Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134302e302f32342d3234203d3e20323635363633.roa
File:                     34352e3137352e3134302e302f32342d3234203d3e20323635363633.roa (raw, json)
Hash identifier:          t1aEf23HoQKNwjBOR2SXeh1BeNwXyLGPioS3BgtYaFU=
Subject key identifier:   86:43:BB:AD:8E:02:66:0E:DE:67:14:9C:E2:10:F9:1D:D2:E2:56:19
Certificate issuer:       /CN=029141245BD9F1CE31BEF7964E181E44F17CE901
Certificate serial:       43DF1EC0B8414136ABE280B8A164908A9AF101E6
Authority key identifier: 02:91:41:24:5B:D9:F1:CE:31:BE:F7:96:4E:18:1E:44:F1:7C:E9:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134302e302f32342d3234203d3e20323635363633.roa
Signing time:             Sat 15 Aug 2026 18:25:34 +0000
ROA not before:           Sat 15 Aug 2026 18:20:34 +0000
ROA not after:            Sat 14 Aug 2027 18:25:34 +0000
asID:                     265663
IP address blocks:        45.175.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:df:1e:c0:b8:41:41:36:ab:e2:80:b8:a1:64:90:8a:9a:f1:01:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=029141245BD9F1CE31BEF7964E181E44F17CE901
        Validity
            Not Before: Aug 15 18:20:34 2026 GMT
            Not After : Aug 14 18:25:34 2027 GMT
        Subject: CN=8643BBAD8E02660EDE67149CE210F91DD2E25619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:07:6a:b2:f2:7f:f9:72:34:f1:6a:45:17:
                    1b:2d:e5:ea:f4:c9:d2:0c:c6:e0:dd:10:ce:7d:9b:
                    bf:1c:60:a6:0f:66:c4:d9:e5:df:7f:db:64:75:cc:
                    de:31:ce:0e:ea:a0:38:b5:8a:ae:89:0b:89:2e:88:
                    e9:67:da:6e:48:8e:a2:00:04:00:e1:8d:e6:61:21:
                    36:8d:ca:1c:9a:4e:6c:b3:33:f0:ea:cd:66:f4:8f:
                    b7:7e:58:ec:b9:63:f9:bc:cd:3f:6f:18:45:d0:73:
                    6c:72:c5:ed:73:ce:b5:88:26:85:c1:07:fb:f8:75:
                    22:d7:1b:50:39:e4:13:a2:1e:98:03:35:e1:7c:b5:
                    e0:1d:ba:1e:5f:19:21:0d:83:8e:60:22:3a:1e:ef:
                    8f:77:3b:5a:ad:07:e8:7a:16:98:f0:f3:f8:8f:e0:
                    99:30:d8:cb:e6:5b:1d:be:e3:fa:a0:08:b7:23:30:
                    43:b4:a3:d0:22:d7:02:39:50:1b:19:65:d8:90:f6:
                    95:ce:57:c4:ca:cd:f0:8a:68:47:31:c9:df:7a:af:
                    e4:a0:b5:36:ef:14:fc:a6:5b:58:85:92:ab:00:3d:
                    c8:58:80:5e:70:a7:ab:58:1b:8a:9a:a0:fc:74:d4:
                    65:6b:7e:b6:93:14:7e:f1:fe:9b:4d:3b:c3:67:2c:
                    96:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:43:BB:AD:8E:02:66:0E:DE:67:14:9C:E2:10:F9:1D:D2:E2:56:19
            X509v3 Authority Key Identifier:
                keyid:02:91:41:24:5B:D9:F1:CE:31:BE:F7:96:4E:18:1E:44:F1:7C:E9:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134302e302f32342d3234203d3e20323635363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:63:8f:de:bc:e1:ae:37:d8:3b:cf:43:9e:2d:ed:80:fa:6c:
         8c:28:49:40:8e:f1:18:f5:09:64:20:57:a1:ea:86:d1:d5:09:
         ef:5d:ec:33:3b:73:5a:d2:ff:34:fe:dd:53:ca:0a:8e:04:4b:
         6c:b7:17:f7:f2:01:19:16:53:42:c3:17:74:86:9d:b9:cc:99:
         47:05:2d:4e:4b:0e:90:2c:cb:2e:56:e6:67:9f:2a:e2:47:56:
         ca:24:08:fb:4c:02:02:ca:97:8f:57:ed:de:f3:7a:a0:ee:4a:
         5b:3d:5e:5a:97:c1:33:ce:28:3a:e7:9f:50:ca:53:38:b6:9f:
         1f:41:1c:87:ca:a6:b0:d7:ac:5b:98:6a:25:b2:37:e8:71:36:
         af:3d:e1:6d:17:a4:91:8f:5b:7a:66:3e:62:ef:d8:2f:eb:03:
         13:93:6e:59:3f:fa:53:ee:13:06:53:44:92:d9:85:d8:44:ab:
         7d:19:36:79:4b:7e:42:61:a8:a5:29:e5:f4:6e:ea:2e:28:32:
         1d:6b:76:18:83:13:97:2b:a2:5a:30:98:b5:c8:2e:cd:41:76:
         b5:d9:ed:10:b3:a9:46:77:42:83:99:9e:de:0a:2e:6d:a4:cf:
         90:52:47:e1:07:92:0d:23:f5:8f:10:cf:b3:2c:57:d3:db:19:
         aa:5b:c6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:19:14 2026 by rpki-client