Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E57A47B4F28A080B07D53B4693E7379F8999540D08464E6B58B3DF442AA86EDA/0/34352e3233372e3133332e302f32342d3234203d3e20323730303934.roa
File:                     34352e3233372e3133332e302f32342d3234203d3e20323730303934.roa (raw, json)
Hash identifier:          B+FCmxvFn4iSR6DwsF+IcrAPUcOTSSRrB2un3bVj7+0=
Subject key identifier:   E4:C8:D2:29:24:84:CC:F3:08:BB:A4:BA:5F:3B:E1:F4:62:78:55:5D
Certificate issuer:       /CN=277CF92D43DFA7251206BD015C9A1B143C90C8FD
Certificate serial:       21708F06039D70802B941B97AA172A84EC611990
Authority key identifier: 27:7C:F9:2D:43:DF:A7:25:12:06:BD:01:5C:9A:1B:14:3C:90:C8:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/277CF92D43DFA7251206BD015C9A1B143C90C8FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E57A47B4F28A080B07D53B4693E7379F8999540D08464E6B58B3DF442AA86EDA/0/34352e3233372e3133332e302f32342d3234203d3e20323730303934.roa
Signing time:             Tue 04 Feb 2025 17:59:27 +0000
ROA not before:           Tue 04 Feb 2025 17:54:27 +0000
ROA not after:            Tue 03 Feb 2026 17:59:27 +0000
asID:                     270094
IP address blocks:        45.237.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E57A47B4F28A080B07D53B4693E7379F8999540D08464E6B58B3DF442AA86EDA/0/277CF92D43DFA7251206BD015C9A1B143C90C8FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E57A47B4F28A080B07D53B4693E7379F8999540D08464E6B58B3DF442AA86EDA/0/277CF92D43DFA7251206BD015C9A1B143C90C8FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/277CF92D43DFA7251206BD015C9A1B143C90C8FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:70:8f:06:03:9d:70:80:2b:94:1b:97:aa:17:2a:84:ec:61:19:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=277CF92D43DFA7251206BD015C9A1B143C90C8FD
        Validity
            Not Before: Feb  4 17:54:27 2025 GMT
            Not After : Feb  3 17:59:27 2026 GMT
        Subject: CN=E4C8D2292484CCF308BBA4BA5F3BE1F46278555D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a8:71:cf:bc:c1:11:b0:42:79:ec:25:3b:3b:
                    61:e2:56:97:6f:77:cd:05:80:21:43:12:8c:af:dc:
                    77:fb:ce:d0:14:33:db:5d:5f:f4:59:bc:49:d3:31:
                    54:4c:7a:a1:c1:31:2a:45:22:28:6d:cf:bc:78:bf:
                    91:3b:bc:6e:cf:7e:b0:6a:c3:ac:56:68:47:76:0f:
                    04:ca:aa:da:3a:11:18:fd:43:68:33:b6:89:fb:35:
                    6b:f8:6d:47:8a:0a:83:55:5c:f6:e9:aa:85:7a:4b:
                    0e:6a:2a:40:6b:1a:9b:0d:fe:62:c7:c6:bb:0d:52:
                    38:5d:24:ff:87:d5:ba:e4:13:a6:01:42:44:2c:2f:
                    f3:f8:a6:de:95:ec:b2:dc:c6:cb:3c:cc:d9:24:e8:
                    15:f9:83:12:c8:60:6b:b1:d8:47:42:57:f6:fd:c6:
                    3f:7d:26:f2:11:2b:c6:5e:96:e9:94:1b:9d:01:95:
                    ef:2f:0b:5d:b9:cf:0b:14:c6:78:26:60:53:42:98:
                    61:d9:b5:30:b9:4b:85:70:b9:4e:7d:73:82:9b:40:
                    94:4d:6d:1b:70:33:57:6d:5e:c7:d3:e7:27:18:06:
                    27:a3:81:64:bc:c0:ca:14:63:02:58:0a:08:93:e2:
                    f9:64:19:7b:11:a3:4e:4b:a8:ea:28:e1:f5:28:db:
                    ef:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C8:D2:29:24:84:CC:F3:08:BB:A4:BA:5F:3B:E1:F4:62:78:55:5D
            X509v3 Authority Key Identifier:
                keyid:27:7C:F9:2D:43:DF:A7:25:12:06:BD:01:5C:9A:1B:14:3C:90:C8:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E57A47B4F28A080B07D53B4693E7379F8999540D08464E6B58B3DF442AA86EDA/0/277CF92D43DFA7251206BD015C9A1B143C90C8FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/277CF92D43DFA7251206BD015C9A1B143C90C8FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E57A47B4F28A080B07D53B4693E7379F8999540D08464E6B58B3DF442AA86EDA/0/34352e3233372e3133332e302f32342d3234203d3e20323730303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:4a:2d:3d:fe:3f:57:40:bb:dc:cf:08:4b:77:53:e1:fa:f2:
         a4:26:b3:fb:6d:9f:35:a3:06:d1:d5:77:56:ca:2d:8b:c3:59:
         4f:81:a2:51:e9:b8:09:3e:4c:20:c7:0c:a3:d7:2d:00:d0:67:
         cf:70:f8:cb:9f:c2:86:67:6a:60:66:2d:fb:49:9f:fd:63:89:
         6d:82:1b:de:1d:3f:cc:34:be:d1:04:f0:10:ad:8f:c1:23:53:
         23:95:6d:42:aa:5a:39:79:a8:04:d1:8e:14:ea:91:e7:91:ed:
         0f:09:c7:64:e3:96:9a:f2:e6:5b:b2:6e:17:9a:fd:80:38:0f:
         cb:4e:c4:36:69:0f:ff:7e:c9:c7:ec:60:1e:17:b8:21:66:1d:
         7f:de:3c:18:e8:97:6d:c2:6d:1d:e1:d9:a1:0e:e3:b1:3b:ff:
         ae:a4:2e:14:ce:c6:3d:93:68:be:cd:39:9e:fd:92:4e:f3:5a:
         cb:98:7f:8c:8f:74:90:6a:3b:24:83:94:80:04:13:46:c0:bb:
         85:3b:7f:56:e5:31:9a:c7:12:95:ee:8d:52:6b:2d:b8:3d:16:
         bd:50:c1:cf:4d:40:52:25:c5:a7:40:f5:a7:d8:9a:9e:b9:1e:
         a6:ce:a6:a8:d6:3c:29:7e:58:f3:d0:59:7a:9d:cc:de:54:58:
         bc:6f:c8:d2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIXCPBgOdcIArlBuXqhcqhOxhGZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc3Q0Y5MkQ0M0RGQTcyNTEyMDZCRDAxNUM5QTFCMTQz
QzkwQzhGRDAeFw0yNTAyMDQxNzU0MjdaFw0yNjAyMDMxNzU5MjdaMDMxMTAvBgNV
BAMTKEU0QzhEMjI5MjQ4NENDRjMwOEJCQTRCQTVGM0JFMUY0NjI3ODU1NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzqHHPvMERsEJ57CU7O2HiVpdv
d80FgCFDEoyv3Hf7ztAUM9tdX/RZvEnTMVRMeqHBMSpFIihtz7x4v5E7vG7PfrBq
w6xWaEd2DwTKqto6ERj9Q2gzton7NWv4bUeKCoNVXPbpqoV6Sw5qKkBrGpsN/mLH
xrsNUjhdJP+H1brkE6YBQkQsL/P4pt6V7LLcxss8zNkk6BX5gxLIYGux2EdCV/b9
xj99JvIRK8ZelumUG50Ble8vC125zwsUxngmYFNCmGHZtTC5S4VwuU59c4KbQJRN
bRtwM1dtXsfT5ycYBiejgWS8wMoUYwJYCgiT4vlkGXsRo05LqOoo4fUo2+9hAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU5MjSKSSEzPMIu6S6Xzvh9GJ4VV0wHwYDVR0j
BBgwFoAUJ3z5LUPfpyUSBr0BXJobFDyQyP0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNTdBNDdCNEYyOEEwODBCMDdENTNCNDY5M0U3Mzc5Rjg5
OTk1NDBEMDg0NjRFNkI1OEIzREY0NDJBQTg2RURBLzAvMjc3Q0Y5MkQ0M0RGQTcy
NTEyMDZCRDAxNUM5QTFCMTQzQzkwQzhGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNzdDRjkyRDQzREZBNzI1MTIw
NkJEMDE1QzlBMUIxNDNDOTBDOEZELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTU3QTQ3QjRGMjhBMDgwQjA3RDUzQjQ2OTNFNzM3OUY4OTk5NTQwRDA4
NDY0RTZCNThCM0RGNDQyQUE4NkVEQS8wLzM0MzUyZTMyMzMzNzJlMzEzMzMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMwMzAzOTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALe2F
MA0GCSqGSIb3DQEBCwUAA4IBAQBMSi09/j9XQLvczwhLd1Ph+vKkJrP7bZ81owbR
1XdWyi2Lw1lPgaJR6bgJPkwgxwyj1y0A0GfPcPjLn8KGZ2pgZi37SZ/9Y4ltghve
HT/MNL7RBPAQrY/BI1MjlW1Cqlo5eagE0Y4U6pHnke0PCcdk45aa8uZbsm4Xmv2A
OA/LTsQ2aQ//fsnH7GAeF7ghZh1/3jwY6Jdtwm0d4dmhDuOxO/+upC4UzsY9k2i+
zTme/ZJO81rLmH+Mj3SQajskg5SABBNGwLuFO39W5TGaxxKV7o1Say24PRa9UMHP
TUBSJcWnQPWn2JqeuR6mzqao1jwpfljz0Fl6nczeVFi8b8jS
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:07 2025 by rpki-client