Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD45BF04273D794615389FC7E12ECBAC7EA52478F0B1D474913266CF8EE58954/0/34352e3137342e34382e302f32322d3234203d3e20323637383437.roa
File:                     34352e3137342e34382e302f32322d3234203d3e20323637383437.roa (raw, json)
Hash identifier:          Tv98WJ/Jf5BR0bQb9nDtUGqLaTvWo4Z3P041fTnPnbo=
Subject key identifier:   A2:47:0A:A5:3E:21:5B:2E:60:7C:F9:8D:BC:DF:6F:27:B1:CA:F8:CA
Certificate issuer:       /CN=C6DBFB09D83AECAEEA3BB7BFA8B9F928514FE7D0
Certificate serial:       7623A7E1924BDCDBEF17D23F4CDEF4DA70F502BE
Authority key identifier: C6:DB:FB:09:D8:3A:EC:AE:EA:3B:B7:BF:A8:B9:F9:28:51:4F:E7:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6DBFB09D83AECAEEA3BB7BFA8B9F928514FE7D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BD45BF04273D794615389FC7E12ECBAC7EA52478F0B1D474913266CF8EE58954/0/34352e3137342e34382e302f32322d3234203d3e20323637383437.roa
Signing time:             Tue 04 Feb 2025 18:42:21 +0000
ROA not before:           Tue 04 Feb 2025 18:37:21 +0000
ROA not after:            Tue 03 Feb 2026 18:42:21 +0000
asID:                     267847
IP address blocks:        45.174.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BD45BF04273D794615389FC7E12ECBAC7EA52478F0B1D474913266CF8EE58954/0/C6DBFB09D83AECAEEA3BB7BFA8B9F928514FE7D0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BD45BF04273D794615389FC7E12ECBAC7EA52478F0B1D474913266CF8EE58954/0/C6DBFB09D83AECAEEA3BB7BFA8B9F928514FE7D0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6DBFB09D83AECAEEA3BB7BFA8B9F928514FE7D0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 04:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:23:a7:e1:92:4b:dc:db:ef:17:d2:3f:4c:de:f4:da:70:f5:02:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6DBFB09D83AECAEEA3BB7BFA8B9F928514FE7D0
        Validity
            Not Before: Feb  4 18:37:21 2025 GMT
            Not After : Feb  3 18:42:21 2026 GMT
        Subject: CN=A2470AA53E215B2E607CF98DBCDF6F27B1CAF8CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:99:f7:47:61:79:1c:66:72:bf:22:64:39:3e:
                    ce:8e:4b:44:1b:3e:42:fe:fd:49:63:5d:b8:37:7e:
                    90:b0:86:a9:99:96:ed:18:5d:59:4f:c3:27:33:f5:
                    6c:8d:3b:77:bd:14:c0:13:2d:84:2f:2a:e0:a0:82:
                    a3:ea:b6:b5:05:04:88:91:23:0c:43:8f:af:42:ac:
                    09:07:4e:ed:55:aa:35:d3:28:b4:13:17:88:de:68:
                    67:40:79:0d:e8:b5:f7:0b:4f:ee:ef:41:4f:18:34:
                    b1:7c:cc:e8:6e:8f:7a:12:17:02:22:13:97:75:ad:
                    9b:26:10:b1:9a:ee:06:94:0f:2a:69:c2:d7:ed:b8:
                    c0:43:72:fe:79:19:58:cc:80:2e:5c:fb:8e:51:95:
                    2c:49:d8:b9:5b:fd:b6:d1:a4:91:46:4d:10:23:10:
                    0d:72:45:95:f2:e1:65:0f:28:e8:7e:7a:f4:eb:ee:
                    64:06:7d:e0:65:76:35:67:69:c9:50:14:be:6b:fe:
                    67:5e:86:24:b2:fb:61:04:78:51:26:2d:2d:f1:56:
                    1c:72:e8:b0:08:65:cf:4e:40:6e:21:ab:0a:bb:4b:
                    05:c5:e8:50:44:7c:e1:b7:b0:95:e2:77:11:b0:d2:
                    bd:cb:9b:60:ab:17:b2:17:c9:aa:52:e9:2c:18:5e:
                    ce:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:47:0A:A5:3E:21:5B:2E:60:7C:F9:8D:BC:DF:6F:27:B1:CA:F8:CA
            X509v3 Authority Key Identifier:
                keyid:C6:DB:FB:09:D8:3A:EC:AE:EA:3B:B7:BF:A8:B9:F9:28:51:4F:E7:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BD45BF04273D794615389FC7E12ECBAC7EA52478F0B1D474913266CF8EE58954/0/C6DBFB09D83AECAEEA3BB7BFA8B9F928514FE7D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6DBFB09D83AECAEEA3BB7BFA8B9F928514FE7D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD45BF04273D794615389FC7E12ECBAC7EA52478F0B1D474913266CF8EE58954/0/34352e3137342e34382e302f32322d3234203d3e20323637383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:0b:a2:b1:e4:06:fd:e0:d6:61:49:9e:85:ef:a6:eb:34:75:
         bc:c1:91:3f:d1:b6:7c:5d:2b:a5:c0:e2:59:82:23:9d:2b:72:
         ba:35:8a:cf:56:42:b3:47:75:81:5a:be:da:d2:82:ac:80:d8:
         7b:aa:13:24:9d:a5:f0:a5:17:c7:d3:9b:1c:52:44:88:69:56:
         8e:60:b4:45:4f:7f:43:a6:ed:33:95:a6:c1:66:d4:79:36:35:
         f0:5b:3f:ab:db:20:1d:4b:14:3c:7a:ed:07:72:60:fd:a5:ed:
         1f:15:d6:15:69:8a:c0:8d:37:82:c4:d1:7f:3a:25:ac:47:61:
         c0:d2:ac:aa:01:a0:fc:ee:60:26:37:bc:97:a1:10:2e:e5:74:
         4c:2f:ee:5b:1e:b7:d7:6a:8d:25:30:8b:56:ee:3e:74:cc:e4:
         8e:24:35:5d:b7:34:b1:81:a4:8b:58:26:6f:6b:db:0e:2b:4f:
         53:18:ac:0d:eb:dd:fd:68:7e:40:f9:5f:cd:45:5f:ce:f5:3d:
         16:f5:e5:1a:fa:2f:b9:3b:c4:13:36:63:59:d9:b5:be:eb:c9:
         cf:4c:90:24:2a:35:d6:82:53:de:06:e8:80:74:4d:fe:f9:4f:
         06:a9:ab:81:d2:b4:bd:a8:6a:9d:62:27:d4:40:8b:fd:10:67:
         fa:8d:4b:19
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdiOn4ZJL3NvvF9I/TN702nD1Ar4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZEQkZCMDlEODNBRUNBRUVBM0JCN0JGQThCOUY5Mjg1
MTRGRTdEMDAeFw0yNTAyMDQxODM3MjFaFw0yNjAyMDMxODQyMjFaMDMxMTAvBgNV
BAMTKEEyNDcwQUE1M0UyMTVCMkU2MDdDRjk4REJDREY2RjI3QjFDQUY4Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnmfdHYXkcZnK/ImQ5Ps6OS0Qb
PkL+/UljXbg3fpCwhqmZlu0YXVlPwycz9WyNO3e9FMATLYQvKuCggqPqtrUFBIiR
IwxDj69CrAkHTu1VqjXTKLQTF4jeaGdAeQ3otfcLT+7vQU8YNLF8zOhuj3oSFwIi
E5d1rZsmELGa7gaUDyppwtftuMBDcv55GVjMgC5c+45RlSxJ2Llb/bbRpJFGTRAj
EA1yRZXy4WUPKOh+evTr7mQGfeBldjVnaclQFL5r/mdehiSy+2EEeFEmLS3xVhxy
6LAIZc9OQG4hqwq7SwXF6FBEfOG3sJXidxGw0r3Lm2CrF7IXyapS6SwYXs4BAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUokcKpT4hWy5gfPmNvN9vJ7HK+MowHwYDVR0j
BBgwFoAUxtv7Cdg67K7qO7e/qLn5KFFP59AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRDQ1QkYwNDI3M0Q3OTQ2MTUzODlGQzdFMTJFQ0JBQzdF
QTUyNDc4RjBCMUQ0NzQ5MTMyNjZDRjhFRTU4OTU0LzAvQzZEQkZCMDlEODNBRUNB
RUVBM0JCN0JGQThCOUY5Mjg1MTRGRTdEMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNkRCRkIwOUQ4M0FFQ0FFRUEz
QkI3QkZBOEI5RjkyODUxNEZFN0QwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkQ0NUJGMDQyNzNENzk0NjE1Mzg5RkM3RTEyRUNCQUM3RUE1MjQ3OEYw
QjFENDc0OTEzMjY2Q0Y4RUU1ODk1NC8wLzM0MzUyZTMxMzczNDJlMzQzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNzM4MzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2uMDAN
BgkqhkiG9w0BAQsFAAOCAQEABwuiseQG/eDWYUmehe+m6zR1vMGRP9G2fF0rpcDi
WYIjnStyujWKz1ZCs0d1gVq+2tKCrIDYe6oTJJ2l8KUXx9ObHFJEiGlWjmC0RU9/
Q6btM5WmwWbUeTY18Fs/q9sgHUsUPHrtB3Jg/aXtHxXWFWmKwI03gsTRfzolrEdh
wNKsqgGg/O5gJje8l6EQLuV0TC/uWx6312qNJTCLVu4+dMzkjiQ1Xbc0sYGki1gm
b2vbDitPUxisDevd/Wh+QPlfzUVfzvU9FvXlGvovuTvEEzZjWdm1vuvJz0yQJCo1
1oJT3gbogHRN/vlPBqmrgdK0vahqnWIn1ECL/RBn+o1LGQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 14:59:00 2025 by rpki-client