Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/34352e3136322e3138342e302f32322d3234203d3e203634313631.roa
File:                     34352e3136322e3138342e302f32322d3234203d3e203634313631.roa (raw, json)
Hash identifier:          ijLgB7vRVfAP0w4sA6YQIFb72zbSGU7S2fh7MpesjIY=
Subject key identifier:   44:78:69:7B:9D:77:E3:B6:08:91:95:5A:2F:AD:48:00:B3:22:C3:C0
Certificate issuer:       /CN=E9BD71B0FDCC660140582C799E734F25C80A1196
Certificate serial:       4F8ECDEB48385C84C79D25ABA4392E87C5013AEE
Authority key identifier: E9:BD:71:B0:FD:CC:66:01:40:58:2C:79:9E:73:4F:25:C8:0A:11:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/34352e3136322e3138342e302f32322d3234203d3e203634313631.roa
Signing time:             Wed 23 Apr 2025 16:35:00 +0000
ROA not before:           Wed 23 Apr 2025 16:30:00 +0000
ROA not after:            Wed 22 Apr 2026 16:35:00 +0000
asID:                     64161
IP address blocks:        45.162.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:8e:cd:eb:48:38:5c:84:c7:9d:25:ab:a4:39:2e:87:c5:01:3a:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9BD71B0FDCC660140582C799E734F25C80A1196
        Validity
            Not Before: Apr 23 16:30:00 2025 GMT
            Not After : Apr 22 16:35:00 2026 GMT
        Subject: CN=4478697B9D77E3B60891955A2FAD4800B322C3C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:98:20:db:78:18:f9:3e:ff:06:d6:22:ec:dc:
                    ae:e2:5c:61:42:bf:d1:af:ad:2d:b9:b6:9a:5b:90:
                    e2:4f:c5:bb:30:55:db:cc:3d:ab:2e:50:0f:28:6c:
                    42:61:0e:eb:ef:ef:f0:e8:f9:cf:55:63:3d:d7:6b:
                    3a:61:6d:17:ea:a1:01:bb:8a:65:53:44:d4:f4:a2:
                    dc:4f:6a:02:ed:5c:1b:32:4d:f1:ec:3d:5b:9c:bc:
                    af:36:88:ab:3e:61:01:3b:cc:fb:a8:8b:2a:ad:13:
                    14:01:30:fe:28:e4:12:13:b3:b5:11:1d:48:ed:be:
                    a1:09:17:bc:5b:9e:d9:da:a9:97:0a:88:7a:51:f8:
                    ec:f2:62:c6:7e:e4:c0:01:71:e0:8e:9c:4d:d1:69:
                    f3:15:cf:1b:1d:1f:4f:95:98:9c:e4:cf:db:21:25:
                    b4:7c:09:94:6b:e5:33:f7:31:e5:a8:a9:01:20:9a:
                    0f:9a:48:6a:9b:b8:65:a0:52:e1:16:29:cf:01:8a:
                    c5:00:9c:fc:58:3e:3a:86:f0:21:cf:b8:f7:94:99:
                    d2:f4:76:47:7d:c1:d3:79:8d:8d:11:84:c8:a7:c1:
                    f1:e2:ff:72:f6:20:7f:a6:57:94:8b:5a:13:73:46:
                    4b:d1:3e:c9:f7:ca:7e:9c:c8:42:35:a6:0f:e8:56:
                    8b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:78:69:7B:9D:77:E3:B6:08:91:95:5A:2F:AD:48:00:B3:22:C3:C0
            X509v3 Authority Key Identifier:
                keyid:E9:BD:71:B0:FD:CC:66:01:40:58:2C:79:9E:73:4F:25:C8:0A:11:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/34352e3136322e3138342e302f32322d3234203d3e203634313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:29:f9:03:ce:c1:5a:41:e1:b1:ce:8e:3c:dc:fd:e8:f5:87:
         b8:63:f9:91:34:46:b0:66:43:f1:b0:60:4a:b0:5f:80:95:6a:
         2c:94:3b:90:3d:e2:b6:fe:fb:1d:43:31:d3:dc:53:2b:1f:e8:
         e8:09:d6:8b:2d:59:10:62:d4:18:46:c0:c8:a0:a2:89:78:31:
         d6:5f:b9:69:a9:e4:9a:3d:9d:53:8f:55:22:cc:7b:ac:c3:33:
         9b:26:1d:63:87:02:f4:19:dc:6e:0f:49:1a:88:8f:e8:87:79:
         03:0e:b6:d9:cf:d5:30:2f:50:36:da:21:d2:28:c4:d9:4c:e9:
         e2:c1:37:eb:54:95:10:1f:c4:5b:83:07:cd:c0:26:6f:61:0c:
         4c:f5:1e:c5:a4:6d:b0:da:79:be:8e:1e:cf:67:ab:ad:07:2a:
         ed:bd:c1:bd:20:b0:a6:b2:d3:64:4d:73:d0:d2:44:ee:e7:8c:
         3b:c7:d7:19:90:2d:19:10:e8:5c:a2:99:63:df:25:b8:6f:26:
         b4:73:80:c1:63:eb:55:04:a1:95:50:3b:f5:38:f1:4c:34:60:
         c9:e9:c8:d4:15:e5:34:9a:b0:47:87:1a:b3:55:4c:51:2d:22:
         2f:c1:11:f4:38:ee:e9:2a:48:b0:f7:5c:0e:e4:39:65:82:68:
         8d:56:0a:0f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUT47N60g4XITHnSWrpDkuh8UBOu4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlCRDcxQjBGRENDNjYwMTQwNTgyQzc5OUU3MzRGMjVD
ODBBMTE5NjAeFw0yNTA0MjMxNjMwMDBaFw0yNjA0MjIxNjM1MDBaMDMxMTAvBgNV
BAMTKDQ0Nzg2OTdCOUQ3N0UzQjYwODkxOTU1QTJGQUQ0ODAwQjMyMkMzQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEmCDbeBj5Pv8G1iLs3K7iXGFC
v9GvrS25tppbkOJPxbswVdvMPasuUA8obEJhDuvv7/Do+c9VYz3XazphbRfqoQG7
imVTRNT0otxPagLtXBsyTfHsPVucvK82iKs+YQE7zPuoiyqtExQBMP4o5BITs7UR
HUjtvqEJF7xbntnaqZcKiHpR+OzyYsZ+5MABceCOnE3RafMVzxsdH0+VmJzkz9sh
JbR8CZRr5TP3MeWoqQEgmg+aSGqbuGWgUuEWKc8BisUAnPxYPjqG8CHPuPeUmdL0
dkd9wdN5jY0RhMinwfHi/3L2IH+mV5SLWhNzRkvRPsn3yn6cyEI1pg/oVovLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQURHhpe51347YIkZVaL61IALMiw8AwHwYDVR0j
BBgwFoAU6b1xsP3MZgFAWCx5nnNPJcgKEZYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MDUwREE4NEZEODlDNzg0REZCQzM4NzRERDA2NEEzQkM0
Mjg0MEQ5Q0E3OURGN0Y5MzZERDhGQTgyQzExRkIxLzAvRTlCRDcxQjBGRENDNjYw
MTQwNTgyQzc5OUU3MzRGMjVDODBBMTE5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOUJENzFCMEZEQ0M2NjAxNDA1
ODJDNzk5RTczNEYyNUM4MEExMTk2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDA1MERBODRGRDg5Qzc4NERGQkMzODc0REQwNjRBM0JDNDI4NDBEOUNB
NzlERjdGOTM2REQ4RkE4MkMxMUZCMS8wLzM0MzUyZTMxMzYzMjJlMzEzODM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzNDMxMzYzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2iuDAN
BgkqhkiG9w0BAQsFAAOCAQEATin5A87BWkHhsc6OPNz96PWHuGP5kTRGsGZD8bBg
SrBfgJVqLJQ7kD3itv77HUMx09xTKx/o6AnWiy1ZEGLUGEbAyKCiiXgx1l+5aank
mj2dU49VIsx7rMMzmyYdY4cC9Bncbg9JGoiP6Id5Aw622c/VMC9QNtoh0ijE2Uzp
4sE361SVEB/EW4MHzcAmb2EMTPUexaRtsNp5vo4ez2errQcq7b3BvSCwprLTZE1z
0NJE7ueMO8fXGZAtGRDoXKKZY98luG8mtHOAwWPrVQShlVA79TjxTDRgyenI1BXl
NJqwR4cas1VMUS0iL8ER9Dju6SpIsPdcDuQ5ZYJojVYKDw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:14 2025 by rpki-client on console.sobornost.net