Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/34352e3137302e3130322e302f32342d3234203d3e203634313339.roa
File:                     34352e3137302e3130322e302f32342d3234203d3e203634313339.roa (raw, json)
Hash identifier:          Qd3f2DxjsXw0of+rJGJhoSPvAFpd5h5Ix5J/kZIBpmI=
Subject key identifier:   FF:0F:0F:A9:56:60:AB:EE:4B:C1:37:8C:97:59:99:3F:25:A9:D3:33
Certificate issuer:       /CN=AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D
Certificate serial:       1EFBDF6B30307B61DBF902C93AA3BCF7A1BBF6AC
Authority key identifier: AF:AF:EC:BD:8D:8B:EB:5B:E4:14:03:DA:DC:4D:0F:7C:3A:8B:4B:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/34352e3137302e3130322e302f32342d3234203d3e203634313339.roa
Signing time:             Thu 14 Aug 2025 15:00:00 +0000
ROA not before:           Thu 14 Aug 2025 14:55:00 +0000
ROA not after:            Thu 13 Aug 2026 15:00:00 +0000
asID:                     64139
IP address blocks:        45.170.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Aug 2025 09:59:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:fb:df:6b:30:30:7b:61:db:f9:02:c9:3a:a3:bc:f7:a1:bb:f6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D
        Validity
            Not Before: Aug 14 14:55:00 2025 GMT
            Not After : Aug 13 15:00:00 2026 GMT
        Subject: CN=FF0F0FA95660ABEE4BC1378C9759993F25A9D333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:06:b5:ca:c5:5d:9c:20:b7:ac:4c:0e:9e:bb:
                    7e:20:8d:f3:18:0e:80:a0:f6:c7:20:bb:72:e0:4a:
                    94:f8:0c:17:9c:87:9b:1e:be:9f:6e:fd:b0:22:72:
                    2a:2d:41:ba:fb:dc:a4:f9:12:86:67:56:fe:f6:f6:
                    7b:07:66:df:64:4b:5e:36:ac:68:91:11:6e:78:84:
                    41:18:00:48:2f:a4:a7:15:63:2c:6b:89:5c:f3:c6:
                    55:6f:b6:ca:7c:99:02:95:71:03:6a:58:02:bf:8a:
                    73:16:f2:8d:4d:3d:d6:ca:58:6c:10:9e:12:85:50:
                    82:45:26:70:7d:5b:fc:b6:39:c0:a3:82:58:e6:d5:
                    3c:54:0b:5e:3d:47:82:86:59:b9:0e:0b:08:e3:23:
                    60:96:da:9e:96:53:ee:74:dd:9f:55:17:c9:d5:ea:
                    83:67:cc:9d:7b:ba:d2:03:08:a0:f8:e5:e3:e1:80:
                    bc:10:d8:09:63:5b:4d:e2:6c:6d:9b:88:58:b9:85:
                    a6:03:4c:1f:d9:1b:5f:6c:a1:e0:14:04:07:70:68:
                    06:ba:2c:78:04:08:50:5c:08:e1:6c:6b:7a:4a:6f:
                    57:7c:1c:b5:dc:a4:02:95:81:16:6d:2d:2f:fb:36:
                    a9:d9:0b:cc:ba:5e:ea:c0:e9:78:89:60:d2:85:e9:
                    cc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0F:0F:A9:56:60:AB:EE:4B:C1:37:8C:97:59:99:3F:25:A9:D3:33
            X509v3 Authority Key Identifier:
                keyid:AF:AF:EC:BD:8D:8B:EB:5B:E4:14:03:DA:DC:4D:0F:7C:3A:8B:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/34352e3137302e3130322e302f32342d3234203d3e203634313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:19:63:96:98:b4:38:9b:4d:10:35:d4:60:72:26:b1:c3:f3:
         97:c3:3d:bb:2c:25:4a:f3:40:31:39:01:99:c0:7b:b3:1e:65:
         0d:39:68:11:01:66:eb:c8:5f:8c:10:e8:fb:9a:48:d6:93:a9:
         e9:c0:a5:9a:02:4d:f4:67:fa:a5:59:95:f1:98:cc:a3:64:45:
         6f:77:9e:75:40:bb:3f:df:e0:19:f6:43:69:8a:4f:c6:e4:81:
         5e:f6:ec:d6:c5:55:b4:91:96:17:9a:9e:ab:59:1f:8e:24:c6:
         d6:ac:50:b2:8f:c5:f5:da:56:ad:60:a1:04:c8:39:13:12:ab:
         bb:4c:9d:1f:de:be:de:14:72:6a:df:1d:a1:d2:9c:95:bd:1c:
         77:e1:e1:7b:31:cc:dc:38:c6:06:10:98:5d:bd:b5:fb:f4:da:
         49:b7:1d:f0:a4:36:3f:32:08:13:41:82:04:cb:9f:76:9e:7e:
         f1:a6:04:3d:b4:ea:72:38:77:3a:26:45:8e:df:2b:39:76:f7:
         69:7c:75:48:40:fe:e8:1e:f7:0d:17:df:7a:59:c0:0b:b2:27:
         79:c5:52:ed:23:84:c3:18:26:b7:d9:2b:92:f7:f7:47:e2:0e:
         42:44:f1:99:f8:60:97:40:1c:ba:99:b1:b7:8e:19:35:ea:53:
         c4:05:00:70
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHvvfazAwe2Hb+QLJOqO896G79qwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZBRkVDQkQ4RDhCRUI1QkU0MTQwM0RBREM0RDBGN0Mz
QThCNEI4RDAeFw0yNTA4MTQxNDU1MDBaFw0yNjA4MTMxNTAwMDBaMDMxMTAvBgNV
BAMTKEZGMEYwRkE5NTY2MEFCRUU0QkMxMzc4Qzk3NTk5OTNGMjVBOUQzMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0BrXKxV2cILesTA6eu34gjfMY
DoCg9scgu3LgSpT4DBech5sevp9u/bAiciotQbr73KT5EoZnVv729nsHZt9kS142
rGiREW54hEEYAEgvpKcVYyxriVzzxlVvtsp8mQKVcQNqWAK/inMW8o1NPdbKWGwQ
nhKFUIJFJnB9W/y2OcCjgljm1TxUC149R4KGWbkOCwjjI2CW2p6WU+503Z9VF8nV
6oNnzJ17utIDCKD45ePhgLwQ2AljW03ibG2biFi5haYDTB/ZG19soeAUBAdwaAa6
LHgECFBcCOFsa3pKb1d8HLXcpAKVgRZtLS/7NqnZC8y6XurA6XiJYNKF6cwJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU/w8PqVZgq+5LwTeMl1mZPyWp0zMwHwYDVR0j
BBgwFoAUr6/svY2L61vkFAPa3E0PfDqLS40wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRUU0MjQwMDZGNTM3RjBEN0FCMzVCM0E2N0Q0MzgxMkUw
RjcxMEQ0MDc5QjJFNEVFREMzMTRCNENCMEFDOEQ4LzAvQUZBRkVDQkQ4RDhCRUI1
QkU0MTQwM0RBREM0RDBGN0MzQThCNEI4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkFGRUNCRDhEOEJFQjVCRTQx
NDAzREFEQzREMEY3QzNBOEI0QjhELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUVFNDI0MDA2RjUzN0YwRDdBQjM1QjNBNjdENDM4MTJFMEY3MTBENDA3
OUIyRTRFRURDMzE0QjRDQjBBQzhEOC8wLzM0MzUyZTMxMzczMDJlMzEzMDMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzNDMxMzMzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2qZjAN
BgkqhkiG9w0BAQsFAAOCAQEAaxljlpi0OJtNEDXUYHImscPzl8M9uywlSvNAMTkB
mcB7sx5lDTloEQFm68hfjBDo+5pI1pOp6cClmgJN9Gf6pVmV8ZjMo2RFb3eedUC7
P9/gGfZDaYpPxuSBXvbs1sVVtJGWF5qeq1kfjiTG1qxQso/F9dpWrWChBMg5ExKr
u0ydH96+3hRyat8dodKclb0cd+HhezHM3DjGBhCYXb21+/TaSbcd8KQ2PzIIE0GC
BMufdp5+8aYEPbTqcjh3OiZFjt8rOXb3aXx1SED+6B73DRffelnAC7InecVS7SOE
wxgmt9krkvf3R+IOQkTxmfhgl0Acupmxt44ZNepTxAUAcA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 09:42:15 2025 by rpki-client