Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0986CEC2B1CCEAB152A36C0B57AE7283D4E82035B7D620C3CEF2CE5C08C9CCD6/0/34352e3137342e39322e302f32322d3234203d3e203238343239.roa
File:                     34352e3137342e39322e302f32322d3234203d3e203238343239.roa (raw, json)
Hash identifier:          ymo+kXbLAdtgZuEmhoWRhrtv2zczkZYv6I9lKlUVj18=
Subject key identifier:   24:B5:17:D1:57:27:16:44:4E:6E:5E:6C:36:CF:C0:CA:55:D3:E6:9F
Certificate issuer:       /CN=A7A1A24942D1B9C74257F44CCBB5CADAEC799568
Certificate serial:       3E294856B2800F6B43E3B03EC7F9EA3D10EB8CE6
Authority key identifier: A7:A1:A2:49:42:D1:B9:C7:42:57:F4:4C:CB:B5:CA:DA:EC:79:95:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7A1A24942D1B9C74257F44CCBB5CADAEC799568.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0986CEC2B1CCEAB152A36C0B57AE7283D4E82035B7D620C3CEF2CE5C08C9CCD6/0/34352e3137342e39322e302f32322d3234203d3e203238343239.roa
Signing time:             Fri 05 Sep 2025 19:25:00 +0000
ROA not before:           Fri 05 Sep 2025 19:20:00 +0000
ROA not after:            Fri 04 Sep 2026 19:25:00 +0000
asID:                     28429
IP address blocks:        45.174.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0986CEC2B1CCEAB152A36C0B57AE7283D4E82035B7D620C3CEF2CE5C08C9CCD6/0/A7A1A24942D1B9C74257F44CCBB5CADAEC799568.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0986CEC2B1CCEAB152A36C0B57AE7283D4E82035B7D620C3CEF2CE5C08C9CCD6/0/A7A1A24942D1B9C74257F44CCBB5CADAEC799568.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7A1A24942D1B9C74257F44CCBB5CADAEC799568.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 20:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:29:48:56:b2:80:0f:6b:43:e3:b0:3e:c7:f9:ea:3d:10:eb:8c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7A1A24942D1B9C74257F44CCBB5CADAEC799568
        Validity
            Not Before: Sep  5 19:20:00 2025 GMT
            Not After : Sep  4 19:25:00 2026 GMT
        Subject: CN=24B517D1572716444E6E5E6C36CFC0CA55D3E69F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7e:64:fc:41:b6:74:09:ca:34:c5:c9:7f:de:
                    83:73:26:bb:c5:ca:32:76:89:b4:27:2d:89:0d:42:
                    d2:bc:3d:ac:94:8a:b7:04:87:20:f6:3e:f7:52:28:
                    9f:6b:87:75:52:ae:1e:b8:b3:af:2b:49:b7:22:83:
                    ec:2f:47:89:bc:46:ae:d5:59:26:f5:10:27:7e:57:
                    37:02:10:d2:2d:5a:3a:d5:2c:50:2d:85:3f:35:a4:
                    9f:e8:25:eb:b7:31:d9:50:f5:70:2d:e9:47:26:6f:
                    2f:c7:fe:67:34:ce:f7:f0:af:b9:7d:db:a6:fe:35:
                    64:56:b7:e3:d1:de:b0:62:36:ed:a1:52:b5:9c:a7:
                    52:1e:e5:c0:ac:80:02:2a:22:b7:ae:b1:26:a7:6e:
                    e4:7b:26:3d:7f:c3:49:e3:7f:1b:e9:46:20:29:78:
                    62:29:3e:e3:d5:57:17:e8:1e:85:19:21:1b:80:7e:
                    bc:c5:e1:30:0f:ef:d2:99:88:aa:81:f7:0b:c2:bb:
                    1d:52:9a:c4:eb:7b:7d:97:2d:57:6b:61:0d:26:1e:
                    8c:78:8a:9e:13:db:55:21:cc:d7:92:df:59:76:30:
                    f0:ff:ee:67:52:3c:7e:6f:94:e4:80:76:13:b5:7a:
                    f1:86:c1:a0:d8:63:51:c6:f2:d9:86:99:9c:c2:0d:
                    72:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B5:17:D1:57:27:16:44:4E:6E:5E:6C:36:CF:C0:CA:55:D3:E6:9F
            X509v3 Authority Key Identifier:
                keyid:A7:A1:A2:49:42:D1:B9:C7:42:57:F4:4C:CB:B5:CA:DA:EC:79:95:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0986CEC2B1CCEAB152A36C0B57AE7283D4E82035B7D620C3CEF2CE5C08C9CCD6/0/A7A1A24942D1B9C74257F44CCBB5CADAEC799568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7A1A24942D1B9C74257F44CCBB5CADAEC799568.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0986CEC2B1CCEAB152A36C0B57AE7283D4E82035B7D620C3CEF2CE5C08C9CCD6/0/34352e3137342e39322e302f32322d3234203d3e203238343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:42:cf:e5:3d:c7:09:c5:35:a5:36:5c:2d:4d:46:da:53:80:
         87:7a:17:7a:d7:04:6e:2e:11:5a:9a:86:cd:06:56:0d:a8:36:
         5e:dc:8c:e0:53:c9:81:ed:10:54:44:19:96:b0:83:a3:9f:ca:
         e7:e7:ae:26:77:65:6a:b0:7f:31:f1:42:b0:76:58:13:e3:79:
         5e:6e:4b:9e:65:28:e3:d2:f5:4e:53:b0:bb:ec:17:82:8d:1a:
         cc:52:f2:3d:7b:76:e4:18:86:a6:d8:11:b5:d1:50:83:d1:4c:
         dc:9c:70:06:84:79:03:3d:96:f5:fb:77:30:2d:30:0f:3a:52:
         77:f0:9e:e3:58:da:70:b2:c2:5b:c6:53:5d:2e:15:2e:6b:b4:
         fb:21:92:ac:5f:83:35:39:78:4a:81:1b:72:d1:f9:8b:8c:67:
         55:f6:f6:c1:22:a8:d0:34:f9:dd:ba:61:d0:4d:b8:b1:e6:ef:
         dc:f9:15:fa:d0:4b:17:fb:42:02:ab:ee:2b:44:5c:0d:a8:fe:
         73:f0:b2:b2:93:e0:e9:da:7d:f2:11:44:dd:20:5b:7d:20:49:
         da:56:80:4d:31:82:c4:c9:9d:be:a3:a0:22:e8:c5:30:6f:ba:
         cc:36:19:5f:8b:be:62:eb:d4:2a:96:a2:78:f1:f5:ef:44:21:
         75:45:4d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:10:59 2025 by rpki-client