Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232342e302f32332d3233203d3e20323636373235.roa
File:                     34352e36352e3232342e302f32332d3233203d3e20323636373235.roa (raw, json)
Hash identifier:          e7OM7Pn4IwM4+tWdX/XuFqoGzRBqmz/5KsiaT+qUxJc=
Subject key identifier:   41:04:20:02:25:69:A2:A3:73:7F:EF:1F:C1:FF:6E:B0:9C:27:2B:B3
Certificate issuer:       /CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Certificate serial:       70A26F11FCE1772C06B8DF6DA8EEA907C06D3A1C
Authority key identifier: 9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232342e302f32332d3233203d3e20323636373235.roa
Signing time:             Tue 04 Feb 2025 18:28:13 +0000
ROA not before:           Tue 04 Feb 2025 18:23:13 +0000
ROA not after:            Tue 03 Feb 2026 18:28:13 +0000
asID:                     266725
IP address blocks:        45.65.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 01:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a2:6f:11:fc:e1:77:2c:06:b8:df:6d:a8:ee:a9:07:c0:6d:3a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
        Validity
            Not Before: Feb  4 18:23:13 2025 GMT
            Not After : Feb  3 18:28:13 2026 GMT
        Subject: CN=410420022569A2A3737FEF1FC1FF6EB09C272BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e5:7f:e1:b9:a3:7b:64:53:d4:d7:6a:a3:97:
                    8a:53:36:24:1e:29:97:5c:b1:9e:1e:57:05:2e:45:
                    07:58:7f:00:15:93:6c:17:86:2e:a7:07:eb:3a:19:
                    a3:e0:1d:21:61:9a:c8:84:a4:fb:89:2d:77:12:dc:
                    6e:57:2b:9c:8f:54:80:fe:6b:4a:16:66:06:5a:29:
                    5d:cb:2d:36:f8:f9:03:d4:72:aa:82:7e:0a:04:0b:
                    02:67:cc:9a:ec:23:a9:cb:31:e9:62:f4:25:07:9d:
                    5d:ed:fd:a0:c0:62:b7:10:9a:80:44:df:b1:5d:55:
                    b4:4f:a1:8c:de:b3:cb:68:61:51:fb:8e:2c:f2:ae:
                    2d:dd:5d:fb:99:fb:16:1c:27:2f:64:8b:47:dc:0b:
                    ea:6e:3d:63:7e:a0:e8:fc:ad:0f:b4:c9:0c:2d:8a:
                    8a:3e:4b:c2:19:ff:6c:52:d3:d1:55:27:e4:73:50:
                    b0:6f:65:39:5b:de:b0:54:f5:0e:da:37:15:6c:77:
                    67:c3:85:31:cc:dd:97:c0:67:af:d6:5b:48:1e:22:
                    d1:32:1b:30:63:d5:b5:5a:5b:71:fe:a1:df:77:4d:
                    4f:41:b1:e5:8e:ee:4b:b3:53:dd:4c:90:cc:8c:28:
                    cf:3f:b5:b2:9d:7a:f5:73:75:eb:7d:e1:13:6d:31:
                    93:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:04:20:02:25:69:A2:A3:73:7F:EF:1F:C1:FF:6E:B0:9C:27:2B:B3
            X509v3 Authority Key Identifier:
                keyid:9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232342e302f32332d3233203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e0:ce:8b:31:36:bc:c4:b0:9d:4b:18:1b:38:7d:91:c7:5a:a3:
         91:41:63:52:4a:40:ae:82:a3:f7:2d:b8:02:4a:ea:7d:80:98:
         68:7f:af:56:a9:51:46:f5:0b:c8:44:23:e6:42:79:8b:2f:6d:
         e7:d4:6e:f7:35:3c:c0:f5:80:31:d4:10:1c:69:5f:16:18:4b:
         6d:b0:13:63:ec:ae:30:1b:0c:77:7c:f6:15:22:82:b9:3f:fc:
         79:a9:66:c7:84:ca:12:47:9a:b6:a5:08:d8:6e:07:07:ea:87:
         ad:41:f2:66:68:a3:1f:90:e2:55:b1:63:e8:17:9c:7d:8b:4a:
         37:4d:c0:86:34:ec:f9:b5:b2:8a:7b:25:6d:85:ba:6d:e5:7a:
         65:18:01:09:d0:a9:0d:3b:38:d7:53:f5:f7:a5:98:c6:01:bd:
         32:5a:93:8a:9a:24:30:85:a0:9a:c8:2f:fd:57:71:eb:7c:30:
         80:28:00:5b:1c:e9:d2:20:6a:f8:8c:0c:a9:c6:ef:06:58:12:
         b5:23:81:f0:1e:47:86:eb:c3:e9:2c:e2:fd:4b:77:2c:09:e5:
         b2:30:08:37:bc:11:db:bb:87:82:3f:59:18:70:e5:6a:81:42:
         fc:fe:6d:27:cb:42:98:31:1d:cb:ae:4d:3e:9d:5f:a6:49:52:
         9f:d8:82:79
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUcKJvEfzhdywGuN9tqO6pB8BtOhwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJFMTg5NUM4RjY0QUVDNTIyMDlFQTJGREU3RDMwOEFF
RDJEQTY0MDAeFw0yNTAyMDQxODIzMTNaFw0yNjAyMDMxODI4MTNaMDMxMTAvBgNV
BAMTKDQxMDQyMDAyMjU2OUEyQTM3MzdGRUYxRkMxRkY2RUIwOUMyNzJCQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD5X/huaN7ZFPU12qjl4pTNiQe
KZdcsZ4eVwUuRQdYfwAVk2wXhi6nB+s6GaPgHSFhmsiEpPuJLXcS3G5XK5yPVID+
a0oWZgZaKV3LLTb4+QPUcqqCfgoECwJnzJrsI6nLMeli9CUHnV3t/aDAYrcQmoBE
37FdVbRPoYzes8toYVH7jizyri3dXfuZ+xYcJy9ki0fcC+puPWN+oOj8rQ+0yQwt
ioo+S8IZ/2xS09FVJ+RzULBvZTlb3rBU9Q7aNxVsd2fDhTHM3ZfAZ6/WW0geItEy
GzBj1bVaW3H+od93TU9BseWO7kuzU91MkMyMKM8/tbKdevVzdet94RNtMZMVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUQQQgAiVpoqNzf+8fwf9usJwnK7MwHwYDVR0j
BBgwFoAUm+GJXI9krsUiCeov3n0wiu0tpkAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQ0RCNzNGQ0YxRTZCRDAwMkRDQjA2QkQ2MDUyNjkxRDYy
MkVEMDkxMEE3RjJGMDUxQUVDNjkyRERFOTg0QUVGLzAvOUJFMTg5NUM4RjY0QUVD
NTIyMDlFQTJGREU3RDMwOEFFRDJEQTY0MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkUxODk1QzhGNjRBRUM1MjIw
OUVBMkZERTdEMzA4QUVEMkRBNjQwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUNEQjczRkNGMUU2QkQwMDJEQ0IwNkJENjA1MjY5MUQ2MjJFRDA5MTBB
N0YyRjA1MUFFQzY5MkRERTk4NEFFRi8wLzM0MzUyZTM2MzUyZTMyMzIzNDJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNjM3MzIzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS1B4DAN
BgkqhkiG9w0BAQsFAAOCAQEA4M6LMTa8xLCdSxgbOH2Rx1qjkUFjUkpAroKj9y24
AkrqfYCYaH+vVqlRRvULyEQj5kJ5iy9t59Ru9zU8wPWAMdQQHGlfFhhLbbATY+yu
MBsMd3z2FSKCuT/8ealmx4TKEkeatqUI2G4HB+qHrUHyZmijH5DiVbFj6BecfYtK
N03AhjTs+bWyinslbYW6beV6ZRgBCdCpDTs411P196WYxgG9MlqTipokMIWgmsgv
/Vdx63wwgCgAWxzp0iBq+IwMqcbvBlgStSOB8B5HhuvD6Szi/Ut3LAnlsjAIN7wR
27uHgj9ZGHDlaoFC/P5tJ8tCmDEdy65NPp1fpklSn9iCeQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:28 2025 by rpki-client