Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/34352e3136322e39312e302f32342d3234203d3e20323633323434.roa
File:                     34352e3136322e39312e302f32342d3234203d3e20323633323434.roa (raw, json)
Hash identifier:          03mX5v3MX2e6J6dQF7uHPGxH6VtKTluYipMmrR59FcY=
Subject key identifier:   0C:BF:9E:30:24:CE:4C:0B:6C:27:87:EB:30:41:73:5C:0C:34:06:FE
Certificate issuer:       /CN=CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC
Certificate serial:       24D17C028BFDA3A9DFB935B8940BB536724048DE
Authority key identifier: CA:3F:AF:C2:E5:5B:DF:D3:3A:26:03:F6:83:9D:05:EC:F5:2A:2C:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/34352e3136322e39312e302f32342d3234203d3e20323633323434.roa
Signing time:             Tue 04 Feb 2025 18:09:58 +0000
ROA not before:           Tue 04 Feb 2025 18:04:58 +0000
ROA not after:            Tue 03 Feb 2026 18:09:58 +0000
asID:                     263244
IP address blocks:        45.162.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 00:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d1:7c:02:8b:fd:a3:a9:df:b9:35:b8:94:0b:b5:36:72:40:48:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC
        Validity
            Not Before: Feb  4 18:04:58 2025 GMT
            Not After : Feb  3 18:09:58 2026 GMT
        Subject: CN=0CBF9E3024CE4C0B6C2787EB3041735C0C3406FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:be:5c:f4:9b:0a:37:7b:9a:d6:fc:95:68:09:
                    f2:0b:8a:bb:cb:96:6d:15:af:ec:aa:9a:51:20:12:
                    d1:37:f0:af:59:de:33:9d:3b:96:23:38:3d:60:19:
                    9a:b5:47:41:18:35:56:63:de:7c:4b:aa:09:4b:f8:
                    53:12:e0:c9:0a:24:77:a8:21:67:82:b3:96:67:c9:
                    7f:d4:93:c0:b2:56:e1:59:ff:c9:b1:32:12:7e:0a:
                    84:c7:af:05:ff:7f:32:ff:19:a2:4e:84:78:fd:ac:
                    ed:92:7e:a3:3f:2b:d9:13:56:c4:99:65:2b:0a:83:
                    f2:cb:61:74:31:3e:93:42:d5:b3:e2:66:91:8c:c3:
                    12:1f:62:40:4e:8c:d7:82:64:f1:63:ec:89:12:20:
                    52:ba:75:bb:69:df:55:dd:5d:13:55:58:9f:c9:52:
                    77:66:08:24:62:66:96:c5:58:21:fb:f4:ea:63:f1:
                    ad:d2:e5:3b:01:71:74:75:6f:bd:20:53:51:47:a3:
                    9d:0c:da:7a:e1:f3:a9:19:f6:3b:9b:cf:28:ba:ea:
                    9f:86:a7:b1:94:d8:c3:d5:ba:05:24:f0:8c:35:03:
                    10:e1:f4:48:f6:e8:e8:05:bf:c9:04:38:75:26:bc:
                    82:27:ef:cb:c5:85:d1:4f:df:d3:ac:15:c7:3e:76:
                    c0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BF:9E:30:24:CE:4C:0B:6C:27:87:EB:30:41:73:5C:0C:34:06:FE
            X509v3 Authority Key Identifier:
                keyid:CA:3F:AF:C2:E5:5B:DF:D3:3A:26:03:F6:83:9D:05:EC:F5:2A:2C:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/34352e3136322e39312e302f32342d3234203d3e20323633323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:83:5d:ae:76:10:95:56:1c:92:09:ca:88:76:8a:2e:d9:62:
         d4:62:7a:26:2b:87:98:f3:6c:8e:c7:4b:24:2a:a9:ca:58:bc:
         87:51:93:72:3f:b6:ab:bc:f4:92:17:20:5e:8d:f1:0c:0a:4e:
         4d:58:e1:a3:b1:5e:db:b3:44:e3:d5:45:50:91:4a:84:2f:1e:
         a8:0d:23:4a:46:77:61:7e:48:92:38:21:21:ac:00:71:60:11:
         63:d1:c0:c1:7c:62:f3:3a:94:53:d8:13:67:58:37:8f:20:80:
         9d:cb:91:b1:0f:c1:2e:91:f7:51:a9:c1:4d:86:d0:04:72:30:
         a2:e9:3d:fb:06:60:01:bd:58:bf:b5:59:a7:93:3c:e7:95:04:
         63:71:a7:ad:d6:41:44:e8:9e:07:87:f8:4d:f2:3b:c3:9a:bb:
         29:ef:93:8c:23:ef:be:cf:2b:53:bd:96:c4:f5:43:28:0b:d2:
         dd:28:1a:d2:2b:b0:f9:d3:ba:68:ad:75:89:bb:83:65:20:d8:
         99:90:cf:ba:8f:fd:d9:dc:34:78:49:53:40:88:85:55:03:42:
         7e:1f:d5:1c:0f:50:a5:2b:1f:a7:9b:3e:a6:e0:46:bb:f1:30:
         27:d9:15:f2:ef:24:e0:a6:74:ca:08:23:e4:04:16:83:cf:70:
         57:07:7c:a0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJNF8Aov9o6nfuTW4lAu1NnJASN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EzRkFGQzJFNTVCREZEMzNBMjYwM0Y2ODM5RDA1RUNG
NTJBMkNFQzAeFw0yNTAyMDQxODA0NThaFw0yNjAyMDMxODA5NThaMDMxMTAvBgNV
BAMTKDBDQkY5RTMwMjRDRTRDMEI2QzI3ODdFQjMwNDE3MzVDMEMzNDA2RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5vlz0mwo3e5rW/JVoCfILirvL
lm0Vr+yqmlEgEtE38K9Z3jOdO5YjOD1gGZq1R0EYNVZj3nxLqglL+FMS4MkKJHeo
IWeCs5ZnyX/Uk8CyVuFZ/8mxMhJ+CoTHrwX/fzL/GaJOhHj9rO2SfqM/K9kTVsSZ
ZSsKg/LLYXQxPpNC1bPiZpGMwxIfYkBOjNeCZPFj7IkSIFK6dbtp31XdXRNVWJ/J
UndmCCRiZpbFWCH79Opj8a3S5TsBcXR1b70gU1FHo50M2nrh86kZ9jubzyi66p+G
p7GU2MPVugUk8Iw1AxDh9Ej26OgFv8kEOHUmvIIn78vFhdFP39OsFcc+dsDLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUDL+eMCTOTAtsJ4frMEFzXAw0Bv4wHwYDVR0j
BBgwFoAUyj+vwuVb39M6JgP2g50F7PUqLOwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85OEJGNUIzMEM4MzRBQkE1NkE2ODlBRUM2NjMxRjdDMkQ4
RTI1N0Q0QUQxOEE0MUZEQ0RDMDhDMTUxQUMyNkNDLzAvQ0EzRkFGQzJFNTVCREZE
MzNBMjYwM0Y2ODM5RDA1RUNGNTJBMkNFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTNGQUZDMkU1NUJERkQzM0Ey
NjAzRjY4MzlEMDVFQ0Y1MkEyQ0VDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOThCRjVCMzBDODM0QUJBNTZBNjg5QUVDNjYzMUY3QzJEOEUyNTdENEFE
MThBNDFGRENEQzA4QzE1MUFDMjZDQy8wLzM0MzUyZTMxMzYzMjJlMzkzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzMyMzQzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2iWzAN
BgkqhkiG9w0BAQsFAAOCAQEAGINdrnYQlVYckgnKiHaKLtli1GJ6JiuHmPNsjsdL
JCqpyli8h1GTcj+2q7z0khcgXo3xDApOTVjho7Fe27NE49VFUJFKhC8eqA0jSkZ3
YX5IkjghIawAcWARY9HAwXxi8zqUU9gTZ1g3jyCAncuRsQ/BLpH3UanBTYbQBHIw
ouk9+wZgAb1Yv7VZp5M855UEY3GnrdZBROieB4f4TfI7w5q7Ke+TjCPvvs8rU72W
xPVDKAvS3Sga0iuw+dO6aK11ibuDZSDYmZDPuo/92dw0eElTQIiFVQNCfh/VHA9Q
pSsfp5s+puBGu/EwJ9kV8u8k4KZ0yggj5AQWg89wVwd8oA==
-----END CERTIFICATE-----
Generated at Sat May 10 01:37:47 2025 by rpki-client