Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3138392e302f32342d3234203d3e20323132323338.roa
File:                     34352e3137362e3138392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          Rr/FMdjlmdPExfiV0ra9Q6jpDsG2M7mukj/49LLs8Cs=
Subject key identifier:   A9:5E:52:8E:2E:EC:B8:53:D7:25:A3:B1:F3:C7:25:1C:DB:F1:34:31
Certificate issuer:       /CN=94E9005D15C15058534566156E00BB03244C911D
Certificate serial:       5F59A3B1E9062FD82BB43B96142BBF4DBCA151BD
Authority key identifier: 94:E9:00:5D:15:C1:50:58:53:45:66:15:6E:00:BB:03:24:4C:91:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3138392e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 13 Jun 2025 06:05:00 +0000
ROA not before:           Fri 13 Jun 2025 06:00:00 +0000
ROA not after:            Fri 12 Jun 2026 06:05:00 +0000
asID:                     212238
IP address blocks:        45.176.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 15:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:59:a3:b1:e9:06:2f:d8:2b:b4:3b:96:14:2b:bf:4d:bc:a1:51:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94E9005D15C15058534566156E00BB03244C911D
        Validity
            Not Before: Jun 13 06:00:00 2025 GMT
            Not After : Jun 12 06:05:00 2026 GMT
        Subject: CN=A95E528E2EECB853D725A3B1F3C7251CDBF13431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9e:e2:10:de:d1:20:21:ca:d1:c8:e6:4d:41:
                    aa:10:e6:18:fe:b3:39:a6:bf:17:54:be:72:cf:e4:
                    75:31:a5:b5:04:e2:6e:25:a1:7f:8b:c7:01:36:f3:
                    b4:1a:ac:eb:87:9d:92:c4:cb:aa:72:08:3f:b2:11:
                    b5:2e:65:da:7b:5c:fc:53:ca:f9:b5:b6:d0:67:f2:
                    11:5d:bd:31:67:34:e4:74:b0:87:ec:c1:d3:90:5d:
                    6a:b2:f5:27:42:ed:85:4e:9e:87:d7:e6:69:ae:4c:
                    22:fd:84:42:3d:7e:43:73:7e:94:98:ad:37:87:f5:
                    4d:10:1a:c7:7e:1e:71:a8:8a:d5:9b:9a:a0:44:ef:
                    f4:18:d2:d7:bd:0d:24:e4:b1:3a:6d:ad:17:c5:d6:
                    b5:38:c7:b1:45:0b:80:9f:48:05:46:ba:21:6e:24:
                    61:fb:a5:c6:01:4e:df:27:c7:14:95:9c:4a:de:0d:
                    af:ac:3c:5b:f4:a8:ac:29:89:fa:eb:d5:0c:fe:2c:
                    61:e3:ba:05:9c:4c:60:c7:33:c8:65:7f:48:36:76:
                    18:e8:5b:32:f3:ab:ca:59:d0:a3:4b:94:cf:53:ac:
                    1c:e1:f3:5d:84:17:f3:72:41:9a:b0:77:15:df:4b:
                    41:27:f2:65:fe:fe:24:8a:ab:2c:d4:a0:02:ea:61:
                    e5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5E:52:8E:2E:EC:B8:53:D7:25:A3:B1:F3:C7:25:1C:DB:F1:34:31
            X509v3 Authority Key Identifier:
                keyid:94:E9:00:5D:15:C1:50:58:53:45:66:15:6E:00:BB:03:24:4C:91:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3138392e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:bc:6d:5b:b6:93:d6:6e:81:fe:ed:07:48:d4:bb:6f:17:7a:
         fe:96:23:dd:c7:b2:a6:91:29:47:59:38:87:84:3d:db:04:a3:
         eb:1a:23:07:bb:9a:52:f7:33:3e:a9:4a:0b:ce:45:37:8f:d5:
         3d:6a:7e:6c:50:17:ef:03:2f:97:6d:77:5c:4f:4c:72:95:7c:
         fd:bb:e9:5b:e5:7a:68:95:04:14:af:87:7b:60:fe:94:06:03:
         44:8a:e6:67:79:99:67:36:33:4c:ec:5f:82:9d:a6:5e:cd:de:
         79:23:1c:96:02:fe:3c:2f:a9:bb:0e:db:1c:fe:2e:ca:f6:10:
         75:26:23:74:08:d9:e8:58:84:be:9c:0b:f0:48:55:74:2f:1e:
         d5:d3:6c:ff:90:1f:68:83:8a:d0:ae:d6:6f:fb:49:59:bc:67:
         16:02:52:1e:21:a6:4d:10:95:c7:0d:ab:48:cf:0e:f1:ab:14:
         6a:85:9c:5d:94:62:49:e3:5b:25:d5:96:fd:30:49:47:6e:8d:
         5d:a8:92:c7:e3:f2:22:3a:33:46:49:97:7d:ac:2c:65:91:c1:
         ef:44:06:ee:cf:29:77:24:30:a4:67:73:2f:c5:20:51:be:58:
         3a:4c:5c:46:7d:61:f5:04:38:96:aa:79:70:45:15:99:b8:44:
         ee:17:e3:a3
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUX1mjsekGL9grtDuWFCu/TbyhUb0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRFOTAwNUQxNUMxNTA1ODUzNDU2NjE1NkUwMEJCMDMy
NDRDOTExRDAeFw0yNTA2MTMwNjAwMDBaFw0yNjA2MTIwNjA1MDBaMDMxMTAvBgNV
BAMTKEE5NUU1MjhFMkVFQ0I4NTNENzI1QTNCMUYzQzcyNTFDREJGMTM0MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDenuIQ3tEgIcrRyOZNQaoQ5hj+
szmmvxdUvnLP5HUxpbUE4m4loX+LxwE287QarOuHnZLEy6pyCD+yEbUuZdp7XPxT
yvm1ttBn8hFdvTFnNOR0sIfswdOQXWqy9SdC7YVOnofX5mmuTCL9hEI9fkNzfpSY
rTeH9U0QGsd+HnGoitWbmqBE7/QY0te9DSTksTptrRfF1rU4x7FFC4CfSAVGuiFu
JGH7pcYBTt8nxxSVnEreDa+sPFv0qKwpifrr1Qz+LGHjugWcTGDHM8hlf0g2dhjo
WzLzq8pZ0KNLlM9TrBzh812EF/NyQZqwdxXfS0En8mX+/iSKqyzUoALqYeWzAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUqV5Sji7suFPXJaOx88clHNvxNDEwHwYDVR0j
BBgwFoAUlOkAXRXBUFhTRWYVbgC7AyRMkR0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMDNFMEExQTBBNDQ0NTdCODlGQkQ4MDdERkQzQUQ2QTEw
QTQyRDE1QkU5NTVFRjc2OTA0NkY0NEFBOEE0MTJCLzAvOTRFOTAwNUQxNUMxNTA1
ODUzNDU2NjE1NkUwMEJCMDMyNDRDOTExRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NEU5MDA1RDE1QzE1MDU4NTM0
NTY2MTU2RTAwQkIwMzI0NEM5MTFELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjAzRTBBMUEwQTQ0NDU3Qjg5RkJEODA3REZEM0FENkExMEE0MkQxNUJF
OTU1RUY3NjkwNDZGNDRBQThBNDEyQi8wLzM0MzUyZTMxMzczNjJlMzEzODM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALbC9
MA0GCSqGSIb3DQEBCwUAA4IBAQCFvG1btpPWboH+7QdI1LtvF3r+liPdx7KmkSlH
WTiHhD3bBKPrGiMHu5pS9zM+qUoLzkU3j9U9an5sUBfvAy+XbXdcT0xylXz9u+lb
5XpolQQUr4d7YP6UBgNEiuZneZlnNjNM7F+CnaZezd55IxyWAv48L6m7Dtsc/i7K
9hB1JiN0CNnoWIS+nAvwSFV0Lx7V02z/kB9og4rQrtZv+0lZvGcWAlIeIaZNEJXH
DatIzw7xqxRqhZxdlGJJ41sl1Zb9MElHbo1dqJLH4/IiOjNGSZd9rCxlkcHvRAbu
zyl3JDCkZ3MvxSBRvlg6TFxGfWH1BDiWqnlwRRWZuETuF+Oj
-----END CERTIFICATE-----
Generated at Thu Jul 3 15:49:12 2025 by rpki-client