Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/34352e3138392e3135302e302f32342d3234203d3e203238343335.roa
File:                     34352e3138392e3135302e302f32342d3234203d3e203238343335.roa (raw, json)
Hash identifier:          QA20Y/+MZR9CR2J49UdT6SDn5xqkYtUruABa7rlTRUk=
Subject key identifier:   B4:0D:AF:71:50:DF:F4:91:87:DD:71:49:8D:A4:F0:31:01:B2:38:69
Certificate issuer:       /CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
Certificate serial:       59C5BF7D839F02F7679C0DCD20785E58C5BBA713
Authority key identifier: 96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/34352e3138392e3135302e302f32342d3234203d3e203238343335.roa
Signing time:             Tue 04 Feb 2025 19:57:16 +0000
ROA not before:           Tue 04 Feb 2025 19:52:16 +0000
ROA not after:            Tue 03 Feb 2026 19:57:16 +0000
asID:                     28435
IP address blocks:        45.189.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c5:bf:7d:83:9f:02:f7:67:9c:0d:cd:20:78:5e:58:c5:bb:a7:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
        Validity
            Not Before: Feb  4 19:52:16 2025 GMT
            Not After : Feb  3 19:57:16 2026 GMT
        Subject: CN=B40DAF7150DFF49187DD71498DA4F03101B23869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:36:77:14:f6:b0:22:a9:7d:9b:d4:c8:8b:28:
                    54:a0:ef:27:57:1e:c3:bc:98:35:a6:79:04:13:f2:
                    42:4e:ff:4c:ac:35:53:10:d9:03:06:39:c2:d6:b9:
                    94:4e:50:51:8c:c9:a9:25:7e:a4:ac:63:c6:50:95:
                    f2:72:a4:25:e3:a0:d0:5b:97:e9:ec:3b:91:fe:dc:
                    e8:5b:a5:8a:dd:1d:34:dc:82:a9:a4:f8:bc:e6:11:
                    4d:2f:00:76:2f:0f:fb:b9:f0:8e:37:87:7c:96:e9:
                    fb:50:ca:9d:b7:e3:75:b4:67:22:1e:19:a7:c6:5b:
                    ca:c7:4f:b9:b1:44:d0:c3:b5:c8:d0:e6:de:00:68:
                    a4:6a:2f:89:56:73:50:f1:0c:f4:b5:c2:9b:09:01:
                    58:a0:3e:1e:d7:1b:17:0b:db:cc:30:9c:b1:50:fd:
                    f9:b0:2e:55:43:5e:cf:63:90:a7:d9:53:01:5f:4f:
                    fa:26:80:0d:62:9c:94:b1:a8:b5:96:98:fb:3f:d1:
                    e8:e3:dc:e4:a7:a0:fd:79:2d:a6:a7:24:77:d2:a2:
                    5e:8e:aa:df:e2:9e:3e:7e:c0:1d:bf:eb:f3:88:a1:
                    a0:36:00:bd:e7:f8:da:f2:29:fb:e7:d2:d7:d1:5a:
                    b0:46:6f:d4:3e:c8:92:c2:45:28:87:0f:fc:c1:de:
                    f8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0D:AF:71:50:DF:F4:91:87:DD:71:49:8D:A4:F0:31:01:B2:38:69
            X509v3 Authority Key Identifier:
                keyid:96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/34352e3138392e3135302e302f32342d3234203d3e203238343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:81:7c:55:cd:57:c6:75:b6:03:07:18:88:1f:79:ae:e7:7c:
