Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3231302e302f32342d3234203d3e20323635373239.roa
File:                     34352e372e3231302e302f32342d3234203d3e20323635373239.roa (raw, json)
Hash identifier:          5prloGlhLa609prU+l4pRBE3Hv1cfQP1iPhjf5H8ziI=
Subject key identifier:   63:BA:80:35:2D:0C:0F:8A:A9:B4:63:C3:23:0A:1E:EA:BF:76:4D:1B
Certificate issuer:       /CN=3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A
Certificate serial:       10B1A0EE2E5CF90FACAEA60B8AE212F61761AAF0
Authority key identifier: 3A:74:8E:67:E7:C3:9A:7A:19:6D:27:CB:2F:4D:E6:C9:B8:3D:42:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3231302e302f32342d3234203d3e20323635373239.roa
Signing time:             Tue 04 Feb 2025 19:59:43 +0000
ROA not before:           Tue 04 Feb 2025 19:54:43 +0000
ROA not after:            Tue 03 Feb 2026 19:59:43 +0000
asID:                     265729
IP address blocks:        45.7.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 00:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b1:a0:ee:2e:5c:f9:0f:ac:ae:a6:0b:8a:e2:12:f6:17:61:aa:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A
        Validity
            Not Before: Feb  4 19:54:43 2025 GMT
            Not After : Feb  3 19:59:43 2026 GMT
        Subject: CN=63BA80352D0C0F8AA9B463C3230A1EEABF764D1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:3a:5e:51:66:ef:63:41:ae:51:6f:7f:8c:9b:
                    b7:52:78:2e:2d:ba:a1:e7:3c:fe:d5:89:5d:57:3c:
                    9d:83:8f:6f:2d:fd:de:4c:2c:4f:66:06:81:a3:8f:
                    df:69:e9:b2:97:2e:7f:0a:48:e0:5f:df:4c:52:37:
                    0a:dc:9e:dd:12:54:be:55:24:62:1a:db:95:87:e0:
                    c7:bc:6e:a9:66:29:1c:b7:bf:8e:4d:87:db:72:96:
                    fa:1f:ca:05:cb:b2:90:33:21:95:e3:72:45:26:24:
                    4f:25:f4:26:99:36:2c:d0:94:a2:e9:20:31:be:a8:
                    01:03:3e:61:cf:8f:07:b6:50:1c:f8:78:ee:2a:03:
                    f0:f5:e4:c7:9b:c0:e0:12:bb:ed:cf:ce:a3:ae:5a:
                    9f:ca:e9:64:c8:76:9a:90:03:98:9f:cc:db:4c:36:
                    a8:b9:f5:a4:c4:ea:ff:2d:fd:34:84:ed:3d:38:33:
                    4f:23:dd:ea:01:a7:fe:4e:14:e3:61:e9:1f:e2:1a:
                    d9:10:1e:0a:34:e0:87:3a:41:24:f0:e3:69:5c:b5:
                    ac:64:4b:08:66:86:3f:5e:67:d6:db:55:9d:c4:4b:
                    7a:b5:9c:33:2c:8a:71:38:23:20:59:a9:c5:08:44:
                    05:f7:57:5c:0c:38:43:0c:07:49:04:2f:a4:10:67:
                    db:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BA:80:35:2D:0C:0F:8A:A9:B4:63:C3:23:0A:1E:EA:BF:76:4D:1B
            X509v3 Authority Key Identifier:
                keyid:3A:74:8E:67:E7:C3:9A:7A:19:6D:27:CB:2F:4D:E6:C9:B8:3D:42:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3231302e302f32342d3234203d3e20323635373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:d5:db:a8:1a:59:79:53:9d:2d:99:ce:3c:25:53:1d:c1:e2:
