Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32322d3232203d3e20323636373931.roa
File:                     34352e3233362e33322e302f32322d3232203d3e20323636373931.roa (raw, json)
Hash identifier:          20O0L3cpZ69rEDwwRTdFxObeeWxAIT3UMMadcZ8Q2yg=
Subject key identifier:   CA:FD:E0:08:BF:0B:6A:8F:4F:2A:6F:61:54:F6:E0:0B:0F:3F:83:11
Certificate issuer:       /CN=F381BE6CF64000AB9FF5B43AFF78F2623199F153
Certificate serial:       25A08645C0C35BFA7E434958FB3C0B7C72C3004D
Authority key identifier: F3:81:BE:6C:F6:40:00:AB:9F:F5:B4:3A:FF:78:F2:62:31:99:F1:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32322d3232203d3e20323636373931.roa
Signing time:             Tue 04 Feb 2025 18:30:49 +0000
ROA not before:           Tue 04 Feb 2025 18:25:49 +0000
ROA not after:            Tue 03 Feb 2026 18:30:49 +0000
asID:                     266791
IP address blocks:        45.236.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a0:86:45:c0:c3:5b:fa:7e:43:49:58:fb:3c:0b:7c:72:c3:00:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F381BE6CF64000AB9FF5B43AFF78F2623199F153
        Validity
            Not Before: Feb  4 18:25:49 2025 GMT
            Not After : Feb  3 18:30:49 2026 GMT
        Subject: CN=CAFDE008BF0B6A8F4F2A6F6154F6E00B0F3F8311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:61:3a:e6:ad:24:dd:b3:2d:af:00:c3:cf:d5:
                    24:cf:06:f8:0a:5e:eb:b1:26:38:59:3a:f4:6f:ce:
                    74:fa:46:ef:8e:0d:d9:90:8f:84:db:4d:68:66:70:
                    55:a7:a8:52:26:99:89:7d:40:6b:10:fd:0b:f9:bb:
                    a7:1b:24:25:1d:5b:42:47:d4:2c:c5:40:e9:c1:23:
                    f9:c5:12:02:09:75:24:f1:dd:cc:be:6d:3b:75:ec:
                    ba:ae:ff:0d:45:07:89:da:12:f4:47:00:c5:e9:6a:
                    cc:27:e9:d8:75:17:6c:37:53:22:60:e4:62:1e:cc:
                    b9:28:be:9c:f2:84:66:27:c1:44:c0:27:7a:b4:58:
                    da:1d:dc:3b:fb:86:71:d2:8a:ec:3b:37:92:37:b4:
                    bc:5f:de:d1:53:56:19:1d:b3:29:0c:d8:35:4d:e9:
                    e7:ce:74:be:cb:f0:03:ea:90:46:88:21:76:b1:65:
                    35:af:b3:53:54:31:d1:33:91:99:32:f4:05:ee:4a:
                    22:c9:53:3f:29:47:62:0a:0d:b0:a9:c0:95:9e:bc:
                    39:44:a0:d3:59:ed:a6:40:89:29:81:3d:7d:13:22:
                    d1:56:ba:ee:10:1f:ac:ea:8e:94:fa:02:9f:d9:0c:
                    90:ce:ec:f3:42:54:f0:9a:df:68:eb:42:c0:eb:f9:
                    03:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FD:E0:08:BF:0B:6A:8F:4F:2A:6F:61:54:F6:E0:0B:0F:3F:83:11
            X509v3 Authority Key Identifier:
                keyid:F3:81:BE:6C:F6:40:00:AB:9F:F5:B4:3A:FF:78:F2:62:31:99:F1:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32322d3232203d3e20323636373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:49:bb:81:0b:45:b5:38:fb:5b:63:88:ac:b1:e2:cb:b8:53:
