Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/34352e3138322e32302e302f32342d3234203d3e20323732393931.roa
File:                     34352e3138322e32302e302f32342d3234203d3e20323732393931.roa (raw, json)
Hash identifier:          L6aoSyk9yoKMaVkHhXxfT7vijMn5e84V2w/A9Ij9zOI=
Subject key identifier:   06:40:E8:19:75:66:46:86:47:77:0B:ED:DF:5A:B1:BD:81:12:3A:40
Certificate issuer:       /CN=164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF
Certificate serial:       4E59F36AC25D778F30E463F4801C902C9F71D139
Authority key identifier: 16:4B:44:F2:A4:52:2E:06:B9:2E:8B:D5:94:37:F8:ED:1F:0E:A2:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/34352e3138322e32302e302f32342d3234203d3e20323732393931.roa
Signing time:             Tue 29 Jul 2025 18:34:15 +0000
ROA not before:           Tue 29 Jul 2025 18:29:15 +0000
ROA not after:            Tue 28 Jul 2026 18:34:15 +0000
asID:                     272991
IP address blocks:        45.182.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:59:f3:6a:c2:5d:77:8f:30:e4:63:f4:80:1c:90:2c:9f:71:d1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF
        Validity
            Not Before: Jul 29 18:29:15 2025 GMT
            Not After : Jul 28 18:34:15 2026 GMT
        Subject: CN=0640E8197566468647770BEDDF5AB1BD81123A40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:72:73:63:6d:7b:81:d8:df:ef:83:46:45:23:
                    88:d7:d8:b5:69:b2:5c:4a:9e:08:c0:de:7f:e9:51:
                    35:48:f1:d3:50:40:23:bd:45:34:b9:99:8a:84:6f:
                    8b:2c:9f:1c:c6:77:03:4c:cb:54:03:21:1e:b5:79:
                    3a:58:ad:f1:34:9e:28:b6:35:df:6d:ab:ad:ac:50:
                    fc:3b:94:21:46:a5:d2:f0:41:88:ef:86:a9:5f:c5:
                    ed:bd:cd:e9:d7:ab:d5:38:7d:94:f8:9e:ad:c5:13:
                    34:62:f9:d9:d4:b8:b3:a0:54:7c:32:6e:79:68:de:
                    9d:ac:e9:00:fd:ea:73:d7:ac:fa:ff:6e:ec:26:47:
                    c8:a8:e3:e5:a5:a2:90:23:70:f5:2e:a0:7c:75:4d:
                    a0:9a:ce:21:d7:1f:34:ed:eb:9e:41:f7:21:e5:45:
                    fc:de:da:fe:88:83:bb:22:69:ad:c0:b6:96:91:0a:
                    2e:5d:f7:d2:00:de:5d:3b:2c:ce:cb:0c:fd:c8:bb:
                    6e:8f:35:e8:1f:c6:eb:75:29:89:5a:5e:12:7e:27:
                    26:ca:c7:01:32:b9:95:88:c1:dd:b8:94:59:41:96:
                    1f:03:27:fe:2a:db:f4:fb:b7:86:b5:f9:9d:9a:5f:
                    35:d1:1d:9a:42:6c:98:a5:bd:f0:69:c3:c5:dd:f8:
                    9d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:40:E8:19:75:66:46:86:47:77:0B:ED:DF:5A:B1:BD:81:12:3A:40
            X509v3 Authority Key Identifier:
                keyid:16:4B:44:F2:A4:52:2E:06:B9:2E:8B:D5:94:37:F8:ED:1F:0E:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/34352e3138322e32302e302f32342d3234203d3e20323732393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ae:23:83:31:7a:2e:08:aa:41:49:53:cd:9a:cd:82:e4:f3:
         74:27:de:f9:33:77:e0:7a:73:a5:70:6b:86:af:e4:42:d0:76:
         b2:d9:70:ca:2e:95:b1:b2:1f:f3:ac:ed:7d:19:97:b8:16:e1:
         e2:5c:4e:cc:5e:b5:f3:71:71:f6:56:7b:e3:e3:7c:44:ad:2f:
         a7:a4:8f:9c:b0:16:b5:c4:5d:a3:a6:38:73:ba:83:db:27:6c:
         e2:60:8c:2a:0a:c3:62:fd:3e:a2:65:e4:f7:81:60:d4:67:71:
         a4:0f:f2:15:2f:7e:5e:bf:89:c5:04:1b:77:fb:5b:ed:76:be:
         e9:57:ae:6d:8f:36:ab:b8:11:56:e2:86:aa:90:3d:64:41:fe:
         96:d4:f2:70:d4:4b:81:d9:38:e1:c7:b5:e6:1b:50:73:d4:79:
         59:8a:07:e6:cb:fb:46:f4:47:7e:96:d5:db:ea:02:5d:08:ad:
         36:cc:46:6c:a2:0d:bd:65:96:03:94:00:d8:fb:57:18:fe:8e:
         54:da:51:4c:ed:16:0a:ff:b5:a0:c6:98:2a:2b:98:7b:97:55:
         ee:1c:3a:eb:e5:e5:70:f6:14:3b:ef:94:b4:30:4d:0a:46:5e:
         61:b4:be:34:5b:d6:c9:04:02:f9:cd:ef:94:e6:4b:81:2a:29:
         5b:6e:fd:cc
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTlnzasJdd48w5GP0gByQLJ9x0TkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY0QjQ0RjJBNDUyMkUwNkI5MkU4QkQ1OTQzN0Y4RUQx
RjBFQTJFRjAeFw0yNTA3MjkxODI5MTVaFw0yNjA3MjgxODM0MTVaMDMxMTAvBgNV
BAMTKDA2NDBFODE5NzU2NjQ2ODY0Nzc3MEJFRERGNUFCMUJEODExMjNBNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdcnNjbXuB2N/vg0ZFI4jX2LVp
slxKngjA3n/pUTVI8dNQQCO9RTS5mYqEb4ssnxzGdwNMy1QDIR61eTpYrfE0nii2
Nd9tq62sUPw7lCFGpdLwQYjvhqlfxe29zenXq9U4fZT4nq3FEzRi+dnUuLOgVHwy
bnlo3p2s6QD96nPXrPr/buwmR8io4+WlopAjcPUuoHx1TaCaziHXHzTt655B9yHl
Rfze2v6Ig7siaa3AtpaRCi5d99IA3l07LM7LDP3Iu26PNegfxut1KYlaXhJ+JybK
xwEyuZWIwd24lFlBlh8DJ/4q2/T7t4a1+Z2aXzXRHZpCbJilvfBpw8Xd+J2fAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUBkDoGXVmRoZHdwvt31qxvYESOkAwHwYDVR0j
BBgwFoAUFktE8qRSLga5LovVlDf47R8Oou8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRDlDQjU2MkVCRjQ0MDYwRjlDRkFDMjdEQ0VBRjlBQzY3
ODVBNzNFNUFBMjhENjJBOUMzMUJBMjk0OENDMjg3LzAvMTY0QjQ0RjJBNDUyMkUw
NkI5MkU4QkQ1OTQzN0Y4RUQxRjBFQTJFRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNjRCNDRGMkE0NTIyRTA2Qjky
RThCRDU5NDM3RjhFRDFGMEVBMkVGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkQ5Q0I1NjJFQkY0NDA2MEY5Q0ZBQzI3RENFQUY5QUM2Nzg1QTczRTVB
QTI4RDYyQTlDMzFCQTI5NDhDQzI4Ny8wLzM0MzUyZTMxMzgzMjJlMzIzMDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMjM5MzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC22FDAN
BgkqhkiG9w0BAQsFAAOCAQEAMa4jgzF6LgiqQUlTzZrNguTzdCfe+TN34HpzpXBr
hq/kQtB2stlwyi6VsbIf86ztfRmXuBbh4lxOzF6183Fx9lZ74+N8RK0vp6SPnLAW
tcRdo6Y4c7qD2yds4mCMKgrDYv0+omXk94Fg1GdxpA/yFS9+Xr+JxQQbd/tb7Xa+
6VeubY82q7gRVuKGqpA9ZEH+ltTycNRLgdk44ce15htQc9R5WYoH5sv7RvRHfpbV
2+oCXQitNsxGbKINvWWWA5QA2PtXGP6OVNpRTO0WCv+1oMaYKiuYe5dV7hw66+Xl
cPYUO++UtDBNCkZeYbS+NFvWyQQC+c3vlOZLgSopW279zA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:56:58 2025 by rpki-client