Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/34352e3232372e31362e302f32342d3234203d3e20323635383639.roa
File:                     34352e3232372e31362e302f32342d3234203d3e20323635383639.roa (raw, json)
Hash identifier:          cM2c+VvyDW6SEc8RCmch3HV3nRMkUtV/jN+f8Yrw+Jo=
Subject key identifier:   42:48:91:CD:1E:A7:70:B5:54:CD:08:95:5E:9C:FF:0A:09:87:3A:AD
Certificate issuer:       /CN=E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2
Certificate serial:       575A452437F9B0FB751CB8C0C02231AAE2745A53
Authority key identifier: E7:6D:7E:4B:B5:C0:67:85:FC:4F:DE:5D:20:63:A4:21:FC:05:10:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/34352e3232372e31362e302f32342d3234203d3e20323635383639.roa
Signing time:             Tue 04 Feb 2025 18:29:09 +0000
ROA not before:           Tue 04 Feb 2025 18:24:09 +0000
ROA not after:            Tue 03 Feb 2026 18:29:09 +0000
asID:                     265869
IP address blocks:        45.227.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5a:45:24:37:f9:b0:fb:75:1c:b8:c0:c0:22:31:aa:e2:74:5a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2
        Validity
            Not Before: Feb  4 18:24:09 2025 GMT
            Not After : Feb  3 18:29:09 2026 GMT
        Subject: CN=424891CD1EA770B554CD08955E9CFF0A09873AAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:93:f1:02:a9:58:de:4c:39:27:17:a1:aa:d5:
                    af:c5:63:9b:30:41:e0:6c:2d:06:c1:97:41:ff:97:
                    3f:6e:6c:80:56:12:23:33:5b:77:53:da:23:49:c6:
                    5c:09:ba:47:4a:e9:36:2a:ff:bb:3c:7b:b4:05:3f:
                    e6:0f:64:68:57:82:46:4a:fb:49:cb:2d:57:55:68:
                    ce:45:e5:ed:8c:36:4b:94:7c:2a:49:aa:53:2d:bf:
                    57:32:c7:61:8a:af:fe:f7:dc:20:f5:cd:ee:25:d1:
                    6c:5f:bc:05:7c:31:da:49:0d:94:b6:2f:05:b0:77:
                    58:f1:cd:1a:2f:7e:48:25:90:9b:90:31:45:ef:88:
                    8f:ea:b6:05:46:24:ed:ab:2d:5e:60:7f:fc:e0:b2:
                    62:bf:0f:e7:34:83:f8:df:c8:ca:9c:38:e3:07:68:
                    be:5b:24:88:e8:d6:56:67:fd:f2:e4:b5:53:2a:cb:
                    87:85:b1:5c:3d:d3:96:32:8e:dc:ac:e8:25:ee:7e:
                    16:92:ab:b9:27:46:74:4d:8a:2d:aa:bc:5f:37:2a:
                    bd:f2:d3:fa:87:34:7b:04:ff:f0:31:f8:af:d6:0a:
                    ef:06:dd:d6:7d:7e:54:f3:7c:f1:3b:d9:82:6f:59:
                    40:8a:33:1e:f2:4f:fc:b2:39:45:24:fd:a2:e3:c0:
                    78:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:48:91:CD:1E:A7:70:B5:54:CD:08:95:5E:9C:FF:0A:09:87:3A:AD
            X509v3 Authority Key Identifier:
                keyid:E7:6D:7E:4B:B5:C0:67:85:FC:4F:DE:5D:20:63:A4:21:FC:05:10:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/34352e3232372e31362e302f32342d3234203d3e20323635383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:2e:6b:93:89:1d:35:4d:0f:67:0a:3e:81:1b:5c:96:86:6f:
         19:cb:84:6f:56:fb:22:cf:9f:cc:82:08:02:92:4e:05:b7:61:
         66:61:0a:45:49:21:e2:2c:be:e9:4b:8d:5f:01:95:17:59:52:
         63:cc:3a:34:41:4b:c1:1a:b0:2f:b0:a5:17:85:37:1c:4c:c4:
         ad:4b:36:45:d5:2e:e4:a8:ca:1b:b3:dd:07:ec:d4:1e:ba:13:
         79:bd:a2:4b:a9:98:7c:31:bb:ac:be:a3:0e:70:e4:90:f5:77:
         24:1d:6c:91:fb:87:2c:d3:f2:5a:71:11:90:01:46:8d:a4:63:
         ca:00:11:a9:d4:ab:31:20:fd:73:e7:7f:d2:da:a0:ef:54:6f:
         6c:ce:97:76:65:f7:2c:b1:a4:41:a1:13:f6:0a:2d:38:80:40:
         56:4f:f1:99:dc:c6:5e:d6:3d:2d:b6:43:ed:2f:6b:2e:ef:69:
         21:1e:68:56:a9:d8:bf:6b:d2:86:24:da:ad:e5:60:c0:13:fc:
         9e:bf:96:75:8f:77:f6:72:43:cd:d8:4e:7d:2b:c8:63:72:53:
         81:3d:9e:08:a0:5a:07:97:06:3f:45:ad:4e:b6:c6:7f:d0:96:
         13:e6:06:81:b3:ab:b0:5e:9b:81:30:0b:40:d1:46:bc:0c:02:
         f7:f4:31:18
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUV1pFJDf5sPt1HLjAwCIxquJ0WlMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc2RDdFNEJCNUMwNjc4NUZDNEZERTVEMjA2M0E0MjFG
QzA1MTBFMjAeFw0yNTAyMDQxODI0MDlaFw0yNjAyMDMxODI5MDlaMDMxMTAvBgNV
BAMTKDQyNDg5MUNEMUVBNzcwQjU1NENEMDg5NTVFOUNGRjBBMDk4NzNBQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTk/ECqVjeTDknF6Gq1a/FY5sw
QeBsLQbBl0H/lz9ubIBWEiMzW3dT2iNJxlwJukdK6TYq/7s8e7QFP+YPZGhXgkZK
+0nLLVdVaM5F5e2MNkuUfCpJqlMtv1cyx2GKr/733CD1ze4l0WxfvAV8MdpJDZS2
LwWwd1jxzRovfkglkJuQMUXviI/qtgVGJO2rLV5gf/zgsmK/D+c0g/jfyMqcOOMH
aL5bJIjo1lZn/fLktVMqy4eFsVw905Yyjtys6CXufhaSq7knRnRNii2qvF83Kr3y
0/qHNHsE//Ax+K/WCu8G3dZ9flTzfPE72YJvWUCKMx7yT/yyOUUk/aLjwHgBAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUQkiRzR6ncLVUzQiVXpz/CgmHOq0wHwYDVR0j
BBgwFoAU521+S7XAZ4X8T95dIGOkIfwFEOIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQjdBNzI3QUM0QTYzOTBDNjVFMzcwNzU2NjBGNUEzNTg4
QTNEMTUzRTA0OEJBNEUwODFGMzM2RTcxREMxNDE2LzAvRTc2RDdFNEJCNUMwNjc4
NUZDNEZERTVEMjA2M0E0MjFGQzA1MTBFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNzZEN0U0QkI1QzA2Nzg1RkM0
RkRFNUQyMDYzQTQyMUZDMDUxMEUyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUI3QTcyN0FDNEE2MzkwQzY1RTM3MDc1NjYwRjVBMzU4OEEzRDE1M0Uw
NDhCQTRFMDgxRjMzNkU3MURDMTQxNi8wLzM0MzUyZTMyMzIzNzJlMzEzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNTM4MzYzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3jEDAN
BgkqhkiG9w0BAQsFAAOCAQEAgy5rk4kdNU0PZwo+gRtcloZvGcuEb1b7Is+fzIII
ApJOBbdhZmEKRUkh4iy+6UuNXwGVF1lSY8w6NEFLwRqwL7ClF4U3HEzErUs2RdUu
5KjKG7PdB+zUHroTeb2iS6mYfDG7rL6jDnDkkPV3JB1skfuHLNPyWnERkAFGjaRj
ygARqdSrMSD9c+d/0tqg71RvbM6XdmX3LLGkQaET9gotOIBAVk/xmdzGXtY9LbZD
7S9rLu9pIR5oVqnYv2vShiTareVgwBP8nr+WdY939nJDzdhOfSvIY3JTgT2eCKBa
B5cGP0WtTrbGf9CWE+YGgbOrsF6bgTALQNFGvAwC9/QxGA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:09 2025 by rpki-client