Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/34352e3139312e37352e302f32342d3234203d3e20323732393432.roa
File:                     34352e3139312e37352e302f32342d3234203d3e20323732393432.roa (raw, json)
Hash identifier:          IJRi9P30Mpv0LaeecPGUGWfOwuJzjy5SRj+NfyVvorw=
Subject key identifier:   99:45:F9:CF:B9:47:44:E0:9E:A4:E4:C9:2E:5B:29:82:CB:02:59:F1
Certificate issuer:       /CN=97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1
Certificate serial:       156A08147AFCB909A453D20384B969B0D076FE28
Authority key identifier: 97:89:9A:48:49:F5:51:BB:C2:F4:F8:70:F0:EC:EA:5A:66:BB:B7:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/34352e3139312e37352e302f32342d3234203d3e20323732393432.roa
Signing time:             Tue 04 Feb 2025 20:06:24 +0000
ROA not before:           Tue 04 Feb 2025 20:01:24 +0000
ROA not after:            Tue 03 Feb 2026 20:06:24 +0000
asID:                     272942
IP address blocks:        45.191.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 07:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6a:08:14:7a:fc:b9:09:a4:53:d2:03:84:b9:69:b0:d0:76:fe:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1
        Validity
            Not Before: Feb  4 20:01:24 2025 GMT
            Not After : Feb  3 20:06:24 2026 GMT
        Subject: CN=9945F9CFB94744E09EA4E4C92E5B2982CB0259F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3e:9f:e5:78:a4:11:4c:c2:da:fe:fc:19:aa:
                    85:6e:38:4a:a0:78:d8:ac:d6:f3:ea:73:9a:10:17:
                    eb:72:ac:9f:ce:d1:3a:84:a1:3a:62:4a:81:5d:f4:
                    77:66:ac:0e:64:80:24:a8:fd:fe:8f:34:52:cb:cd:
                    a6:41:0f:d4:b8:3e:43:67:8a:bd:a4:77:1d:83:5b:
                    ea:1d:7c:42:cf:e7:c0:1e:9b:68:fe:8c:38:5e:03:
                    a6:00:c4:28:27:54:4b:d3:c8:da:ab:ed:32:9a:55:
                    4f:1d:2c:4b:66:ee:62:31:2a:4d:f5:0a:ac:a7:16:
                    7f:f9:01:1d:41:f8:c0:14:75:e1:c9:66:0a:2c:a6:
                    bf:eb:70:ed:23:66:b1:53:70:35:6e:bd:24:13:1f:
                    25:b5:d1:cc:f4:65:b7:aa:0d:10:89:b1:03:78:6d:
                    7a:a0:09:34:50:21:39:f7:fe:70:26:39:64:7a:3c:
                    60:22:d7:90:dc:9f:da:50:76:ac:19:d7:03:6d:98:
                    92:46:14:a6:69:b9:28:64:ff:ca:54:b4:79:70:06:
                    b4:b5:30:d9:aa:f2:bf:83:aa:3a:22:28:a4:3e:ac:
                    40:c4:f7:57:14:44:41:7d:90:5a:e1:5c:ae:93:7e:
                    db:1f:8f:4f:f6:9e:02:0d:e1:b9:87:eb:5a:65:b4:
                    80:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:45:F9:CF:B9:47:44:E0:9E:A4:E4:C9:2E:5B:29:82:CB:02:59:F1
            X509v3 Authority Key Identifier:
                keyid:97:89:9A:48:49:F5:51:BB:C2:F4:F8:70:F0:EC:EA:5A:66:BB:B7:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/34352e3139312e37352e302f32342d3234203d3e20323732393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:76:79:46:85:fb:6f:c8:a4:a9:21:06:c0:f9:61:6f:a6:53:
         c6:c3:b0:69:a6:87:05:22:21:3f:dd:e8:9f:9a:88:59:65:ca:
         e5:e1:76:be:17:03:28:2e:87:06:6f:ba:ef:4d:00:ea:b7:26:
         82:91:59:52:43:a3:e7:7c:3c:d6:a5:1b:54:87:41:c8:1c:86:
         a7:29:7f:e2:20:3c:ed:55:55:24:7b:ca:93:d7:be:79:7d:99:
         0f:32:83:d1:79:ca:18:a4:05:b7:0e:f1:43:74:c9:91:8d:d2:
         5d:13:b5:e5:01:5b:a7:5a:68:9a:49:46:8f:81:fa:86:2c:d3:
         48:32:a5:6c:d7:42:c9:26:b0:4d:82:07:51:cb:b9:cf:39:53:
         d1:cf:bb:86:03:fb:00:6f:61:b5:b0:ca:5e:ea:c3:ea:8b:e3:
         46:12:65:82:b3:50:a8:b3:c7:e1:bc:7e:97:2b:5c:8c:a3:71:
         29:1a:fb:36:63:58:07:72:3e:4b:94:4d:13:33:e2:9f:92:5a:
         1d:11:f9:59:b8:1c:2a:d8:a8:52:ff:49:c6:1f:2d:12:06:82:
         54:e8:fe:9c:e3:a8:3f:22:7a:d4:ad:6f:c6:17:3e:8b:f1:de:
         fa:b0:8a:49:7e:23:1b:14:77:fb:a6:2b:23:20:25:eb:4e:86:
         17:f3:ca:c6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFWoIFHr8uQmkU9IDhLlpsNB2/igwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc4OTlBNDg0OUY1NTFCQkMyRjRGODcwRjBFQ0VBNUE2
NkJCQjdGMTAeFw0yNTAyMDQyMDAxMjRaFw0yNjAyMDMyMDA2MjRaMDMxMTAvBgNV
BAMTKDk5NDVGOUNGQjk0NzQ0RTA5RUE0RTRDOTJFNUIyOTgyQ0IwMjU5RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPp/leKQRTMLa/vwZqoVuOEqg
eNis1vPqc5oQF+tyrJ/O0TqEoTpiSoFd9HdmrA5kgCSo/f6PNFLLzaZBD9S4PkNn
ir2kdx2DW+odfELP58Aem2j+jDheA6YAxCgnVEvTyNqr7TKaVU8dLEtm7mIxKk31
CqynFn/5AR1B+MAUdeHJZgospr/rcO0jZrFTcDVuvSQTHyW10cz0ZbeqDRCJsQN4
bXqgCTRQITn3/nAmOWR6PGAi15Dcn9pQdqwZ1wNtmJJGFKZpuShk/8pUtHlwBrS1
MNmq8r+DqjoiKKQ+rEDE91cUREF9kFrhXK6Tftsfj0/2ngIN4bmH61pltIAzAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUmUX5z7lHROCepOTJLlspgssCWfEwHwYDVR0j
BBgwFoAUl4maSEn1UbvC9Phw8OzqWma7t/EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RUUwOEFBNzZFRjdBRTRFRjQ3QUI2Q0Y1NjkyNERGOTcw
QUJDMUI0MERGRTM3NEIwMzJEMDVGNkJFQTUwQ0ZCLzAvOTc4OTlBNDg0OUY1NTFC
QkMyRjRGODcwRjBFQ0VBNUE2NkJCQjdGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85Nzg5OUE0ODQ5RjU1MUJCQzJG
NEY4NzBGMEVDRUE1QTY2QkJCN0YxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUVFMDhBQTc2RUY3QUU0RUY0N0FCNkNGNTY5MjRERjk3MEFCQzFCNDBE
RkUzNzRCMDMyRDA1RjZCRUE1MENGQi8wLzM0MzUyZTMxMzkzMTJlMzczNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMjM5MzQzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2/SzAN
BgkqhkiG9w0BAQsFAAOCAQEARnZ5RoX7b8ikqSEGwPlhb6ZTxsOwaaaHBSIhP93o
n5qIWWXK5eF2vhcDKC6HBm+6700A6rcmgpFZUkOj53w81qUbVIdByByGpyl/4iA8
7VVVJHvKk9e+eX2ZDzKD0XnKGKQFtw7xQ3TJkY3SXRO15QFbp1pomklGj4H6hizT
SDKlbNdCySawTYIHUcu5zzlT0c+7hgP7AG9htbDKXurD6ovjRhJlgrNQqLPH4bx+
lytcjKNxKRr7NmNYB3I+S5RNEzPin5JaHRH5WbgcKtioUv9Jxh8tEgaCVOj+nOOo
PyJ61K1vxhc+i/He+rCKSX4jGxR3+6YrIyAl606GF/PKxg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:06:59 2025 by rpki-client