Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/34352e3139312e37342e302f32342d3234203d3e20323639383933.roa
File:                     34352e3139312e37342e302f32342d3234203d3e20323639383933.roa (raw, json)
Hash identifier:          reD5QkGD+truKClMXlCzzL8I54U5oJxoundVoAvpNtE=
Subject key identifier:   1B:99:30:03:51:C1:0A:03:2F:3E:2B:98:5E:C2:97:22:EE:54:6B:E2
Certificate issuer:       /CN=97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1
Certificate serial:       44267FFFC9F94C9A012CCDB3BCAAE066DE182134
Authority key identifier: 97:89:9A:48:49:F5:51:BB:C2:F4:F8:70:F0:EC:EA:5A:66:BB:B7:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/34352e3139312e37342e302f32342d3234203d3e20323639383933.roa
Signing time:             Tue 04 Feb 2025 20:06:24 +0000
ROA not before:           Tue 04 Feb 2025 20:01:24 +0000
ROA not after:            Tue 03 Feb 2026 20:06:24 +0000
asID:                     269893
IP address blocks:        45.191.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 09:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:26:7f:ff:c9:f9:4c:9a:01:2c:cd:b3:bc:aa:e0:66:de:18:21:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1
        Validity
            Not Before: Feb  4 20:01:24 2025 GMT
            Not After : Feb  3 20:06:24 2026 GMT
        Subject: CN=1B99300351C10A032F3E2B985EC29722EE546BE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0f:03:de:d2:28:9d:49:f5:25:2f:8a:90:7b:
                    6c:a6:38:21:6a:3a:43:86:39:2b:6b:20:d6:f5:3a:
                    f4:06:b3:31:df:c4:19:e0:a3:bf:71:66:76:94:e6:
                    31:a8:f4:6d:7e:ca:ac:bf:e8:2f:4a:b7:67:cb:98:
                    af:17:f2:ff:49:95:80:f1:96:47:f1:9d:dd:d3:42:
                    f4:cf:af:5e:54:42:b0:af:e2:a8:fd:a7:19:cd:45:
                    eb:6f:ca:83:bc:5e:e7:8a:56:47:56:70:c5:9f:e3:
                    c7:82:f2:be:64:1a:0a:00:66:2f:f8:5d:12:ed:be:
                    41:a5:53:94:3f:cc:39:4d:4d:c8:93:fb:38:24:5a:
                    35:1c:8d:e0:48:fd:d1:d3:25:da:bd:5e:da:4b:2f:
                    29:98:48:08:3d:62:1c:ec:a4:32:e5:c4:68:72:18:
                    79:84:3c:25:c4:67:b3:9e:5f:f3:07:95:6d:37:f4:
                    88:f7:d7:ec:ff:f6:cd:85:23:58:1b:5c:f7:ed:91:
                    4f:a0:ee:b8:61:a0:41:0f:72:ae:e9:01:7d:15:76:
                    f3:07:45:61:3f:c8:15:f5:27:e5:13:ae:a6:38:14:
                    69:1d:6e:ce:2a:b0:98:72:51:1b:f4:12:65:77:f8:
                    62:02:07:44:37:e5:35:e8:c2:96:d5:da:4d:70:fe:
                    00:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:99:30:03:51:C1:0A:03:2F:3E:2B:98:5E:C2:97:22:EE:54:6B:E2
            X509v3 Authority Key Identifier:
                keyid:97:89:9A:48:49:F5:51:BB:C2:F4:F8:70:F0:EC:EA:5A:66:BB:B7:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/34352e3139312e37342e302f32342d3234203d3e20323639383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:c4:0d:c4:9f:20:90:8f:21:06:20:82:01:93:4b:97:cf:b9:
         13:68:d5:07:f4:67:b3:3a:b4:d0:f4:69:60:6d:fe:38:8a:19:
         eb:b3:d4:34:ed:c5:a0:86:1a:89:01:7c:cb:4e:49:cd:b9:22:
         43:74:41:1e:a5:1c:57:22:18:5a:d7:d2:ea:64:0c:4b:d5:e9:
         bb:05:a0:3f:57:c6:cc:6e:fb:ce:4c:38:36:04:6a:1c:06:c2:
         74:dc:22:aa:02:8f:cd:2a:93:f5:e4:bc:8a:1e:57:43:4a:98:
         ff:5f:45:62:8d:06:fe:b7:c6:5f:b7:49:a1:98:54:3b:f7:d5:
         cd:8b:ba:fd:2a:87:47:88:90:5e:9b:07:2b:58:b7:35:46:94:
         68:1e:29:2d:e4:66:61:e0:d4:5d:d6:37:f3:e5:e0:ce:8e:46:
         e1:e1:12:97:fb:18:c0:a4:60:23:ef:44:05:b8:c8:b9:87:4b:
         85:a8:c9:87:fe:53:3f:09:89:e3:f2:72:a6:a0:ad:37:86:c3:
         a0:a4:f3:1b:df:28:ab:ad:74:b9:aa:c1:bd:b1:b6:a9:27:de:
         f9:95:96:d8:04:c5:9e:81:45:e9:ca:9a:a8:69:1b:9c:63:1b:
         f3:fa:32:bb:69:ec:f5:0f:e2:6a:66:cb:d7:5a:14:06:4b:01:
         f5:5e:91:2d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIURCZ//8n5TJoBLM2zvKrgZt4YITQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc4OTlBNDg0OUY1NTFCQkMyRjRGODcwRjBFQ0VBNUE2
NkJCQjdGMTAeFw0yNTAyMDQyMDAxMjRaFw0yNjAyMDMyMDA2MjRaMDMxMTAvBgNV
BAMTKDFCOTkzMDAzNTFDMTBBMDMyRjNFMkI5ODVFQzI5NzIyRUU1NDZCRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7DwPe0iidSfUlL4qQe2ymOCFq
OkOGOStrINb1OvQGszHfxBngo79xZnaU5jGo9G1+yqy/6C9Kt2fLmK8X8v9JlYDx
lkfxnd3TQvTPr15UQrCv4qj9pxnNRetvyoO8XueKVkdWcMWf48eC8r5kGgoAZi/4
XRLtvkGlU5Q/zDlNTciT+zgkWjUcjeBI/dHTJdq9XtpLLymYSAg9YhzspDLlxGhy
GHmEPCXEZ7OeX/MHlW039Ij31+z/9s2FI1gbXPftkU+g7rhhoEEPcq7pAX0VdvMH
RWE/yBX1J+UTrqY4FGkdbs4qsJhyURv0EmV3+GICB0Q35TXowpbV2k1w/gArAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUG5kwA1HBCgMvPiuYXsKXIu5Ua+IwHwYDVR0j
BBgwFoAUl4maSEn1UbvC9Phw8OzqWma7t/EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RUUwOEFBNzZFRjdBRTRFRjQ3QUI2Q0Y1NjkyNERGOTcw
QUJDMUI0MERGRTM3NEIwMzJEMDVGNkJFQTUwQ0ZCLzAvOTc4OTlBNDg0OUY1NTFC
QkMyRjRGODcwRjBFQ0VBNUE2NkJCQjdGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85Nzg5OUE0ODQ5RjU1MUJCQzJG
NEY4NzBGMEVDRUE1QTY2QkJCN0YxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUVFMDhBQTc2RUY3QUU0RUY0N0FCNkNGNTY5MjRERjk3MEFCQzFCNDBE
RkUzNzRCMDMyRDA1RjZCRUE1MENGQi8wLzM0MzUyZTMxMzkzMTJlMzczNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTM4MzkzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2/SjAN
BgkqhkiG9w0BAQsFAAOCAQEAq8QNxJ8gkI8hBiCCAZNLl8+5E2jVB/Rnszq00PRp
YG3+OIoZ67PUNO3FoIYaiQF8y05JzbkiQ3RBHqUcVyIYWtfS6mQMS9XpuwWgP1fG
zG77zkw4NgRqHAbCdNwiqgKPzSqT9eS8ih5XQ0qY/19FYo0G/rfGX7dJoZhUO/fV
zYu6/SqHR4iQXpsHK1i3NUaUaB4pLeRmYeDUXdY38+Xgzo5G4eESl/sYwKRgI+9E
BbjIuYdLhajJh/5TPwmJ4/JypqCtN4bDoKTzG98oq610uarBvbG2qSfe+ZWW2ATF
noFF6cqaqGkbnGMb8/oyu2ns9Q/iambL11oUBksB9V6RLQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:27 2025 by rpki-client