Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/34352e3137352e3134382e302f32322d3232203d3e20323637383738.roa
File:                     34352e3137352e3134382e302f32322d3232203d3e20323637383738.roa (raw, json)
Hash identifier:          FLKVu51CqiMKIC4dg/HlHre6SL632epjxpR+j5YZCBg=
Subject key identifier:   AE:D6:A8:86:FC:36:13:E1:D2:6B:11:61:68:31:61:AE:DF:03:44:4E
Certificate issuer:       /CN=D2C96715842E19445AE9268C979CE3C8F576D88D
Certificate serial:       1C9F0EC116C0D1F70A0F0F0272EAF45FFCAA8B86
Authority key identifier: D2:C9:67:15:84:2E:19:44:5A:E9:26:8C:97:9C:E3:C8:F5:76:D8:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/34352e3137352e3134382e302f32322d3232203d3e20323637383738.roa
Signing time:             Tue 04 Feb 2025 18:20:54 +0000
ROA not before:           Tue 04 Feb 2025 18:15:54 +0000
ROA not after:            Tue 03 Feb 2026 18:20:54 +0000
asID:                     267878
IP address blocks:        45.175.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9f:0e:c1:16:c0:d1:f7:0a:0f:0f:02:72:ea:f4:5f:fc:aa:8b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2C96715842E19445AE9268C979CE3C8F576D88D
        Validity
            Not Before: Feb  4 18:15:54 2025 GMT
            Not After : Feb  3 18:20:54 2026 GMT
        Subject: CN=AED6A886FC3613E1D26B1161683161AEDF03444E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7d:b7:14:a0:92:fd:7d:85:39:36:cf:80:d6:
                    a1:14:90:6f:f9:8a:f9:88:83:3d:d8:0c:70:b1:92:
                    fe:67:d2:0c:7c:15:99:79:7f:a0:20:32:d4:57:21:
                    b0:36:0d:c8:0d:72:96:a0:12:eb:21:7e:a1:09:a0:
                    97:10:c9:68:e2:2b:45:e1:84:f5:18:62:b2:4a:c1:
                    e5:bb:6c:ef:6c:c7:3c:4b:54:c5:16:d8:3e:8a:d5:
                    8b:8c:ab:b4:bb:9e:6f:c5:13:87:ee:fb:2a:3d:80:
                    57:9a:25:de:9c:9d:89:cc:d2:02:ca:83:35:b2:e4:
                    d6:33:e1:86:35:dc:20:c4:93:6e:18:e0:fe:87:31:
                    b4:0f:e9:4b:00:1f:51:2d:e1:56:33:cd:5c:48:3a:
                    3a:58:da:6e:8b:66:a8:88:14:a8:e6:a0:47:8d:69:
                    58:29:ca:13:cb:b9:9c:ad:31:00:79:5b:bf:90:09:
                    fe:54:0e:46:72:d1:1f:90:11:74:03:08:1b:5b:40:
                    02:00:37:6c:ff:b3:97:3d:5a:7d:64:4e:59:29:58:
                    24:89:f1:ae:13:a3:f5:cd:27:20:22:c8:9c:f3:a1:
                    5a:a9:14:16:84:f2:28:b6:48:48:b4:56:d1:2e:30:
                    db:81:5a:d8:d7:fa:c1:9c:e8:53:d7:a0:f5:31:24:
                    f1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D6:A8:86:FC:36:13:E1:D2:6B:11:61:68:31:61:AE:DF:03:44:4E
            X509v3 Authority Key Identifier:
                keyid:D2:C9:67:15:84:2E:19:44:5A:E9:26:8C:97:9C:E3:C8:F5:76:D8:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/34352e3137352e3134382e302f32322d3232203d3e20323637383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:58:b2:16:ae:69:00:86:c9:08:1a:d6:2d:de:82:ae:a0:5a:
