Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/34352e3137372e3131312e302f32342d3234203d3e20323637383537.roa
File:                     34352e3137372e3131312e302f32342d3234203d3e20323637383537.roa (raw, json)
Hash identifier:          WYGAE0xls6+7i2OVhuCaL0WgYP2AmxT6JrofqpGylfs=
Subject key identifier:   C5:0A:14:AF:04:50:99:9C:08:F1:AA:DC:C7:49:7C:94:99:8E:28:C5
Certificate issuer:       /CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
Certificate serial:       65A116C162CE38072E53B122F9F18D5A147C4035
Authority key identifier: 8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/34352e3137372e3131312e302f32342d3234203d3e20323637383537.roa
Signing time:             Wed 27 Aug 2025 17:35:00 +0000
ROA not before:           Wed 27 Aug 2025 17:30:00 +0000
ROA not after:            Wed 26 Aug 2026 17:35:00 +0000
asID:                     267857
IP address blocks:        45.177.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Sep 2025 12:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a1:16:c1:62:ce:38:07:2e:53:b1:22:f9:f1:8d:5a:14:7c:40:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
        Validity
            Not Before: Aug 27 17:30:00 2025 GMT
            Not After : Aug 26 17:35:00 2026 GMT
        Subject: CN=C50A14AF0450999C08F1AADCC7497C94998E28C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:61:47:54:8e:88:40:76:62:62:60:e7:31:
                    9c:b2:82:16:ac:91:b7:f7:26:ed:23:8a:c5:bf:17:
                    89:54:a5:e3:26:4f:2d:d0:75:79:94:6e:bd:7c:5f:
                    d2:60:ec:2b:5d:56:87:cb:77:91:dc:11:4a:66:91:
                    da:14:b6:26:c8:67:9f:ba:e7:72:75:5b:0f:f8:69:
                    15:ab:2c:fa:0b:d5:4c:b7:2c:4b:f4:2f:34:e8:e1:
                    52:88:f5:c8:ab:ad:c6:70:59:64:cf:e7:19:0f:1f:
                    8d:ba:33:15:98:6d:ab:cf:17:59:73:a8:16:14:9e:
                    19:0e:c2:46:ff:39:e0:b3:e5:bd:ed:0c:89:b1:4e:
                    9b:06:e2:10:08:91:5f:ab:19:ee:87:ad:8f:59:38:
                    93:60:21:77:6a:b6:59:13:62:37:32:2b:dc:42:ea:
                    f3:9a:ca:27:1e:96:fe:39:bc:ea:54:17:13:8b:af:
                    96:27:6e:6f:2a:a0:e6:dd:91:6c:c3:19:2b:63:47:
                    a2:8c:8d:be:4d:00:82:40:de:e8:9c:be:04:8c:28:
                    20:4c:37:8e:40:ef:58:34:82:21:93:bb:b8:3f:60:
                    20:3b:7c:38:a3:a3:f4:84:de:1f:1a:1f:a0:84:a8:
                    f9:43:81:aa:48:c4:a5:f9:36:1e:68:80:6e:0d:38:
                    9d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0A:14:AF:04:50:99:9C:08:F1:AA:DC:C7:49:7C:94:99:8E:28:C5
            X509v3 Authority Key Identifier:
                keyid:8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/34352e3137372e3131312e302f32342d3234203d3e20323637383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:93:2d:b7:3b:b5:cd:98:69:e6:4b:b0:22:ef:6e:89:c4:3e:
         75:22:fd:54:5d:ba:72:a4:9e:0f:89:a2:15:e5:26:a7:f8:a1:
         74:c7:89:eb:7f:5a:4d:95:28:6a:46:64:d3:57:40:5b:c4:21:
         ac:2b:03:ac:07:68:dd:5b:de:93:b7:1d:8b:99:44:30:1a:6e:
         ea:66:c5:eb:3d:3c:f6:e7:17:e0:6b:58:c4:1b:cb:4f:10:a6:
         2c:ad:dc:05:85:c3:a2:dc:ab:54:d9:94:b7:44:cb:94:bc:5a:
         12:76:e4:38:f0:18:04:94:a0:a1:bf:7d:a7:95:a8:e3:68:45:
         e1:fc:e5:df:98:85:95:d5:b2:a3:99:d3:b8:a2:a5:21:43:f4:
         65:99:3f:2a:da:36:d2:78:8b:91:c3:46:5d:35:a0:d1:71:9d:
         aa:19:c3:b5:7c:c3:71:9d:d9:26:83:b2:b6:9a:59:72:e1:8a:
         72:80:30:99:57:34:98:c0:1b:f9:57:05:a1:8d:f9:b1:3b:9e:
         c8:19:78:95:e6:62:2c:9f:bc:cf:09:d9:23:1a:cb:11:f9:40:
         03:08:03:bb:44:46:fe:4f:70:de:b1:dd:c9:f2:cb:54:7b:31:
         f1:9a:69:dc:a5:f0:00:13:68:da:7c:be:f8:cb:aa:17:12:37:
         32:37:db:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 11:57:52 2025 by rpki-client