Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/34352e3136362e37382e302f32342d3234203d3e20323637373331.roa
File:                     34352e3136362e37382e302f32342d3234203d3e20323637373331.roa (raw, json)
Hash identifier:          EM9TUn3h7lwCiLWHIgMAF8VDHcfWP+X+5HbBr9jsvm8=
Subject key identifier:   5E:79:90:58:4E:48:65:87:67:87:A0:AE:30:D7:AE:84:F3:BA:75:13
Certificate issuer:       /CN=1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB
Certificate serial:       48CA6EA533892A2B2A20EDBD2832E13B8B62CE6A
Authority key identifier: 1F:5F:5C:11:C4:97:16:D8:46:EA:AF:C3:D8:25:E3:CE:A2:CF:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/34352e3136362e37382e302f32342d3234203d3e20323637373331.roa
Signing time:             Tue 04 Feb 2025 18:19:02 +0000
ROA not before:           Tue 04 Feb 2025 18:14:02 +0000
ROA not after:            Tue 03 Feb 2026 18:19:02 +0000
asID:                     267731
IP address blocks:        45.166.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ca:6e:a5:33:89:2a:2b:2a:20:ed:bd:28:32:e1:3b:8b:62:ce:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB
        Validity
            Not Before: Feb  4 18:14:02 2025 GMT
            Not After : Feb  3 18:19:02 2026 GMT
        Subject: CN=5E7990584E4865876787A0AE30D7AE84F3BA7513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0c:8b:fe:ed:16:08:67:5f:bc:ef:4f:7c:ce:
                    88:b1:13:d2:02:9a:0e:74:26:4f:e6:c4:bf:e8:b8:
                    b5:b7:22:bb:61:a7:b8:da:a9:7d:5a:d2:b5:37:e2:
                    98:e4:5f:0f:79:61:ad:8f:9b:c2:cf:d5:c1:74:c9:
                    e8:13:e9:de:ec:4c:30:8b:99:c8:6f:5d:f1:90:35:
                    f8:65:a9:bb:33:60:92:fc:68:d7:17:c6:3f:c0:32:
                    45:56:e2:78:02:c9:8f:97:9d:23:de:5a:ba:11:d9:
                    31:67:97:bc:74:ba:45:6c:8d:c5:6e:eb:65:9d:60:
                    60:11:95:f8:1e:fc:f8:1d:d4:de:bc:b6:bd:09:de:
                    d4:60:ae:9c:b6:fc:52:be:64:01:e5:66:ff:e0:db:
                    44:31:b8:68:9f:9a:6c:b2:7c:ba:74:a4:ca:74:2b:
                    aa:fa:f2:f1:87:0c:5f:d0:f0:f3:20:a7:de:92:e9:
                    b6:fc:54:bb:a2:7f:45:0f:c1:7d:4f:f5:ee:9d:cc:
                    dd:0c:2c:31:cc:90:ce:c3:86:53:58:8b:3d:f6:c3:
                    4c:47:83:44:3f:dc:38:a9:d8:9f:01:29:d3:70:4e:
                    ac:16:43:e4:0e:62:df:5a:79:0a:44:0a:4e:29:b4:
                    5d:97:80:81:15:92:58:28:6c:3b:fa:03:08:ac:59:
                    f2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:79:90:58:4E:48:65:87:67:87:A0:AE:30:D7:AE:84:F3:BA:75:13
            X509v3 Authority Key Identifier:
                keyid:1F:5F:5C:11:C4:97:16:D8:46:EA:AF:C3:D8:25:E3:CE:A2:CF:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/34352e3136362e37382e302f32342d3234203d3e20323637373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:40:bf:48:35:a4:42:f6:75:d0:e4:c4:bf:c2:3a:19:9a:f4:
