Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/34352e3232372e352e302f32342d3234203d3e203138373437.roa
File:                     34352e3232372e352e302f32342d3234203d3e203138373437.roa (raw, json)
Hash identifier:          +HBLuVL0tjTd2NEDtVOOZzUoVAZ8SfmExObtH1UZGB4=
Subject key identifier:   77:76:09:12:1F:71:C1:E2:21:B5:02:49:F9:C1:7D:9F:83:E5:D2:2E
Certificate issuer:       /CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
Certificate serial:       437DC690624E07AFDC0BF9C21DDEBC6AC12E7E51
Authority key identifier: AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/34352e3232372e352e302f32342d3234203d3e203138373437.roa
Signing time:             Fri 03 Oct 2025 16:49:30 +0000
ROA not before:           Fri 03 Oct 2025 16:44:30 +0000
ROA not after:            Fri 02 Oct 2026 16:49:30 +0000
asID:                     18747
IP address blocks:        45.227.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:7d:c6:90:62:4e:07:af:dc:0b:f9:c2:1d:de:bc:6a:c1:2e:7e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
        Validity
            Not Before: Oct  3 16:44:30 2025 GMT
            Not After : Oct  2 16:49:30 2026 GMT
        Subject: CN=777609121F71C1E221B50249F9C17D9F83E5D22E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7c:ac:34:15:c3:49:58:67:bf:0b:2c:09:24:
                    20:61:1c:6d:85:dd:88:cf:95:37:ed:3a:32:9e:ab:
                    bc:3f:d1:ec:1e:4f:e7:89:d8:af:be:ea:8d:2a:35:
                    3b:0a:a1:50:78:9d:e3:ce:81:d3:d9:f4:83:83:94:
                    59:15:88:e9:2a:3b:78:17:a9:b2:65:aa:86:49:25:
                    2a:5c:1a:04:b3:06:31:c0:2c:79:2e:50:18:e0:e4:
                    fd:b3:c2:f2:47:b1:89:8d:26:0f:e6:59:31:01:8f:
                    fd:0e:69:b1:8c:ed:cf:a9:7b:a1:79:5f:08:64:b4:
                    6d:e7:b0:09:4f:51:5b:25:7d:87:ae:4a:a5:14:c6:
                    59:df:96:47:df:ac:42:f3:c2:82:80:4c:15:5f:51:
                    90:8b:f8:f8:a7:f3:66:e5:e4:ec:35:1b:fa:d8:6e:
                    08:4c:5b:e3:9e:f2:c1:9d:73:7f:cd:9f:88:3d:55:
                    3f:f2:82:d9:f2:6d:81:b5:23:be:75:4f:13:15:b7:
                    23:42:6d:49:05:94:da:1e:e7:e9:ee:27:06:cc:d5:
                    07:46:32:c7:ae:70:88:08:21:c1:09:c1:ff:72:0b:
                    ce:aa:d4:fb:32:5e:73:bb:01:bb:5d:b7:92:39:ae:
                    39:6b:f8:ad:c2:d0:e0:20:73:14:a0:e1:35:54:57:
                    a5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:76:09:12:1F:71:C1:E2:21:B5:02:49:F9:C1:7D:9F:83:E5:D2:2E
            X509v3 Authority Key Identifier:
                keyid:AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/34352e3232372e352e302f32342d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:ee:b9:9b:b3:52:2b:b7:a6:81:cb:81:f1:7e:9f:30:f1:84:
         44:4a:ff:76:8b:04:83:77:3a:09:6e:c5:2a:b5:fc:22:dc:9a:
         d9:ee:fb:34:6c:7d:d2:f6:a7:fb:84:80:89:09:9a:d5:03:cc:
         c9:b5:5e:88:16:06:ca:b6:9e:43:bd:4a:89:6d:31:e0:69:19:
         92:a7:4d:0b:49:97:d1:11:ce:12:f6:70:f2:3f:89:13:0b:11:
         c9:15:1a:f7:ef:f6:15:e8:8a:0f:d1:76:04:42:81:e6:23:45:
         4e:ae:d3:b5:38:65:af:f9:2f:9f:83:6e:fa:b2:30:28:8a:af:
         58:c1:1a:1e:82:e6:a6:c3:b6:25:d3:e8:ca:94:b8:8a:85:7e:
         f2:2d:78:50:be:f1:08:cd:4e:d7:d8:24:e7:86:84:4d:7f:b1:
         cd:17:a9:57:14:7b:a3:b9:78:a8:b1:13:9d:d9:52:3b:28:ea:
         d4:04:31:2f:ba:b6:98:89:50:bf:1b:39:82:26:0e:4d:c9:68:
         e7:eb:a2:40:0d:e2:81:ce:53:8f:3b:c6:23:b4:37:92:ea:7c:
         3c:55:ad:34:e3:21:45:10:be:fc:65:6a:c0:1a:19:c1:31:1e:
         c5:6c:e9:59:06:81:7e:4d:5c:06:e6:b1:ed:17:7d:11:1c:c3:
         56:22:8f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 14:47:26 2025 by rpki-client