Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/34352e3233392e36302e302f32322d3234203d3e20323636383534.roa
File:                     34352e3233392e36302e302f32322d3234203d3e20323636383534.roa (raw, json)
Hash identifier:          JHiHXiO6qeu5XX943d69nnW0YRGSS4CfGS5Sann83pM=
Subject key identifier:   01:B4:69:50:28:5F:AE:DB:B5:06:3F:D3:30:CF:C6:31:5B:0B:F8:9A
Certificate issuer:       /CN=ADA207DD1F23D0467C67E6A40AD7F7359785A137
Certificate serial:       295A4B33FE96C5B92B37BEBEACA0FEBB8E1C91D0
Authority key identifier: AD:A2:07:DD:1F:23:D0:46:7C:67:E6:A4:0A:D7:F7:35:97:85:A1:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/34352e3233392e36302e302f32322d3234203d3e20323636383534.roa
Signing time:             Tue 04 Feb 2025 18:54:19 +0000
ROA not before:           Tue 04 Feb 2025 18:49:19 +0000
ROA not after:            Tue 03 Feb 2026 18:54:19 +0000
asID:                     266854
IP address blocks:        45.239.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5a:4b:33:fe:96:c5:b9:2b:37:be:be:ac:a0:fe:bb:8e:1c:91:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADA207DD1F23D0467C67E6A40AD7F7359785A137
        Validity
            Not Before: Feb  4 18:49:19 2025 GMT
            Not After : Feb  3 18:54:19 2026 GMT
        Subject: CN=01B46950285FAEDBB5063FD330CFC6315B0BF89A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:91:9a:47:fa:82:79:c2:62:50:4b:52:05:d4:
                    65:27:43:5e:da:0b:b2:03:4f:46:08:0c:e6:92:a2:
                    0b:6c:93:98:61:53:9b:10:86:f5:47:5f:85:cd:9e:
                    fa:b7:b6:79:34:57:dc:7d:66:0f:66:10:5a:50:3d:
                    17:57:cf:2d:e7:33:72:27:40:95:21:1a:23:62:d3:
                    c1:ac:7f:4f:8b:27:04:fa:30:4d:6d:64:17:c0:1c:
                    1b:f7:21:8c:10:36:12:a5:a7:4f:3d:91:dc:e8:72:
                    6f:a1:bc:8e:d9:61:fa:a3:38:3a:60:c9:dc:2d:95:
                    1d:24:90:de:ea:01:22:7f:41:06:b7:31:7e:05:c4:
                    98:87:17:1c:0f:90:70:59:e0:aa:d0:29:ea:74:08:
                    31:be:c2:4b:16:0b:44:76:f8:4e:aa:d1:83:3d:cf:
                    b7:1d:87:36:04:9a:1a:9f:40:0a:61:17:c8:7a:cc:
                    e3:cd:fc:58:17:3d:48:6b:f2:1b:fc:1e:ff:a6:22:
                    e2:6d:88:e7:e0:ab:8d:d3:e7:ee:0c:9c:98:c2:27:
                    9f:7d:7f:27:da:95:6a:f2:c1:0f:d4:87:b3:aa:12:
                    2d:1c:75:9d:f8:71:1b:af:d0:fd:de:d8:1e:e1:97:
                    92:1b:d5:45:08:2b:cc:92:30:18:f5:cc:7c:6c:91:
                    3e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B4:69:50:28:5F:AE:DB:B5:06:3F:D3:30:CF:C6:31:5B:0B:F8:9A
            X509v3 Authority Key Identifier:
                keyid:AD:A2:07:DD:1F:23:D0:46:7C:67:E6:A4:0A:D7:F7:35:97:85:A1:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/34352e3233392e36302e302f32322d3234203d3e20323636383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:d3:ed:ad:d9:19:1d:f9:1d:f4:5c:80:eb:6c:e7:3e:67:9d:
