Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/34352e3139302e3234302e302f32342d3234203d3e20323635363135.roa
File:                     34352e3139302e3234302e302f32342d3234203d3e20323635363135.roa (raw, json)
Hash identifier:          s6dzVaF4uLl4oTyKAWmdjyAew5MxhYW/V5SNs62f04w=
Subject key identifier:   DA:35:20:48:9F:99:72:A1:66:1D:FF:12:72:CE:FB:7D:99:EC:BD:7E
Certificate issuer:       /CN=B51B463646421D5ECF9038E8B33EAF99E6E4D824
Certificate serial:       5C7A40E0AC6F342868F78323C88775A0CED816A6
Authority key identifier: B5:1B:46:36:46:42:1D:5E:CF:90:38:E8:B3:3E:AF:99:E6:E4:D8:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/34352e3139302e3234302e302f32342d3234203d3e20323635363135.roa
Signing time:             Tue 04 Feb 2025 18:35:37 +0000
ROA not before:           Tue 04 Feb 2025 18:30:37 +0000
ROA not after:            Tue 03 Feb 2026 18:35:37 +0000
asID:                     265615
IP address blocks:        45.190.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:7a:40:e0:ac:6f:34:28:68:f7:83:23:c8:87:75:a0:ce:d8:16:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B51B463646421D5ECF9038E8B33EAF99E6E4D824
        Validity
            Not Before: Feb  4 18:30:37 2025 GMT
            Not After : Feb  3 18:35:37 2026 GMT
        Subject: CN=DA3520489F9972A1661DFF1272CEFB7D99ECBD7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a7:d1:f7:82:66:26:7d:a3:e0:8a:54:e0:f9:
                    78:e4:b5:f5:0a:84:73:bf:0f:19:a9:be:a4:a1:fd:
                    92:39:c3:66:ed:59:bc:16:3b:20:81:91:6d:54:b0:
                    68:72:6f:4d:ca:02:e0:a2:72:c3:f9:0d:3e:8a:42:
                    84:cf:fd:97:66:75:56:d2:13:7d:a8:5c:29:e6:86:
                    7b:c1:03:5c:06:64:a5:11:ff:52:b7:d8:be:33:92:
                    85:a7:77:af:09:51:cf:ee:d5:94:89:07:6e:cb:e6:
                    bf:df:48:9d:44:20:ba:75:95:55:2a:19:09:8d:bc:
                    6b:ba:35:08:d8:ae:bf:26:0f:ce:0c:87:10:f0:c5:
                    5e:8b:0b:26:f2:d7:c5:3f:3f:b1:2d:d9:9d:fe:3f:
                    b4:0f:ad:d5:1d:fa:5b:fb:64:50:5d:94:8b:71:28:
                    61:4a:78:2c:11:46:1a:a0:f7:86:bc:06:ae:aa:ff:
                    fa:62:e6:96:98:f1:af:8e:de:f6:84:04:36:be:34:
                    7d:c1:c2:27:3c:f5:f2:e8:4e:96:9a:68:a4:db:2d:
                    30:6f:e0:fe:03:4a:25:5d:28:6a:cf:ca:27:e8:15:
                    cd:a2:06:ee:4f:e6:36:dc:c1:86:71:34:62:76:4a:
                    4c:15:24:32:11:32:51:56:df:8b:94:0f:49:2e:ae:
                    74:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:35:20:48:9F:99:72:A1:66:1D:FF:12:72:CE:FB:7D:99:EC:BD:7E
            X509v3 Authority Key Identifier:
                keyid:B5:1B:46:36:46:42:1D:5E:CF:90:38:E8:B3:3E:AF:99:E6:E4:D8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/34352e3139302e3234302e302f32342d3234203d3e20323635363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:d3:96:65:97:58:be:0e:a1:84:d3:85:26:a5:7e:62:99:5a:
