:7e:71:d9:
         e1:35:3d:7a:c5:33:3d:77:f7:71:2b:af:50:cf:26:e6:ce:20:
         44:d3:63:25:c2:3e:e5:80:99:4e:cf:be:a7:dc:32:63:bc:20:
         40:1e:ae:43:e5:0a:39:a0:37:ce:04:af:47:fd:dd:61:2d:63:
         c6:15:7e:7a:f0:96:ff:63:60:a5:c5:81:73:56:22:1c:d7:12:
         80:4c:9a:41
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJE3nb6jJiUYeRJdjf7IODzVnR/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdGRTc5MjkxQTVDM0Q2NkRBQTc1NjREMTgxQzA4RERB
MUIyM0QwMjAeFw0yNTAyMDQxOTU2MjBaFw0yNjAyMDMyMDAxMjBaMDMxMTAvBgNV
BAMTKEMwQTAzNjIwNzZCMjc3OTAxODAwMERDNzhGNDlDOTk3QTUzMDZEOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ixfoFvz3rHc0svVlG+jtA+O0
HaNGkVw9oKWcyC4ql4qqEM9yNWUbW4SV5hUhpH/C3Gm+7jbAFHn3FRDZKxtFSrlB
kk63Qqf7TuhtfLsw2DNscCxBlzLnA0L4TKEWkIr7IPuTDqCZzv3D/XXaFJQrRsB/
zgMMJsvrLdSl5h/Tjwd9xIqwfzUH8hOnmkmcsPUSYXxVVzFfNt6d9QgeP9EZFYIM
grjqBu/1nkknGlnYgdVNiuddP17YUjB9H12BqIj/EciSMKM4g5j/eT0qi8r7WIV2
cWBnA0MCDxixzcZb50ItI1thQNbJ6C4vmJ2taObMZ0nS2DNnyTG85luoFUXnAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUwKA2IHayd5AYAA3Hj0nJl6UwbZQwHwYDVR0j
BBgwFoAUJ/55KRpcPWbap1ZNGBwI3aGyPQIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RTVEQTZBNDZEODU4MkEzQUM2NzJENTc0NEFGNDc5M0M1
QzBDNTVDMDZBRDkxOUY4NEFDNDVDQ0I5NEYwN0RELzAvMjdGRTc5MjkxQTVDM0Q2
NkRBQTc1NjREMTgxQzA4RERBMUIyM0QwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yN0ZFNzkyOTFBNUMzRDY2REFB
NzU2NEQxODFDMDhEREExQjIzRDAyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUU1REE2QTQ2RDg1ODJBM0FDNjcyRDU3NDRBRjQ3OTNDNUMwQzU1QzA2
QUQ5MTlGODRBQzQ1Q0NCOTRGMDdERC8wLzM0MzUyZTMyMzMzMDJlMzYzNDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM3MzAzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3mQDAN
BgkqhkiG9w0BAQsFAAOCAQEANsUuPv/R9A9iSzv1ryI2Iy4fZ5LVLZalaRDchRXl
17kPhVHw+DvFm+obdnCSgiURqjtxuTENFW8NMlUsKv5SO/tC1wrDmVAXTvZHcdiw
Qi9qEtgNQRQMCd9fkd+eQtiHrdUWOo8BEjaJ+9zvohh9pR7ubhnnB0yoVNx0jNUN
FkdIGlIQ4EwIERe3+yXZLzCI2whjauKEANPBTNBrWDJIHQsVGH+zQLrY8a5TD3lb
mukSfnHZ4TU9esUzPXf3cSuvUM8m5s4gRNNjJcI+5YCZTs++p9wyY7wgQB6uQ+UK
OaA3zgSvR/3dYS1jxhV+evCW/2NgpcWBc1YiHNcSgEyaQQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:17 2025 by rpki-client