         ad:be:88:51:a8:32:80:7f:02:b5:0e:a3:e2:d6:40:38:5e:d2:
         52:b7:34:e5:29:69:0f:43:73:a2:1c:02:4a:8a:ca:9e:7f:d0:
         c3:29:92:10:41:95:b7:9b:39:be:db:c5:a1:99:be:1c:3d:c9:
         a5:9d:ed:9e:d7:6d:87:d6:c7:64:4f:d9:30:f5:28:58:ee:d0:
         9f:d3:c7:47:ef:cf:a4:27:21:d0:6e:41:47:ab:73:da:03:9b:
         82:dc:6c:59:8b:22:53:d8:7f:23:c8:dd:54:5a:ea:0c:de:7c:
         60:28:6b:4d:28:ce:6a:10:40:6a:4d:45:76:d0:95:23:21:71:
         c5:4a:1b:bb:ce:3e:02:d6:c9:e0:62:74:4d:da:6f:db:66:25:
         dc:e1:0d:88:bb:38:54:ab:e2:3d:e1:0e:6f:91:b9:da:8b:0f:
         0b:04:32:c2:53:60:b0:bf:b9:ea:71:dd:ad:7d:5e:99:42:d2:
         07:ea:1c:b5:46:53:f1:7a:9e:76:31:69:69:c1:49:6a:8c:3b:
         72:44:d7:b8:c1:48:50:20:00:be:77:9c:a6:f6:aa:c2:23:e1:
         47:a4:14:be:40:00:f4:da:9d:7e:22:92:da:ba:75:e6:53:0d:
         92:46:92:e5
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUKVpLM/6WxbkrN76+rKD+u44ckdAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURBMjA3REQxRjIzRDA0NjdDNjdFNkE0MEFEN0Y3MzU5
Nzg1QTEzNzAeFw0yNTAyMDQxODQ5MTlaFw0yNjAyMDMxODU0MTlaMDMxMTAvBgNV
BAMTKDAxQjQ2OTUwMjg1RkFFREJCNTA2M0ZEMzMwQ0ZDNjMxNUIwQkY4OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGkZpH+oJ5wmJQS1IF1GUnQ17a
C7IDT0YIDOaSogtsk5hhU5sQhvVHX4XNnvq3tnk0V9x9Zg9mEFpQPRdXzy3nM3In
QJUhGiNi08Gsf0+LJwT6ME1tZBfAHBv3IYwQNhKlp089kdzocm+hvI7ZYfqjODpg
ydwtlR0kkN7qASJ/QQa3MX4FxJiHFxwPkHBZ4KrQKep0CDG+wksWC0R2+E6q0YM9
z7cdhzYEmhqfQAphF8h6zOPN/FgXPUhr8hv8Hv+mIuJtiOfgq43T5+4MnJjCJ599
fyfalWrywQ/Uh7OqEi0cdZ34cRuv0P3e2B7hl5Ib1UUIK8ySMBj1zHxskT6TAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUAbRpUChfrtu1Bj/TMM/GMVsL+JowHwYDVR0j
BBgwFoAUraIH3R8j0EZ8Z+akCtf3NZeFoTcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DOEM3QUJCOUI2QzIyOTc1NjE2MjQ4QzQ4QjlFODM0NjYz
M0MzMzVDMEQ2NjU4MTE2RTUyOEU2MEQ4N0RFNjYyLzAvQURBMjA3REQxRjIzRDA0
NjdDNjdFNkE0MEFEN0Y3MzU5Nzg1QTEzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BREEyMDdERDFGMjNEMDQ2N0M2
N0U2QTQwQUQ3RjczNTk3ODVBMTM3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzhDN0FCQjlCNkMyMjk3NTYxNjI0OEM0OEI5RTgzNDY2MzNDMzM1QzBE
NjY1ODExNkU1MjhFNjBEODdERTY2Mi8wLzM0MzUyZTMyMzMzOTJlMzYzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM4MzUzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3vPDAN
BgkqhkiG9w0BAQsFAAOCAQEAWtPtrdkZHfkd9FyA62znPmedrb6IUagygH8CtQ6j
4tZAOF7SUrc05SlpD0NzohwCSorKnn/QwymSEEGVt5s5vtvFoZm+HD3JpZ3tntdt
h9bHZE/ZMPUoWO7Qn9PHR+/PpCch0G5BR6tz2gObgtxsWYsiU9h/I8jdVFrqDN58
YChrTSjOahBAak1FdtCVIyFxxUobu84+AtbJ4GJ0Tdpv22Yl3OENiLs4VKviPeEO
b5G52osPCwQywlNgsL+56nHdrX1emULSB+octUZT8XqedjFpacFJaow7ckTXuMFI
UCAAvnecpvaqwiPhR6QUvkAA9NqdfiKS2rp15lMNkkaS5Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:23 2025 by rpki-client