Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31322e302f32322d3232203d3e20323636383337.roa
File:                     34352e3233382e31322e302f32322d3232203d3e20323636383337.roa (raw, json)
Hash identifier:          z6ZNfxPF9Bx8FjrSZCOvspvzZheEDC89pqHuq8MSxr0=
Subject key identifier:   95:84:31:39:8D:12:69:E3:25:5C:ED:0C:1B:86:C0:24:CE:ED:72:8D
Certificate issuer:       /CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
Certificate serial:       24024D6FE89A9EEB80AE0105FBE61796501CA51A
Authority key identifier: 3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31322e302f32322d3232203d3e20323636383337.roa
Signing time:             Tue 06 May 2025 23:17:49 +0000
ROA not before:           Tue 06 May 2025 23:12:49 +0000
ROA not after:            Tue 05 May 2026 23:17:49 +0000
asID:                     266837
IP address blocks:        45.238.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 May 2025 00:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:02:4d:6f:e8:9a:9e:eb:80:ae:01:05:fb:e6:17:96:50:1c:a5:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
        Validity
            Not Before: May  6 23:12:49 2025 GMT
            Not After : May  5 23:17:49 2026 GMT
        Subject: CN=958431398D1269E3255CED0C1B86C024CEED728D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b9:3e:95:e1:ca:ee:0f:67:27:fa:6f:fa:cb:
                    84:8c:4c:ab:3a:fe:05:7a:7b:1f:85:3d:5e:73:27:
                    6b:7e:b5:8f:05:e3:54:b9:c4:a0:9c:85:e0:78:e8:
                    8d:e7:79:58:3c:7c:9f:c6:fd:f4:1c:9b:fe:cb:94:
                    cf:1e:ed:c7:f9:ea:85:4b:5b:48:df:2b:eb:a8:e3:
                    aa:8c:e2:28:ca:2c:08:b1:7c:8b:4d:34:5b:9f:59:
                    4a:11:da:53:87:2c:f1:2f:ec:3e:0c:07:8f:f2:96:
                    8f:a4:c1:58:68:a8:17:dd:d7:c2:6b:2e:36:77:a0:
                    4b:12:88:bd:1f:b6:6a:5f:54:b6:37:2e:ab:c4:3c:
                    3b:e1:82:e8:60:a5:88:1e:f2:ee:66:12:7e:3a:74:
                    3f:b5:5e:b4:7d:5e:53:ef:2e:f6:20:61:2a:5c:89:
                    41:18:12:97:0d:45:94:be:db:b2:53:e1:f0:95:74:
                    00:5f:eb:d4:c1:1d:37:64:0b:b7:9c:59:2a:06:f7:
                    05:14:88:f9:e5:d8:84:78:a0:9f:46:53:70:eb:d1:
                    e6:0d:6c:ee:3f:e1:c7:1f:23:b2:b0:8a:81:d0:6c:
                    20:1b:2a:6d:92:d0:7e:0f:ca:36:de:7b:2f:b6:b5:
                    11:a8:28:2f:eb:6c:37:6e:e3:9a:0d:41:6b:b2:6e:
                    92:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:84:31:39:8D:12:69:E3:25:5C:ED:0C:1B:86:C0:24:CE:ED:72:8D
            X509v3 Authority Key Identifier:
                keyid:3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31322e302f32322d3232203d3e20323636383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:bd:ff:9d:3b:70:99:8c:b8:9c:e6:20:c9:e4:2a:11:2f:6a:
         99:37:da:df:35:de:69:fc:06:e7:e6:ce:67:f0:7a:8b:b0:e0:
         04:10:13:73:07:d6:d7:48:7c:6e:e4:97:eb:31:e6:7b:5c:a2:
         88:49:43:2d:4d:c7:71:b0:d2:e5:df:cb:71:9a:1c:99:07:c4:
         99:f2:e1:eb:d9:42:3d:55:b7:41:d2:1a:2f:28:7c:53:cf:1b:
         3e:f6:6d:10:46:f0:10:36:03:24:65:a1:67:51:6c:23:ef:e6:
         1e:4d:2d:47:7a:d0:08:04:d9:9a:41:6c:cd:78:bc:77:36:1d:
         be:41:d2:87:dc:81:53:dd:1d:59:72:a5:96:63:70:04:b8:60:
         9d:95:18:ac:7c:25:cf:8e:c8:61:c4:12:f1:14:87:34:1c:ca:
         f3:e5:a4:47:2a:ee:3c:60:1e:64:8a:13:d8:bf:21:47:76:21:
         6e:58:28:ba:ab:9b:77:da:09:27:6c:4b:da:01:9e:b0:d4:53:
         8a:a7:66:01:3a:30:32:c3:b7:3c:9a:4e:2a:00:b8:03:0a:90:
         90:64:29:83:fc:fc:1c:6b:70:b2:17:a3:21:23:c1:12:7c:61:
         e4:39:44:66:01:d8:8b:02:d9:c1:f4:d1:ec:1d:a3:d7:f7:56:
         6f:a7:4c:19
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJAJNb+ianuuArgEF++YXllAcpRowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0EyQzNERTM5REVEQkE1MjI1RUE3RkVCQzI4OTMzMTIw
QUI5MzYxQjAeFw0yNTA1MDYyMzEyNDlaFw0yNjA1MDUyMzE3NDlaMDMxMTAvBgNV
BAMTKDk1ODQzMTM5OEQxMjY5RTMyNTVDRUQwQzFCODZDMDI0Q0VFRDcyOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDguT6V4cruD2cn+m/6y4SMTKs6
/gV6ex+FPV5zJ2t+tY8F41S5xKCcheB46I3neVg8fJ/G/fQcm/7LlM8e7cf56oVL
W0jfK+uo46qM4ijKLAixfItNNFufWUoR2lOHLPEv7D4MB4/ylo+kwVhoqBfd18Jr
LjZ3oEsSiL0ftmpfVLY3LqvEPDvhguhgpYge8u5mEn46dD+1XrR9XlPvLvYgYSpc
iUEYEpcNRZS+27JT4fCVdABf69TBHTdkC7ecWSoG9wUUiPnl2IR4oJ9GU3Dr0eYN
bO4/4ccfI7KwioHQbCAbKm2S0H4Pyjbeey+2tRGoKC/rbDdu45oNQWuybpJdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUlYQxOY0SaeMlXO0MG4bAJM7tco0wHwYDVR0j
BBgwFoAUOiw9453tulIl6n/rwokzEgq5NhswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0YwODIzMkJGNTAyMTk0RTNBMkU0MDExREI0ODNERDdC
RjQ4Qzg0NjU3NDE4MEY0RUVCNTE3RUE5MTgzRjMwLzAvM0EyQzNERTM5REVEQkE1
MjI1RUE3RkVCQzI4OTMzMTIwQUI5MzYxQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQTJDM0RFMzlERURCQTUyMjVF
QTdGRUJDMjg5MzMxMjBBQjkzNjFCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNGMDgyMzJCRjUwMjE5NEUzQTJFNDAxMURCNDgzREQ3QkY0OEM4NDY1
NzQxODBGNEVFQjUxN0VBOTE4M0YzMC8wLzM0MzUyZTMyMzMzODJlMzEzMjJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNjM4MzMzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3uDDAN
BgkqhkiG9w0BAQsFAAOCAQEAE73/nTtwmYy4nOYgyeQqES9qmTfa3zXeafwG5+bO
Z/B6i7DgBBATcwfW10h8buSX6zHme1yiiElDLU3HcbDS5d/LcZocmQfEmfLh69lC
PVW3QdIaLyh8U88bPvZtEEbwEDYDJGWhZ1FsI+/mHk0tR3rQCATZmkFszXi8dzYd
vkHSh9yBU90dWXKllmNwBLhgnZUYrHwlz47IYcQS8RSHNBzK8+WkRyruPGAeZIoT
2L8hR3Yhblgouqubd9oJJ2xL2gGesNRTiqdmATowMsO3PJpOKgC4AwqQkGQpg/z8
HGtwshejISPBEnxh5DlEZgHYiwLZwfTR7B2j1/dWb6dMGQ==
-----END CERTIFICATE-----
Generated at Mon May 19 15:58:55 2025 by rpki-client