Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/34352e3137352e3135302e302f32342d3234203d3e20323637383738.roa
File:                     34352e3137352e3135302e302f32342d3234203d3e20323637383738.roa (raw, json)
Hash identifier:          1bYKDDuBdhjof2i6LXJ9XhXolvJXmzIT9tvxCFFxZDE=
Subject key identifier:   41:FF:41:3A:E4:B5:D7:05:82:98:BD:F7:57:45:76:21:5B:9A:E6:D3
Certificate issuer:       /CN=D2C96715842E19445AE9268C979CE3C8F576D88D
Certificate serial:       45060076EA4BAA526C75A7360895FFF318F8B1D2
Authority key identifier: D2:C9:67:15:84:2E:19:44:5A:E9:26:8C:97:9C:E3:C8:F5:76:D8:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/34352e3137352e3135302e302f32342d3234203d3e20323637383738.roa
Signing time:             Tue 04 Feb 2025 18:20:56 +0000
ROA not before:           Tue 04 Feb 2025 18:15:56 +0000
ROA not after:            Tue 03 Feb 2026 18:20:56 +0000
asID:                     267878
IP address blocks:        45.175.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:06:00:76:ea:4b:aa:52:6c:75:a7:36:08:95:ff:f3:18:f8:b1:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2C96715842E19445AE9268C979CE3C8F576D88D
        Validity
            Not Before: Feb  4 18:15:56 2025 GMT
            Not After : Feb  3 18:20:56 2026 GMT
        Subject: CN=41FF413AE4B5D7058298BDF7574576215B9AE6D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:29:71:af:33:c7:71:f8:99:12:7c:69:58:ac:
                    e2:a4:0a:2d:25:0c:d2:2f:0b:01:b3:54:95:ab:1e:
                    d4:e1:6e:27:00:ce:ed:9e:15:15:e9:21:9d:0f:57:
                    fa:11:67:a0:b5:1a:39:72:5f:67:25:00:5b:2a:eb:
                    d6:62:e0:e2:a7:76:c9:1a:98:ea:89:27:c6:d0:18:
                    3e:67:54:ba:66:09:05:0c:42:9f:b1:46:da:50:56:
                    f6:b4:56:03:a1:0a:8f:eb:c0:57:c3:b8:1c:ba:ce:
                    ec:70:35:e8:c3:3a:ce:55:a0:f2:de:13:9f:43:1a:
                    1b:97:0c:3c:12:6a:30:7a:26:52:4f:8c:f4:49:b5:
                    0b:8e:30:21:12:5d:fd:c3:58:50:a0:f3:82:9a:e6:
                    88:48:22:d7:2f:3e:ca:66:50:2b:1d:f4:2c:00:d1:
                    4f:a0:35:d3:71:be:15:c0:96:8c:4b:4a:67:53:fc:
                    88:e9:b4:21:99:40:20:43:4b:09:da:cc:1d:e2:6a:
                    86:45:e5:24:77:1a:e9:cc:8a:a3:02:0b:fc:47:10:
                    58:18:7d:cf:ba:a8:2c:21:77:8c:ab:a9:14:d7:dc:
                    a2:df:06:34:c2:fa:41:2d:62:2c:90:51:f2:47:d8:
                    11:0f:43:52:f2:af:4a:5c:1f:ff:7b:d2:92:ff:df:
                    5d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FF:41:3A:E4:B5:D7:05:82:98:BD:F7:57:45:76:21:5B:9A:E6:D3
            X509v3 Authority Key Identifier:
                keyid:D2:C9:67:15:84:2E:19:44:5A:E9:26:8C:97:9C:E3:C8:F5:76:D8:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/34352e3137352e3135302e302f32342d3234203d3e20323637383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:80:6c:50:dc:7b:78:b8:9c:07:68:75:b4:7a:d6:b5:d5:e1:
