Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A11E26BB7B0180CF9D573D2F33932C14DAEB726C12A4FE5572059228BE377963/0/34352e3232392e342e302f32322d3234203d3e20323636363736.roa
File:                     34352e3232392e342e302f32322d3234203d3e20323636363736.roa (raw, json)
Hash identifier:          v9wqZl7vw0ft8vRYOmcVNGSjK/wTh3eYUpWmiYXVuZ0=
Subject key identifier:   30:DF:D1:D4:F9:2E:44:58:CF:4A:EE:2A:82:09:0D:64:A3:78:A2:5E
Certificate issuer:       /CN=938F00AB707A673E33DEB078154945BAC29E6E67
Certificate serial:       2BF84E3F314790C52FCDCD6C7D5ABE4610F78701
Authority key identifier: 93:8F:00:AB:70:7A:67:3E:33:DE:B0:78:15:49:45:BA:C2:9E:6E:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/938F00AB707A673E33DEB078154945BAC29E6E67.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A11E26BB7B0180CF9D573D2F33932C14DAEB726C12A4FE5572059228BE377963/0/34352e3232392e342e302f32322d3234203d3e20323636363736.roa
Signing time:             Tue 04 Feb 2025 18:36:56 +0000
ROA not before:           Tue 04 Feb 2025 18:31:56 +0000
ROA not after:            Tue 03 Feb 2026 18:36:56 +0000
asID:                     266676
IP address blocks:        45.229.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A11E26BB7B0180CF9D573D2F33932C14DAEB726C12A4FE5572059228BE377963/0/938F00AB707A673E33DEB078154945BAC29E6E67.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A11E26BB7B0180CF9D573D2F33932C14DAEB726C12A4FE5572059228BE377963/0/938F00AB707A673E33DEB078154945BAC29E6E67.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/938F00AB707A673E33DEB078154945BAC29E6E67.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f8:4e:3f:31:47:90:c5:2f:cd:cd:6c:7d:5a:be:46:10:f7:87:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938F00AB707A673E33DEB078154945BAC29E6E67
        Validity
            Not Before: Feb  4 18:31:56 2025 GMT
            Not After : Feb  3 18:36:56 2026 GMT
        Subject: CN=30DFD1D4F92E4458CF4AEE2A82090D64A378A25E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:67:ba:e0:ef:7a:6e:54:5f:62:9a:54:ba:94:
                    58:96:7c:16:da:c9:b2:24:c5:79:2b:ee:45:e9:81:
                    12:c2:3a:73:73:64:b0:82:ef:de:f5:1b:f4:6e:18:
                    a5:cb:dc:ff:3a:f8:03:f2:4a:70:fd:6c:1d:41:37:
                    47:43:ca:7f:02:bc:95:2b:10:1c:04:4e:60:4d:23:
                    34:65:cd:a7:fc:d5:ba:2b:3e:44:d7:76:27:35:4e:
                    1b:b2:ec:ca:8a:95:59:34:ad:24:c3:f1:77:d2:48:
                    3c:0a:23:d0:92:ad:49:40:4a:12:82:b4:f1:61:e8:
                    c7:de:1b:1a:d5:f5:b7:d6:e3:39:d1:fa:48:fc:a1:
                    0e:65:96:ca:c0:29:29:77:f4:b1:63:f6:ac:fc:a0:
                    7c:22:e0:e7:c0:50:a3:0c:72:1e:fb:f0:6b:0e:7f:
                    d4:e7:01:13:ad:34:6b:c6:1c:24:cc:2a:e6:87:ac:
                    b6:c1:fc:b1:fd:0f:e4:ed:39:0a:3e:b5:bf:3a:d6:
                    46:21:fe:1c:9e:62:8e:ae:06:60:47:62:59:72:82:
                    dd:c1:12:28:d4:b6:81:b2:ac:03:2e:b1:f8:7e:ea:
                    96:ac:02:a1:7a:dd:cf:7d:4c:b6:12:83:ef:8b:02:
                    07:20:0b:62:88:fa:7b:33:1b:78:d2:c7:a4:24:12:
                    bd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DF:D1:D4:F9:2E:44:58:CF:4A:EE:2A:82:09:0D:64:A3:78:A2:5E
            X509v3 Authority Key Identifier:
                keyid:93:8F:00:AB:70:7A:67:3E:33:DE:B0:78:15:49:45:BA:C2:9E:6E:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A11E26BB7B0180CF9D573D2F33932C14DAEB726C12A4FE5572059228BE377963/0/938F00AB707A673E33DEB078154945BAC29E6E67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/938F00AB707A673E33DEB078154945BAC29E6E67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A11E26BB7B0180CF9D573D2F33932C14DAEB726C12A4FE5572059228BE377963/0/34352e3232392e342e302f32322d3234203d3e20323636363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:c5:9d:61:ff:93:24:46:b5:59:c9:80:a9:da:71:9f:ff:f5:
         86:ab:8a:cc:be:e5:b4:fe:fd:f3:3c:ed:be:96:0d:33:5d:08:
         c0:0b:0a:02:ea:3f:a7:78:9d:ba:02:8c:19:10:0e:48:7d:88:
         db:15:52:5d:d3:3f:fd:26:1f:f6:f4:cd:dd:fa:a5:f6:7c:e3:
         77:ea:22:4a:9f:96:7a:c3:50:7d:79:57:62:41:c1:76:3f:28:
         46:b6:a8:fe:2b:26:5b:b1:ab:de:01:3d:06:38:43:4b:de:78:
         5f:1b:83:de:4e:17:7e:fd:3d:07:80:ed:19:f1:cd:27:11:12:
         70:8a:8f:aa:88:68:cc:a7:5a:cc:aa:ce:93:05:0b:01:0c:2d:
         f7:58:d4:24:61:2a:9b:a9:bb:5a:14:af:cb:c8:cd:3e:67:a0:
         9d:59:83:57:f8:04:da:db:56:4b:61:ea:f8:b4:7f:16:18:fc:
         0b:f9:50:63:97:17:cf:09:f7:79:e4:18:5b:fd:91:cc:9e:ba:
         a6:cb:bb:e0:c0:4a:96:a5:8b:7f:cd:d7:80:9e:fe:2a:bc:f6:
         c9:9f:30:1f:0a:a7:f9:55:5e:94:cc:81:b9:11:b9:cc:8c:d0:
         f2:0b:25:e8:1b:b0:94:45:cb:91:44:a2:81:24:2a:9e:5b:f7:
         76:ff:11:89
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUK/hOPzFHkMUvzc1sfVq+RhD3hwEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM4RjAwQUI3MDdBNjczRTMzREVCMDc4MTU0OTQ1QkFD
MjlFNkU2NzAeFw0yNTAyMDQxODMxNTZaFw0yNjAyMDMxODM2NTZaMDMxMTAvBgNV
BAMTKDMwREZEMUQ0RjkyRTQ0NThDRjRBRUUyQTgyMDkwRDY0QTM3OEEyNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiZ7rg73puVF9imlS6lFiWfBba
ybIkxXkr7kXpgRLCOnNzZLCC7971G/RuGKXL3P86+APySnD9bB1BN0dDyn8CvJUr
EBwETmBNIzRlzaf81borPkTXdic1Thuy7MqKlVk0rSTD8XfSSDwKI9CSrUlAShKC
tPFh6MfeGxrV9bfW4znR+kj8oQ5llsrAKSl39LFj9qz8oHwi4OfAUKMMch778GsO
f9TnAROtNGvGHCTMKuaHrLbB/LH9D+TtOQo+tb861kYh/hyeYo6uBmBHYllygt3B
EijUtoGyrAMusfh+6pasAqF63c99TLYSg++LAgcgC2KI+nszG3jSx6QkEr07AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUMN/R1PkuRFjPSu4qggkNZKN4ol4wHwYDVR0j
BBgwFoAUk48Aq3B6Zz4z3rB4FUlFusKebmcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMTFFMjZCQjdCMDE4MENGOUQ1NzNEMkYzMzkzMkMxNERB
RUI3MjZDMTJBNEZFNTU3MjA1OTIyOEJFMzc3OTYzLzAvOTM4RjAwQUI3MDdBNjcz
RTMzREVCMDc4MTU0OTQ1QkFDMjlFNkU2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MzhGMDBBQjcwN0E2NzNFMzNE
RUIwNzgxNTQ5NDVCQUMyOUU2RTY3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTExRTI2QkI3QjAxODBDRjlENTczRDJGMzM5MzJDMTREQUVCNzI2QzEy
QTRGRTU1NzIwNTkyMjhCRTM3Nzk2My8wLzM0MzUyZTMyMzIzOTJlMzQyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMjM2MzYzNjM3MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIt5QQwDQYJ
KoZIhvcNAQELBQADggEBAITFnWH/kyRGtVnJgKnacZ//9Yarisy+5bT+/fM87b6W
DTNdCMALCgLqP6d4nboCjBkQDkh9iNsVUl3TP/0mH/b0zd36pfZ843fqIkqflnrD
UH15V2JBwXY/KEa2qP4rJluxq94BPQY4Q0veeF8bg95OF379PQeA7RnxzScREnCK
j6qIaMynWsyqzpMFCwEMLfdY1CRhKpupu1oUr8vIzT5noJ1Zg1f4BNrbVkth6vi0
fxYY/Av5UGOXF88J93nkGFv9kcyeuqbLu+DASpali3/N14Ce/iq89smfMB8Kp/lV
XpTMgbkRucyM0PILJegbsJRFy5FEooEkKp5b93b/EYk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:18:25 2025 by rpki-client