Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232352e302f32342d3234203d3e20323636373235.roa
File:                     34352e36352e3232352e302f32342d3234203d3e20323636373235.roa (raw, json)
Hash identifier:          EnhLKc54dwmUZsoxE697WXIcrrnp1DG58QHosE7IbsE=
Subject key identifier:   62:3F:BB:84:33:80:1E:65:FF:32:63:D4:E1:66:3A:8C:23:46:F7:83
Certificate issuer:       /CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Certificate serial:       72D34858B0A85D78895E203B2B2CAD4DB295E384
Authority key identifier: 9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232352e302f32342d3234203d3e20323636373235.roa
Signing time:             Tue 04 Feb 2025 18:28:13 +0000
ROA not before:           Tue 04 Feb 2025 18:23:13 +0000
ROA not after:            Tue 03 Feb 2026 18:28:13 +0000
asID:                     266725
IP address blocks:        45.65.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 22:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d3:48:58:b0:a8:5d:78:89:5e:20:3b:2b:2c:ad:4d:b2:95:e3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
        Validity
            Not Before: Feb  4 18:23:13 2025 GMT
            Not After : Feb  3 18:28:13 2026 GMT
        Subject: CN=623FBB8433801E65FF3263D4E1663A8C2346F783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:16:65:7b:bb:e4:b2:bb:4e:e7:f8:70:81:ea:
                    3f:4b:23:45:65:a4:5a:68:77:e2:e1:f0:56:0f:96:
                    9a:eb:4a:55:23:49:77:d0:4c:6f:c8:2a:05:e3:d1:
                    44:40:6c:28:fe:1a:2c:45:a4:7f:8f:48:a4:f0:4c:
                    87:40:41:ca:7b:04:49:31:32:1b:99:d5:92:99:ef:
                    d7:0c:bd:07:f7:bd:48:d8:d1:24:b4:5f:c4:b3:74:
                    f3:0b:b8:2b:84:57:e1:e1:3c:7b:1c:d8:22:92:ac:
                    0e:c4:16:5e:9c:02:52:52:8f:fc:0e:20:f4:43:e3:
                    3e:cc:d1:79:e2:c7:ea:b5:b2:c7:7e:c7:73:05:ef:
                    ec:b8:27:39:bb:ae:1e:a3:8e:1a:a8:fe:f0:ff:b0:
                    c7:59:06:2a:77:96:d4:22:3a:05:a2:3b:2f:48:7f:
                    bc:55:a0:6d:fa:dd:df:08:dc:88:4b:9e:2a:57:4f:
                    82:5c:9a:76:60:e8:18:24:61:5c:b9:49:ad:0d:eb:
                    a6:79:57:94:17:cb:d4:7d:50:a7:ad:80:e2:70:ea:
                    37:7d:f0:77:d2:86:ab:f8:4b:d6:99:89:6d:9a:97:
                    4b:35:2f:78:81:47:01:67:e5:85:9c:e3:81:6b:c0:
                    6a:1c:b9:35:20:de:25:6c:16:80:e9:15:e3:50:d3:
                    84:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3F:BB:84:33:80:1E:65:FF:32:63:D4:E1:66:3A:8C:23:46:F7:83
            X509v3 Authority Key Identifier:
                keyid:9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232352e302f32342d3234203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:43:b0:34:39:db:4e:cf:16:4f:ee:42:26:76:9d:27:ff:8d:
         76:dd:cf:d7:df:e5:46:67:45:b0:bc:11:93:d8:0f:9b:0e:e9:
         b7:6d:78:be:c0:6a:9d:21:9f:78:69:d0:e4:5b:5d:4d:f6:cd:
         ca:27:66:4c:71:b4:a2:6c:f4:b8:5f:ab:f8:d0:a9:7e:35:49:
         03:87:ab:fa:3d:e6:6f:26:8b:c5:ab:c5:03:c3:33:a1:96:db:
         50:25:86:cc:45:ba:c3:f9:26:97:84:b6:a6:48:7f:76:47:e8:
         0b:ab:86:e2:cb:62:09:7f:66:a3:73:18:b6:fe:fd:dc:d8:14:
         5c:0a:c0:dc:60:7e:f9:2a:3b:6d:6f:0c:d3:6e:6e:1f:ce:c4:
         24:a5:fd:cb:79:dd:b7:a1:45:e7:d0:a9:ac:f4:23:ce:a3:a0:
         a5:b8:f6:08:e0:fd:1a:01:27:cf:94:05:08:e9:c8:f5:be:a7:
         4d:48:fa:ad:79:77:8c:bb:06:5f:8e:08:53:ec:55:a5:6c:67:
         d1:30:90:59:57:5a:f8:a2:0c:11:c9:aa:e5:e2:67:fc:2f:b4:
         05:b8:d1:8a:2a:47:f9:5a:e6:c3:01:46:2a:f5:1a:c7:8b:9a:
         02:3e:a1:b8:3e:82:09:3d:20:a1:10:99:96:f2:d3:fd:1d:15:
         90:27:a7:5b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUctNIWLCoXXiJXiA7KyytTbKV44QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJFMTg5NUM4RjY0QUVDNTIyMDlFQTJGREU3RDMwOEFF
RDJEQTY0MDAeFw0yNTAyMDQxODIzMTNaFw0yNjAyMDMxODI4MTNaMDMxMTAvBgNV
BAMTKDYyM0ZCQjg0MzM4MDFFNjVGRjMyNjNENEUxNjYzQThDMjM0NkY3ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaFmV7u+Syu07n+HCB6j9LI0Vl
pFpod+Lh8FYPlprrSlUjSXfQTG/IKgXj0URAbCj+GixFpH+PSKTwTIdAQcp7BEkx
MhuZ1ZKZ79cMvQf3vUjY0SS0X8SzdPMLuCuEV+HhPHsc2CKSrA7EFl6cAlJSj/wO
IPRD4z7M0Xnix+q1ssd+x3MF7+y4Jzm7rh6jjhqo/vD/sMdZBip3ltQiOgWiOy9I
f7xVoG363d8I3IhLnipXT4JcmnZg6BgkYVy5Sa0N66Z5V5QXy9R9UKetgOJw6jd9
8HfShqv4S9aZiW2al0s1L3iBRwFn5YWc44FrwGocuTUg3iVsFoDpFeNQ04RZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUYj+7hDOAHmX/MmPU4WY6jCNG94MwHwYDVR0j
BBgwFoAUm+GJXI9krsUiCeov3n0wiu0tpkAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQ0RCNzNGQ0YxRTZCRDAwMkRDQjA2QkQ2MDUyNjkxRDYy
MkVEMDkxMEE3RjJGMDUxQUVDNjkyRERFOTg0QUVGLzAvOUJFMTg5NUM4RjY0QUVD
NTIyMDlFQTJGREU3RDMwOEFFRDJEQTY0MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkUxODk1QzhGNjRBRUM1MjIw
OUVBMkZERTdEMzA4QUVEMkRBNjQwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUNEQjczRkNGMUU2QkQwMDJEQ0IwNkJENjA1MjY5MUQ2MjJFRDA5MTBB
N0YyRjA1MUFFQzY5MkRERTk4NEFFRi8wLzM0MzUyZTM2MzUyZTMyMzIzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM3MzIzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1B4TAN
BgkqhkiG9w0BAQsFAAOCAQEABEOwNDnbTs8WT+5CJnadJ/+Ndt3P19/lRmdFsLwR
k9gPmw7pt214vsBqnSGfeGnQ5FtdTfbNyidmTHG0omz0uF+r+NCpfjVJA4er+j3m
byaLxavFA8MzoZbbUCWGzEW6w/kml4S2pkh/dkfoC6uG4stiCX9mo3MYtv793NgU
XArA3GB++So7bW8M025uH87EJKX9y3ndt6FF59CprPQjzqOgpbj2COD9GgEnz5QF
COnI9b6nTUj6rXl3jLsGX44IU+xVpWxn0TCQWVda+KIMEcmq5eJn/C+0BbjRiipH
+VrmwwFGKvUax4uaAj6huD6CCT0goRCZlvLT/R0VkCenWw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 18:47:36 2025 by rpki-client