Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138342e302f32342d3234203d3e20323635383531.roa
File:                     34352e3232352e3138342e302f32342d3234203d3e20323635383531.roa (raw, json)
Hash identifier:          4SNvI2lGeT6H6sIZ9Nny9tic2HGe8XS41PmGFlAFgFg=
Subject key identifier:   AB:E8:92:87:2F:72:F9:2A:91:A6:E4:00:57:88:39:44:78:57:75:E5
Certificate issuer:       /CN=A85589D4CB63F06CB0638FD83DC2356DDD2B6180
Certificate serial:       2C17004CA801CD4A9400C700BD846D8F94D1DD71
Authority key identifier: A8:55:89:D4:CB:63:F0:6C:B0:63:8F:D8:3D:C2:35:6D:DD:2B:61:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138342e302f32342d3234203d3e20323635383531.roa
Signing time:             Tue 04 Feb 2025 18:51:21 +0000
ROA not before:           Tue 04 Feb 2025 18:46:21 +0000
ROA not after:            Tue 03 Feb 2026 18:51:21 +0000
asID:                     265851
IP address blocks:        45.225.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:17:00:4c:a8:01:cd:4a:94:00:c7:00:bd:84:6d:8f:94:d1:dd:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A85589D4CB63F06CB0638FD83DC2356DDD2B6180
        Validity
            Not Before: Feb  4 18:46:21 2025 GMT
            Not After : Feb  3 18:51:21 2026 GMT
        Subject: CN=ABE892872F72F92A91A6E40057883944785775E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ac:e9:93:4e:b6:74:0a:59:32:9c:ed:12:64:
                    84:51:5c:1e:9e:43:63:c3:09:ac:21:1e:a7:0d:a5:
                    32:12:d6:77:28:54:3b:4e:8b:a4:77:f9:08:a8:43:
                    5b:32:ab:59:ca:0b:59:9c:d2:b9:da:b4:86:dd:ba:
                    92:26:b4:82:1d:f5:53:0e:3a:84:8c:53:e4:89:67:
                    6c:30:50:3d:78:f3:fb:96:ef:c2:43:cd:80:30:2d:
                    86:44:78:19:7c:26:da:c3:c8:4d:d0:9e:9a:60:0d:
                    65:56:14:b7:e9:fd:b5:18:fa:31:f8:6c:53:ea:b0:
                    ea:aa:36:92:52:07:62:1f:21:1d:c9:cc:b5:40:19:
                    4f:57:ec:db:96:6d:50:8e:2c:92:55:d8:21:7e:bc:
                    44:17:17:23:8f:b5:50:da:b7:cb:43:11:41:08:26:
                    4a:7c:8b:1f:4f:0d:d6:ff:5f:da:85:94:7a:04:6b:
                    69:f8:9b:7c:7c:f6:65:48:6d:85:2e:fb:ac:c1:73:
                    ca:6e:05:91:11:46:8f:92:fe:a5:a3:55:e6:02:ba:
                    24:ba:91:0a:39:a5:71:3c:f4:fb:cb:70:7c:64:3e:
                    ce:10:40:e7:96:de:dc:d0:3e:18:29:3c:d5:41:eb:
                    1c:91:f3:bb:74:f3:2b:00:ea:3a:8c:c9:9e:7d:74:
                    79:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E8:92:87:2F:72:F9:2A:91:A6:E4:00:57:88:39:44:78:57:75:E5
            X509v3 Authority Key Identifier:
                keyid:A8:55:89:D4:CB:63:F0:6C:B0:63:8F:D8:3D:C2:35:6D:DD:2B:61:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138342e302f32342d3234203d3e20323635383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:97:bb:c4:d1:99:15:78:03:06:45:8e:01:bc:86:b1:24:c1:
