Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2046B67DC3C7954A1746B7F99F5236E2A996933DA953175E3892002F423B483F/0/34352e3138322e3131392e302f32342d3234203d3e203631343638.roa
File:                     34352e3138322e3131392e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          J3gxP5upN5vXeDzQ1uDnXZhKOaxuBdkekpCdgJnGDMc=
Subject key identifier:   DF:C7:B7:32:20:7E:04:63:90:99:8D:16:D8:15:D1:B7:69:79:63:4F
Certificate issuer:       /CN=ADAE6B17AF97B30DE4239CE6EB7C4781DD49C9B7
Certificate serial:       19553BF8F6FE5C34C38E4B9FCD1A2901429AE699
Authority key identifier: AD:AE:6B:17:AF:97:B3:0D:E4:23:9C:E6:EB:7C:47:81:DD:49:C9:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADAE6B17AF97B30DE4239CE6EB7C4781DD49C9B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2046B67DC3C7954A1746B7F99F5236E2A996933DA953175E3892002F423B483F/0/34352e3138322e3131392e302f32342d3234203d3e203631343638.roa
Signing time:             Mon 01 Sep 2025 17:42:27 +0000
ROA not before:           Mon 01 Sep 2025 17:37:27 +0000
ROA not after:            Mon 31 Aug 2026 17:42:27 +0000
asID:                     61468
IP address blocks:        45.182.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2046B67DC3C7954A1746B7F99F5236E2A996933DA953175E3892002F423B483F/0/ADAE6B17AF97B30DE4239CE6EB7C4781DD49C9B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2046B67DC3C7954A1746B7F99F5236E2A996933DA953175E3892002F423B483F/0/ADAE6B17AF97B30DE4239CE6EB7C4781DD49C9B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADAE6B17AF97B30DE4239CE6EB7C4781DD49C9B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Sep 2025 13:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:55:3b:f8:f6:fe:5c:34:c3:8e:4b:9f:cd:1a:29:01:42:9a:e6:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAE6B17AF97B30DE4239CE6EB7C4781DD49C9B7
        Validity
            Not Before: Sep  1 17:37:27 2025 GMT
            Not After : Aug 31 17:42:27 2026 GMT
        Subject: CN=DFC7B732207E046390998D16D815D1B76979634F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:eb:26:a4:4e:2e:41:da:ca:f3:7f:24:a2:
                    3e:7a:4d:31:a2:cd:05:d6:e5:0b:2f:d1:50:d9:71:
                    48:a6:76:1b:45:0d:ee:11:69:f7:08:11:d6:3b:4b:
                    ff:a4:70:10:2f:71:d3:ca:ef:81:cb:2f:85:16:fc:
                    56:e8:2a:09:ab:2f:e1:ed:b1:5a:f6:a4:e0:df:c7:
                    c6:78:fd:85:af:13:13:f6:71:35:12:c1:46:0a:35:
                    d6:24:09:ba:1c:85:46:55:dc:94:9f:64:0c:0b:81:
                    bf:af:eb:2c:c4:c0:4f:ae:be:d9:19:e7:57:6e:44:
                    38:08:7e:16:fc:57:02:5f:2a:55:3b:f6:92:04:06:
                    ee:2d:b3:fa:58:0a:c0:01:36:be:d5:6f:80:2b:68:
                    79:bd:ab:2a:e7:7b:8b:55:e6:7a:ec:58:06:0c:fe:
                    97:c9:9a:26:58:47:42:48:ed:7b:d1:af:e1:a2:cc:
                    34:38:c8:68:43:2b:07:08:21:f6:43:d5:ae:11:1c:
                    6f:2e:4e:94:17:97:d4:52:56:8b:81:a5:50:b2:26:
                    3c:10:48:d1:a9:49:d9:bd:43:f4:32:4a:36:6c:fc:
                    b3:b0:34:3b:88:9f:5f:20:45:29:70:c4:00:83:de:
                    3e:be:f5:e9:65:e4:ef:ee:e6:df:ec:19:d6:be:65:
                    d8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C7:B7:32:20:7E:04:63:90:99:8D:16:D8:15:D1:B7:69:79:63:4F
            X509v3 Authority Key Identifier:
                keyid:AD:AE:6B:17:AF:97:B3:0D:E4:23:9C:E6:EB:7C:47:81:DD:49:C9:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2046B67DC3C7954A1746B7F99F5236E2A996933DA953175E3892002F423B483F/0/ADAE6B17AF97B30DE4239CE6EB7C4781DD49C9B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADAE6B17AF97B30DE4239CE6EB7C4781DD49C9B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2046B67DC3C7954A1746B7F99F5236E2A996933DA953175E3892002F423B483F/0/34352e3138322e3131392e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:78:2e:af:e6:46:e6:ed:f6:de:01:30:0d:4e:38:0e:51:e9:
         2e:21:d4:85:41:71:e0:30:07:16:79:f2:e3:b2:10:df:68:1b:
         42:ac:d4:2b:ac:fc:3c:85:99:35:af:30:95:2d:ab:71:95:bd:
         c4:4d:79:33:a8:83:95:a9:56:b6:de:91:09:78:38:b1:c1:8e:
         7d:5c:81:76:54:68:da:c7:60:ec:9a:5e:87:06:f6:7b:a4:3d:
         44:f0:bf:aa:20:94:bf:3f:f9:9d:4a:83:71:a2:88:89:9c:df:
         e5:cd:8c:00:c5:fa:38:8c:b2:56:07:d7:ba:61:45:98:2f:98:
         3f:c5:da:7a:f0:70:63:01:d4:e5:00:0b:06:2b:17:9a:4c:a0:
         75:68:4a:14:e9:ea:5c:a1:8b:4d:e7:b4:ac:e9:bc:b2:46:6d:
         53:f5:49:ee:a1:35:b4:be:8c:c5:ac:ea:d7:39:c9:b1:b6:9b:
         eb:e2:df:49:50:a7:49:fe:d6:5a:ca:0c:a4:f2:53:54:8f:52:
         5c:85:83:a8:02:4b:ca:1e:4c:80:b7:7a:31:2c:72:b9:4f:7e:
         84:3e:88:b9:0a:4f:9b:a4:3f:74:eb:6a:1c:45:7d:f2:ae:79:
         4a:fe:5f:2c:53:a5:59:50:bd:65:38:d2:93:6e:38:1e:c6:ec:
         0a:6e:0a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 13:59:03 2025 by rpki-client