         ad:07:6f:0e:cc:24:9a:96:42:a6:ab:47:10:bf:55:f4:0c:70:
         a6:2c:71:50:df:27:3f:76:91:da:33:67:34:37:63:4c:59:0a:
         f6:07:4f:a5:11:8b:47:45:bb:5e:ed:65:77:df:1b:04:c4:8f:
         ec:80:9b:d9:ef:b7:ba:06:23:37:e0:80:a7:22:8e:70:19:01:
         5a:39:e3:58:d0:62:30:22:a8:f1:fd:a1:df:0c:6c:de:ca:df:
         08:d4:84:9c:86:2d:f3:c7:e0:7f:f0:5d:df:bc:f8:c8:be:6e:
         27:64:7c:0c:7b:4e:59:d9:24:72:15:0f:85:07:12:9d:17:fc:
         b3:04:ac:71:85:2f:d6:d5:b7:11:a8:49:98:ea:04:cb:3d:ff:
         95:4e:a3:6a:22:d1:c3:20:8a:14:d6:53:63:c2:ef:d0:c6:38:
         3d:1d:b6:8e:b9:d6:fa:f0:44:47:19:6c:18:1d:cb:5f:d6:fc:
         56:bf:11:20:ab:e0:a0:98:3c:da:79:b9:44:be:e0:42:04:09:
         d9:f9:31:37:30:bb:53:44:34:b5:a0:36:15:2c:4b:fa:ff:05:
         b9:fe:7d:6f:5c:a8:85:b9:8c:db:4f:75:c7:4e:7c:bd:01:77:
         5d:8b:25:68
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXHpA4KxvNCho94MjyId1oM7YFqYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjUxQjQ2MzY0NjQyMUQ1RUNGOTAzOEU4QjMzRUFGOTlF
NkU0RDgyNDAeFw0yNTAyMDQxODMwMzdaFw0yNjAyMDMxODM1MzdaMDMxMTAvBgNV
BAMTKERBMzUyMDQ4OUY5OTcyQTE2NjFERkYxMjcyQ0VGQjdEOTlFQ0JEN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQp9H3gmYmfaPgilTg+XjktfUK
hHO/DxmpvqSh/ZI5w2btWbwWOyCBkW1UsGhyb03KAuCicsP5DT6KQoTP/ZdmdVbS
E32oXCnmhnvBA1wGZKUR/1K32L4zkoWnd68JUc/u1ZSJB27L5r/fSJ1EILp1lVUq
GQmNvGu6NQjYrr8mD84MhxDwxV6LCyby18U/P7Et2Z3+P7QPrdUd+lv7ZFBdlItx
KGFKeCwRRhqg94a8Bq6q//pi5paY8a+O3vaEBDa+NH3Bwic89fLoTpaaaKTbLTBv
4P4DSiVdKGrPyifoFc2iBu5P5jbcwYZxNGJ2SkwVJDIRMlFW34uUD0kurnSVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU2jUgSJ+ZcqFmHf8Scs77fZnsvX4wHwYDVR0j
BBgwFoAUtRtGNkZCHV7PkDjosz6vmebk2CQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQzc4MDhEM0U4RTkzNTVFN0JGRjYwRDk2NUQ2MTMwRDcx
NDFEQzk1MkQ0OUREQzMwMkZFMUFGOUZCMDQ2NUYzLzAvQjUxQjQ2MzY0NjQyMUQ1
RUNGOTAzOEU4QjMzRUFGOTlFNkU0RDgyNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNTFCNDYzNjQ2NDIxRDVFQ0Y5
MDM4RThCMzNFQUY5OUU2RTREODI0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREM3ODA4RDNFOEU5MzU1RTdCRkY2MEQ5NjVENjEzMEQ3MTQxREM5NTJE
NDlEREMzMDJGRTFBRjlGQjA0NjVGMy8wLzM0MzUyZTMxMzkzMDJlMzIzNDMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzMTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALb7w
MA0GCSqGSIb3DQEBCwUAA4IBAQAI05Zll1i+DqGE04UmpX5imVqtB28OzCSalkKm
q0cQv1X0DHCmLHFQ3yc/dpHaM2c0N2NMWQr2B0+lEYtHRbte7WV33xsExI/sgJvZ
77e6BiM34ICnIo5wGQFaOeNY0GIwIqjx/aHfDGzeyt8I1ISchi3zx+B/8F3fvPjI
vm4nZHwMe05Z2SRyFQ+FBxKdF/yzBKxxhS/W1bcRqEmY6gTLPf+VTqNqItHDIIoU
1lNjwu/Qxjg9HbaOudb68ERHGWwYHctf1vxWvxEgq+CgmDzaeblEvuBCBAnZ+TE3
MLtTRDS1oDYVLEv6/wW5/n1vXKiFuYzbT3XHTny9AXddiyVo
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:07:57 2025 by rpki-client