Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/34352e3138312e34342e302f32332d3233203d3e20323637373938.roa
File:                     34352e3138312e34342e302f32332d3233203d3e20323637373938.roa (raw, json)
Hash identifier:          lc6qYaqno3LaFNqZUypDNvSSWrN32CpTZCVcbVgK7Fs=
Subject key identifier:   32:FE:98:77:1C:2E:BC:27:72:56:CC:98:5F:F3:32:98:D0:8D:2B:66
Certificate issuer:       /CN=44B7D6626292744063A0029B3E214C905150E05D
Certificate serial:       2E490C00B92FD34FDB3C3587835F12CAC94BD0C1
Authority key identifier: 44:B7:D6:62:62:92:74:40:63:A0:02:9B:3E:21:4C:90:51:50:E0:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/34352e3138312e34342e302f32332d3233203d3e20323637373938.roa
Signing time:             Fri 18 Apr 2025 17:15:15 +0000
ROA not before:           Fri 18 Apr 2025 17:10:15 +0000
ROA not after:            Fri 17 Apr 2026 17:15:15 +0000
asID:                     267798
IP address blocks:        45.181.44.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/44B7D6626292744063A0029B3E214C905150E05D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/44B7D6626292744063A0029B3E214C905150E05D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:49:0c:00:b9:2f:d3:4f:db:3c:35:87:83:5f:12:ca:c9:4b:d0:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44B7D6626292744063A0029B3E214C905150E05D
        Validity
            Not Before: Apr 18 17:10:15 2025 GMT
            Not After : Apr 17 17:15:15 2026 GMT
        Subject: CN=32FE98771C2EBC277256CC985FF33298D08D2B66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fe:5a:e2:1f:4c:b4:ff:fd:e5:68:5b:da:42:
                    6c:1c:3a:39:b2:64:d1:9b:25:c4:8c:07:90:f4:60:
                    e7:11:24:7b:e3:14:96:b4:6c:7a:38:5b:e5:2d:b3:
                    71:d3:3a:0b:09:2a:c8:23:06:4d:28:15:27:12:43:
                    55:1a:d1:18:e3:29:13:7a:a1:47:a7:9c:a7:1b:c8:
                    46:f5:bd:a5:0a:fd:50:93:14:ea:5f:88:58:47:97:
                    b8:69:de:28:44:70:cf:71:32:e9:e3:c9:d9:1b:4f:
                    cb:6b:ae:24:55:04:0f:3f:53:f5:7c:8d:ae:9c:97:
                    60:ef:af:cb:3d:20:c7:88:c8:8e:84:47:30:a4:f2:
                    6d:29:96:56:f4:15:93:93:e9:47:6f:d2:44:40:bf:
                    64:ac:77:e1:21:4a:f8:08:cd:7a:6d:df:80:22:1c:
                    70:d9:b6:ab:7a:3f:07:59:e0:43:fa:11:e0:7c:7e:
                    4d:ba:5b:1b:c1:6a:ab:95:04:f7:de:49:e3:d6:04:
                    9f:7b:50:a7:ce:3d:b0:3e:7c:00:a3:8e:80:04:39:
                    1e:11:ef:95:ec:92:b8:df:47:29:f5:83:41:4c:67:
                    91:83:22:cc:af:34:20:25:fe:f2:ca:50:ac:90:de:
                    f6:9c:96:6b:9b:3a:a1:d5:cf:7f:33:7a:77:2b:87:
                    44:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FE:98:77:1C:2E:BC:27:72:56:CC:98:5F:F3:32:98:D0:8D:2B:66
            X509v3 Authority Key Identifier:
                keyid:44:B7:D6:62:62:92:74:40:63:A0:02:9B:3E:21:4C:90:51:50:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/44B7D6626292744063A0029B3E214C905150E05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/34352e3138312e34342e302f32332d3233203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:d3:e3:27:02:65:c3:95:b6:40:18:b1:d9:78:5f:f4:2b:03:
         c7:48:63:a3:fa:5f:12:19:9b:ef:11:1f:89:80:00:67:24:e7:
         5f:f8:19:4a:72:9e:f8:47:f1:2b:2d:e3:9a:79:ac:7d:c7:89:
         44:b4:ba:fe:52:b3:ca:41:f5:5d:56:a4:8b:7c:5a:78:a3:13:
         0a:c4:fb:ee:1e:4c:c0:30:25:7a:f4:fe:af:5a:92:98:6a:79:
         84:ac:5c:eb:08:9b:9e:f2:ff:b4:fc:63:73:1c:5e:ad:2a:50:
         4b:f2:e8:30:72:99:1f:c3:ad:7b:17:cc:78:88:0b:0e:c9:28:
         72:0e:2f:a4:c9:d4:29:d7:ce:6b:76:9c:17:40:25:0a:89:58:
         13:48:8f:fa:37:5d:b9:66:f0:cd:19:56:ca:31:16:eb:05:f9:
         67:58:56:b0:7d:6c:2e:8e:85:64:cf:e4:96:33:35:5e:fe:a4:
         90:82:70:98:35:bc:55:2c:10:cd:8f:74:d7:70:bc:0c:87:3a:
         40:bc:c6:58:8c:a0:b3:de:89:33:14:7e:5f:02:6e:67:32:44:
         fd:17:81:3d:f3:14:0d:5c:e8:de:7d:ea:25:8f:47:bb:1d:fe:
         d2:2b:4f:6c:eb:2c:af:40:1e:37:a0:3d:bb:27:e1:a2:78:ff:
         c0:1b:44:80
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULkkMALkv00/bPDWHg18SyslL0MEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRCN0Q2NjI2MjkyNzQ0MDYzQTAwMjlCM0UyMTRDOTA1
MTUwRTA1RDAeFw0yNTA0MTgxNzEwMTVaFw0yNjA0MTcxNzE1MTVaMDMxMTAvBgNV
BAMTKDMyRkU5ODc3MUMyRUJDMjc3MjU2Q0M5ODVGRjMzMjk4RDA4RDJCNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl/lriH0y0//3laFvaQmwcOjmy
ZNGbJcSMB5D0YOcRJHvjFJa0bHo4W+Uts3HTOgsJKsgjBk0oFScSQ1Ua0RjjKRN6
oUennKcbyEb1vaUK/VCTFOpfiFhHl7hp3ihEcM9xMunjydkbT8trriRVBA8/U/V8
ja6cl2Dvr8s9IMeIyI6ERzCk8m0pllb0FZOT6Udv0kRAv2Ssd+EhSvgIzXpt34Ai
HHDZtqt6PwdZ4EP6EeB8fk26WxvBaquVBPfeSePWBJ97UKfOPbA+fACjjoAEOR4R
75XskrjfRyn1g0FMZ5GDIsyvNCAl/vLKUKyQ3vaclmubOqHVz38zencrh0T3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUMv6YdxwuvCdyVsyYX/MymNCNK2YwHwYDVR0j
BBgwFoAURLfWYmKSdEBjoAKbPiFMkFFQ4F0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85OTBGRjlBRDUzMTA1NzRENjU0Q0E0NjlDM0M2OTc5QjIz
RDkzNEZDNUFFNjEwRkIxODZGMDZEQTY1MThCQTRBLzAvNDRCN0Q2NjI2MjkyNzQ0
MDYzQTAwMjlCM0UyMTRDOTA1MTUwRTA1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NEI3RDY2MjYyOTI3NDQwNjNB
MDAyOUIzRTIxNEM5MDUxNTBFMDVELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTkwRkY5QUQ1MzEwNTc0RDY1NENBNDY5QzNDNjk3OUIyM0Q5MzRGQzVB
RTYxMEZCMTg2RjA2REE2NTE4QkE0QS8wLzM0MzUyZTMxMzgzMTJlMzQzNDJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNzM3MzkzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS21LDAN
BgkqhkiG9w0BAQsFAAOCAQEAoNPjJwJlw5W2QBix2Xhf9CsDx0hjo/pfEhmb7xEf
iYAAZyTnX/gZSnKe+EfxKy3jmnmsfceJRLS6/lKzykH1XVaki3xaeKMTCsT77h5M
wDAlevT+r1qSmGp5hKxc6wibnvL/tPxjcxxerSpQS/LoMHKZH8OtexfMeIgLDsko
cg4vpMnUKdfOa3acF0AlColYE0iP+jdduWbwzRlWyjEW6wX5Z1hWsH1sLo6FZM/k
ljM1Xv6kkIJwmDW8VSwQzY9013C8DIc6QLzGWIygs96JMxR+XwJuZzJE/ReBPfMU
DVzo3n3qJY9Hux3+0itPbOssr0AeN6A9uyfhonj/wBtEgA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:38 2025 by rpki-client on console.sobornost.net