         16:91:7a:d2:b4:3f:26:5b:33:fb:8b:30:5b:a4:74:cd:df:8e:
         d7:dd:20:8e:c7:9b:0d:da:7b:38:bc:b1:ae:95:bd:26:30:94:
         5c:a2:a3:15:04:6d:7e:83:ea:94:41:f4:e4:47:56:24:b2:90:
         71:a3:19:80:64:b7:bc:b6:5c:05:d8:88:06:0a:bb:d3:ba:ce:
         e1:a3:12:fc:dc:92:50:ed:52:d8:95:44:c5:be:22:2b:72:33:
         f8:0c:3d:1a:b9:ab:c9:19:86:7c:5f:93:c6:49:b7:87:8f:48:
         a6:41:70:e2:ea:f5:6a:a0:b8:fc:d5:75:12:28:13:a8:8d:c2:
         e6:77:19:e3:10:de:b6:95:20:15:77:af:21:51:6c:7e:12:96:
         ec:4d:c3:c4:ff:df:7c:c3:87:b6:ad:c5:59:80:88:c3:27:dc:
         02:e7:e1:0b:d9:d6:27:63:45:ca:f5:90:03:9a:ff:89:fe:c4:
         08:c0:e5:b2:36:f1:57:eb:11:26:16:8b:81:8c:8f:08:4b:7c:
         45:c0:04:9f:38:8b:02:64:44:7b:19:a4:08:e7:34:42:82:9e:
         17:34:bb:f1:08:9b:34:58:7a:57:43:8c:d8:ee:a7:5a:64:bf:
         c2:fc:52:2a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIURQYAdupLqlJsdac2CJX/8xj4sdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJDOTY3MTU4NDJFMTk0NDVBRTkyNjhDOTc5Q0UzQzhG
NTc2RDg4RDAeFw0yNTAyMDQxODE1NTZaFw0yNjAyMDMxODIwNTZaMDMxMTAvBgNV
BAMTKDQxRkY0MTNBRTRCNUQ3MDU4Mjk4QkRGNzU3NDU3NjIxNUI5QUU2RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIKXGvM8dx+JkSfGlYrOKkCi0l
DNIvCwGzVJWrHtThbicAzu2eFRXpIZ0PV/oRZ6C1GjlyX2clAFsq69Zi4OKndska
mOqJJ8bQGD5nVLpmCQUMQp+xRtpQVva0VgOhCo/rwFfDuBy6zuxwNejDOs5VoPLe
E59DGhuXDDwSajB6JlJPjPRJtQuOMCESXf3DWFCg84Ka5ohIItcvPspmUCsd9CwA
0U+gNdNxvhXAloxLSmdT/IjptCGZQCBDSwnazB3iaoZF5SR3GunMiqMCC/xHEFgY
fc+6qCwhd4yrqRTX3KLfBjTC+kEtYiyQUfJH2BEPQ1Lyr0pcH/970pL/312TAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUQf9BOuS11wWCmL33V0V2IVua5tMwHwYDVR0j
BBgwFoAU0slnFYQuGURa6SaMl5zjyPV22I0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNzdCQTgzQ0ZFRDlCNjdCOTFDMjEwRDI2Qjc4NUUxMEY0
QUMwMzRDMURBMzkxOUI1Q0E1RDFGRDFDNDA3ODc5LzAvRDJDOTY3MTU4NDJFMTk0
NDVBRTkyNjhDOTc5Q0UzQzhGNTc2RDg4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkM5NjcxNTg0MkUxOTQ0NUFF
OTI2OEM5NzlDRTNDOEY1NzZEODhELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjc3QkE4M0NGRUQ5QjY3QjkxQzIxMEQyNkI3ODVFMTBGNEFDMDM0QzFE
QTM5MTlCNUNBNUQxRkQxQzQwNzg3OS8wLzM0MzUyZTMxMzczNTJlMzEzNTMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzgzNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALa+W
MA0GCSqGSIb3DQEBCwUAA4IBAQAEgGxQ3Ht4uJwHaHW0eta11eEWkXrStD8mWzP7
izBbpHTN347X3SCOx5sN2ns4vLGulb0mMJRcoqMVBG1+g+qUQfTkR1YkspBxoxmA
ZLe8tlwF2IgGCrvTus7hoxL83JJQ7VLYlUTFviIrcjP4DD0auavJGYZ8X5PGSbeH
j0imQXDi6vVqoLj81XUSKBOojcLmdxnjEN62lSAVd68hUWx+EpbsTcPE/998w4e2
rcVZgIjDJ9wC5+EL2dYnY0XK9ZADmv+J/sQIwOWyNvFX6xEmFouBjI8IS3xFwASf
OIsCZER7GaQI5zRCgp4XNLvxCJs0WHpXQ4zY7qdaZL/C/FIq
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:38 2025 by rpki-client