Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/34352e3136372e3132342e302f32332d3234203d3e20323639383034.roa
File:                     34352e3136372e3132342e302f32332d3234203d3e20323639383034.roa (raw, json)
Hash identifier:          SFlYXhVY0IGVjcYDo9TQjVuyKOOAEQ3S5hXsbeYVD6A=
Subject key identifier:   6B:54:D5:3F:53:F8:A1:69:88:AC:E2:02:64:E5:80:D3:4B:37:D9:F5
Certificate issuer:       /CN=6CFC0CD36DE83898AFE4634C103FE1CF06563CF4
Certificate serial:       1FF0D12B07D4295A482D27F01C7E195440A67672
Authority key identifier: 6C:FC:0C:D3:6D:E8:38:98:AF:E4:63:4C:10:3F:E1:CF:06:56:3C:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/34352e3136372e3132342e302f32332d3234203d3e20323639383034.roa
Signing time:             Tue 04 Feb 2025 18:07:35 +0000
ROA not before:           Tue 04 Feb 2025 18:02:35 +0000
ROA not after:            Tue 03 Feb 2026 18:07:35 +0000
asID:                     269804
IP address blocks:        45.167.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 14:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f0:d1:2b:07:d4:29:5a:48:2d:27:f0:1c:7e:19:54:40:a6:76:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CFC0CD36DE83898AFE4634C103FE1CF06563CF4
        Validity
            Not Before: Feb  4 18:02:35 2025 GMT
            Not After : Feb  3 18:07:35 2026 GMT
        Subject: CN=6B54D53F53F8A16988ACE20264E580D34B37D9F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6c:06:00:99:01:87:ba:8f:2e:bf:45:4b:56:
                    e3:58:1b:28:59:ab:f0:36:3a:14:8e:40:d9:bb:df:
                    f9:19:e3:8b:28:ae:79:1c:b3:ac:ff:9c:2f:26:80:
                    2b:ae:44:31:ba:3e:83:11:8e:f5:df:9e:80:d3:88:
                    ef:6f:98:2d:cb:00:e2:c9:2c:73:35:b5:b8:1a:79:
                    52:5e:3e:08:e9:1e:84:89:72:e1:b1:7b:4c:d3:e3:
                    85:2e:2c:9a:92:20:91:81:75:1a:3e:e4:ac:43:69:
                    36:d2:cf:18:b1:ba:8f:bf:00:de:16:19:07:5c:81:
                    5e:0b:69:2c:10:1d:6c:6e:f7:c4:04:2f:48:b5:23:
                    ca:10:f3:db:04:af:bc:99:a8:65:09:ca:89:b3:e9:
                    27:55:02:55:52:d5:89:12:3d:6e:61:ee:3a:82:82:
                    90:5e:cc:c1:b3:9e:20:b1:e3:f7:81:fb:6c:8b:ce:
                    f6:84:8f:fb:31:e6:92:17:37:3f:74:78:23:5f:61:
                    2d:99:6e:62:eb:e4:4d:11:7f:5d:81:ee:5d:81:3d:
                    b0:10:a2:9a:e8:63:a4:fe:9b:41:c7:c6:b4:33:0b:
                    c9:32:1d:f8:37:3d:9b:2b:6d:ba:a1:93:ee:15:be:
                    c4:7c:a5:bb:be:c6:9c:ab:3c:ef:37:b2:a0:a2:fb:
                    27:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:54:D5:3F:53:F8:A1:69:88:AC:E2:02:64:E5:80:D3:4B:37:D9:F5
            X509v3 Authority Key Identifier:
                keyid:6C:FC:0C:D3:6D:E8:38:98:AF:E4:63:4C:10:3F:E1:CF:06:56:3C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/34352e3136372e3132342e302f32332d3234203d3e20323639383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:33:6a:a1:65:f4:85:e5:6e:c9:4b:49:ea:1f:bd:fe:a3:2a:
         d2:4e:ae:db:74:d6:43:d7:f2:92:0d:3d:83:07:b6:ba:26:2c:
         57:da:ad:7f:2d:7c:21:ec:65:5c:f5:16:87:a7:54:24:31:1f:
         6e:51:d6:76:85:cc:92:e2:57:f1:84:72:d9:56:ce:01:9f:a5:
         2f:6b:54:c1:45:89:57:70:10:f0:f8:bf:4b:ef:2c:20:1b:17:
         51:c9:34:a1:31:17:da:7c:eb:4a:bc:fb:df:60:70:0d:ad:6c:
         58:8c:67:64:a1:7b:4d:ff:dd:1c:dc:64:9d:fb:6e:e7:6b:6d:
         7c:c1:94:94:b4:b5:99:72:23:ba:ae:1d:97:a2:f9:0e:57:bb:
         4f:eb:b0:2f:a6:6c:6a:56:21:09:e8:08:b7:a4:9e:64:9d:97:
         91:ca:3e:37:91:b5:a7:17:5d:71:24:0c:22:1f:f2:31:77:d8:
         aa:ea:12:31:cc:27:99:38:20:60:a1:17:1e:db:d6:e0:a4:11:
         4c:4c:58:2d:29:ab:48:ea:12:61:b2:5f:da:19:f6:90:a2:70:
         ab:7a:3e:57:6c:17:49:1a:d1:03:fe:f6:80:1b:3c:0f:03:b7:
         31:21:24:be:bd:02:c9:6b:51:6e:fc:65:cb:72:eb:7f:2e:4b:
         5c:7e:5d:9a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUH/DRKwfUKVpILSfwHH4ZVECmdnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNGQzBDRDM2REU4Mzg5OEFGRTQ2MzRDMTAzRkUxQ0Yw
NjU2M0NGNDAeFw0yNTAyMDQxODAyMzVaFw0yNjAyMDMxODA3MzVaMDMxMTAvBgNV
BAMTKDZCNTRENTNGNTNGOEExNjk4OEFDRTIwMjY0RTU4MEQzNEIzN0Q5RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGbAYAmQGHuo8uv0VLVuNYGyhZ
q/A2OhSOQNm73/kZ44sornkcs6z/nC8mgCuuRDG6PoMRjvXfnoDTiO9vmC3LAOLJ
LHM1tbgaeVJePgjpHoSJcuGxe0zT44UuLJqSIJGBdRo+5KxDaTbSzxixuo+/AN4W
GQdcgV4LaSwQHWxu98QEL0i1I8oQ89sEr7yZqGUJyomz6SdVAlVS1YkSPW5h7jqC
gpBezMGzniCx4/eB+2yLzvaEj/sx5pIXNz90eCNfYS2ZbmLr5E0Rf12B7l2BPbAQ
oproY6T+m0HHxrQzC8kyHfg3PZsrbbqhk+4VvsR8pbu+xpyrPO83sqCi+yc7AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUa1TVP1P4oWmIrOICZOWA00s32fUwHwYDVR0j
BBgwFoAUbPwM023oOJiv5GNMED/hzwZWPPQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CM0U5MkU2QUQ0MEFBMEM5RkVBQjk5QUM4MUUyRjJGRTRG
ODlCQ0ZGODBCOEFFOEYzODkxMkIyOTVGMEU5OTE0LzAvNkNGQzBDRDM2REU4Mzg5
OEFGRTQ2MzRDMTAzRkUxQ0YwNjU2M0NGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Q0ZDMENEMzZERTgzODk4QUZF
NDYzNEMxMDNGRTFDRjA2NTYzQ0Y0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjNFOTJFNkFENDBBQTBDOUZFQUI5OUFDODFFMkYyRkU0Rjg5QkNGRjgw
QjhBRThGMzg5MTJCMjk1RjBFOTkxNC8wLzM0MzUyZTMxMzYzNzJlMzEzMjM0MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM5MzgzMDM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLad8
MA0GCSqGSIb3DQEBCwUAA4IBAQBxM2qhZfSF5W7JS0nqH73+oyrSTq7bdNZD1/KS
DT2DB7a6JixX2q1/LXwh7GVc9RaHp1QkMR9uUdZ2hcyS4lfxhHLZVs4Bn6Uva1TB
RYlXcBDw+L9L7ywgGxdRyTShMRfafOtKvPvfYHANrWxYjGdkoXtN/90c3GSd+27n
a218wZSUtLWZciO6rh2XovkOV7tP67AvpmxqViEJ6Ai3pJ5knZeRyj43kbWnF11x
JAwiH/Ixd9iq6hIxzCeZOCBgoRce29bgpBFMTFgtKatI6hJhsl/aGfaQonCrej5X
bBdJGtED/vaAGzwPA7cxISS+vQLJa1Fu/GXLcut/Lktcfl2a
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:12:51 2025 by rpki-client