         24:b9:d8:b1:13:2a:6c:de:5d:7b:ee:e6:ac:c7:d5:15:86:f7:
         6b:df:5b:14:be:f2:d4:31:59:d6:a9:e2:bd:d7:ef:f7:1d:56:
         c4:2a:cf:1a:37:ba:d8:97:76:24:f9:13:ae:82:7a:4e:02:ff:
         ba:3d:e4:42:da:4a:b8:9e:46:05:7d:5f:9e:de:cb:32:4d:91:
         9c:a2:43:6e:fa:79:9d:18:f5:c5:66:08:ca:9e:8f:aa:93:59:
         39:cc:09:28:7c:e4:48:5d:05:d1:2c:68:f5:97:99:08:8a:fd:
         2c:d1:ca:de:eb:d2:0e:cd:ec:34:d4:27:3f:4e:d8:4c:c1:3b:
         e3:4f:63:fb:cc:50:29:86:fb:53:4c:64:58:b7:3e:b2:d5:c0:
         2c:24:21:0e:f4:b3:71:f4:63:e4:04:f3:18:28:c8:d5:60:1c:
         81:f6:52:76:e4:9c:73:b3:fb:70:48:08:07:c0:25:ce:c7:a6:
         83:27:d5:9e:c8:9f:e0:0c:7f:3b:c5:66:6a:4c:48:85:a6:fc:
         4e:aa:b9:11:2d:85:09:2e:51:ca:08:2b:b7:2f:c6:7c:4b:b2:
         91:54:df:5b:41:7b:a2:0b:26:93:63:0e:bf:4f:e5:cc:7a:0b:
         48:4a:fb:2d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUELGg7i5c+Q+srqYLiuIS9hdhqvAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E3NDhFNjdFN0MzOUE3QTE5NkQyN0NCMkY0REU2QzlC
ODNENDI3QTAeFw0yNTAyMDQxOTU0NDNaFw0yNjAyMDMxOTU5NDNaMDMxMTAvBgNV
BAMTKDYzQkE4MDM1MkQwQzBGOEFBOUI0NjNDMzIzMEExRUVBQkY3NjREMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxOl5RZu9jQa5Rb3+Mm7dSeC4t
uqHnPP7ViV1XPJ2Dj28t/d5MLE9mBoGjj99p6bKXLn8KSOBf30xSNwrcnt0SVL5V
JGIa25WH4Me8bqlmKRy3v45Nh9tylvofygXLspAzIZXjckUmJE8l9CaZNizQlKLp
IDG+qAEDPmHPjwe2UBz4eO4qA/D15MebwOASu+3PzqOuWp/K6WTIdpqQA5ifzNtM
Nqi59aTE6v8t/TSE7T04M08j3eoBp/5OFONh6R/iGtkQHgo04Ic6QSTw42lctaxk
Swhmhj9eZ9bbVZ3ES3q1nDMsinE4IyBZqcUIRAX3V1wMOEMMB0kEL6QQZ9tHAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUY7qANS0MD4qptGPDIwoe6r92TRswHwYDVR0j
BBgwFoAUOnSOZ+fDmnoZbSfLL03mybg9QnowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRjlGMjY2OURDQTI4RTUyNTkxOUU0NEU0RkVEQ0Q1RkZE
MEZERjBGRUVBQTQyMzAyNTc0OUEzQ0FBMkM1NUZCLzAvM0E3NDhFNjdFN0MzOUE3
QTE5NkQyN0NCMkY0REU2QzlCODNENDI3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQTc0OEU2N0U3QzM5QTdBMTk2
RDI3Q0IyRjRERTZDOUI4M0Q0MjdBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0Y5RjI2NjlEQ0EyOEU1MjU5MTlFNDRFNEZFRENENUZGRDBGREYwRkVF
QUE0MjMwMjU3NDlBM0NBQTJDNTVGQi8wLzM0MzUyZTM3MmUzMjMxMzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNzMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtB9IwDQYJ
KoZIhvcNAQELBQADggEBAC7V26gaWXlTnS2ZzjwlUx3B4iS52LETKmzeXXvu5qzH
1RWG92vfWxS+8tQxWdap4r3X7/cdVsQqzxo3utiXdiT5E66Cek4C/7o95ELaSrie
RgV9X57eyzJNkZyiQ276eZ0Y9cVmCMqej6qTWTnMCSh85EhdBdEsaPWXmQiK/SzR
yt7r0g7N7DTUJz9O2EzBO+NPY/vMUCmG+1NMZFi3PrLVwCwkIQ70s3H0Y+QE8xgo
yNVgHIH2UnbknHOz+3BICAfAJc7HpoMn1Z7In+AMfzvFZmpMSIWm/E6quREthQku
UcoIK7cvxnxLspFU31tBe6ILJpNjDr9P5cx6C0hK+y0=
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:57 2025 by rpki-client