         28:16:c5:43:ab:1e:34:aa:98:81:a1:c6:86:0c:ef:28:90:33:
         17:c7:dd:e7:bf:ea:6f:f7:d3:9a:37:e2:be:d6:4b:b0:ca:bb:
         d1:76:97:13:5d:b5:a0:32:7b:dd:ab:e9:25:0e:a3:ba:d4:59:
         17:eb:d8:35:8e:92:a1:c9:49:df:1f:2e:0b:4f:fc:54:d8:06:
         69:84:2d:c7:fb:b1:8e:77:b1:9c:54:a7:d0:b5:94:6a:45:ab:
         d7:4b:e7:18:41:5c:af:f9:1c:ff:a1:bb:46:27:90:c9:d3:1a:
         f8:26:c7:59:c3:cc:02:a1:74:38:2f:88:3f:10:24:c7:07:80:
         31:d4:45:a3:7c:ac:73:9f:4e:e2:73:1c:e1:22:5e:3a:b1:42:
         a5:09:4c:58:6f:59:fd:76:f9:46:59:8f:32:ce:f9:91:83:ba:
         ef:f1:f4:10:cc:d4:2e:c9:90:42:85:b1:a0:a4:3f:77:86:59:
         d0:eb:57:fe:4f:8b:3e:98:35:7d:87:c1:cc:c0:6b:f8:54:0b:
         01:56:c6:48:e1:0f:57:e0:39:d9:35:a0:10:a4:10:59:4a:ec:
         6e:1c:57:71:f6:52:58:03:61:93:ea:40:89:ad:0b:b1:ab:80:
         51:b2:5e:3e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWcW/fYOfAvdnnA3NIHheWMW7pxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYxNkYzNjdCQzE5MzRCQkNCNEE0MjI5M0Y4QzRBQkQ2
RUNFQkFFMDAeFw0yNTAyMDQxOTUyMTZaFw0yNjAyMDMxOTU3MTZaMDMxMTAvBgNV
BAMTKEI0MERBRjcxNTBERkY0OTE4N0RENzE0OThEQTRGMDMxMDFCMjM4NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoNncU9rAiqX2b1MiLKFSg7ydX
HsO8mDWmeQQT8kJO/0ysNVMQ2QMGOcLWuZROUFGMyaklfqSsY8ZQlfJypCXjoNBb
l+nsO5H+3OhbpYrdHTTcgqmk+LzmEU0vAHYvD/u58I43h3yW6ftQyp2343W0ZyIe
GafGW8rHT7mxRNDDtcjQ5t4AaKRqL4lWc1DxDPS1wpsJAVigPh7XGxcL28wwnLFQ
/fmwLlVDXs9jkKfZUwFfT/omgA1inJSxqLWWmPs/0ejj3OSnoP15LaanJHfSol6O
qt/inj5+wB2/6/OIoaA2AL3n+NryKfvn0tfRWrBGb9Q+yJLCRSiHD/zB3vibAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUtA2vcVDf9JGH3XFJjaTwMQGyOGkwHwYDVR0j
BBgwFoAUlhbzZ7wZNLvLSkIpP4xKvW7OuuAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNUFFQ0Y3MTY4RDJCN0IyNzMzOUUyNzEzNzVGRTQ5RjAy
RjU4MTQwNzU1MEQ5OTIyNTcyMjM1NEQwMUREMTlGLzAvOTYxNkYzNjdCQzE5MzRC
QkNCNEE0MjI5M0Y4QzRBQkQ2RUNFQkFFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NjE2RjM2N0JDMTkzNEJCQ0I0
QTQyMjkzRjhDNEFCRDZFQ0VCQUUwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzVBRUNGNzE2OEQyQjdCMjczMzlFMjcxMzc1RkU0OUYwMkY1ODE0MDc1
NTBEOTkyMjU3MjIzNTREMDFERDE5Ri8wLzM0MzUyZTMxMzgzOTJlMzEzNTMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODM0MzMzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC29ljAN
BgkqhkiG9w0BAQsFAAOCAQEAEIF8Vc1XxnW2AwcYiB95rud8KBbFQ6seNKqYgaHG
hgzvKJAzF8fd57/qb/fTmjfivtZLsMq70XaXE121oDJ73avpJQ6jutRZF+vYNY6S
oclJ3x8uC0/8VNgGaYQtx/uxjnexnFSn0LWUakWr10vnGEFcr/kc/6G7RieQydMa
+CbHWcPMAqF0OC+IPxAkxweAMdRFo3ysc59O4nMc4SJeOrFCpQlMWG9Z/Xb5RlmP
Ms75kYO67/H0EMzULsmQQoWxoKQ/d4ZZ0OtX/k+LPpg1fYfBzMBr+FQLAVbGSOEP
V+A52TWgEKQQWUrsbhxXcfZSWANhk+pAia0LsauAUbJePg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:32 2025 by rpki-client