Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/34352e3137302e3234392e302f32342d3234203d3e20323133363037.roa
File:                     34352e3137302e3234392e302f32342d3234203d3e20323133363037.roa (raw, json)
Hash identifier:          45bsQ14jFvKG0mfPYserpvMxLo2jhumu41kHHtFPLRE=
Subject key identifier:   8A:FE:07:72:47:80:8A:52:2B:E7:EA:2B:94:72:79:63:1A:E6:49:62
Certificate issuer:       /CN=69FB064988CC6E77E3A9CF5D423A459765DC4E1B
Certificate serial:       0ED4C37F97B12937E88016EDC580877C1F890885
Authority key identifier: 69:FB:06:49:88:CC:6E:77:E3:A9:CF:5D:42:3A:45:97:65:DC:4E:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/34352e3137302e3234392e302f32342d3234203d3e20323133363037.roa
Signing time:             Wed 27 Aug 2025 20:40:00 +0000
ROA not before:           Wed 27 Aug 2025 20:35:00 +0000
ROA not after:            Wed 26 Aug 2026 20:40:00 +0000
asID:                     213607
IP address blocks:        45.170.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 12 Sep 2025 06:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d4:c3:7f:97:b1:29:37:e8:80:16:ed:c5:80:87:7c:1f:89:08:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FB064988CC6E77E3A9CF5D423A459765DC4E1B
        Validity
            Not Before: Aug 27 20:35:00 2025 GMT
            Not After : Aug 26 20:40:00 2026 GMT
        Subject: CN=8AFE077247808A522BE7EA2B947279631AE64962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ab:eb:a3:6a:91:3a:d7:02:bb:1d:1e:41:a3:
                    9f:6c:19:08:5a:9f:a4:60:4b:56:25:80:d4:03:fe:
                    d7:14:f7:d5:18:b6:4a:d6:c7:35:07:a2:72:53:98:
                    1a:36:b2:74:cf:16:0d:e4:be:a5:a8:7d:c7:6a:4a:
                    10:d9:8f:82:d6:c3:fb:70:26:f9:26:42:df:f6:43:
                    97:7a:ab:0a:d4:99:bc:56:e1:14:0d:e8:cd:30:33:
                    7e:28:b7:e4:49:02:2a:c5:ef:65:03:3d:6a:5a:81:
                    e4:1f:0a:a0:f6:3e:d5:dd:de:38:62:9a:72:85:4f:
                    05:b2:96:00:1c:ad:48:8b:08:f4:87:4f:68:6d:54:
                    cb:01:34:2e:b2:f2:12:b1:b3:db:33:b4:dd:9c:3f:
                    c8:62:d6:94:82:1d:a7:40:5f:34:7c:9f:d8:04:13:
                    ec:44:6b:16:4e:5a:ae:74:3f:f7:54:c7:0f:5d:f5:
                    0c:d6:0d:ec:fa:90:ef:49:96:db:03:23:8d:5e:89:
                    8d:d9:b5:97:4a:2f:e0:fd:a5:79:12:5f:9a:a2:2b:
                    b0:30:44:1f:29:dd:0d:5f:6d:21:cc:97:52:2e:35:
                    bf:cf:4b:db:e1:e8:bf:6d:5a:7b:7d:d8:8c:b8:41:
                    1e:d1:ff:cb:b1:9f:0d:a9:13:c0:2b:86:af:96:0c:
                    3f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FE:07:72:47:80:8A:52:2B:E7:EA:2B:94:72:79:63:1A:E6:49:62
            X509v3 Authority Key Identifier:
                keyid:69:FB:06:49:88:CC:6E:77:E3:A9:CF:5D:42:3A:45:97:65:DC:4E:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/34352e3137302e3234392e302f32342d3234203d3e20323133363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:8a:e7:d8:53:c2:3a:a4:b7:dd:af:7f:b1:69:bc:b1:41:91:
         75:12:34:52:c3:cc:ab:b3:b0:6d:47:71:c8:c1:5b:5a:de:ab:
         d0:67:67:fc:be:01:3a:6a:cd:bd:df:53:8b:d9:1e:fa:79:77:
         b4:ac:f8:25:c3:8a:01:02:ad:d6:4f:a3:f3:22:72:da:4b:90:
         6b:26:07:7b:3f:b5:23:f9:60:66:44:1b:97:d0:bb:0e:08:cd:
         b3:c4:49:53:bb:60:53:bc:1c:e8:ea:e2:e5:0f:29:a0:a3:7e:
         b3:aa:c0:c9:9d:23:b4:f3:80:b4:88:46:1d:42:3a:b3:66:88:
         3f:12:3f:ed:ab:5b:25:20:cd:34:37:96:25:31:5b:0b:d0:be:
         1a:ef:61:b1:09:69:41:23:43:12:c6:1c:9e:c1:76:b5:45:3b:
         52:52:47:4e:8e:88:f8:60:4d:3f:46:60:8f:50:21:8e:1c:7b:
         f1:8c:9c:d3:be:84:5d:63:cb:a5:db:22:5f:47:c6:31:df:c9:
         da:54:a9:8d:21:3c:81:43:0b:a9:99:06:fc:d9:6a:07:26:6a:
         72:c5:34:d2:9c:93:55:a0:cb:48:49:62:cd:9a:74:b2:42:06:
         ed:96:dd:99:dc:72:49:0d:3f:5d:6a:db:15:0d:b1:01:93:eb:
         9d:03:38:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 22:43:14 2025 by rpki-client