Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/34352e3138382e3230382e302f32332d3234203d3e20323639373836.roa
File:                     34352e3138382e3230382e302f32332d3234203d3e20323639373836.roa (raw, json)
Hash identifier:          JqcFu2Sa47wR6F3p8XylMDvaQz69NWEEJkD9EyrZtw8=
Subject key identifier:   AC:4F:8C:46:7D:47:37:ED:C9:BA:CA:14:E8:7C:66:9D:7C:A3:F4:F0
Certificate issuer:       /CN=AF75F7E85911B6D6A42FE6E1822724A7A7950D96
Certificate serial:       566704ADC0FF00648CD695AC70AE53EDAB9E7FEF
Authority key identifier: AF:75:F7:E8:59:11:B6:D6:A4:2F:E6:E1:82:27:24:A7:A7:95:0D:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/34352e3138382e3230382e302f32332d3234203d3e20323639373836.roa
Signing time:             Thu 20 Feb 2025 14:10:20 +0000
ROA not before:           Thu 20 Feb 2025 14:05:20 +0000
ROA not after:            Thu 19 Feb 2026 14:10:20 +0000
asID:                     269786
IP address blocks:        45.188.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:67:04:ad:c0:ff:00:64:8c:d6:95:ac:70:ae:53:ed:ab:9e:7f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF75F7E85911B6D6A42FE6E1822724A7A7950D96
        Validity
            Not Before: Feb 20 14:05:20 2025 GMT
            Not After : Feb 19 14:10:20 2026 GMT
        Subject: CN=AC4F8C467D4737EDC9BACA14E87C669D7CA3F4F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:21:ed:8a:11:7e:d5:81:3a:3a:d3:79:f2:cf:
                    1e:5f:2b:a9:79:c0:b2:5f:9c:fa:6d:0d:1c:d3:c0:
                    1e:7f:a0:1b:b7:73:ad:62:1d:c4:27:3a:d2:ce:05:
                    e3:5b:cf:cd:32:5d:08:06:47:b0:39:97:48:18:d4:
                    64:54:7f:d2:e9:60:70:3f:d9:71:65:50:34:7e:41:
                    84:a5:86:09:d5:bc:7c:b7:21:b2:fb:b2:88:ff:e2:
                    77:67:f5:95:a4:e4:6b:ae:a4:05:0a:d0:a5:3f:fe:
                    6e:24:f5:25:ee:a9:2f:64:9e:b6:62:d0:9c:76:23:
                    1f:a4:2b:1e:8b:9f:cb:76:7f:63:05:94:0f:91:08:
                    a5:cf:d8:52:56:2d:f2:18:a1:81:44:bb:2c:94:37:
                    56:25:b1:35:5b:26:5e:0d:d5:e5:a0:03:6d:19:32:
                    c6:2c:ed:af:d2:ae:a6:4a:ac:86:a6:6f:c7:b8:41:
                    da:04:89:12:22:0e:1a:7e:bc:73:eb:cb:95:a4:e9:
                    5a:4c:e8:62:62:08:3b:12:c5:dd:0a:fe:ed:d7:2f:
                    48:b9:56:f6:47:a1:75:75:4b:6e:ca:82:5c:d8:24:
                    f8:39:27:f2:0a:9a:e0:48:12:1e:35:e8:18:5d:f1:
                    44:bb:2f:c7:f3:26:73:79:70:a3:fd:72:38:80:74:
                    80:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4F:8C:46:7D:47:37:ED:C9:BA:CA:14:E8:7C:66:9D:7C:A3:F4:F0
            X509v3 Authority Key Identifier:
                keyid:AF:75:F7:E8:59:11:B6:D6:A4:2F:E6:E1:82:27:24:A7:A7:95:0D:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/34352e3138382e3230382e302f32332d3234203d3e20323639373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:df:b4:14:01:c5:84:fd:d5:b4:ea:62:66:4f:04:45:c3:c9:
