Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F9F6565BCCBA01247A447EBBA42A207A8C10E8A8BE3D129E03C07643493BA7/0/34352e342e39342e302f32342d3234203d3e20323734313632.roa
File:                     34352e342e39342e302f32342d3234203d3e20323734313632.roa (raw, json)
Hash identifier:          phOCsEehUO1bTR7lgSWwaS8wfIaGzEnYybspZ1TP3+E=
Subject key identifier:   87:E6:86:39:2E:12:D6:F3:6A:C3:6E:3B:08:B4:90:6B:5F:E6:64:F3
Certificate issuer:       /CN=4C47EAC7DB752442F81D5883734E3FA2C23079D3
Certificate serial:       4D2B3762893CB84B539235193BE9A59622606D25
Authority key identifier: 4C:47:EA:C7:DB:75:24:42:F8:1D:58:83:73:4E:3F:A2:C2:30:79:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C47EAC7DB752442F81D5883734E3FA2C23079D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F9F6565BCCBA01247A447EBBA42A207A8C10E8A8BE3D129E03C07643493BA7/0/34352e342e39342e302f32342d3234203d3e20323734313632.roa
Signing time:             Sat 06 Sep 2025 19:25:00 +0000
ROA not before:           Sat 06 Sep 2025 19:20:00 +0000
ROA not after:            Sat 05 Sep 2026 19:25:00 +0000
asID:                     274162
IP address blocks:        45.4.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F9F6565BCCBA01247A447EBBA42A207A8C10E8A8BE3D129E03C07643493BA7/0/4C47EAC7DB752442F81D5883734E3FA2C23079D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F9F6565BCCBA01247A447EBBA42A207A8C10E8A8BE3D129E03C07643493BA7/0/4C47EAC7DB752442F81D5883734E3FA2C23079D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C47EAC7DB752442F81D5883734E3FA2C23079D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 05:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:2b:37:62:89:3c:b8:4b:53:92:35:19:3b:e9:a5:96:22:60:6d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C47EAC7DB752442F81D5883734E3FA2C23079D3
        Validity
            Not Before: Sep  6 19:20:00 2025 GMT
            Not After : Sep  5 19:25:00 2026 GMT
        Subject: CN=87E686392E12D6F36AC36E3B08B4906B5FE664F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ec:0e:bc:c7:ac:20:07:9f:c2:9c:aa:20:8d:
                    4e:33:c4:d3:6d:05:06:76:36:d2:b8:28:68:8c:a4:
                    51:34:b0:f2:56:db:56:b8:21:cd:9a:f3:a1:d2:a8:
                    34:63:7f:97:1c:a4:34:b6:7d:74:5d:4b:2e:03:b0:
                    c1:42:b5:3f:49:d3:30:b4:f4:fc:3f:ba:23:55:85:
                    4a:a2:9d:1d:7a:93:96:44:bb:c1:44:30:31:5f:5d:
                    2e:80:c9:76:8b:7b:b2:57:6b:91:5f:56:e7:f6:9d:
                    15:b5:9e:40:08:2b:3d:c9:dd:11:f9:ec:76:85:13:
                    17:66:8b:ec:31:8c:96:86:c5:d8:a0:95:e5:fe:46:
                    f4:fc:35:b3:2a:dd:a7:86:51:5a:8b:1f:d8:73:7c:
                    15:f1:b0:a7:94:68:cd:ab:06:ff:8c:6c:7c:b1:14:
                    89:33:78:4c:63:50:c9:a9:ad:d8:46:c8:39:5e:bd:
                    05:7a:ed:d9:31:84:c8:2f:46:46:0c:71:d9:8e:a5:
                    36:5d:9a:78:fb:83:d2:3d:da:b8:73:8c:bb:81:cd:
                    11:71:b3:0a:d6:7d:a8:f5:e8:08:73:36:b5:79:d1:
                    3f:ef:12:09:88:a4:f3:c1:cf:5e:70:1f:93:e3:c0:
                    9b:f5:3b:32:0d:90:5b:76:bd:d1:15:5d:2f:ad:8b:
                    39:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E6:86:39:2E:12:D6:F3:6A:C3:6E:3B:08:B4:90:6B:5F:E6:64:F3
            X509v3 Authority Key Identifier:
                keyid:4C:47:EA:C7:DB:75:24:42:F8:1D:58:83:73:4E:3F:A2:C2:30:79:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F9F6565BCCBA01247A447EBBA42A207A8C10E8A8BE3D129E03C07643493BA7/0/4C47EAC7DB752442F81D5883734E3FA2C23079D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C47EAC7DB752442F81D5883734E3FA2C23079D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F9F6565BCCBA01247A447EBBA42A207A8C10E8A8BE3D129E03C07643493BA7/0/34352e342e39342e302f32342d3234203d3e20323734313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:42:30:ff:e6:8d:6d:81:a9:a4:a1:f2:28:15:80:4f:64:d5:
         06:30:b0:51:76:71:b9:78:ac:56:55:71:0b:83:38:9d:cd:56:
         4a:50:8d:65:6b:a7:12:31:c3:e3:a6:4b:ad:fa:53:73:bc:df:
         b3:42:18:3c:ff:a7:7c:75:b4:cf:7d:aa:b3:5f:66:35:f9:77:
         b1:b8:b7:e5:c6:d5:d3:3a:ca:91:95:2f:4a:c8:7f:fa:ef:e6:
         03:7d:ef:fd:8b:fa:7f:aa:1d:5d:2b:5a:5e:cd:d5:f6:cd:24:
         b6:e1:07:87:5a:bc:b8:36:50:12:b7:98:82:cc:07:cd:5b:77:
         6e:6d:2e:ad:7d:9a:22:e3:a0:b6:77:13:e1:d0:6a:16:87:d3:
         57:8d:f7:82:a1:06:05:51:21:e6:b4:7b:0b:d0:e4:96:ef:85:
         95:5c:f1:18:e1:11:09:f3:9b:4e:d8:a2:7d:2e:68:68:85:6c:
         41:a1:a3:4a:8e:a7:35:63:31:92:af:d3:0b:aa:a9:d4:df:48:
         31:a5:04:2e:93:e5:9c:94:fe:e3:48:da:4d:68:f5:4c:94:6d:
         30:aa:f3:46:0b:f7:f8:c3:df:ff:33:62:9d:7c:ba:17:ce:b9:
         ea:cf:17:07:35:01:92:f7:5f:26:3a:75:94:97:51:88:48:3b:
         8e:82:ce:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:15:50 2025 by rpki-client