Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/34352e3136322e38322e302f32332d3233203d3e20323637363832.roa
File:                     34352e3136322e38322e302f32332d3233203d3e20323637363832.roa (raw, json)
Hash identifier:          gbLWvXqd/T2upCJcLwG0ybZEXPghql8tAA+ygok/I9U=
Subject key identifier:   4E:FD:3E:A6:7B:45:3C:37:B8:19:6F:F9:CE:2A:77:BE:FE:A8:A4:91
Certificate issuer:       /CN=973FCCE5E0F1738CFECC159289BB269F8C0B1FE2
Certificate serial:       5C5F99EB4879F7BE850CAFCA78F955725FDBA2EC
Authority key identifier: 97:3F:CC:E5:E0:F1:73:8C:FE:CC:15:92:89:BB:26:9F:8C:0B:1F:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/34352e3136322e38322e302f32332d3233203d3e20323637363832.roa
Signing time:             Tue 04 Feb 2025 18:02:03 +0000
ROA not before:           Tue 04 Feb 2025 17:57:03 +0000
ROA not after:            Tue 03 Feb 2026 18:02:03 +0000
asID:                     267682
IP address blocks:        45.162.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5f:99:eb:48:79:f7:be:85:0c:af:ca:78:f9:55:72:5f:db:a2:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=973FCCE5E0F1738CFECC159289BB269F8C0B1FE2
        Validity
            Not Before: Feb  4 17:57:03 2025 GMT
            Not After : Feb  3 18:02:03 2026 GMT
        Subject: CN=4EFD3EA67B453C37B8196FF9CE2A77BEFEA8A491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8f:16:d0:04:30:91:46:ba:3c:a9:e3:fd:87:
                    db:a8:e3:fc:9d:39:f9:a9:0c:16:17:fa:a7:12:98:
                    be:14:c6:c8:34:ea:f0:13:62:b6:ba:97:13:82:ad:
                    bb:af:d8:b7:72:9f:b1:59:0f:e1:c4:64:c5:f0:23:
                    29:ff:16:50:15:11:1c:f4:87:45:b1:08:e4:85:79:
                    1c:96:8e:7a:47:c3:f7:25:51:7d:b0:8d:04:7d:de:
                    e5:5f:2f:dc:64:d4:a6:75:69:36:37:90:d8:30:ae:
                    53:cc:98:f7:f6:e7:4e:c4:ab:88:40:b8:b3:b8:77:
                    da:32:25:f4:d4:d3:92:a9:cd:fd:e1:55:53:79:0e:
                    23:4d:e0:6e:1a:4f:23:38:57:a8:97:7f:ce:ea:92:
                    0f:a2:1c:a3:40:a4:46:1f:d4:28:a1:68:01:99:b2:
                    8b:f4:f2:a4:fe:85:3e:d1:19:49:a4:51:0e:c7:6b:
                    16:bd:32:75:14:4c:42:30:4f:f3:42:68:b7:bc:1e:
                    ef:f7:62:e8:88:d2:58:69:71:ab:de:59:a8:ee:8b:
                    83:31:54:24:95:65:65:fc:1e:b2:0b:4d:be:ee:35:
                    7a:95:c0:ca:96:cd:17:ff:ab:3e:e3:b3:dd:33:27:
                    3b:71:74:fc:f2:86:1f:99:83:d0:e8:ca:18:65:24:
                    20:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FD:3E:A6:7B:45:3C:37:B8:19:6F:F9:CE:2A:77:BE:FE:A8:A4:91
            X509v3 Authority Key Identifier:
                keyid:97:3F:CC:E5:E0:F1:73:8C:FE:CC:15:92:89:BB:26:9F:8C:0B:1F:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/34352e3136322e38322e302f32332d3233203d3e20323637363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:80:9b:a9:aa:cc:db:a6:d7:cb:c8:46:d0:60:f8:cd:60:a5:
         b3:ae:7d:be:b2:8b:9e:7e:77:f2:e2:b3:6e:bf:a9:d7:2f:d2:
         19:f9:60:83:1b:a5:99:c3:e3:36:90:3e:0b:0b:68:cf:3c:e1:
         89:4b:e0:4c:e8:8d:8e:68:da:7e:35:64:97:4a:e8:43:d2:6c:
         cf:ec:68:1e:bf:24:e9:25:cf:e0:f9:22:b4:b4:80:0b:21:55:
         89:3f:e0:e4:95:fb:c5:35:59:0f:df:a4:70:78:c1:7c:e9:58:
         69:27:f2:b4:cb:d3:c4:1a:ec:1c:ce:1b:1d:f1:b3:ce:5f:9a:
         51:11:ec:21:f5:0b:ae:d2:c4:dc:29:3a:6d:5c:af:d4:e5:f6:
         29:d3:4d:ef:a2:ad:31:ac:d2:93:a0:74:29:41:b6:5f:27:c5:
         15:e6:d0:ac:d7:a7:b2:fd:15:b0:67:d9:dc:80:8e:14:00:13:
         8a:08:0e:9c:78:24:9e:e6:84:cf:f9:34:1a:8e:80:da:0f:fd:
         5b:06:a4:39:cb:15:72:fb:f6:50:7e:02:e7:05:3e:63:33:e2:
         d3:dc:c6:5c:f0:cc:68:f8:75:66:b9:fb:8e:5a:35:b6:69:13:
         d9:0d:bb:2e:06:33:bf:52:cd:af:a3:9d:ff:1a:20:16:63:67:
         6c:1f:05:82
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXF+Z60h5976FDK/KePlVcl/bouwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTczRkNDRTVFMEYxNzM4Q0ZFQ0MxNTkyODlCQjI2OUY4
QzBCMUZFMjAeFw0yNTAyMDQxNzU3MDNaFw0yNjAyMDMxODAyMDNaMDMxMTAvBgNV
BAMTKDRFRkQzRUE2N0I0NTNDMzdCODE5NkZGOUNFMkE3N0JFRkVBOEE0OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVjxbQBDCRRro8qeP9h9uo4/yd
OfmpDBYX+qcSmL4Uxsg06vATYra6lxOCrbuv2Ldyn7FZD+HEZMXwIyn/FlAVERz0
h0WxCOSFeRyWjnpHw/clUX2wjQR93uVfL9xk1KZ1aTY3kNgwrlPMmPf2507Eq4hA
uLO4d9oyJfTU05Kpzf3hVVN5DiNN4G4aTyM4V6iXf87qkg+iHKNApEYf1CihaAGZ
sov08qT+hT7RGUmkUQ7Haxa9MnUUTEIwT/NCaLe8Hu/3YuiI0lhpcaveWajui4Mx
VCSVZWX8HrILTb7uNXqVwMqWzRf/qz7js90zJztxdPzyhh+Zg9DoyhhlJCDHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUTv0+pntFPDe4GW/5zip3vv6opJEwHwYDVR0j
BBgwFoAUlz/M5eDxc4z+zBWSibsmn4wLH+IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GQkY5MUIxNzIwRDkxMjAyRUNGNEM0NDg1MjUzM0NCRjBC
NzU0MEM1REQzQTFFRERBNjJGNkFEMjNBMzI1RkYwLzAvOTczRkNDRTVFMEYxNzM4
Q0ZFQ0MxNTkyODlCQjI2OUY4QzBCMUZFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzNGQ0NFNUUwRjE3MzhDRkVD
QzE1OTI4OUJCMjY5RjhDMEIxRkUyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkJGOTFCMTcyMEQ5MTIwMkVDRjRDNDQ4NTI1MzNDQkYwQjc1NDBDNURE
M0ExRUREQTYyRjZBRDIzQTMyNUZGMC8wLzM0MzUyZTMxMzYzMjJlMzgzMjJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNzM2MzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2iUjAN
BgkqhkiG9w0BAQsFAAOCAQEAuoCbqarM26bXy8hG0GD4zWCls659vrKLnn538uKz
br+p1y/SGflggxulmcPjNpA+CwtozzzhiUvgTOiNjmjafjVkl0roQ9Jsz+xoHr8k
6SXP4PkitLSACyFViT/g5JX7xTVZD9+kcHjBfOlYaSfytMvTxBrsHM4bHfGzzl+a
URHsIfULrtLE3Ck6bVyv1OX2KdNN76KtMazSk6B0KUG2XyfFFebQrNensv0VsGfZ
3ICOFAATiggOnHgknuaEz/k0Go6A2g/9WwakOcsVcvv2UH4C5wU+YzPi09zGXPDM
aPh1Zrn7jlo1tmkT2Q27LgYzv1LNr6Od/xogFmNnbB8Fgg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 07:45:37 2025 by rpki-client