Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/34352e3137372e3131302e302f32342d3234203d3e20323637383537.roa
File:                     34352e3137372e3131302e302f32342d3234203d3e20323637383537.roa (raw, json)
Hash identifier:          c3zSVEH2stc7Ga7P4dkoMP4nGJugURdM3tZR8TKq4Hg=
Subject key identifier:   44:5D:48:B6:D1:D9:D7:54:B2:88:3B:33:88:88:37:BC:D8:6E:B8:1A
Certificate issuer:       /CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
Certificate serial:       619992A33212E513181ED1369AD0CD2C8B739256
Authority key identifier: 8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/34352e3137372e3131302e302f32342d3234203d3e20323637383537.roa
Signing time:             Wed 27 Aug 2025 17:35:01 +0000
ROA not before:           Wed 27 Aug 2025 17:30:01 +0000
ROA not after:            Wed 26 Aug 2026 17:35:01 +0000
asID:                     267857
IP address blocks:        45.177.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Sep 2025 12:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:99:92:a3:32:12:e5:13:18:1e:d1:36:9a:d0:cd:2c:8b:73:92:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
        Validity
            Not Before: Aug 27 17:30:01 2025 GMT
            Not After : Aug 26 17:35:01 2026 GMT
        Subject: CN=445D48B6D1D9D754B2883B33888837BCD86EB81A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:83:7d:03:e5:6e:99:80:6c:f8:ae:71:03:b8:
                    eb:88:40:bc:b3:b5:fd:90:7c:ca:04:c8:a1:f9:f8:
                    ca:ff:f0:28:4a:4b:62:e9:56:05:3d:32:41:7e:3e:
                    84:b1:3a:d5:9a:aa:93:c3:41:9c:b4:67:59:49:06:
                    6d:d9:8f:f4:fa:1c:95:fa:b3:a2:49:05:b7:0e:12:
                    ea:a8:be:44:2c:15:59:b0:df:21:70:cb:59:fd:c4:
                    7f:74:d5:83:36:6f:a8:f2:72:23:ba:aa:3b:0d:9f:
                    4f:27:87:3e:3a:19:81:d1:13:d8:52:78:67:d5:99:
                    d2:36:bf:ce:28:b0:5b:f5:38:f1:f9:8a:ca:da:36:
                    29:d6:fb:28:33:7e:4a:b9:8b:44:86:4c:52:18:fd:
                    41:f8:cb:b0:9a:4a:f2:13:5d:4a:0e:bd:6c:9c:04:
                    a1:0a:b2:85:c7:5e:22:26:e7:9d:22:d8:40:c6:53:
                    11:14:be:e3:22:4e:11:fb:94:66:d4:94:00:eb:f9:
                    4b:d5:ba:40:24:78:a3:5a:7f:85:18:84:57:6e:49:
                    fc:1c:af:74:34:7c:55:c3:03:bd:47:37:fc:79:2a:
                    33:20:55:59:e2:14:7d:5a:49:d5:f0:c7:f0:cb:2e:
                    1c:64:70:96:86:96:ef:8e:f8:08:b7:83:f8:5c:6c:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5D:48:B6:D1:D9:D7:54:B2:88:3B:33:88:88:37:BC:D8:6E:B8:1A
            X509v3 Authority Key Identifier:
                keyid:8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/34352e3137372e3131302e302f32342d3234203d3e20323637383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:8e:0d:69:fe:d7:f0:08:40:6d:f2:b1:be:ad:ab:93:d0:0a:
         a4:8c:9c:cb:53:07:ca:9b:69:63:d2:39:06:18:db:7e:0d:09:
         5e:bd:9e:47:30:8b:5e:90:31:83:be:1d:83:06:ab:46:c2:f4:
         1d:62:5f:08:8e:45:c9:2d:3e:f1:47:62:c8:46:4f:fd:94:cb:
         ce:6d:4a:c2:0f:df:f9:ce:47:f7:89:98:9c:8c:fa:05:63:47:
         ad:3f:70:92:c9:31:40:c8:d4:4f:86:4c:97:c5:b0:45:aa:cc:
         86:15:b2:24:49:e3:c9:1d:21:8b:80:75:bd:9c:40:1e:c4:e8:
         32:6d:c7:3b:53:6f:3a:46:2f:51:3b:da:d5:7a:f5:22:62:20:
         0d:15:84:d7:1e:36:0a:1d:c9:ef:71:a5:26:41:92:bf:1f:ea:
         db:fa:7d:59:53:80:99:52:82:e8:a8:6e:25:e4:e5:2e:b1:4d:
         74:96:93:6d:a4:e7:35:ac:ab:18:70:3c:10:bb:c3:a2:91:d2:
         99:5e:0b:4d:fa:7d:d1:c1:5b:62:e1:9c:65:50:17:c4:21:9f:
         dc:1e:0d:9b:a8:a6:27:52:be:c1:b1:4c:2c:27:9c:8b:19:ca:
         38:26:5e:06:6c:02:b3:2d:df:04:46:92:52:77:3c:d3:03:62:
         6d:67:ee:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 11:55:07 2025 by rpki-client