Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233322e3130342e302f32322d3234203d3e203237383433.roa
File:                     34352e3233322e3130342e302f32322d3234203d3e203237383433.roa (raw, json)
Hash identifier:          xHjdkQUddqPQSM74CbinXmFmhOJ496ayl8gRV6CkTeg=
Subject key identifier:   6F:3A:6C:5B:9D:FF:76:6E:E5:7B:AF:36:41:26:7D:E3:E2:DC:DD:41
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       67DB1F08110E7E529C35E86FD76F17ABB91A7132
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233322e3130342e302f32322d3234203d3e203237383433.roa
Signing time:             Tue 04 Feb 2025 18:06:04 +0000
ROA not before:           Tue 04 Feb 2025 18:01:04 +0000
ROA not after:            Tue 03 Feb 2026 18:06:04 +0000
asID:                     27843
IP address blocks:        45.232.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 03:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:db:1f:08:11:0e:7e:52:9c:35:e8:6f:d7:6f:17:ab:b9:1a:71:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Feb  4 18:01:04 2025 GMT
            Not After : Feb  3 18:06:04 2026 GMT
        Subject: CN=6F3A6C5B9DFF766EE57BAF3641267DE3E2DCDD41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2a:d6:26:1b:6d:7c:a6:30:b9:ba:eb:82:b0:
                    3d:84:1a:79:a3:41:e7:c1:f3:9c:a8:be:18:70:f3:
                    ed:ac:2b:1f:e9:8f:62:d0:57:65:96:30:88:26:f2:
                    bb:c2:fb:cd:6c:fd:ef:bf:4d:49:f9:5f:d2:27:d7:
                    24:b2:e2:e5:ce:eb:b8:25:2e:04:b8:ca:4c:77:45:
                    84:c8:b4:53:7d:cf:44:08:24:79:5d:70:d7:12:12:
                    98:84:f6:03:99:e9:32:8d:62:fe:7a:f0:68:8c:c6:
                    38:50:61:55:60:6c:39:5b:ec:f6:74:87:81:98:9e:
                    b4:0c:57:fc:3d:59:d3:cc:6a:76:ae:84:ad:00:67:
                    28:e5:91:1c:fe:e3:1d:a6:7e:c4:c0:b6:bf:61:07:
                    51:ff:6b:d7:a6:c5:9e:21:d7:25:24:e9:b3:9f:57:
                    78:b4:8f:9f:ed:e5:70:ab:7d:7c:84:cf:1d:bb:64:
                    43:60:1f:64:5f:de:56:9c:9c:43:af:05:ec:2c:24:
                    2e:eb:d3:03:82:9c:94:01:99:c1:71:88:0f:28:3e:
                    3a:df:ae:b2:02:51:93:ff:0c:b4:97:a0:3b:8a:e4:
                    40:0e:e2:41:bc:23:05:a7:77:fa:85:f0:a3:ed:3f:
                    2f:2b:d3:2e:f9:4d:54:50:0a:45:a9:35:d2:0f:6b:
                    11:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3A:6C:5B:9D:FF:76:6E:E5:7B:AF:36:41:26:7D:E3:E2:DC:DD:41
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233322e3130342e302f32322d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:e6:83:30:8e:c7:a9:fb:48:18:fb:87:35:83:31:26:f0:72:
         a2:92:0a:7e:50:d3:e0:ee:28:3c:c5:32:9a:d6:6e:5e:78:2d:
         82:2c:49:cd:79:8a:f4:41:58:22:19:7b:83:a7:b9:3c:20:b8:
         6c:c4:b3:5f:88:30:a1:8f:81:fa:eb:f5:3b:84:62:30:ff:73:
         ba:82:b1:7a:fa:67:c1:98:77:e9:c5:d5:b1:16:42:c2:f7:6d:
         d3:29:f9:20:1d:4a:7d:c7:2f:90:ce:17:ad:e4:77:3b:bd:74:
         48:aa:98:a2:54:76:21:27:4f:0e:c9:14:79:8e:b5:94:0d:4f:
         3e:f4:27:04:0a:99:81:31:80:6d:d6:f5:4f:ca:35:ea:3f:01:
         3d:c5:68:e3:66:a8:7e:8c:63:e2:58:2f:0c:c2:a3:0a:a3:86:
         9b:64:17:3d:13:e0:f3:d1:94:3e:1a:1d:a9:5f:0a:5e:d1:24:
         0f:9e:a8:2f:90:77:4e:66:4d:74:4a:8f:4a:73:5b:f4:b1:65:
         b6:9b:91:ad:11:13:b2:0f:4d:f8:55:4d:b7:1c:5b:69:d0:eb:
         5b:55:68:4c:53:77:74:18:e2:1f:f8:9e:23:f0:47:13:5b:5f:
         e0:88:c1:38:bf:58:80:07:65:f8:20:be:0a:25:93:16:b1:23:
         b8:77:8a:c8
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZ9sfCBEOflKcNehv128Xq7kacTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUYwOEQzOEQ0NTcxQzA5QTgzQjQ1QUNGRDEwQUVCNzgy
NkNFOEY4NDAeFw0yNTAyMDQxODAxMDRaFw0yNjAyMDMxODA2MDRaMDMxMTAvBgNV
BAMTKDZGM0E2QzVCOURGRjc2NkVFNTdCQUYzNjQxMjY3REUzRTJEQ0RENDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAKtYmG218pjC5uuuCsD2EGnmj
QefB85yovhhw8+2sKx/pj2LQV2WWMIgm8rvC+81s/e+/TUn5X9In1ySy4uXO67gl
LgS4ykx3RYTItFN9z0QIJHldcNcSEpiE9gOZ6TKNYv568GiMxjhQYVVgbDlb7PZ0
h4GYnrQMV/w9WdPManauhK0AZyjlkRz+4x2mfsTAtr9hB1H/a9emxZ4h1yUk6bOf
V3i0j5/t5XCrfXyEzx27ZENgH2Rf3lacnEOvBewsJC7r0wOCnJQBmcFxiA8oPjrf
rrICUZP/DLSXoDuK5EAO4kG8IwWnd/qF8KPtPy8r0y75TVRQCkWpNdIPaxH9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUbzpsW53/dm7le682QSZ94+Lc3UEwHwYDVR0j
BBgwFoAUnwjTjUVxwJqDtFrP0QrreCbOj4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMTZFOEYxMDMxNDZCMjg1MDMzNTAyM0E3MEE2RDM5ODc0
NzY2MzY4REJEQTVGMDQ4RDU1OTcyQjk4RkQ4MzY3LzAvOUYwOEQzOEQ0NTcxQzA5
QTgzQjQ1QUNGRDEwQUVCNzgyNkNFOEY4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjA4RDM4RDQ1NzFDMDlBODNC
NDVBQ0ZEMTBBRUI3ODI2Q0U4Rjg0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTE2RThGMTAzMTQ2QjI4NTAzMzUwMjNBNzBBNkQzOTg3NDc2NjM2OERC
REE1RjA0OEQ1NTk3MkI5OEZEODM2Ny8wLzM0MzUyZTMyMzMzMjJlMzEzMDM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzM4MzQzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3oaDAN
BgkqhkiG9w0BAQsFAAOCAQEAc+aDMI7HqftIGPuHNYMxJvByopIKflDT4O4oPMUy
mtZuXngtgixJzXmK9EFYIhl7g6e5PCC4bMSzX4gwoY+B+uv1O4RiMP9zuoKxevpn
wZh36cXVsRZCwvdt0yn5IB1KfccvkM4XreR3O710SKqYolR2ISdPDskUeY61lA1P
PvQnBAqZgTGAbdb1T8o16j8BPcVo42aofoxj4lgvDMKjCqOGm2QXPRPg89GUPhod
qV8KXtEkD56oL5B3TmZNdEqPSnNb9LFltpuRrRETsg9N+FVNtxxbadDrW1VoTFN3
dBjiH/ieI/BHE1tf4IjBOL9YgAdl+CC+CiWTFrEjuHeKyA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:39:52 2025 by rpki-client