         1a:e2:53:cc:fb:e5:d6:c7:9e:a3:f3:38:d0:9b:65:3d:e2:6e:
         16:c0:0e:32:98:eb:22:9b:5f:fe:08:21:5d:54:19:35:98:64:
         91:0c:60:86:f3:70:e0:3b:91:37:3d:36:aa:a8:90:df:b3:dc:
         fe:dd:ba:71:d5:26:82:c6:ff:3d:1d:fd:e8:5b:aa:13:de:42:
         42:91:0c:f2:29:18:d0:45:0c:d5:4e:78:6e:dc:87:11:f3:a1:
         21:09:83:ce:9d:84:ef:f2:ba:47:c2:79:59:dd:7d:c0:f2:95:
         e2:ff:62:fc:ec:2a:13:3c:f4:f7:b4:d3:07:e3:c7:a1:96:33:
         8c:c4:9f:a4:8d:0c:af:d0:8f:6d:31:f3:fe:60:f9:7a:8c:9a:
         2b:7a:73:23:1e:60:2e:35:b5:38:bd:fc:e1:ca:63:5b:e0:02:
         e6:b5:20:ba:25:91:bc:3d:de:8e:b1:07:68:66:cf:18:6f:8d:
         a9:05:d9:3b:85:73:ca:15:2c:77:37:2b:50:ec:9d:8c:36:99:
         8b:6d:0a:0c:4b:68:ae:4e:93:4e:9d:3c:72:95:4e:88:f6:c8:
         38:68:40:4e:1f:6b:2e:f6:ee:f4:e7:3e:f8:57:36:d8:ea:31:
         e3:48:d6:42
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJaCGRcDDW/p+Q0lY+zwLfHLDAE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM4MUJFNkNGNjQwMDBBQjlGRjVCNDNBRkY3OEYyNjIz
MTk5RjE1MzAeFw0yNTAyMDQxODI1NDlaFw0yNjAyMDMxODMwNDlaMDMxMTAvBgNV
BAMTKENBRkRFMDA4QkYwQjZBOEY0RjJBNkY2MTU0RjZFMDBCMEYzRjgzMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxYTrmrSTdsy2vAMPP1STPBvgK
XuuxJjhZOvRvznT6Ru+ODdmQj4TbTWhmcFWnqFImmYl9QGsQ/Qv5u6cbJCUdW0JH
1CzFQOnBI/nFEgIJdSTx3cy+bTt17Lqu/w1FB4naEvRHAMXpaswn6dh1F2w3UyJg
5GIezLkovpzyhGYnwUTAJ3q0WNod3Dv7hnHSiuw7N5I3tLxf3tFTVhkdsykM2DVN
6efOdL7L8APqkEaIIXaxZTWvs1NUMdEzkZky9AXuSiLJUz8pR2IKDbCpwJWevDlE
oNNZ7aZAiSmBPX0TItFWuu4QH6zqjpT6Ap/ZDJDO7PNCVPCa32jrQsDr+QP9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUyv3gCL8Lao9PKm9hVPbgCw8/gxEwHwYDVR0j
BBgwFoAU84G+bPZAAKuf9bQ6/3jyYjGZ8VMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GREM2QUU0RjIwNDc0OTM3OTM0QUY1RUY0OEVGOEIyQzY0
NTU1RkZFRTk4NDg2NDVCMUI4NkI3NTc5MjhGNzM4LzAvRjM4MUJFNkNGNjQwMDBB
QjlGRjVCNDNBRkY3OEYyNjIzMTk5RjE1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMzgxQkU2Q0Y2NDAwMEFCOUZG
NUI0M0FGRjc4RjI2MjMxOTlGMTUzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkRDNkFFNEYyMDQ3NDkzNzkzNEFGNUVGNDhFRjhCMkM2NDU1NUZGRUU5
ODQ4NjQ1QjFCODZCNzU3OTI4RjczOC8wLzM0MzUyZTMyMzMzNjJlMzMzMjJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNjM3MzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3sIDAN
BgkqhkiG9w0BAQsFAAOCAQEAm0m7gQtFtTj7W2OIrLHiy7hTGuJTzPvl1seeo/M4
0JtlPeJuFsAOMpjrIptf/gghXVQZNZhkkQxghvNw4DuRNz02qqiQ37Pc/t26cdUm
gsb/PR396FuqE95CQpEM8ikY0EUM1U54btyHEfOhIQmDzp2E7/K6R8J5Wd19wPKV
4v9i/OwqEzz097TTB+PHoZYzjMSfpI0Mr9CPbTHz/mD5eoyaK3pzIx5gLjW1OL38
4cpjW+AC5rUguiWRvD3ejrEHaGbPGG+NqQXZO4VzyhUsdzcrUOydjDaZi20KDEto
rk6TTp08cpVOiPbIOGhATh9rLvbu9Oc++Fc22Oox40jWQg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:55:46 2025 by rpki-client