Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/3136382e3232372e32312e302f32342d3234203d3e20323635373830.roa
File:                     3136382e3232372e32312e302f32342d3234203d3e20323635373830.roa (raw, json)
Hash identifier:          BA2yhalZUb+zdzEPBKr7vIJI1jMpouDHxeNKzx1tAdw=
Subject key identifier:   98:DB:22:42:A2:AA:FA:77:82:7C:80:DB:CC:0A:F9:E8:58:55:BB:15
Certificate issuer:       /CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
Certificate serial:       24DCE2CEEDEC2E182D4001E243CBCEDD620FB309
Authority key identifier: 45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/3136382e3232372e32312e302f32342d3234203d3e20323635373830.roa
Signing time:             Tue 04 Feb 2025 19:57:50 +0000
ROA not before:           Tue 04 Feb 2025 19:52:50 +0000
ROA not after:            Tue 03 Feb 2026 19:57:50 +0000
asID:                     265780
IP address blocks:        168.227.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 14:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:dc:e2:ce:ed:ec:2e:18:2d:40:01:e2:43:cb:ce:dd:62:0f:b3:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
        Validity
            Not Before: Feb  4 19:52:50 2025 GMT
            Not After : Feb  3 19:57:50 2026 GMT
        Subject: CN=98DB2242A2AAFA77827C80DBCC0AF9E85855BB15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:23:2b:c8:40:1c:75:a1:71:13:d9:6f:05:8c:
                    87:21:6c:21:54:6c:79:56:74:b9:a9:f7:fc:e7:63:
                    72:4c:00:70:6e:bf:7c:38:0d:58:76:a6:97:ac:92:
                    e1:ac:77:83:71:bc:63:40:c5:4b:36:c6:f5:b8:9e:
                    81:6f:d7:98:e4:9e:32:59:24:71:19:80:e2:53:44:
                    e4:aa:87:77:d2:17:7c:84:d9:95:c0:3f:b3:9a:1f:
                    a2:a4:72:18:3d:97:2e:2c:21:f5:1e:7b:f9:4d:72:
                    18:c7:35:fe:8d:fe:89:0b:bd:4e:ce:04:12:36:b9:
                    19:86:7b:0e:b2:2f:45:e1:bd:ef:88:27:34:d1:33:
                    5a:1e:16:19:ea:8c:bc:ba:d1:1b:f6:cd:c7:a1:e3:
                    a2:c7:26:71:3f:7a:cb:da:b8:57:7a:dc:ec:92:32:
                    24:11:48:56:c2:52:85:17:fe:45:6a:ad:53:d7:e3:
                    c0:23:43:7e:20:d1:89:00:20:2f:82:10:9e:c9:b6:
                    f0:34:a7:45:a4:1b:cc:ef:a1:d0:1a:d0:db:f2:05:
                    d1:e7:d4:76:ad:0e:26:2c:48:2c:44:91:d4:19:ae:
                    39:3c:11:40:97:40:a9:a6:ad:5f:d8:70:9a:49:65:
                    43:0b:34:11:95:20:39:7e:b6:0e:5b:17:a4:12:52:
                    64:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DB:22:42:A2:AA:FA:77:82:7C:80:DB:CC:0A:F9:E8:58:55:BB:15
            X509v3 Authority Key Identifier:
                keyid:45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/3136382e3232372e32312e302f32342d3234203d3e20323635373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:a7:bf:6b:85:be:cc:0e:2f:36:43:43:e7:aa:18:96:0c:6e:
         33:b5:4a:c9:d0:0c:7d:2e:7e:9e:34:50:ff:7b:ec:a0:68:98:
         06:c2:9c:db:31:4b:59:a3:0a:6e:e3:eb:2f:65:f0:a8:aa:4a:
         67:34:6d:32:62:4f:08:cf:0a:3c:43:97:7b:19:d9:35:b0:db:
         5e:a1:e7:7b:c2:05:ca:ed:e7:d2:67:14:7e:dc:dd:0d:1c:1a:
         d1:8a:7f:af:17:9b:50:3e:c3:bd:7b:4d:15:48:06:ba:d8:ae:
         9a:6d:97:95:5b:8b:73:2f:5a:b1:6e:7d:b2:21:cf:74:a0:91:
         64:36:7a:f9:53:0d:c4:3d:b1:ef:ae:c8:1a:4b:1b:48:1e:98:
         c0:1a:a1:9b:5a:62:19:43:c2:c2:e5:dc:37:f4:c9:a0:ac:95:
         c5:04:8b:a5:cb:65:88:54:98:b4:ee:c4:a8:2a:22:89:e4:fd:
         6d:30:42:7a:61:9a:c7:66:97:4e:69:5f:2a:2d:32:e8:88:09:
         7f:c3:74:e7:da:41:26:8f:1a:d8:8e:bb:2a:a4:07:67:9a:ad:
         84:b1:fe:e1:8b:00:4c:8f:d6:c7:64:10:57:7a:17:d5:08:e2:
         ef:fe:f4:29:8b:14:69:72:c7:d7:78:50:10:d8:24:7d:80:f3:
         8b:97:6a:ce
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJNzizu3sLhgtQAHiQ8vO3WIPswkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVFMDFCN0I5Qjg3NkFFMUYwQzAxNTA1OTY5ODg4REIw
NUY4NkMzMjAeFw0yNTAyMDQxOTUyNTBaFw0yNjAyMDMxOTU3NTBaMDMxMTAvBgNV
BAMTKDk4REIyMjQyQTJBQUZBNzc4MjdDODBEQkNDMEFGOUU4NTg1NUJCMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyIyvIQBx1oXET2W8FjIchbCFU
bHlWdLmp9/znY3JMAHBuv3w4DVh2ppeskuGsd4NxvGNAxUs2xvW4noFv15jknjJZ
JHEZgOJTROSqh3fSF3yE2ZXAP7OaH6Kkchg9ly4sIfUee/lNchjHNf6N/okLvU7O
BBI2uRmGew6yL0Xhve+IJzTRM1oeFhnqjLy60Rv2zceh46LHJnE/esvauFd63OyS
MiQRSFbCUoUX/kVqrVPX48AjQ34g0YkAIC+CEJ7JtvA0p0WkG8zvodAa0NvyBdHn
1HatDiYsSCxEkdQZrjk8EUCXQKmmrV/YcJpJZUMLNBGVIDl+tg5bF6QSUmRJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUmNsiQqKq+neCfIDbzAr56FhVuxUwHwYDVR0j
BBgwFoAUReAbe5uHauHwwBUFlpiI2wX4bDIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRUY0QzM5QTU1ODU0NEFFNTRDQzcxREJBMkFBODBCMzZC
RkJFMkNBNUJGNEYwREI5ODIzRDJBQjZCNzQ3RTYzLzAvNDVFMDFCN0I5Qjg3NkFF
MUYwQzAxNTA1OTY5ODg4REIwNUY4NkMzMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NUUwMUI3QjlCODc2QUUxRjBD
MDE1MDU5Njk4ODhEQjA1Rjg2QzMyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUVGNEMzOUE1NTg1NDRBRTU0Q0M3MURCQTJBQTgwQjM2QkZCRTJDQTVC
RjRGMERCOTgyM0QyQUI2Qjc0N0U2My8wLzMxMzYzODJlMzIzMjM3MmUzMjMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzczODMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOMV
MA0GCSqGSIb3DQEBCwUAA4IBAQAdp79rhb7MDi82Q0PnqhiWDG4ztUrJ0Ax9Ln6e
NFD/e+ygaJgGwpzbMUtZowpu4+svZfCoqkpnNG0yYk8Izwo8Q5d7Gdk1sNteoed7
wgXK7efSZxR+3N0NHBrRin+vF5tQPsO9e00VSAa62K6abZeVW4tzL1qxbn2yIc90
oJFkNnr5Uw3EPbHvrsgaSxtIHpjAGqGbWmIZQ8LC5dw39MmgrJXFBIuly2WIVJi0
7sSoKiKJ5P1tMEJ6YZrHZpdOaV8qLTLoiAl/w3Tn2kEmjxrYjrsqpAdnmq2Esf7h
iwBMj9bHZBBXehfVCOLv/vQpixRpcsfXeFAQ2CR9gPOLl2rO
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:52:32 2025 by rpki-client