Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134322e302f32342d3234203d3e20323635363633.roa
File:                     34352e3137352e3134322e302f32342d3234203d3e20323635363633.roa (raw, json)
Hash identifier:          XZIE4GXk1DkNjkm3bp6OG/xVoxY/Pyp0afNKnU6m9Lc=
Subject key identifier:   1D:0D:0A:2D:A1:27:B0:92:F7:69:51:9E:6A:A0:88:8B:0F:80:94:9B
Certificate issuer:       /CN=029141245BD9F1CE31BEF7964E181E44F17CE901
Certificate serial:       3864834A3CABF73FB09F7FE657E6DEE29A0ABAF9
Authority key identifier: 02:91:41:24:5B:D9:F1:CE:31:BE:F7:96:4E:18:1E:44:F1:7C:E9:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134322e302f32342d3234203d3e20323635363633.roa
Signing time:             Sat 15 Aug 2026 18:25:35 +0000
ROA not before:           Sat 15 Aug 2026 18:20:35 +0000
ROA not after:            Sat 14 Aug 2027 18:25:35 +0000
asID:                     265663
IP address blocks:        45.175.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:64:83:4a:3c:ab:f7:3f:b0:9f:7f:e6:57:e6:de:e2:9a:0a:ba:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=029141245BD9F1CE31BEF7964E181E44F17CE901
        Validity
            Not Before: Aug 15 18:20:35 2026 GMT
            Not After : Aug 14 18:25:35 2027 GMT
        Subject: CN=1D0D0A2DA127B092F769519E6AA0888B0F80949B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:84:5c:97:bf:f8:d6:db:03:c9:96:07:20:
                    bc:e9:f5:5d:71:79:3f:4c:a0:09:5d:15:69:1e:c8:
                    5e:c6:82:8b:5b:c5:55:4b:f5:82:be:e0:df:f2:72:
                    6a:7c:c6:5a:c1:60:c5:dc:5a:9e:68:1d:b2:4c:7b:
                    24:24:fc:8d:14:de:9a:2b:19:b8:de:50:85:a5:6f:
                    29:08:da:c0:dd:8f:bc:e9:de:70:d0:83:7e:9e:a9:
                    e6:b8:a6:fb:5b:9c:87:6e:3b:e6:38:2f:40:f6:21:
                    a3:ab:9b:d9:1c:aa:a2:af:1e:79:79:5c:2f:c6:75:
                    8c:bb:56:3c:c5:04:ae:e7:72:bf:7b:c7:99:8c:68:
                    32:44:ba:ee:ea:04:b5:52:e5:bc:23:9e:ad:d8:1a:
                    21:e5:d2:f8:87:30:6e:21:be:8e:80:bf:15:54:76:
                    06:09:ad:b5:20:40:84:95:a6:f2:5c:9b:95:9e:21:
                    a4:44:8d:d6:27:6f:89:5d:22:f0:b4:f8:cc:4b:bc:
                    c6:9c:aa:d5:bb:38:77:cb:7d:1b:b7:9a:be:54:e1:
                    ed:6c:a3:91:10:17:1f:8c:dc:eb:17:33:ec:1e:9e:
                    e7:8d:08:ee:00:d8:07:d8:e4:53:77:36:63:c3:0b:
                    ca:25:c3:f9:a6:ff:7b:b8:c2:2d:e4:59:de:f9:19:
                    10:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0D:0A:2D:A1:27:B0:92:F7:69:51:9E:6A:A0:88:8B:0F:80:94:9B
            X509v3 Authority Key Identifier:
                keyid:02:91:41:24:5B:D9:F1:CE:31:BE:F7:96:4E:18:1E:44:F1:7C:E9:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134322e302f32342d3234203d3e20323635363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:60:9f:0d:67:d3:ef:8b:0f:d9:9f:9f:ba:63:5a:73:52:0a:
         d5:73:9a:3f:21:45:68:85:72:02:75:56:db:b0:a5:bf:c6:f0:
         ff:75:f3:56:72:44:00:fe:81:0d:8c:55:32:a1:02:61:6f:ca:
         15:7c:de:44:35:dd:a2:fc:fb:d6:f5:e8:06:54:df:72:06:29:
         a0:f3:bb:1d:07:89:42:53:53:a1:b8:7d:d7:f8:1d:4f:f3:4e:
         76:d1:ad:37:72:7c:60:8d:90:0f:ac:d3:ef:4d:08:db:5c:d4:
         f6:f5:97:a0:d3:ce:64:f6:f2:15:01:c7:c2:e1:46:fa:e8:57:
         07:5a:61:e9:62:0f:85:58:78:db:6b:66:8e:04:b3:61:77:f2:
         73:24:fa:30:e8:4d:bc:b2:6a:44:ad:43:89:f1:fc:90:83:a5:
         3a:ed:c6:0a:b7:e4:af:8d:5c:56:3e:ef:17:ce:a2:b0:90:d4:
         34:15:04:96:e1:89:02:1b:be:a1:bd:cd:39:9b:9c:2d:11:09:
         ed:f6:e6:65:a3:4e:dd:4a:fa:49:96:71:21:e2:0b:74:8c:bd:
         f7:53:57:7d:2c:9b:a9:62:94:5f:2a:c1:b2:21:3b:3b:18:8c:
         7b:0d:b9:86:cc:fc:64:e3:27:5e:fd:25:87:31:d2:2e:35:36:
         06:4f:64:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:19:11 2026 by rpki-client