Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31322e302f32342d3234203d3e20323636383337.roa
File:                     34352e3233382e31322e302f32342d3234203d3e20323636383337.roa (raw, json)
Hash identifier:          55y8w5nGfteYDiB9xn3/+qJUqCZI0qRnGOKq7worFws=
Subject key identifier:   75:8F:2E:C9:50:59:28:4F:A6:99:FA:1A:6A:33:1D:4A:EB:B4:B3:94
Certificate issuer:       /CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
Certificate serial:       344E2E99053740B3467CBEA11414BC96E4704CB6
Authority key identifier: 3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31322e302f32342d3234203d3e20323636383337.roa
Signing time:             Wed 23 Jul 2025 21:26:28 +0000
ROA not before:           Wed 23 Jul 2025 21:21:28 +0000
ROA not after:            Wed 22 Jul 2026 21:26:28 +0000
asID:                     266837
IP address blocks:        45.238.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 19:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4e:2e:99:05:37:40:b3:46:7c:be:a1:14:14:bc:96:e4:70:4c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
        Validity
            Not Before: Jul 23 21:21:28 2025 GMT
            Not After : Jul 22 21:26:28 2026 GMT
        Subject: CN=758F2EC95059284FA699FA1A6A331D4AEBB4B394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:20:f4:7c:fb:9d:e8:ac:b3:95:3d:fb:fe:a1:
                    b1:64:cc:a1:97:5a:07:1d:fd:71:20:35:9d:4e:2a:
                    f7:8d:19:95:7e:ee:ff:c4:97:bb:42:07:0d:d0:97:
                    33:d7:56:64:39:15:11:fc:40:d2:9f:96:63:28:50:
                    a8:05:94:7c:06:bd:92:cd:48:d5:80:48:98:3b:f6:
                    24:dd:55:40:3c:04:94:89:89:27:5f:b7:2d:c1:2a:
                    08:d0:bf:b7:41:6d:19:a3:c0:c2:fc:6f:c4:ee:2b:
                    cc:00:e2:a6:3a:47:4a:74:7b:4c:44:59:72:8e:7b:
                    75:6b:0f:bf:42:08:3f:09:6a:5e:8c:6e:88:6c:89:
                    4a:89:ac:db:81:12:b0:6f:1d:7c:43:37:0a:52:09:
                    53:a0:9d:f1:22:bc:bc:51:5d:52:9e:f4:27:19:7d:
                    c7:be:b5:8f:7b:50:0c:e1:2b:54:11:45:23:15:1d:
                    c8:d1:94:d9:a4:4a:d1:f4:3a:bc:56:1c:2a:2c:f3:
                    87:39:21:e2:74:bb:dc:c3:94:b4:01:8c:37:51:77:
                    af:4f:8e:c9:8f:e9:51:43:46:6a:53:d8:b9:4d:e6:
                    9c:0c:f5:6f:10:ad:ce:48:db:2c:b1:27:9f:f6:48:
                    9d:4c:6f:35:7b:55:f0:4d:ad:89:eb:13:80:4f:2c:
                    30:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8F:2E:C9:50:59:28:4F:A6:99:FA:1A:6A:33:1D:4A:EB:B4:B3:94
            X509v3 Authority Key Identifier:
                keyid:3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31322e302f32342d3234203d3e20323636383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:41:d0:66:71:3c:a0:41:c2:77:8f:11:bb:fe:24:ac:68:b3:
         db:3c:f5:d4:a5:47:1b:65:b8:0b:13:03:4a:35:d4:e5:5c:06:
         12:b3:8d:47:b6:00:b0:b6:28:9b:9f:a5:ac:99:1c:db:e5:23:
         56:ff:41:9f:ae:41:dc:e7:69:fc:c5:84:0a:49:d0:23:c4:ff:
         22:c7:2b:35:dc:89:2d:5a:be:b0:47:20:d6:91:55:02:45:cb:
         37:34:62:03:87:49:d2:10:7f:dc:69:84:d5:3b:39:aa:b8:e7:
         ce:7f:05:56:04:a2:58:63:9d:ed:04:e0:d0:dd:fe:b2:1b:78:
         b8:f0:a8:2c:12:8b:4e:65:00:0c:64:d5:96:09:b8:cd:20:f3:
         c6:f4:8e:03:ed:de:ba:6a:94:c7:41:72:5b:2b:ef:f1:4c:8e:
         c2:95:71:36:d7:6d:aa:a4:6a:91:77:8a:ae:f7:68:27:bd:cb:
         df:43:5c:c9:e3:1d:31:d7:c7:ba:ce:03:79:96:74:b5:bf:99:
         cd:9e:77:98:c8:3f:8a:b1:e6:a7:20:97:b5:ac:af:7c:ee:00:
         09:07:51:9e:48:1d:6f:1f:30:16:b5:cb:e7:05:94:9a:98:01:
         07:32:63:df:cf:59:a4:a0:9f:62:5f:1a:d6:c1:59:88:a2:0e:
         ee:07:86:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:01:12 2025 by rpki-client