Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/34352e3232392e3234372e302f32342d3234203d3e20333936393832.roa
File:                     34352e3232392e3234372e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          xhMa/0XQbaXYDntWXZVrzgy/P5ScIed9/zhAvMn/cZg=
Subject key identifier:   58:FF:57:FD:33:4F:19:59:33:F0:4A:FB:66:29:15:C1:5D:88:91:B9
Certificate issuer:       /CN=8EEE8A60C988421683DBC2FDDE169C9AA912EF90
Certificate serial:       02E3FF3315B1D701E7E400F97660C4B7638CF9A2
Authority key identifier: 8E:EE:8A:60:C9:88:42:16:83:DB:C2:FD:DE:16:9C:9A:A9:12:EF:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/34352e3232392e3234372e302f32342d3234203d3e20333936393832.roa
Signing time:             Fri 04 Jul 2025 14:24:35 +0000
ROA not before:           Fri 04 Jul 2025 14:19:35 +0000
ROA not after:            Fri 03 Jul 2026 14:24:35 +0000
asID:                     396982
IP address blocks:        45.229.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e3:ff:33:15:b1:d7:01:e7:e4:00:f9:76:60:c4:b7:63:8c:f9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EEE8A60C988421683DBC2FDDE169C9AA912EF90
        Validity
            Not Before: Jul  4 14:19:35 2025 GMT
            Not After : Jul  3 14:24:35 2026 GMT
        Subject: CN=58FF57FD334F195933F04AFB662915C15D8891B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8d:88:54:b9:e7:76:a2:53:ce:88:87:86:3b:
                    68:37:49:75:b5:09:a8:16:06:b0:6e:ce:19:c4:6b:
                    8b:d2:2b:1c:b8:af:8b:4d:9e:e6:1e:25:f9:4d:35:
                    ab:f1:d3:f0:ef:9b:88:0d:50:8f:0c:67:45:82:fc:
                    2f:28:ca:a8:7b:53:d5:83:52:41:6c:8a:07:d4:28:
                    58:c7:bc:16:14:1b:ad:74:8a:30:8b:47:7e:f5:6a:
                    11:50:57:26:64:3c:e0:d5:0e:4d:74:b5:9f:a2:4a:
                    2e:23:75:77:6d:6b:43:9e:a1:41:2f:1e:f1:44:09:
                    8e:86:5b:ab:f3:35:cd:89:32:f0:12:6f:10:fc:70:
                    41:1e:8c:99:32:ad:14:03:3c:2f:d1:b3:76:2e:79:
                    0a:99:85:9d:cf:d6:a3:f5:98:31:77:5f:3d:85:5f:
                    ee:4d:ed:55:74:d0:80:6f:be:21:b7:8d:86:8a:64:
                    ba:b0:2c:b8:db:db:93:96:de:a2:3f:4f:f0:1c:e8:
                    60:d3:a3:a2:a3:7c:85:b7:9f:4c:d1:37:c8:58:32:
                    dd:df:a1:96:0f:37:4e:14:fe:4d:e4:c4:97:7d:c4:
                    bd:24:e6:ce:b2:b0:8e:ba:95:18:df:2b:12:23:4a:
                    c9:fe:b9:8e:ca:89:30:1f:3f:5e:38:7c:8c:19:ae:
                    ef:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FF:57:FD:33:4F:19:59:33:F0:4A:FB:66:29:15:C1:5D:88:91:B9
            X509v3 Authority Key Identifier:
                keyid:8E:EE:8A:60:C9:88:42:16:83:DB:C2:FD:DE:16:9C:9A:A9:12:EF:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/34352e3232392e3234372e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:4d:db:4d:a4:f6:99:05:e5:12:0e:62:f4:89:29:1a:e9:7c:
         16:fd:94:27:3c:51:dd:93:9d:3a:4d:dd:3f:ea:1c:db:a1:0c:
         61:fc:e8:c6:82:f8:a3:a3:e4:2a:fa:3b:cb:c5:92:8e:72:af:
         f6:6a:39:ee:a7:aa:d7:ea:15:67:81:e4:ea:ad:d8:bf:0e:38:
         9c:e0:3a:f8:f1:6d:c3:ea:44:1d:bb:76:1c:79:60:3c:63:4b:
         f6:a5:78:ad:a1:90:0b:1f:62:79:bd:c7:02:7f:61:c8:b1:f5:
         05:fe:83:78:7a:30:b9:d8:22:9c:d3:83:11:68:30:1c:5a:02:
         82:bc:28:e8:56:fc:01:7f:b7:76:fe:34:30:5c:55:7c:84:b6:
         7d:55:32:f6:4b:de:68:ac:11:0f:ac:71:42:42:99:c5:24:6a:
         89:e7:1b:c3:d4:2d:73:29:8f:3a:99:0f:67:31:78:21:c0:06:
         10:bc:9d:db:5c:8b:f7:2c:09:7b:7e:ac:27:13:64:fd:72:bf:
         fe:9b:18:8a:0b:c9:c2:2f:a3:74:4a:cb:bf:b4:96:07:1a:dc:
         2e:22:02:d5:e5:f3:28:5d:6e:e7:80:3b:d1:96:e5:00:0d:d5:
         65:b8:46:99:6c:6b:a7:f4:0f:6c:30:11:14:89:a0:1f:6c:99:
         b3:49:d7:77
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUAuP/MxWx1wHn5AD5dmDEt2OM+aIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVFRThBNjBDOTg4NDIxNjgzREJDMkZEREUxNjlDOUFB
OTEyRUY5MDAeFw0yNTA3MDQxNDE5MzVaFw0yNjA3MDMxNDI0MzVaMDMxMTAvBgNV
BAMTKDU4RkY1N0ZEMzM0RjE5NTkzM0YwNEFGQjY2MjkxNUMxNUQ4ODkxQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUjYhUued2olPOiIeGO2g3SXW1
CagWBrBuzhnEa4vSKxy4r4tNnuYeJflNNavx0/Dvm4gNUI8MZ0WC/C8oyqh7U9WD
UkFsigfUKFjHvBYUG610ijCLR371ahFQVyZkPODVDk10tZ+iSi4jdXdta0OeoUEv
HvFECY6GW6vzNc2JMvASbxD8cEEejJkyrRQDPC/Rs3YueQqZhZ3P1qP1mDF3Xz2F
X+5N7VV00IBvviG3jYaKZLqwLLjb25OW3qI/T/Ac6GDTo6KjfIW3n0zRN8hYMt3f
oZYPN04U/k3kxJd9xL0k5s6ysI66lRjfKxIjSsn+uY7KiTAfP144fIwZru+FAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUWP9X/TNPGVkz8Er7ZikVwV2IkbkwHwYDVR0j
BBgwFoAUju6KYMmIQhaD28L93hacmqkS75AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQkMxMzQ3NENCQzYxMEY4RjA2MDg0RDVBMEQ1OTUzQTAz
MjZFNzcxOTE4NzE1NTg0QzBDOTBBNTY4NkZCQjgyLzAvOEVFRThBNjBDOTg4NDIx
NjgzREJDMkZEREUxNjlDOUFBOTEyRUY5MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RUVFOEE2MEM5ODg0MjE2ODNE
QkMyRkRERTE2OUM5QUE5MTJFRjkwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREJDMTM0NzRDQkM2MTBGOEYwNjA4NEQ1QTBENTk1M0EwMzI2RTc3MTkx
ODcxNTU4NEMwQzkwQTU2ODZGQkI4Mi8wLzM0MzUyZTMyMzIzOTJlMzIzNDM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM2MzkzODMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeX3
MA0GCSqGSIb3DQEBCwUAA4IBAQAYTdtNpPaZBeUSDmL0iSka6XwW/ZQnPFHdk506
Td0/6hzboQxh/OjGgvijo+Qq+jvLxZKOcq/2ajnup6rX6hVngeTqrdi/Djic4Dr4
8W3D6kQdu3YceWA8Y0v2pXitoZALH2J5vccCf2HIsfUF/oN4ejC52CKc04MRaDAc
WgKCvCjoVvwBf7d2/jQwXFV8hLZ9VTL2S95orBEPrHFCQpnFJGqJ5xvD1C1zKY86
mQ9nMXghwAYQvJ3bXIv3LAl7fqwnE2T9cr/+mxiKC8nCL6N0Ssu/tJYHGtwuIgLV
5fMoXW7ngDvRluUADdVluEaZbGun9A9sMBEUiaAfbJmzSdd3
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:51:16 2025 by rpki-client