         1e:77:bd:d8:22:7a:94:29:e9:b9:59:12:40:3c:2b:91:6a:a1:
         18:34:c5:de:1e:ef:40:8c:05:0c:e7:1f:b3:01:8a:8e:db:c7:
         f6:cb:23:11:a5:9f:0e:7a:bc:05:71:21:f0:eb:0b:69:ca:da:
         2e:63:2d:c3:3b:4b:8d:e3:32:a6:ca:55:cb:75:ea:81:0f:ea:
         96:dc:08:2a:27:b4:9d:90:05:97:96:53:4c:3b:63:92:fd:9f:
         9e:f0:0a:48:3c:e5:f3:64:87:10:00:77:a8:21:6b:17:df:e6:
         eb:22:12:04:92:c8:7c:1d:24:2e:2f:40:75:51:d0:bd:a5:3c:
         8e:40:a7:25:87:7e:8a:03:4f:98:3f:30:55:c2:0a:a5:ec:df:
         25:4d:12:00:71:94:53:b1:27:3d:48:ce:58:3c:27:d2:d3:e2:
         f7:e9:f4:34:26:16:5a:23:00:6a:d1:0b:eb:84:31:96:17:61:
         e3:5c:a0:7a:e6:ff:ea:34:70:09:c2:ca:f2:9a:51:91:91:7d:
         ca:ce:3d:98:ee:be:62:ed:a8:6b:5f:98:16:a9:fe:24:b3:cc:
         37:38:70:45:31:83:26:3a:88:be:f5:44:10:40:bd:33:e4:e8:
         bb:e7:ed:2b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSMpupTOJKisqIO29KDLhO4tizmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1RjVDMTFDNDk3MTZEODQ2RUFBRkMzRDgyNUUzQ0VB
MkNGOTFEQjAeFw0yNTAyMDQxODE0MDJaFw0yNjAyMDMxODE5MDJaMDMxMTAvBgNV
BAMTKDVFNzk5MDU4NEU0ODY1ODc2Nzg3QTBBRTMwRDdBRTg0RjNCQTc1MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTDIv+7RYIZ1+87098zoixE9IC
mg50Jk/mxL/ouLW3Irthp7jaqX1a0rU34pjkXw95Ya2Pm8LP1cF0yegT6d7sTDCL
mchvXfGQNfhlqbszYJL8aNcXxj/AMkVW4ngCyY+XnSPeWroR2TFnl7x0ukVsjcVu
62WdYGARlfge/Pgd1N68tr0J3tRgrpy2/FK+ZAHlZv/g20QxuGifmmyyfLp0pMp0
K6r68vGHDF/Q8PMgp96S6bb8VLuif0UPwX1P9e6dzN0MLDHMkM7DhlNYiz32w0xH
g0Q/3Dip2J8BKdNwTqwWQ+QOYt9aeQpECk4ptF2XgIEVklgobDv6AwisWfI/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUXnmQWE5IZYdnh6CuMNeuhPO6dRMwHwYDVR0j
BBgwFoAUH19cEcSXFthG6q/D2CXjzqLPkdswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EREIyMDFGNkZBODJENTUxRkQ0ODA0NTIwRkE3N0RFM0E2
N0JEMTQ2MUI2NDA5OUM1REQ5RkM1RjVGQjA0Rjk4LzAvMUY1RjVDMTFDNDk3MTZE
ODQ2RUFBRkMzRDgyNUUzQ0VBMkNGOTFEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjVGNUMxMUM0OTcxNkQ4NDZF
QUFGQzNEODI1RTNDRUEyQ0Y5MURCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRERCMjAxRjZGQTgyRDU1MUZENDgwNDUyMEZBNzdERTNBNjdCRDE0NjFC
NjQwOTlDNUREOUZDNUY1RkIwNEY5OC8wLzM0MzUyZTMxMzYzNjJlMzczODJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM3MzMzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2mTjAN
BgkqhkiG9w0BAQsFAAOCAQEAg0C/SDWkQvZ10OTEv8I6GZr0Hne92CJ6lCnpuVkS
QDwrkWqhGDTF3h7vQIwFDOcfswGKjtvH9ssjEaWfDnq8BXEh8OsLacraLmMtwztL
jeMypspVy3XqgQ/qltwIKie0nZAFl5ZTTDtjkv2fnvAKSDzl82SHEAB3qCFrF9/m
6yISBJLIfB0kLi9AdVHQvaU8jkCnJYd+igNPmD8wVcIKpezfJU0SAHGUU7EnPUjO
WDwn0tPi9+n0NCYWWiMAatEL64Qxlhdh41ygeub/6jRwCcLK8ppRkZF9ys49mO6+
Yu2oa1+YFqn+JLPMNzhwRTGDJjqIvvVEEEC9M+Tou+ftKw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:54:18 2025 by rpki-client