Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/34352e3137342e37362e302f32322d3234203d3e203238343331.roa
File:                     34352e3137342e37362e302f32322d3234203d3e203238343331.roa (raw, json)
Hash identifier:          gWstmDAPSoA4Z2I1rP8wDDYJiXTUEtjwWLNd2cqblMw=
Subject key identifier:   1D:7F:C6:88:5B:74:94:AB:A8:76:BE:39:62:C5:22:9A:85:C0:85:55
Certificate issuer:       /CN=EB0BD38ABAB80DF9290FB741AFACC631740FA7E9
Certificate serial:       6FB85E9765343A09E4F241C23289BB5255D4CE76
Authority key identifier: EB:0B:D3:8A:BA:B8:0D:F9:29:0F:B7:41:AF:AC:C6:31:74:0F:A7:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/34352e3137342e37362e302f32322d3234203d3e203238343331.roa
Signing time:             Tue 04 Feb 2025 18:27:24 +0000
ROA not before:           Tue 04 Feb 2025 18:22:24 +0000
ROA not after:            Tue 03 Feb 2026 18:27:24 +0000
asID:                     28431
IP address blocks:        45.174.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b8:5e:97:65:34:3a:09:e4:f2:41:c2:32:89:bb:52:55:d4:ce:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB0BD38ABAB80DF9290FB741AFACC631740FA7E9
        Validity
            Not Before: Feb  4 18:22:24 2025 GMT
            Not After : Feb  3 18:27:24 2026 GMT
        Subject: CN=1D7FC6885B7494ABA876BE3962C5229A85C08555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1b:fb:e4:a9:b9:ae:3b:73:2d:a6:d5:a9:66:
                    ae:d7:77:f0:e6:31:5e:b9:ab:41:11:f7:63:b1:56:
                    d1:c3:2f:8b:0e:d3:6e:d4:5a:1e:c6:6f:40:04:b5:
                    d6:66:d4:dd:a1:ee:58:34:4a:5b:ea:6f:ce:c6:d4:
                    7d:38:3d:4e:d5:11:bb:0a:fb:5b:d7:cd:8c:f4:17:
                    c9:e2:f4:4b:35:0f:ff:d4:22:ee:12:bd:02:4a:b5:
                    05:6b:6a:a2:3c:2f:d4:e1:7f:6c:f2:5b:8a:27:3d:
                    bc:8f:3c:bf:6a:3a:6e:8f:30:f3:ad:04:3d:01:5a:
                    ac:d6:73:92:46:c3:1a:8a:a6:a1:eb:69:ae:92:5f:
                    67:0e:cb:a9:d2:de:41:89:45:47:92:5e:f0:90:3d:
                    23:79:ee:a2:ea:96:58:93:24:eb:1a:55:f1:71:6c:
                    06:87:c6:c3:8e:52:67:ee:3e:04:d5:c5:ec:5f:84:
                    9d:b4:6f:3a:d3:cd:a1:b2:e0:f1:fc:b4:e4:23:08:
                    ab:8a:f9:bc:c8:5d:87:05:1c:04:e2:66:44:84:2f:
                    ab:46:cb:2c:9a:98:b0:eb:24:73:8d:e2:98:81:ba:
                    a6:3b:e6:61:91:6a:2e:b4:1f:36:a6:89:83:7e:9d:
                    ce:e4:4d:9c:ba:aa:ae:db:a0:6d:96:cd:bc:17:3e:
                    49:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7F:C6:88:5B:74:94:AB:A8:76:BE:39:62:C5:22:9A:85:C0:85:55
            X509v3 Authority Key Identifier:
                keyid:EB:0B:D3:8A:BA:B8:0D:F9:29:0F:B7:41:AF:AC:C6:31:74:0F:A7:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB0BD38ABAB80DF9290FB741AFACC631740FA7E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A144353D5BF7867B26D74703FA6AAB5E9A2033A759CD6D345E7F84FDE5D3A7B1/0/34352e3137342e37362e302f32322d3234203d3e203238343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:1a:e9:46:1a:1d:46:c2:36:a3:36:32:fa:81:f7:7f:09:94:
         2f:0c:4f:bc:de:29:03:11:65:e4:22:97:0e:96:2b:5d:b8:5e:
         2a:1b:8b:98:4b:f2:54:0d:90:f1:da:07:46:10:4e:2a:b7:ea:
         ec:81:e6:53:94:cf:34:73:33:36:88:67:59:b1:7d:c9:97:a2:
         33:52:e1:51:e5:cc:44:5b:c1:c1:79:48:b8:ec:db:20:89:f6:
         7b:d1:46:6a:7c:99:01:a0:ea:d4:62:eb:d1:3a:e0:5f:67:28:
         7b:ae:73:aa:7e:9a:b0:07:8d:ca:23:8c:78:85:ef:32:0e:11:
         2c:22:a5:89:d8:7d:09:7f:7c:97:5b:48:e8:08:10:76:71:5a:
         de:79:fb:af:cd:25:68:83:86:99:cb:fe:a2:69:fc:5c:8a:ae:
         6d:84:95:ec:1e:36:5f:10:a1:8c:04:c5:64:ee:30:a6:1b:ce:
         02:94:7d:2a:f4:19:3e:76:52:7d:a4:40:8f:f8:c6:f8:32:46:
         a0:36:b5:2c:04:9c:81:97:50:ba:f6:47:4d:5a:e2:94:e1:b8:
         54:d1:85:4c:03:9d:a3:93:ec:b7:47:a4:da:25:1e:74:21:ef:
         15:1a:67:b5:7d:8c:e6:e3:ca:99:49:71:cd:82:ba:94:9b:60:
         8b:42:4e:ae
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUb7hel2U0Ognk8kHCMom7UlXUznYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUIwQkQzOEFCQUI4MERGOTI5MEZCNzQxQUZBQ0M2MzE3
NDBGQTdFOTAeFw0yNTAyMDQxODIyMjRaFw0yNjAyMDMxODI3MjRaMDMxMTAvBgNV
BAMTKDFEN0ZDNjg4NUI3NDk0QUJBODc2QkUzOTYyQzUyMjlBODVDMDg1NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeG/vkqbmuO3MtptWpZq7Xd/Dm
MV65q0ER92OxVtHDL4sO027UWh7Gb0AEtdZm1N2h7lg0Slvqb87G1H04PU7VEbsK
+1vXzYz0F8ni9Es1D//UIu4SvQJKtQVraqI8L9Thf2zyW4onPbyPPL9qOm6PMPOt
BD0BWqzWc5JGwxqKpqHraa6SX2cOy6nS3kGJRUeSXvCQPSN57qLqlliTJOsaVfFx
bAaHxsOOUmfuPgTVxexfhJ20bzrTzaGy4PH8tOQjCKuK+bzIXYcFHATiZkSEL6tG
yyyamLDrJHON4piBuqY75mGRai60HzamiYN+nc7kTZy6qq7boG2WzbwXPkmfAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUHX/GiFt0lKuodr45YsUimoXAhVUwHwYDVR0j
BBgwFoAU6wvTirq4DfkpD7dBr6zGMXQPp+kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMTQ0MzUzRDVCRjc4NjdCMjZENzQ3MDNGQTZBQUI1RTlB
MjAzM0E3NTlDRDZEMzQ1RTdGODRGREU1RDNBN0IxLzAvRUIwQkQzOEFCQUI4MERG
OTI5MEZCNzQxQUZBQ0M2MzE3NDBGQTdFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQjBCRDM4QUJBQjgwREY5Mjkw
RkI3NDFBRkFDQzYzMTc0MEZBN0U5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTE0NDM1M0Q1QkY3ODY3QjI2RDc0NzAzRkE2QUFCNUU5QTIwMzNBNzU5
Q0Q2RDM0NUU3Rjg0RkRFNUQzQTdCMS8wLzM0MzUyZTMxMzczNDJlMzczNjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzgzNDMzMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItrkwwDQYJ
KoZIhvcNAQELBQADggEBABga6UYaHUbCNqM2MvqB938JlC8MT7zeKQMRZeQilw6W
K124Xiobi5hL8lQNkPHaB0YQTiq36uyB5lOUzzRzMzaIZ1mxfcmXojNS4VHlzERb
wcF5SLjs2yCJ9nvRRmp8mQGg6tRi69E64F9nKHuuc6p+mrAHjcojjHiF7zIOESwi
pYnYfQl/fJdbSOgIEHZxWt55+6/NJWiDhpnL/qJp/FyKrm2EleweNl8QoYwExWTu
MKYbzgKUfSr0GT52Un2kQI/4xvgyRqA2tSwEnIGXULr2R01a4pThuFTRhUwDnaOT
7LdHpNolHnQh7xUaZ7V9jObjyplJcc2CupSbYItCTq4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:12:36 2025 by rpki-client