Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134312e302f32342d3234203d3e20323635363633.roa
File:                     34352e3137352e3134312e302f32342d3234203d3e20323635363633.roa (raw, json)
Hash identifier:          jl6kvvcpB60xOvURk+OeQP7mQvz6ZIqfibNGTKqQDJk=
Subject key identifier:   6E:60:55:90:97:D9:EA:26:96:18:8A:F0:DE:D5:C1:2C:5B:C1:B0:D2
Certificate issuer:       /CN=029141245BD9F1CE31BEF7964E181E44F17CE901
Certificate serial:       5FEEA48BE096C085121A0788D5FF742BBA0CD93E
Authority key identifier: 02:91:41:24:5B:D9:F1:CE:31:BE:F7:96:4E:18:1E:44:F1:7C:E9:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134312e302f32342d3234203d3e20323635363633.roa
Signing time:             Sat 15 Aug 2026 18:25:35 +0000
ROA not before:           Sat 15 Aug 2026 18:20:35 +0000
ROA not after:            Sat 14 Aug 2027 18:25:35 +0000
asID:                     265663
IP address blocks:        45.175.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ee:a4:8b:e0:96:c0:85:12:1a:07:88:d5:ff:74:2b:ba:0c:d9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=029141245BD9F1CE31BEF7964E181E44F17CE901
        Validity
            Not Before: Aug 15 18:20:35 2026 GMT
            Not After : Aug 14 18:25:35 2027 GMT
        Subject: CN=6E60559097D9EA2696188AF0DED5C12C5BC1B0D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:25:9c:62:d7:97:7d:ea:8f:77:d2:8b:c0:9a:
                    cd:d8:9c:d3:33:26:24:0e:d7:4a:71:51:35:a3:73:
                    b6:77:f2:17:28:ba:b5:da:71:f8:b3:bf:40:cb:d3:
                    c5:db:34:08:f8:48:9d:3f:0c:21:f0:77:a0:b9:59:
                    ba:de:55:1c:af:78:b6:e2:c3:a8:a8:90:96:67:40:
                    b7:66:66:89:18:1f:28:91:f1:7b:7b:b6:e3:cc:f8:
                    bd:dc:11:cd:88:45:67:43:68:76:4f:8f:bf:0a:e5:
                    5f:20:19:f0:96:f7:57:6e:9e:bc:62:2a:fc:5d:32:
                    80:35:30:45:4d:3b:05:f3:63:0f:a6:30:07:63:52:
                    e7:48:31:ea:8c:60:17:4e:86:eb:ce:90:77:89:67:
                    bc:bb:2d:86:49:ce:b8:30:98:98:aa:5e:0b:d0:63:
                    72:52:b7:c6:91:86:1f:a8:81:f6:30:ee:7f:4f:c2:
                    96:dc:18:c2:f5:46:ab:07:70:2e:be:60:33:b3:dc:
                    3f:cb:24:4a:da:50:60:0e:f8:a4:32:25:08:fd:aa:
                    b3:1f:df:79:ce:ad:21:e8:9e:c5:f8:17:2f:00:08:
                    df:b5:31:0f:84:e7:7b:ed:7e:9f:6d:52:ca:d8:02:
                    cb:da:fa:9e:ef:9f:43:33:6c:54:15:73:9f:34:c6:
                    37:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:60:55:90:97:D9:EA:26:96:18:8A:F0:DE:D5:C1:2C:5B:C1:B0:D2
            X509v3 Authority Key Identifier:
                keyid:02:91:41:24:5B:D9:F1:CE:31:BE:F7:96:4E:18:1E:44:F1:7C:E9:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134312e302f32342d3234203d3e20323635363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:e7:11:e0:9c:07:3c:e7:58:00:81:4b:30:c8:71:46:3c:34:
         5e:10:02:e8:2f:47:00:0d:59:a8:8c:d6:8e:fc:42:65:ed:b5:
         37:00:19:06:99:b3:9e:13:76:19:61:84:b5:d9:21:e0:4b:56:
         b8:3a:4b:d1:2f:73:b1:e9:0a:5c:b3:c4:80:ec:5c:fb:10:7d:
         62:a6:32:de:d9:ca:6f:5c:30:af:3a:a5:1b:73:72:df:d1:ba:
         3a:2e:08:37:fa:a1:44:b2:fe:37:6f:1e:82:68:24:e5:1a:5f:
         34:95:0c:25:91:c9:96:41:4b:86:16:30:ca:8f:3d:23:14:ac:
         07:9c:a9:5a:34:c2:fa:3d:ba:dd:1b:40:bd:1b:de:eb:b8:07:
         28:48:97:12:74:fd:c9:67:48:a1:dc:0d:e4:0a:29:69:e4:e4:
         b0:3f:24:ba:ad:7b:18:30:30:e5:8c:05:7a:f0:85:7a:b9:9f:
         ea:b4:e3:78:29:e5:bb:27:b0:b4:31:79:c1:15:fa:34:3e:c3:
         b5:04:75:62:51:fe:bf:89:6e:4a:c3:d6:ea:80:5b:2c:ad:bf:
         46:29:c3:fb:37:6f:52:2b:21:f7:5a:0c:ee:49:d2:aa:b3:9a:
         42:dc:e4:58:2a:53:c6:dd:e6:f2:10:d2:ed:51:48:01:a4:00:
         b4:97:c8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:48:59 2026 by rpki-client