Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/34352e3233382e3137392e302f32342d3234203d3e20323636383531.roa
File:                     34352e3233382e3137392e302f32342d3234203d3e20323636383531.roa (raw, json)
Hash identifier:          aUacTuXOap9nchWmC2evnA8fysvQ9ETMnU7UD3MzOto=
Subject key identifier:   DD:EE:A6:FF:26:0E:51:16:C6:2E:3F:91:C8:7B:45:38:F7:38:A3:09
Certificate issuer:       /CN=84B320834CA10CE018169848F7AE0810EB3E7C5D
Certificate serial:       5EA81C5EA1CF3F98FA008973B88D8D87A913DB99
Authority key identifier: 84:B3:20:83:4C:A1:0C:E0:18:16:98:48:F7:AE:08:10:EB:3E:7C:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/34352e3233382e3137392e302f32342d3234203d3e20323636383531.roa
Signing time:             Tue 04 Feb 2025 18:20:52 +0000
ROA not before:           Tue 04 Feb 2025 18:15:52 +0000
ROA not after:            Tue 03 Feb 2026 18:20:52 +0000
asID:                     266851
IP address blocks:        45.238.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a8:1c:5e:a1:cf:3f:98:fa:00:89:73:b8:8d:8d:87:a9:13:db:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B320834CA10CE018169848F7AE0810EB3E7C5D
        Validity
            Not Before: Feb  4 18:15:52 2025 GMT
            Not After : Feb  3 18:20:52 2026 GMT
        Subject: CN=DDEEA6FF260E5116C62E3F91C87B4538F738A309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:d1:d2:64:f9:d0:8e:5f:5f:9f:98:34:55:
                    6f:ae:72:aa:f8:81:10:26:1e:56:1b:2b:a2:19:a5:
                    46:1a:d9:52:23:5b:b6:64:cc:5b:e0:37:f7:05:a9:
                    1e:cc:1c:a7:e0:02:14:63:d0:f5:20:6e:21:5d:4f:
                    8a:ce:0f:d7:7f:8e:64:83:93:ee:74:b3:1c:ae:91:
                    aa:98:cf:ef:c9:c9:a2:6a:a1:69:96:39:bf:9f:8b:
                    f7:8d:27:75:c3:b4:20:3b:1f:42:d8:2e:13:a3:f1:
                    10:15:43:10:cb:b3:8a:4c:39:d9:fc:ea:4a:f5:5e:
                    5b:30:5c:04:d2:2a:df:fe:96:13:05:e7:78:1c:e4:
                    5d:e0:cc:c8:ff:33:58:46:e0:47:78:77:16:01:a5:
                    c8:a0:d7:7d:6e:42:41:bd:4c:80:26:89:9b:24:a9:
                    9b:c6:b4:00:f0:e6:ac:95:ae:49:83:12:5a:a6:49:
                    3e:7d:9e:6b:af:0e:ec:1e:0d:9e:c9:59:a8:37:8e:
                    f9:07:ad:4c:ea:0e:17:9e:35:2c:f0:0d:b0:8f:7a:
                    be:47:38:1c:59:14:45:a6:ef:26:23:f3:22:5e:a7:
                    86:ab:fa:97:af:ca:b1:c5:0b:cf:fa:a8:04:6e:d1:
                    34:a4:68:f2:fd:d6:a9:39:71:d4:e8:f3:24:51:d8:
                    74:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EE:A6:FF:26:0E:51:16:C6:2E:3F:91:C8:7B:45:38:F7:38:A3:09
            X509v3 Authority Key Identifier:
                keyid:84:B3:20:83:4C:A1:0C:E0:18:16:98:48:F7:AE:08:10:EB:3E:7C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/34352e3233382e3137392e302f32342d3234203d3e20323636383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:fd:3c:c1:76:c2:6d:89:60:1c:18:39:af:4c:d9:4d:2c:f2:
         c8:13:11:1c:8e:ba:ee:ab:e5:37:d8:10:ce:af:b4:78:fd:1e:
         c2:81:cc:8a:14:bc:29:42:e0:60:61:4e:21:9d:c9:fa:f7:46:
         46:25:fa:0b:f5:c1:70:52:15:e0:92:95:d3:17:57:66:19:6a:
         12:6d:77:46:c7:8b:59:0e:3c:2a:2d:35:1a:1b:5f:3a:c4:4a:
         a3:d2:b3:ed:7a:4a:ee:2a:30:3a:9a:d4:2f:f2:03:4f:32:74:
         05:c5:8f:12:52:02:bd:1f:0b:d8:15:c2:5c:4c:c6:6d:e9:25:
         ed:91:27:cd:06:19:99:0e:8f:0d:1c:19:60:32:8d:ad:e8:e9:
         1d:2d:bf:83:a1:f8:dd:a3:52:47:bf:89:c5:d1:91:1c:08:6a:
         37:cd:2d:f7:a7:ed:40:c9:72:2e:47:f5:ac:b6:d0:62:02:98:
         2e:50:9f:d7:3e:73:59:0c:23:1d:9c:b3:48:b9:07:d0:20:21:
         21:43:c9:7d:da:dd:90:0c:26:29:e8:0d:d9:b5:13:d8:6f:61:
         e6:64:f9:cb:e6:fa:df:e0:da:49:ee:57:9a:07:f4:cb:bd:66:
         f0:2d:23:7f:8d:a2:66:4f:9f:66:2f:fb:17:a7:5a:f7:c7:49:
         f5:e0:7b:94
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXqgcXqHPP5j6AIlzuI2Nh6kT25kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODRCMzIwODM0Q0ExMENFMDE4MTY5ODQ4RjdBRTA4MTBF
QjNFN0M1RDAeFw0yNTAyMDQxODE1NTJaFw0yNjAyMDMxODIwNTJaMDMxMTAvBgNV
BAMTKERERUVBNkZGMjYwRTUxMTZDNjJFM0Y5MUM4N0I0NTM4RjczOEEzMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmt9HSZPnQjl9fn5g0VW+ucqr4
gRAmHlYbK6IZpUYa2VIjW7ZkzFvgN/cFqR7MHKfgAhRj0PUgbiFdT4rOD9d/jmSD
k+50sxyukaqYz+/JyaJqoWmWOb+fi/eNJ3XDtCA7H0LYLhOj8RAVQxDLs4pMOdn8
6kr1XlswXATSKt/+lhMF53gc5F3gzMj/M1hG4Ed4dxYBpcig131uQkG9TIAmiZsk
qZvGtADw5qyVrkmDElqmST59nmuvDuweDZ7JWag3jvkHrUzqDheeNSzwDbCPer5H
OBxZFEWm7yYj8yJep4ar+pevyrHFC8/6qARu0TSkaPL91qk5cdTo8yRR2HQJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU3e6m/yYOURbGLj+RyHtFOPc4owkwHwYDVR0j
BBgwFoAUhLMgg0yhDOAYFphI964IEOs+fF0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENkY5RDE0QkU5QTI4NDNFNTY1RTlBRDFERUI0RUE4Mjc2
M0NFMDg1ODE1NjMzRDhGOENGNjA2OTNCODVCNzE0LzAvODRCMzIwODM0Q0ExMENF
MDE4MTY5ODQ4RjdBRTA4MTBFQjNFN0M1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NEIzMjA4MzRDQTEwQ0UwMTgx
Njk4NDhGN0FFMDgxMEVCM0U3QzVELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDZGOUQxNEJFOUEyODQzRTU2NUU5QUQxREVCNEVBODI3NjNDRTA4NTgx
NTYzM0Q4RjhDRjYwNjkzQjg1QjcxNC8wLzM0MzUyZTMyMzMzODJlMzEzNzM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzgzNTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALe6z
MA0GCSqGSIb3DQEBCwUAA4IBAQAK/TzBdsJtiWAcGDmvTNlNLPLIExEcjrruq+U3
2BDOr7R4/R7CgcyKFLwpQuBgYU4hncn690ZGJfoL9cFwUhXgkpXTF1dmGWoSbXdG
x4tZDjwqLTUaG186xEqj0rPtekruKjA6mtQv8gNPMnQFxY8SUgK9HwvYFcJcTMZt
6SXtkSfNBhmZDo8NHBlgMo2t6OkdLb+Dofjdo1JHv4nF0ZEcCGo3zS33p+1AyXIu
R/WsttBiApguUJ/XPnNZDCMdnLNIuQfQICEhQ8l92t2QDCYp6A3ZtRPYb2HmZPnL
5vrf4NpJ7leaB/TLvWbwLSN/jaJmT59mL/sXp1r3x0n14HuU
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:55:03 2025 by rpki-client