Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/34352e3233392e37372e302f32342d3234203d3e20323633313537.roa
File:                     34352e3233392e37372e302f32342d3234203d3e20323633313537.roa (raw, json)
Hash identifier:          LsQ46a19VjA/5S1YsGHzn5KiTam4uSMceNQdZPTu454=
Subject key identifier:   F7:B3:74:F3:4A:E5:3C:E9:72:AE:20:19:0A:E6:52:FC:39:58:8C:8E
Certificate issuer:       /CN=DC06AA51EF6432276CF284539A2DF591490740C4
Certificate serial:       611E1DA9580A76DEDA266016C39A0E9A89EB1E2F
Authority key identifier: DC:06:AA:51:EF:64:32:27:6C:F2:84:53:9A:2D:F5:91:49:07:40:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/34352e3233392e37372e302f32342d3234203d3e20323633313537.roa
Signing time:             Tue 04 Feb 2025 18:07:13 +0000
ROA not before:           Tue 04 Feb 2025 18:02:13 +0000
ROA not after:            Tue 03 Feb 2026 18:07:13 +0000
asID:                     263157
IP address blocks:        45.239.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1e:1d:a9:58:0a:76:de:da:26:60:16:c3:9a:0e:9a:89:eb:1e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC06AA51EF6432276CF284539A2DF591490740C4
        Validity
            Not Before: Feb  4 18:02:13 2025 GMT
            Not After : Feb  3 18:07:13 2026 GMT
        Subject: CN=F7B374F34AE53CE972AE20190AE652FC39588C8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:77:f7:18:50:fb:c8:ef:95:3d:55:49:30:31:
                    46:2b:41:82:35:f4:32:6d:25:37:f8:e6:74:0f:59:
                    be:9e:9d:6d:32:df:48:72:ad:0f:3f:8c:dd:82:a8:
                    11:04:2e:37:90:da:13:91:2a:79:d5:f3:33:ac:9d:
                    30:37:bf:15:34:71:a4:3d:e9:d6:a8:3b:fa:dd:70:
                    f5:e2:0a:73:31:27:3b:0d:7c:26:05:f6:bb:95:ac:
                    49:a7:98:b0:be:e2:1b:e8:85:a6:18:98:b1:b7:38:
                    7c:db:32:d9:41:f8:db:73:bd:a5:f8:17:91:b2:f1:
                    24:52:0c:e8:13:04:84:1c:ad:06:84:0a:ca:59:5e:
                    e7:9a:a8:c5:95:10:47:bc:49:60:80:fa:3d:1a:e0:
                    17:78:34:23:1c:e5:db:23:5e:05:4e:d7:a6:c8:8d:
                    fe:e3:d2:ea:47:9b:ef:b5:ab:c0:29:3b:2d:51:2d:
                    dc:29:86:05:73:e7:bb:d9:e1:16:64:2f:00:1b:8f:
                    6e:6d:4f:b7:16:d0:8a:c3:8b:3b:f1:bf:04:d9:e2:
                    a4:06:b4:fa:fa:3e:d4:d4:6c:2e:5f:08:ea:22:f3:
                    71:35:40:d7:80:67:b1:a5:7e:dc:e0:be:1d:f2:a6:
                    b4:37:49:15:6d:72:35:0e:23:88:45:68:63:28:bf:
                    ba:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B3:74:F3:4A:E5:3C:E9:72:AE:20:19:0A:E6:52:FC:39:58:8C:8E
            X509v3 Authority Key Identifier:
                keyid:DC:06:AA:51:EF:64:32:27:6C:F2:84:53:9A:2D:F5:91:49:07:40:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/34352e3233392e37372e302f32342d3234203d3e20323633313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:df:55:b0:ef:55:03:65:a8:ac:06:70:d5:d1:ec:ff:d5:e1:
         af:1c:a7:3c:b9:21:7d:69:6d:38:01:6a:44:58:2a:8e:58:c1:
         36:c0:ed:c6:1b:ba:3f:53:26:96:60:b4:ee:1f:e6:a6:4d:89:
         8c:8c:17:db:9e:10:a5:d0:eb:83:54:56:df:92:a6:71:77:c0:
         db:64:6e:f5:17:b2:89:7a:ad:00:b8:3b:f0:00:90:7c:a2:f7:
         26:62:4f:cb:06:ec:66:5f:88:45:bb:3a:e6:f2:0e:c3:6c:00:
         e5:f2:06:a7:39:6b:f6:58:46:91:b4:74:68:93:cb:84:28:9d:
         9c:b2:fa:a8:d6:83:95:df:65:24:73:d6:2e:70:ae:e5:7b:2c:
         ab:19:b8:12:51:4e:9a:f9:9f:ce:3d:61:e6:da:22:d1:c3:79:
         b8:d3:90:bf:89:63:40:7d:94:d9:51:29:a0:52:3e:47:3f:23:
         83:31:62:7a:b2:e8:da:ec:8f:02:90:aa:0f:40:04:bc:2b:af:
         ea:bc:b8:06:e3:64:da:3b:71:ea:a1:bd:c3:07:c1:4e:64:6c:
         64:f4:7b:d1:f2:32:83:1c:c5:66:d2:a1:95:8f:37:fb:a9:d0:
         87:e4:1d:28:f4:b7:6b:c0:1e:fe:97:c4:90:18:ae:da:02:e8:
         43:f6:5b:71
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYR4dqVgKdt7aJmAWw5oOmonrHi8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMwNkFBNTFFRjY0MzIyNzZDRjI4NDUzOUEyREY1OTE0
OTA3NDBDNDAeFw0yNTAyMDQxODAyMTNaFw0yNjAyMDMxODA3MTNaMDMxMTAvBgNV
BAMTKEY3QjM3NEYzNEFFNTNDRTk3MkFFMjAxOTBBRTY1MkZDMzk1ODhDOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyd/cYUPvI75U9VUkwMUYrQYI1
9DJtJTf45nQPWb6enW0y30hyrQ8/jN2CqBEELjeQ2hORKnnV8zOsnTA3vxU0caQ9
6daoO/rdcPXiCnMxJzsNfCYF9ruVrEmnmLC+4hvohaYYmLG3OHzbMtlB+NtzvaX4
F5Gy8SRSDOgTBIQcrQaECspZXueaqMWVEEe8SWCA+j0a4Bd4NCMc5dsjXgVO16bI
jf7j0upHm++1q8ApOy1RLdwphgVz57vZ4RZkLwAbj25tT7cW0IrDizvxvwTZ4qQG
tPr6PtTUbC5fCOoi83E1QNeAZ7Glftzgvh3yprQ3SRVtcjUOI4hFaGMov7pvAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU97N080rlPOlyriAZCuZS/DlYjI4wHwYDVR0j
BBgwFoAU3AaqUe9kMids8oRTmi31kUkHQMQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRjk0NjQ1NUQ2OTA4QjhGQzU0RERBNDM2MEI5QUM4QjVE
QTJCOTZEQTkzMzQ5NzVBOUE5NUFDRDg5NDUyOTQ5LzAvREMwNkFBNTFFRjY0MzIy
NzZDRjI4NDUzOUEyREY1OTE0OTA3NDBDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQzA2QUE1MUVGNjQzMjI3NkNG
Mjg0NTM5QTJERjU5MTQ5MDc0MEM0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUY5NDY0NTVENjkwOEI4RkM1NEREQTQzNjBCOUFDOEI1REEyQjk2REE5
MzM0OTc1QTlBOTVBQ0Q4OTQ1Mjk0OS8wLzM0MzUyZTMyMzMzOTJlMzczNzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzMxMzUzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3vTTAN
BgkqhkiG9w0BAQsFAAOCAQEAb99VsO9VA2WorAZw1dHs/9XhrxynPLkhfWltOAFq
RFgqjljBNsDtxhu6P1MmlmC07h/mpk2JjIwX254QpdDrg1RW35KmcXfA22Ru9Rey
iXqtALg78ACQfKL3JmJPywbsZl+IRbs65vIOw2wA5fIGpzlr9lhGkbR0aJPLhCid
nLL6qNaDld9lJHPWLnCu5Xssqxm4ElFOmvmfzj1h5toi0cN5uNOQv4ljQH2U2VEp
oFI+Rz8jgzFierLo2uyPApCqD0AEvCuv6ry4BuNk2jtx6qG9wwfBTmRsZPR70fIy
gxzFZtKhlY83+6nQh+QdKPS3a8Ae/pfEkBiu2gLoQ/ZbcQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:08 2025 by rpki-client