Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/34352e3137302e3234392e302f32342d3234203d3e203238343233.roa
File:                     34352e3137302e3234392e302f32342d3234203d3e203238343233.roa (raw, json)
Hash identifier:          QAg7v5FZloHr3CT8qeJZB92dT671xFdFQ7n+Euir+dI=
Subject key identifier:   46:0F:0D:68:6C:1B:82:75:5C:BD:2F:D1:5D:ED:A4:26:78:D1:F2:15
Certificate issuer:       /CN=69FB064988CC6E77E3A9CF5D423A459765DC4E1B
Certificate serial:       7E22C01FAADD9006B93E8342F23F2F3D4143D29B
Authority key identifier: 69:FB:06:49:88:CC:6E:77:E3:A9:CF:5D:42:3A:45:97:65:DC:4E:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/34352e3137302e3234392e302f32342d3234203d3e203238343233.roa
Signing time:             Tue 02 Sep 2025 22:40:00 +0000
ROA not before:           Tue 02 Sep 2025 22:35:00 +0000
ROA not after:            Tue 01 Sep 2026 22:40:00 +0000
asID:                     28423
IP address blocks:        45.170.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 17:53:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:22:c0:1f:aa:dd:90:06:b9:3e:83:42:f2:3f:2f:3d:41:43:d2:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FB064988CC6E77E3A9CF5D423A459765DC4E1B
        Validity
            Not Before: Sep  2 22:35:00 2025 GMT
            Not After : Sep  1 22:40:00 2026 GMT
        Subject: CN=460F0D686C1B82755CBD2FD15DEDA42678D1F215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f6:8c:d0:8f:70:cf:bc:ba:ec:77:da:f2:66:
                    22:a7:65:61:88:c7:db:36:90:da:03:c2:d4:15:db:
                    33:09:70:1d:36:47:87:7f:e3:0e:14:00:43:9f:21:
                    5e:38:9b:de:09:b9:23:c4:85:dd:6a:51:89:32:12:
                    70:0f:23:bf:a9:f0:95:9d:aa:e7:12:0c:10:8b:a1:
                    33:53:80:95:4f:e3:7c:c6:0c:5e:fc:f1:93:6d:4d:
                    72:5b:85:4a:17:8f:59:82:8b:b1:7f:0f:b5:61:83:
                    c6:f9:20:3a:a0:07:95:b7:e5:e5:48:7b:d3:0e:53:
                    30:16:02:78:fe:ae:79:22:7d:01:a7:f4:fa:08:6b:
                    4f:42:9b:00:af:e6:74:1e:df:b0:3b:a7:ae:9c:90:
                    cb:cf:88:cc:1c:eb:99:82:d6:90:aa:53:f3:9d:7e:
                    be:7f:1f:66:cf:d1:0f:a3:23:af:b5:aa:8d:44:8d:
                    38:26:a6:30:37:5a:8a:5f:c2:3b:31:56:d9:a6:55:
                    75:52:26:92:da:37:13:47:c3:20:12:aa:1a:98:b0:
                    60:d3:19:f5:8f:02:b9:19:90:fc:10:36:98:cf:72:
                    b1:3d:87:19:e7:bd:7f:67:67:59:f0:90:e5:99:17:
                    b5:58:ff:f2:4c:e7:09:cb:87:c8:b2:18:76:36:86:
                    0a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0F:0D:68:6C:1B:82:75:5C:BD:2F:D1:5D:ED:A4:26:78:D1:F2:15
            X509v3 Authority Key Identifier:
                keyid:69:FB:06:49:88:CC:6E:77:E3:A9:CF:5D:42:3A:45:97:65:DC:4E:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/34352e3137302e3234392e302f32342d3234203d3e203238343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:de:03:cd:8c:99:1b:69:42:f2:86:ae:47:ef:0b:ee:1f:cc:
         a8:e0:68:1f:af:d4:c7:f9:58:d5:10:69:a8:44:40:ea:46:59:
         ce:b0:e7:97:f6:93:23:68:61:4e:ce:35:2e:eb:8b:20:59:a5:
         92:d1:ec:2b:74:c7:0c:7f:4d:f2:6d:6a:a6:69:9e:56:ea:96:
         be:c0:ea:1d:de:64:f0:60:4d:ea:b1:8c:03:4f:be:16:c1:31:
         74:53:41:72:18:e7:4c:3c:8d:54:8a:82:7b:ce:ad:d8:04:5b:
         74:af:f5:94:bc:34:fb:42:a6:15:14:15:81:a2:dd:06:21:b4:
         de:97:a6:ee:cb:f0:bb:fc:c8:8c:00:26:fb:78:12:5a:e2:70:
         aa:20:14:97:b4:49:05:68:47:58:1b:e6:90:0a:f4:22:39:66:
         e9:3e:53:a2:fd:39:f6:8b:62:a5:0f:81:d2:cd:e3:8f:03:52:
         dd:f9:de:a7:a0:aa:8d:91:b0:90:36:ed:df:5e:5a:de:7c:97:
         87:78:d9:77:d1:49:0f:22:ed:62:82:fc:7a:d9:b9:51:18:96:
         34:79:4e:0b:c8:f0:c4:a6:39:e2:bc:9e:6b:e6:50:9e:86:a1:
         a7:6b:83:19:a0:f3:1b:58:09:b6:6c:4f:ff:08:af:8f:67:5d:
         0b:88:d6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 06:04:47 2025 by rpki-client