         14:6f:0b:b2:22:66:d3:c7:c8:1f:12:2d:6f:8b:af:21:01:28:
         55:d8:62:ad:ce:58:b2:80:9c:69:75:18:30:73:f2:01:70:6d:
         97:30:a5:e1:e5:a3:12:9d:63:d0:b0:45:64:66:33:8e:11:cb:
         a6:a7:40:a0:77:9f:43:58:57:df:69:ef:41:51:0d:62:f3:77:
         2e:6f:a3:07:21:07:de:01:3f:92:7a:50:3f:74:1b:d0:8b:4d:
         c0:8a:9f:8b:04:a4:75:4d:47:65:64:1a:a2:29:79:34:96:1a:
         ac:d9:a5:dd:15:75:cc:f9:44:df:c4:df:e1:5c:23:d1:e4:64:
         5a:1f:b1:e0:87:d9:58:40:8f:6e:91:67:7b:4f:98:61:5e:22:
         c7:8e:28:f5:74:3d:ea:b7:fa:64:b9:ae:c7:b7:0a:fc:16:43:
         00:98:80:78:b4:f1:c7:31:ed:39:60:97:dd:da:44:a2:94:99:
         8b:5b:16:0d:ce:e8:67:a0:cd:6f:64:89:4c:65:4a:ce:07:bd:
         a9:13:4b:0b:f9:60:ca:28:34:ee:d6:ec:3d:2c:26:61:cb:d7:
         9a:d9:18:e0:1b:f7:b9:03:1d:ba:64:e8:ae:f6:2c:31:21:22:
         04:63:f4:db
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIULBcATKgBzUqUAMcAvYRtj5TR3XEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTg1NTg5RDRDQjYzRjA2Q0IwNjM4RkQ4M0RDMjM1NkRE
RDJCNjE4MDAeFw0yNTAyMDQxODQ2MjFaFw0yNjAyMDMxODUxMjFaMDMxMTAvBgNV
BAMTKEFCRTg5Mjg3MkY3MkY5MkE5MUE2RTQwMDU3ODgzOTQ0Nzg1Nzc1RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7rOmTTrZ0ClkynO0SZIRRXB6e
Q2PDCawhHqcNpTIS1ncoVDtOi6R3+QioQ1syq1nKC1mc0rnatIbdupImtIId9VMO
OoSMU+SJZ2wwUD148/uW78JDzYAwLYZEeBl8JtrDyE3QnppgDWVWFLfp/bUY+jH4
bFPqsOqqNpJSB2IfIR3JzLVAGU9X7NuWbVCOLJJV2CF+vEQXFyOPtVDat8tDEUEI
Jkp8ix9PDdb/X9qFlHoEa2n4m3x89mVIbYUu+6zBc8puBZERRo+S/qWjVeYCuiS6
kQo5pXE89PvLcHxkPs4QQOeW3tzQPhgpPNVB6xyR87t08ysA6jqMyZ59dHlZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUq+iShy9y+SqRpuQAV4g5RHhXdeUwHwYDVR0j
BBgwFoAUqFWJ1Mtj8GywY4/YPcI1bd0rYYAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMUI3NzAwRTJGRTA3ODVCNEI2NTBGQjZCN0IxQjM1REU4
REFGQzkzQTMxODQxOEVGMTEyODAxODMyQ0RCQTczLzAvQTg1NTg5RDRDQjYzRjA2
Q0IwNjM4RkQ4M0RDMjM1NkRERDJCNjE4MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BODU1ODlENENCNjNGMDZDQjA2
MzhGRDgzREMyMzU2REREMkI2MTgwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTFCNzcwMEUyRkUwNzg1QjRCNjUwRkI2QjdCMUIzNURFOERBRkM5M0Ez
MTg0MThFRjExMjgwMTgzMkNEQkE3My8wLzM0MzUyZTMyMzIzNTJlMzEzODM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzgzNTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeG4
MA0GCSqGSIb3DQEBCwUAA4IBAQBbl7vE0ZkVeAMGRY4BvIaxJMEUbwuyImbTx8gf
Ei1vi68hAShV2GKtzliygJxpdRgwc/IBcG2XMKXh5aMSnWPQsEVkZjOOEcump0Cg
d59DWFffae9BUQ1i83cub6MHIQfeAT+SelA/dBvQi03Aip+LBKR1TUdlZBqiKXk0
lhqs2aXdFXXM+UTfxN/hXCPR5GRaH7Hgh9lYQI9ukWd7T5hhXiLHjij1dD3qt/pk
ua7Htwr8FkMAmIB4tPHHMe05YJfd2kSilJmLWxYNzuhnoM1vZIlMZUrOB72pE0sL
+WDKKDTu1uw9LCZhy9ea2RjgG/e5Ax26ZOiu9iwxISIEY/Tb
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:20:21 2025 by rpki-client