Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138302e302f32322d3232203d3e20323636373634.roa
File:                     34352e3233342e3138302e302f32322d3232203d3e20323636373634.roa (raw, json)
Hash identifier:          9MpxZIIYXNSlQNbWa2RPIowH8+lyZDguWSCEywpAgkE=
Subject key identifier:   11:AC:04:EC:74:F3:DF:A7:94:64:8E:DB:A3:BC:0E:1A:F5:EB:20:78
Certificate issuer:       /CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
Certificate serial:       03A34B098EE7237740ECAD290A22DE5181B95344
Authority key identifier: CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138302e302f32322d3232203d3e20323636373634.roa
Signing time:             Fri 25 Apr 2025 00:16:01 +0000
ROA not before:           Fri 25 Apr 2025 00:11:01 +0000
ROA not after:            Fri 24 Apr 2026 00:16:01 +0000
asID:                     266764
IP address blocks:        45.234.180.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a3:4b:09:8e:e7:23:77:40:ec:ad:29:0a:22:de:51:81:b9:53:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
        Validity
            Not Before: Apr 25 00:11:01 2025 GMT
            Not After : Apr 24 00:16:01 2026 GMT
        Subject: CN=11AC04EC74F3DFA794648EDBA3BC0E1AF5EB2078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:9e:6f:3c:44:ad:4f:a6:04:44:36:6d:2c:
                    11:a8:91:56:da:88:81:8c:7e:7b:0e:3c:eb:b1:4c:
                    31:be:23:ef:d9:be:60:ac:b7:f1:69:60:48:1f:b9:
                    36:08:54:2c:13:89:a2:72:81:38:ac:9f:51:24:e3:
                    1f:4f:eb:79:fd:b2:0b:da:aa:ea:75:7c:32:3f:5f:
                    17:1f:23:f3:f3:fd:17:49:18:f8:40:57:33:57:e2:
                    5a:b0:0f:60:3d:ec:85:21:de:95:62:38:12:5f:34:
                    ea:35:cb:85:43:47:e0:a7:ca:72:be:97:1c:b2:78:
                    b4:96:99:51:51:38:ab:5c:8c:eb:89:19:17:21:5b:
                    c8:81:e7:cb:95:6b:e2:da:88:55:52:f9:b8:9a:aa:
                    f6:94:42:8e:64:36:55:e7:af:9b:53:1b:25:6e:92:
                    e1:5f:bb:4b:78:c2:eb:03:07:33:f5:04:2f:2f:6b:
                    9a:1f:58:44:ae:f3:3a:93:11:3b:25:3c:7e:3c:a4:
                    2e:a4:0b:cc:0e:86:b0:ff:d8:ad:7f:04:95:17:a6:
                    ca:23:cd:58:57:69:63:d5:6e:27:49:bc:04:43:09:
                    0a:cb:45:67:49:17:58:3a:9c:d7:c3:48:69:e5:89:
                    15:10:7c:b1:fc:13:83:66:57:59:b0:d3:9a:f1:64:
                    26:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AC:04:EC:74:F3:DF:A7:94:64:8E:DB:A3:BC:0E:1A:F5:EB:20:78
            X509v3 Authority Key Identifier:
                keyid:CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138302e302f32322d3232203d3e20323636373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:41:eb:1d:a5:0d:0d:19:bb:34:7f:ea:f0:85:51:09:39:d4:
         29:da:24:77:14:05:78:b4:dc:7b:bf:5b:8b:4d:11:7f:ec:96:
         b2:bc:4b:15:7a:4d:21:a7:39:fc:07:a8:f9:ae:bf:05:ab:77:
         13:59:b8:ca:cc:e8:f8:fb:b0:37:43:4c:c8:5e:7b:ab:7c:f6:
         65:19:86:bd:9a:12:d6:71:b1:d0:ba:74:29:0d:38:3c:44:bb:
         b9:c3:75:be:ca:8f:6c:82:d2:27:51:59:0e:86:82:c2:1b:93:
         d5:16:7d:bf:18:a0:59:7c:32:72:b4:5b:f3:0c:d2:76:e5:b5:
         55:7e:1d:21:5f:36:54:11:05:9b:38:62:3d:dd:bb:0e:22:c4:
         dd:0b:55:36:6c:10:73:71:58:c6:ca:92:87:a7:cc:90:83:d6:
         2b:1c:0e:83:88:07:40:f8:62:03:2d:90:6c:40:cc:a2:28:e0:
         78:f8:20:66:66:0f:79:39:0f:af:6c:87:19:ea:8b:39:9e:43:
         6b:06:17:88:b0:a5:ac:8d:b6:ee:b5:55:34:02:99:5f:bf:13:
         68:1b:cc:aa:d3:f7:58:85:92:d4:6b:36:33:5a:61:60:17:97:
         7e:e3:b8:79:16:fc:4e:e9:22:bf:bf:35:d7:fc:ab:50:df:7b:
         2a:4f:a2:eb
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUA6NLCY7nI3dA7K0pCiLeUYG5U0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E2RkE4NzZFQzNGQkI3QjA0MzEwQUJDNEIzMTIzQUZC
RTg4QTIwQzAeFw0yNTA0MjUwMDExMDFaFw0yNjA0MjQwMDE2MDFaMDMxMTAvBgNV
BAMTKDExQUMwNEVDNzRGM0RGQTc5NDY0OEVEQkEzQkMwRTFBRjVFQjIwNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Up5vPEStT6YERDZtLBGokVba
iIGMfnsOPOuxTDG+I+/ZvmCst/FpYEgfuTYIVCwTiaJygTisn1Ek4x9P63n9sgva
qup1fDI/XxcfI/Pz/RdJGPhAVzNX4lqwD2A97IUh3pViOBJfNOo1y4VDR+CnynK+
lxyyeLSWmVFROKtcjOuJGRchW8iB58uVa+LaiFVS+biaqvaUQo5kNlXnr5tTGyVu
kuFfu0t4wusDBzP1BC8va5ofWESu8zqTETslPH48pC6kC8wOhrD/2K1/BJUXpsoj
zVhXaWPVbidJvARDCQrLRWdJF1g6nNfDSGnliRUQfLH8E4NmV1mw05rxZCaLAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUEawE7HTz36eUZI7bo7wOGvXrIHgwHwYDVR0j
BBgwFoAUym+oduw/u3sEMQq8SzEjr76IogwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQ0ZGMjc3NjlBNDM5NjA1REEyN0Q3Mjk1QjJBODY1MDRC
NUI2RjZBQjRBQjhDNERENDQwNTJERTA3ODAxMzcxLzAvQ0E2RkE4NzZFQzNGQkI3
QjA0MzEwQUJDNEIzMTIzQUZCRTg4QTIwQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTZGQTg3NkVDM0ZCQjdCMDQz
MTBBQkM0QjMxMjNBRkJFODhBMjBDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRENGRjI3NzY5QTQzOTYwNURBMjdENzI5NUIyQTg2NTA0QjVCNkY2QUI0
QUI4QzRERDQ0MDUyREUwNzgwMTM3MS8wLzM0MzUyZTMyMzMzNDJlMzEzODMwMmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM2MzczNjM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLeq0
MA0GCSqGSIb3DQEBCwUAA4IBAQAZQesdpQ0NGbs0f+rwhVEJOdQp2iR3FAV4tNx7
v1uLTRF/7JayvEsVek0hpzn8B6j5rr8Fq3cTWbjKzOj4+7A3Q0zIXnurfPZlGYa9
mhLWcbHQunQpDTg8RLu5w3W+yo9sgtInUVkOhoLCG5PVFn2/GKBZfDJytFvzDNJ2
5bVVfh0hXzZUEQWbOGI93bsOIsTdC1U2bBBzcVjGypKHp8yQg9YrHA6DiAdA+GID
LZBsQMyiKOB4+CBmZg95OQ+vbIcZ6os5nkNrBheIsKWsjbbutVU0AplfvxNoG8yq
0/dYhZLUazYzWmFgF5d+47h5FvxO6SK/vzXX/KtQ33sqT6Lr
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:21 2025 by rpki-client on console.sobornost.net