Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31342e302f32342d3234203d3e20323636383337.roa
File:                     34352e3233382e31342e302f32342d3234203d3e20323636383337.roa (raw, json)
Hash identifier:          CFq5dJ5b6iMTiEmGm39PVxnX/fhYWyK/rAly20OIpOI=
Subject key identifier:   FA:D7:D1:27:E0:EE:F5:C2:FF:B2:9B:97:5D:AE:33:66:E4:E2:89:48
Certificate issuer:       /CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
Certificate serial:       59FE842D1E57DFAAC40ACB6A04A41DADA07B1300
Authority key identifier: 3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31342e302f32342d3234203d3e20323636383337.roa
Signing time:             Wed 23 Jul 2025 21:26:28 +0000
ROA not before:           Wed 23 Jul 2025 21:21:28 +0000
ROA not after:            Wed 22 Jul 2026 21:26:28 +0000
asID:                     266837
IP address blocks:        45.238.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 19:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:fe:84:2d:1e:57:df:aa:c4:0a:cb:6a:04:a4:1d:ad:a0:7b:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
        Validity
            Not Before: Jul 23 21:21:28 2025 GMT
            Not After : Jul 22 21:26:28 2026 GMT
        Subject: CN=FAD7D127E0EEF5C2FFB29B975DAE3366E4E28948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6c:8d:a8:5c:9e:4a:53:3f:01:c8:e2:bd:5c:
                    51:e5:33:bb:81:0b:b4:c4:71:4d:28:dc:d5:e5:7e:
                    5d:6a:6d:af:d9:a2:c1:37:35:25:d6:71:ef:36:41:
                    1f:48:ef:72:a6:bb:e3:38:7c:5f:48:60:5e:c8:fa:
                    45:57:95:75:ec:22:10:07:cf:55:a6:93:25:2c:61:
                    3f:24:48:ad:c5:02:9c:31:c5:d1:56:4e:40:95:7f:
                    39:51:33:b8:b7:5b:a1:c8:a8:1c:d9:19:17:55:57:
                    24:38:1c:eb:9f:28:0f:2d:75:8b:e5:f4:29:78:d4:
                    cf:76:2c:de:d4:78:59:73:96:34:00:cf:9e:57:e6:
                    cc:73:b0:25:4f:8e:9b:0f:78:df:0b:78:75:71:0d:
                    da:38:75:ba:3c:dc:c5:62:e1:11:99:e2:d3:a2:dd:
                    03:16:6e:1b:83:a8:92:f4:df:1d:88:81:9f:37:e5:
                    63:bf:c8:2a:51:f4:5a:b4:22:bd:1a:7b:20:e8:3c:
                    da:fe:ce:8d:16:c7:e6:a1:a4:b8:95:09:6f:ad:71:
                    d9:50:c8:5e:db:38:37:b8:68:1b:ef:48:ad:6d:fd:
                    fa:22:f0:52:f1:fc:7f:07:f9:4f:63:34:87:99:18:
                    69:a4:40:9f:60:21:c1:b6:36:24:b5:da:b0:e5:d6:
                    f0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D7:D1:27:E0:EE:F5:C2:FF:B2:9B:97:5D:AE:33:66:E4:E2:89:48
            X509v3 Authority Key Identifier:
                keyid:3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31342e302f32342d3234203d3e20323636383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:e5:54:a9:24:9b:f4:37:6d:08:8b:27:f8:5c:21:1d:3c:0e:
         f4:fc:12:f0:dc:86:a9:e8:7d:03:f0:ff:e9:13:c7:c1:72:09:
         69:d1:95:68:8c:3b:c4:51:2f:e3:ad:cf:3e:0a:c5:fe:11:57:
         28:f7:e9:2c:cd:5b:12:3f:dc:9f:7a:c6:d6:7e:0d:6b:53:75:
         0c:ca:9e:85:de:e6:98:ec:e4:d5:38:dc:ad:31:0d:cb:a5:8f:
         e9:96:a9:0c:75:e7:8c:af:06:0f:c9:7f:b1:50:b1:3f:74:a1:
         72:57:cc:4e:be:a3:28:f4:11:1b:62:f7:c2:7b:21:5e:06:ed:
         77:47:13:34:1f:f6:ee:55:83:31:64:c7:dd:0b:0a:e8:28:13:
         b9:18:ed:76:6b:3f:ab:84:f0:0d:46:0f:07:5e:c0:72:b7:22:
         08:bd:8e:57:3c:c9:b0:d0:58:92:42:a0:e0:ba:d3:5a:95:7d:
         b8:6d:84:dd:e5:5e:7e:4f:38:56:91:f9:43:c6:39:42:63:71:
         e2:d9:4d:ef:c6:12:7f:28:1d:48:f3:24:fb:01:ca:e0:3e:3f:
         e5:b3:51:2e:dd:7b:b7:0c:7a:df:36:13:36:04:de:61:8c:f1:
         62:ce:e2:35:ce:71:07:65:57:c7:3f:77:05:04:ab:07:d1:61:
         77:4b:83:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:01:12 2025 by rpki-client