Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5A423C3C50949F106844B712BC4BA0B73895EFDB7DFE2AC32F81438EE008140/0/34352e3233322e3134342e302f32322d3234203d3e20323636373532.roa
File:                     34352e3233322e3134342e302f32322d3234203d3e20323636373532.roa (raw, json)
Hash identifier:          zfeHeL3fAyMDAEtJs8Q/wR3Bc3k0H/bgGzJYGI/wmyo=
Subject key identifier:   03:01:F4:D3:35:61:09:BF:F0:06:83:A4:B0:FD:F6:61:4D:7E:36:D5
Certificate issuer:       /CN=211F35A7F8779E638FF375C42733BBC7754A8446
Certificate serial:       64CF93A27EB1E0B3560ECBCCFC37E28BAE628B42
Authority key identifier: 21:1F:35:A7:F8:77:9E:63:8F:F3:75:C4:27:33:BB:C7:75:4A:84:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211F35A7F8779E638FF375C42733BBC7754A8446.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5A423C3C50949F106844B712BC4BA0B73895EFDB7DFE2AC32F81438EE008140/0/34352e3233322e3134342e302f32322d3234203d3e20323636373532.roa
Signing time:             Tue 04 Feb 2025 20:01:26 +0000
ROA not before:           Tue 04 Feb 2025 19:56:26 +0000
ROA not after:            Tue 03 Feb 2026 20:01:26 +0000
asID:                     266752
IP address blocks:        45.232.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5A423C3C50949F106844B712BC4BA0B73895EFDB7DFE2AC32F81438EE008140/0/211F35A7F8779E638FF375C42733BBC7754A8446.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5A423C3C50949F106844B712BC4BA0B73895EFDB7DFE2AC32F81438EE008140/0/211F35A7F8779E638FF375C42733BBC7754A8446.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211F35A7F8779E638FF375C42733BBC7754A8446.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 14:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:cf:93:a2:7e:b1:e0:b3:56:0e:cb:cc:fc:37:e2:8b:ae:62:8b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211F35A7F8779E638FF375C42733BBC7754A8446
        Validity
            Not Before: Feb  4 19:56:26 2025 GMT
            Not After : Feb  3 20:01:26 2026 GMT
        Subject: CN=0301F4D3356109BFF00683A4B0FDF6614D7E36D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:81:fe:da:91:5e:32:f7:04:59:ff:96:23:8c:
                    1e:b8:9e:28:2f:71:cb:fa:6c:70:e7:ac:85:e9:3f:
                    97:7a:60:e4:4f:65:72:9d:05:99:5f:0c:8a:cb:ea:
                    14:8a:df:89:45:5e:be:10:df:78:49:a7:4b:69:94:
                    16:5a:07:23:9b:dc:de:2c:dd:7a:4d:c9:25:c9:30:
                    4d:13:1a:9c:c1:17:07:3e:87:26:b2:59:13:f3:76:
                    2b:26:2d:95:61:e7:f5:81:49:04:73:f1:36:51:04:
                    7a:74:87:1a:97:5f:c0:6b:76:37:84:45:05:b0:44:
                    f3:bb:41:40:b0:50:c9:90:ad:e2:60:59:b8:b8:a3:
                    a9:7b:58:83:0a:d1:a8:e4:de:39:76:63:b1:0b:ad:
                    97:d4:01:0b:cc:b8:90:0b:01:2e:b0:5d:80:8a:cc:
                    e9:cd:69:6b:89:7b:e4:21:86:19:f1:52:da:f4:1c:
                    3c:5c:2e:33:96:20:5a:ee:02:3d:8a:f1:a6:87:09:
                    0a:b8:ab:24:91:ce:74:71:c7:fd:5d:98:4b:5a:e8:
                    b7:8d:b5:0e:38:2a:71:d5:62:5f:38:6e:4c:6f:51:
                    4e:7f:4e:33:24:5d:cb:68:f6:06:ff:ce:51:19:73:
                    b1:09:38:de:b2:24:04:99:24:79:32:a9:6d:29:1f:
                    6b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:01:F4:D3:35:61:09:BF:F0:06:83:A4:B0:FD:F6:61:4D:7E:36:D5
            X509v3 Authority Key Identifier:
                keyid:21:1F:35:A7:F8:77:9E:63:8F:F3:75:C4:27:33:BB:C7:75:4A:84:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5A423C3C50949F106844B712BC4BA0B73895EFDB7DFE2AC32F81438EE008140/0/211F35A7F8779E638FF375C42733BBC7754A8446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211F35A7F8779E638FF375C42733BBC7754A8446.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5A423C3C50949F106844B712BC4BA0B73895EFDB7DFE2AC32F81438EE008140/0/34352e3233322e3134342e302f32322d3234203d3e20323636373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:36:dc:76:59:45:d0:a4:fd:3e:9a:6f:8c:f0:0b:77:cf:cb:
         71:db:9f:07:60:6d:fa:82:97:3d:49:5c:d3:1c:5a:bd:1c:39:
         95:81:a2:29:4f:e1:e1:3d:e5:b3:33:1a:fd:68:16:5e:d5:44:
         a9:aa:0c:85:96:99:25:26:a3:d1:71:ee:dc:0c:21:5e:99:3f:
         0f:96:70:d4:6b:c2:d1:60:e4:bc:19:35:f2:5f:07:12:70:0e:
         b2:12:d1:6d:a9:eb:82:95:be:07:9a:25:c1:3b:e4:70:2e:ba:
         ae:ad:05:9d:e7:40:40:c0:e7:10:41:af:b3:ac:55:18:6c:38:
         56:bc:92:6f:b1:a9:54:85:37:7a:d9:1a:f5:6e:2b:66:34:b0:
         68:be:e1:eb:4f:55:c0:33:27:a3:37:70:80:cb:4f:74:4a:e3:
         93:6a:1f:24:22:43:1b:68:e3:8d:d1:0d:ab:b8:99:0e:d2:92:
         97:2c:19:48:fd:13:2c:f7:36:f0:9c:3a:5b:ab:23:b9:1c:40:
         50:a3:ff:c1:b4:d7:b9:95:a5:39:d7:bb:50:8f:76:5d:3d:b9:
         a8:1d:df:26:e6:71:75:62:4c:3f:1a:7b:11:a8:2c:86:7a:e2:
         32:9a:a5:60:2c:0c:02:4b:3c:e8:b5:1b:57:bd:01:87:25:4d:
         fe:51:3a:e2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZM+Ton6x4LNWDsvM/Dfii65ii0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjExRjM1QTdGODc3OUU2MzhGRjM3NUM0MjczM0JCQzc3
NTRBODQ0NjAeFw0yNTAyMDQxOTU2MjZaFw0yNjAyMDMyMDAxMjZaMDMxMTAvBgNV
BAMTKDAzMDFGNEQzMzU2MTA5QkZGMDA2ODNBNEIwRkRGNjYxNEQ3RTM2RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVgf7akV4y9wRZ/5YjjB64nigv
ccv6bHDnrIXpP5d6YORPZXKdBZlfDIrL6hSK34lFXr4Q33hJp0tplBZaByOb3N4s
3XpNySXJME0TGpzBFwc+hyayWRPzdismLZVh5/WBSQRz8TZRBHp0hxqXX8BrdjeE
RQWwRPO7QUCwUMmQreJgWbi4o6l7WIMK0ajk3jl2Y7ELrZfUAQvMuJALAS6wXYCK
zOnNaWuJe+QhhhnxUtr0HDxcLjOWIFruAj2K8aaHCQq4qySRznRxx/1dmEta6LeN
tQ44KnHVYl84bkxvUU5/TjMkXcto9gb/zlEZc7EJON6yJASZJHkyqW0pH2uhAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUAwH00zVhCb/wBoOksP32YU1+NtUwHwYDVR0j
BBgwFoAUIR81p/h3nmOP83XEJzO7x3VKhEYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNUE0MjNDM0M1MDk0OUYxMDY4NDRCNzEyQkM0QkEwQjcz
ODk1RUZEQjdERkUyQUMzMkY4MTQzOEVFMDA4MTQwLzAvMjExRjM1QTdGODc3OUU2
MzhGRjM3NUM0MjczM0JCQzc3NTRBODQ0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTFGMzVBN0Y4Nzc5RTYzOEZG
Mzc1QzQyNzMzQkJDNzc1NEE4NDQ2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjVBNDIzQzNDNTA5NDlGMTA2ODQ0QjcxMkJDNEJBMEI3Mzg5NUVGREI3
REZFMkFDMzJGODE0MzhFRTAwODE0MC8wLzM0MzUyZTMyMzMzMjJlMzEzNDM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2MzczNTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLeiQ
MA0GCSqGSIb3DQEBCwUAA4IBAQANNtx2WUXQpP0+mm+M8At3z8tx258HYG36gpc9
SVzTHFq9HDmVgaIpT+HhPeWzMxr9aBZe1USpqgyFlpklJqPRce7cDCFemT8PlnDU
a8LRYOS8GTXyXwcScA6yEtFtqeuClb4HmiXBO+RwLrqurQWd50BAwOcQQa+zrFUY
bDhWvJJvsalUhTd62Rr1bitmNLBovuHrT1XAMyejN3CAy090SuOTah8kIkMbaOON
0Q2ruJkO0pKXLBlI/RMs9zbwnDpbqyO5HEBQo//BtNe5laU517tQj3ZdPbmoHd8m
5nF1Ykw/GnsRqCyGeuIymqVgLAwCSzzotRtXvQGHJU3+UTri
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:41 2025 by rpki-client