         16:cf:f0:40:1a:3c:b0:1d:95:c7:bc:b7:47:96:e1:07:c7:17:
         af:68:0c:1d:64:63:6e:19:54:ab:eb:23:01:e8:71:8d:3d:08:
         83:a6:60:44:a5:f2:aa:69:34:5d:3d:07:62:5b:87:7d:90:9f:
         c6:db:48:07:63:c6:95:54:2a:1f:3e:ce:6c:4d:6b:d5:e6:9c:
         67:cd:fb:0a:9a:ae:18:2b:10:d0:d8:0a:c3:ec:4b:1e:3a:db:
         04:35:a0:23:7c:bc:84:73:9b:ea:9a:9e:ae:f4:b9:86:7e:cf:
         fa:39:ae:0a:0a:ef:3e:f9:66:ec:bb:6d:37:2d:2d:a7:4c:86:
         f9:b1:fe:ba:af:18:43:05:a4:30:f2:f7:94:0d:23:24:a7:9a:
         45:06:36:f1:a6:86:84:ac:bb:c6:f0:fd:e0:2a:e5:90:9a:34:
         75:7a:6e:9e:75:5f:b7:52:1e:33:6f:01:d4:65:cd:a6:7a:31:
         17:24:3c:f6:d0:b4:d0:89:01:b8:c8:07:4f:0f:6b:e2:64:06:
         c3:60:22:98:b3:38:99:d0:1f:26:54:03:c5:eb:97:f9:61:88:
         63:02:ed:65:13:ad:e1:55:32:70:25:0f:90:83:da:1c:aa:de:
         7a:ba:8d:63
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHJ8OwRbA0fcKDw8Ccur0X/yqi4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJDOTY3MTU4NDJFMTk0NDVBRTkyNjhDOTc5Q0UzQzhG
NTc2RDg4RDAeFw0yNTAyMDQxODE1NTRaFw0yNjAyMDMxODIwNTRaMDMxMTAvBgNV
BAMTKEFFRDZBODg2RkMzNjEzRTFEMjZCMTE2MTY4MzE2MUFFREYwMzQ0NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYfbcUoJL9fYU5Ns+A1qEUkG/5
ivmIgz3YDHCxkv5n0gx8FZl5f6AgMtRXIbA2DcgNcpagEushfqEJoJcQyWjiK0Xh
hPUYYrJKweW7bO9sxzxLVMUW2D6K1YuMq7S7nm/FE4fu+yo9gFeaJd6cnYnM0gLK
gzWy5NYz4YY13CDEk24Y4P6HMbQP6UsAH1Et4VYzzVxIOjpY2m6LZqiIFKjmoEeN
aVgpyhPLuZytMQB5W7+QCf5UDkZy0R+QEXQDCBtbQAIAN2z/s5c9Wn1kTlkpWCSJ
8a4To/XNJyAiyJzzoVqpFBaE8ii2SEi0VtEuMNuBWtjX+sGc6FPXoPUxJPGhAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUrtaohvw2E+HSaxFhaDFhrt8DRE4wHwYDVR0j
BBgwFoAU0slnFYQuGURa6SaMl5zjyPV22I0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNzdCQTgzQ0ZFRDlCNjdCOTFDMjEwRDI2Qjc4NUUxMEY0
QUMwMzRDMURBMzkxOUI1Q0E1RDFGRDFDNDA3ODc5LzAvRDJDOTY3MTU4NDJFMTk0
NDVBRTkyNjhDOTc5Q0UzQzhGNTc2RDg4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkM5NjcxNTg0MkUxOTQ0NUFF
OTI2OEM5NzlDRTNDOEY1NzZEODhELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjc3QkE4M0NGRUQ5QjY3QjkxQzIxMEQyNkI3ODVFMTBGNEFDMDM0QzFE
QTM5MTlCNUNBNUQxRkQxQzQwNzg3OS8wLzM0MzUyZTMxMzczNTJlMzEzNDM4MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM3MzgzNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLa+U
MA0GCSqGSIb3DQEBCwUAA4IBAQB4WLIWrmkAhskIGtYt3oKuoFoWz/BAGjywHZXH
vLdHluEHxxevaAwdZGNuGVSr6yMB6HGNPQiDpmBEpfKqaTRdPQdiW4d9kJ/G20gH
Y8aVVCofPs5sTWvV5pxnzfsKmq4YKxDQ2ArD7EseOtsENaAjfLyEc5vqmp6u9LmG
fs/6Oa4KCu8++Wbsu203LS2nTIb5sf66rxhDBaQw8veUDSMkp5pFBjbxpoaErLvG
8P3gKuWQmjR1em6edV+3Uh4zbwHUZc2mejEXJDz20LTQiQG4yAdPD2viZAbDYCKY
sziZ0B8mVAPF65f5YYhjAu1lE63hVTJwJQ+Qg9ocqt56uo1j
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:09 2025 by rpki-client