Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/34352e3233302e37322e302f32322d3234203d3e20323634383537.roa
File:                     34352e3233302e37322e302f32322d3234203d3e20323634383537.roa (raw, json)
Hash identifier:          U/jV+QAuwQIfcahuDyFrI+UOB2KZ2C8fgBLwt+9lfTs=
Subject key identifier:   DE:96:58:C6:48:CC:55:F7:F8:3F:26:36:9D:67:02:78:F3:09:30:39
Certificate issuer:       /CN=3A400B3A5D53E4EA3825ED69A583478D86023E84
Certificate serial:       1698147F3B732FC6938F3BFE7797971FB1CBB46D
Authority key identifier: 3A:40:0B:3A:5D:53:E4:EA:38:25:ED:69:A5:83:47:8D:86:02:3E:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/34352e3233302e37322e302f32322d3234203d3e20323634383537.roa
Signing time:             Fri 21 Mar 2025 11:12:43 +0000
ROA not before:           Fri 21 Mar 2025 11:07:43 +0000
ROA not after:            Fri 20 Mar 2026 11:12:43 +0000
asID:                     264857
IP address blocks:        45.230.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:98:14:7f:3b:73:2f:c6:93:8f:3b:fe:77:97:97:1f:b1:cb:b4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A400B3A5D53E4EA3825ED69A583478D86023E84
        Validity
            Not Before: Mar 21 11:07:43 2025 GMT
            Not After : Mar 20 11:12:43 2026 GMT
        Subject: CN=DE9658C648CC55F7F83F26369D670278F3093039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cb:e5:69:ec:3e:27:11:ef:f6:e8:28:ae:9b:
                    55:e9:89:61:d3:22:2a:ba:4c:34:9a:3a:6e:41:f8:
                    9c:84:ef:f5:d4:35:6c:52:14:02:20:84:ca:80:a1:
                    34:90:68:20:df:73:5c:9d:51:3c:65:ac:7a:c5:4f:
                    d5:b2:0e:19:4d:17:08:e2:37:20:e5:ad:d7:83:c6:
                    bd:c3:97:cc:5e:5c:6a:b4:c7:66:be:ee:53:52:93:
                    af:99:48:37:3a:10:03:9b:3d:b2:c0:6c:60:87:86:
                    7a:5e:b5:78:a5:7e:a5:cb:5b:29:72:1b:1c:12:d5:
                    42:fa:19:30:7c:1c:29:e4:51:26:e2:d9:47:b4:42:
                    99:c9:7b:0c:63:d8:6c:07:6e:b4:a7:14:dd:1c:4c:
                    9c:09:4c:c3:40:ee:83:c3:aa:d2:0f:3e:ba:96:79:
                    6e:b8:17:2b:0e:ec:dc:e8:24:e6:28:6d:92:0f:0a:
                    b6:bf:db:ae:83:ce:c1:bd:21:69:7a:44:2d:c4:e4:
                    63:fc:83:8e:70:72:63:da:81:3d:0c:76:78:8e:8d:
                    f2:83:ea:46:a1:c0:e4:c8:7f:a0:5d:65:f3:0b:d9:
                    d9:a8:69:bc:df:7c:6b:44:a0:b8:49:6d:2b:d5:f7:
                    a6:7b:00:a0:ad:b3:23:07:7a:83:c9:10:c1:67:fd:
                    23:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:96:58:C6:48:CC:55:F7:F8:3F:26:36:9D:67:02:78:F3:09:30:39
            X509v3 Authority Key Identifier:
                keyid:3A:40:0B:3A:5D:53:E4:EA:38:25:ED:69:A5:83:47:8D:86:02:3E:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/34352e3233302e37322e302f32322d3234203d3e20323634383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:2b:cb:07:ea:6c:c7:a4:4e:20:42:d8:a7:f0:be:55:79:19:
         52:aa:94:a6:74:6f:df:83:b6:81:44:ab:6a:64:37:e2:1d:ef:
         f6:4a:09:38:cd:7a:af:51:0a:f2:58:16:15:46:6d:b2:cd:b5:
         a6:0c:8b:24:f0:2c:50:bd:b6:9c:d7:f6:75:c4:ba:16:95:98:
         7c:57:67:ce:f0:86:ff:fa:42:86:b2:35:01:c6:ee:24:c9:62:
         af:29:08:28:c1:f8:b7:58:36:b7:48:d7:78:6a:9e:1a:6a:ef:
         2d:d4:a5:78:bf:11:e9:f9:26:fe:a9:a6:eb:1b:85:81:9a:2d:
         5f:df:13:ea:a2:51:e4:b2:f6:83:e4:be:f8:ab:70:28:16:02:
         3a:90:d6:d1:6b:23:fd:a0:d9:26:28:01:80:87:ba:f0:ed:9b:
         61:91:92:3e:eb:43:f9:2a:89:58:54:eb:29:fc:56:95:9d:ef:
         07:05:3e:ea:3d:3e:77:8b:26:b7:8a:d5:0e:42:62:9c:7e:4a:
         5b:cc:11:cc:f6:cb:99:7f:6e:f4:a4:3e:f0:76:c0:9e:e7:23:
         ad:3e:a9:46:40:4a:0b:b6:8c:e7:e2:2b:e3:2d:08:3a:86:56:
         e7:77:0b:3a:58:63:92:6e:36:0c:e0:e5:32:4d:6b:8b:0e:7c:
         14:f8:df:50
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFpgUfztzL8aTjzv+d5eXH7HLtG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E0MDBCM0E1RDUzRTRFQTM4MjVFRDY5QTU4MzQ3OEQ4
NjAyM0U4NDAeFw0yNTAzMjExMTA3NDNaFw0yNjAzMjAxMTEyNDNaMDMxMTAvBgNV
BAMTKERFOTY1OEM2NDhDQzU1RjdGODNGMjYzNjlENjcwMjc4RjMwOTMwMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCny+Vp7D4nEe/26Cium1XpiWHT
Iiq6TDSaOm5B+JyE7/XUNWxSFAIghMqAoTSQaCDfc1ydUTxlrHrFT9WyDhlNFwji
NyDlrdeDxr3Dl8xeXGq0x2a+7lNSk6+ZSDc6EAObPbLAbGCHhnpetXilfqXLWyly
GxwS1UL6GTB8HCnkUSbi2Ue0QpnJewxj2GwHbrSnFN0cTJwJTMNA7oPDqtIPPrqW
eW64FysO7NzoJOYobZIPCra/266DzsG9IWl6RC3E5GP8g45wcmPagT0MdniOjfKD
6kahwOTIf6BdZfML2dmoabzffGtEoLhJbSvV96Z7AKCtsyMHeoPJEMFn/SPfAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU3pZYxkjMVff4PyY2nWcCePMJMDkwHwYDVR0j
BBgwFoAUOkALOl1T5Oo4Je1ppYNHjYYCPoQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQzQ5RTE0RDNDMDRDMEQ4RDI1MkQwMEY0RUQ3RjNCNEI5
N0RFQzlGRkQwMDgwRjM0QTZBRTJFRjM2MERFRjI5LzAvM0E0MDBCM0E1RDUzRTRF
QTM4MjVFRDY5QTU4MzQ3OEQ4NjAyM0U4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQTQwMEIzQTVENTNFNEVBMzgy
NUVENjlBNTgzNDc4RDg2MDIzRTg0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUM0OUUxNEQzQzA0QzBEOEQyNTJEMDBGNEVEN0YzQjRCOTdERUM5RkZE
MDA4MEYzNEE2QUUyRUYzNjBERUYyOS8wLzM0MzUyZTMyMzMzMDJlMzczMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNDM4MzUzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3mSDAN
BgkqhkiG9w0BAQsFAAOCAQEAiCvLB+psx6ROIELYp/C+VXkZUqqUpnRv34O2gUSr
amQ34h3v9koJOM16r1EK8lgWFUZtss21pgyLJPAsUL22nNf2dcS6FpWYfFdnzvCG
//pChrI1AcbuJMlirykIKMH4t1g2t0jXeGqeGmrvLdSleL8R6fkm/qmm6xuFgZot
X98T6qJR5LL2g+S++KtwKBYCOpDW0Wsj/aDZJigBgIe68O2bYZGSPutD+SqJWFTr
KfxWlZ3vBwU+6j0+d4smt4rVDkJinH5KW8wRzPbLmX9u9KQ+8HbAnucjrT6pRkBK
C7aM5+Ir4y0IOoZW53cLOlhjkm42DODlMk1riw58FPjfUA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:41:01 2025 by rpki-client