         c8:58:3e:7c:75:23:a7:f4:7f:8f:37:db:fe:23:64:77:76:8d:
         2b:00:34:f0:91:f1:ba:9e:6e:bf:40:9d:57:a9:46:f7:90:42:
         c1:96:09:92:b1:59:85:87:cf:12:86:42:cc:b1:be:6e:e8:b4:
         3d:2d:d8:db:1d:4b:9c:25:7e:6a:43:0f:9e:17:e5:52:fb:a1:
         80:61:c6:c6:5e:ed:d4:09:79:8b:da:6e:78:f8:22:b4:c3:5c:
         66:6b:88:d2:2a:76:57:89:6d:45:76:44:0a:0c:5e:ca:a3:cc:
         c8:e6:3d:f9:92:a0:d0:28:12:12:2c:57:b4:ef:9e:29:5d:eb:
         ee:6e:81:ca:1b:4a:32:e6:66:6e:fb:17:43:36:3b:87:cf:14:
         32:08:bd:22:ce:ea:3e:8b:12:c4:e4:57:9b:82:7b:23:2f:c1:
         37:4f:cc:03:5d:36:13:3e:62:d1:8b:11:2d:b2:1a:32:49:0e:
         bf:7d:49:ce:05:d5:8e:20:f5:84:97:7b:17:a7:9b:df:cf:d5:
         ec:41:ef:54:84:7a:3f:a6:74:17:82:82:15:d4:75:02:d1:cb:
         6f:50:87:9c:ac:04:2e:eb:ff:2d:ae:83:41:43:c8:d8:b0:73:
         cc:24:bf:54
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUVmcErcD/AGSM1pWscK5T7auef+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY3NUY3RTg1OTExQjZENkE0MkZFNkUxODIyNzI0QTdB
Nzk1MEQ5NjAeFw0yNTAyMjAxNDA1MjBaFw0yNjAyMTkxNDEwMjBaMDMxMTAvBgNV
BAMTKEFDNEY4QzQ2N0Q0NzM3RURDOUJBQ0ExNEU4N0M2NjlEN0NBM0Y0RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYIe2KEX7VgTo603nyzx5fK6l5
wLJfnPptDRzTwB5/oBu3c61iHcQnOtLOBeNbz80yXQgGR7A5l0gY1GRUf9LpYHA/
2XFlUDR+QYSlhgnVvHy3IbL7soj/4ndn9ZWk5GuupAUK0KU//m4k9SXuqS9knrZi
0Jx2Ix+kKx6Ln8t2f2MFlA+RCKXP2FJWLfIYoYFEuyyUN1YlsTVbJl4N1eWgA20Z
MsYs7a/SrqZKrIamb8e4QdoEiRIiDhp+vHPry5Wk6VpM6GJiCDsSxd0K/u3XL0i5
VvZHoXV1S27KglzYJPg5J/IKmuBIEh416Bhd8US7L8fzJnN5cKP9cjiAdIBNAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUrE+MRn1HN+3JusoU6HxmnXyj9PAwHwYDVR0j
BBgwFoAUr3X36FkRttakL+bhgickp6eVDZYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMjFDRjRERTQ3ODJERkZFQUU0NjVGQ0EyNjlBNjc1MTE3
RUE1QTM2RjNEMTZFQzI3RkQ3ODlGRkVEOTk0ODNGLzAvQUY3NUY3RTg1OTExQjZE
NkE0MkZFNkUxODIyNzI0QTdBNzk1MEQ5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjc1RjdFODU5MTFCNkQ2QTQy
RkU2RTE4MjI3MjRBN0E3OTUwRDk2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjIxQ0Y0REU0NzgyREZGRUFFNDY1RkNBMjY5QTY3NTExN0VBNUEzNkYz
RDE2RUMyN0ZENzg5RkZFRDk5NDgzRi8wLzM0MzUyZTMxMzgzODJlMzIzMDM4MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM5MzczODM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLbzQ
MA0GCSqGSIb3DQEBCwUAA4IBAQC/37QUAcWE/dW06mJmTwRFw8nIWD58dSOn9H+P
N9v+I2R3do0rADTwkfG6nm6/QJ1XqUb3kELBlgmSsVmFh88ShkLMsb5u6LQ9Ldjb
HUucJX5qQw+eF+VS+6GAYcbGXu3UCXmL2m54+CK0w1xma4jSKnZXiW1FdkQKDF7K
o8zI5j35kqDQKBISLFe0754pXevuboHKG0oy5mZu+xdDNjuHzxQyCL0izuo+ixLE
5FebgnsjL8E3T8wDXTYTPmLRixEtshoySQ6/fUnOBdWOIPWEl3sXp5vfz9XsQe9U
hHo/pnQXgoIV1HUC0ctvUIecrAQu6/8troNBQ8jYsHPMJL9U
-----END CERTIFICATE-----
Generated at Fri Apr 18 14:48:07 2025 by rpki-client