Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/34352e3233302e3132352e302f32342d3234203d3e20323633313537.roa
File:                     34352e3233302e3132352e302f32342d3234203d3e20323633313537.roa (raw, json)
Hash identifier:          ssb7tpVXHv1g4XURL2e8QVgjv0Lzc/fo1NhewV5Zubo=
Subject key identifier:   3D:64:BF:53:53:2D:88:89:21:93:C2:6F:D6:59:B4:C9:BC:EA:50:5D
Certificate issuer:       /CN=CD3DD97368EF3155FD117CD3038DE90CAB31E1F6
Certificate serial:       0C8057C602D34932D1725420D61E988B3406233A
Authority key identifier: CD:3D:D9:73:68:EF:31:55:FD:11:7C:D3:03:8D:E9:0C:AB:31:E1:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/34352e3233302e3132352e302f32342d3234203d3e20323633313537.roa
Signing time:             Tue 01 Sep 2026 18:25:00 +0000
ROA not before:           Tue 01 Sep 2026 18:20:00 +0000
ROA not after:            Tue 31 Aug 2027 18:25:00 +0000
asID:                     263157
IP address blocks:        45.230.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:80:57:c6:02:d3:49:32:d1:72:54:20:d6:1e:98:8b:34:06:23:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD3DD97368EF3155FD117CD3038DE90CAB31E1F6
        Validity
            Not Before: Sep  1 18:20:00 2026 GMT
            Not After : Aug 31 18:25:00 2027 GMT
        Subject: CN=3D64BF53532D88892193C26FD659B4C9BCEA505D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:bf:ba:c9:ed:67:21:8f:ee:6e:0e:63:57:
                    19:c6:a6:e6:ad:78:68:7b:5d:21:c0:17:13:8f:36:
                    a1:b0:ce:5e:a9:a0:f6:74:a7:5b:56:ee:5f:90:1c:
                    5a:aa:c4:a3:29:cb:a8:e2:48:00:17:79:cc:c6:20:
                    a4:77:48:47:69:8d:79:2a:c8:ae:c5:bc:5e:23:21:
                    6d:84:37:d0:e3:2f:35:0e:75:ff:db:fd:94:ba:f1:
                    98:24:5b:89:45:d0:fe:9d:c5:9d:de:8a:db:bf:be:
                    c9:79:da:1c:0a:56:43:70:fd:6d:92:38:e3:f5:f8:
                    d5:48:02:ac:ec:52:e1:8c:3a:d4:89:4e:ee:e4:95:
                    d2:f5:8d:9e:e4:7f:fd:fa:db:a3:ac:0b:bd:c1:32:
                    b8:94:73:52:05:91:77:e7:4b:a6:cd:0c:39:f3:a0:
                    d3:01:c2:dd:d5:1a:19:36:e4:38:da:7f:71:60:62:
                    9f:bd:1b:7d:64:07:ab:9d:bb:29:92:6b:d0:52:81:
                    cb:dc:3a:a3:31:82:1e:70:28:5d:2a:43:4f:06:fe:
                    2c:ca:0c:b5:0a:dd:f1:16:8f:bd:4c:c5:60:b5:e9:
                    96:26:fb:b2:e9:0d:63:64:69:af:b2:11:3e:a1:43:
                    a1:a9:6d:2f:22:67:f6:9e:50:2b:cd:f3:28:3f:26:
                    b2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:64:BF:53:53:2D:88:89:21:93:C2:6F:D6:59:B4:C9:BC:EA:50:5D
            X509v3 Authority Key Identifier:
                keyid:CD:3D:D9:73:68:EF:31:55:FD:11:7C:D3:03:8D:E9:0C:AB:31:E1:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/34352e3233302e3132352e302f32342d3234203d3e20323633313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:9a:bb:aa:8e:9e:47:fa:9b:b3:d7:38:55:5a:79:5f:5b:f6:
         aa:51:0c:20:71:ae:65:38:cd:95:73:8a:a6:64:c8:d7:f6:e6:
         53:42:ae:37:49:ab:fb:fc:1c:e8:ba:76:a0:31:95:cb:a6:8c:
         99:29:0e:b0:66:06:5e:91:99:29:52:38:1a:21:73:8f:fe:93:
         7b:35:2c:a0:b0:c7:fb:eb:14:bf:87:19:ff:4c:13:3e:e0:8b:
         16:d9:ca:ff:29:3d:31:f7:9d:c3:af:11:df:54:a1:90:b9:8d:
         a4:a3:bf:e5:12:dd:ab:85:70:a0:ee:8c:51:98:13:36:cb:ef:
         b9:52:7a:98:ab:68:51:88:75:92:bc:70:5c:1d:34:fb:20:63:
         34:3f:22:5f:f8:b6:ee:da:ee:fd:67:84:ff:c6:7a:e3:12:39:
         5d:2e:51:7a:a4:ba:43:7f:c6:aa:16:9f:30:d6:94:01:7a:9e:
         92:8b:02:16:ed:16:cd:bb:18:67:7f:8b:9c:f8:15:10:03:9b:
         19:a1:d9:96:74:04:87:d3:bc:33:ae:82:42:97:32:13:ff:56:
         76:88:ff:44:40:8c:9a:e0:6e:b2:f2:e5:12:6c:c4:4a:a5:88:
         d7:cb:7a:87:f8:9e:36:92:23:92:4c:09:8f:ad:7e:6e:a5:48:
         bf:c0:3c:88
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUDIBXxgLTSTLRclQg1h6YizQGIzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0QzREQ5NzM2OEVGMzE1NUZEMTE3Q0QzMDM4REU5MENB
QjMxRTFGNjAeFw0yNjA5MDExODIwMDBaFw0yNzA4MzExODI1MDBaMDMxMTAvBgNV
BAMTKDNENjRCRjUzNTMyRDg4ODkyMTkzQzI2RkQ2NTlCNEM5QkNFQTUwNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6BL+6ye1nIY/ubg5jVxnGpuat
eGh7XSHAFxOPNqGwzl6poPZ0p1tW7l+QHFqqxKMpy6jiSAAXeczGIKR3SEdpjXkq
yK7FvF4jIW2EN9DjLzUOdf/b/ZS68ZgkW4lF0P6dxZ3eitu/vsl52hwKVkNw/W2S
OOP1+NVIAqzsUuGMOtSJTu7kldL1jZ7kf/3626OsC73BMriUc1IFkXfnS6bNDDnz
oNMBwt3VGhk25Djaf3FgYp+9G31kB6uduymSa9BSgcvcOqMxgh5wKF0qQ08G/izK
DLUK3fEWj71MxWC16ZYm+7LpDWNkaa+yET6hQ6GpbS8iZ/aeUCvN8yg/JrKpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUPWS/U1MtiIkhk8Jv1lm0ybzqUF0wHwYDVR0j
BBgwFoAUzT3Zc2jvMVX9EXzTA43pDKsx4fYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRTk5QjkyNDcyQzlEQkVERjkzQjZERDkwQ0VCNEVCNDM1
MjgwMzlDMEY4QkE5QUU0MEU3ODAzMDg4OEZCRjY3LzAvQ0QzREQ5NzM2OEVGMzE1
NUZEMTE3Q0QzMDM4REU5MENBQjMxRTFGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRDNERDk3MzY4RUYzMTU1RkQx
MTdDRDMwMzhERTkwQ0FCMzFFMUY2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkU5OUI5MjQ3MkM5REJFREY5M0I2REQ5MENFQjRFQjQzNTI4MDM5QzBG
OEJBOUFFNDBFNzgwMzA4ODhGQkY2Ny8wLzM0MzUyZTMyMzMzMDJlMzEzMjM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzEzNTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeZ9
MA0GCSqGSIb3DQEBCwUAA4IBAQAlmruqjp5H+puz1zhVWnlfW/aqUQwgca5lOM2V
c4qmZMjX9uZTQq43Sav7/BzounagMZXLpoyZKQ6wZgZekZkpUjgaIXOP/pN7NSyg
sMf76xS/hxn/TBM+4IsW2cr/KT0x953DrxHfVKGQuY2ko7/lEt2rhXCg7oxRmBM2
y++5UnqYq2hRiHWSvHBcHTT7IGM0PyJf+Lbu2u79Z4T/xnrjEjldLlF6pLpDf8aq
Fp8w1pQBep6SiwIW7RbNuxhnf4uc+BUQA5sZodmWdASH07wzroJClzIT/1Z2iP9E
QIya4G6y8uUSbMRKpYjXy3qH+J42kiOSTAmPrX5upUi/wDyI
-----END CERTIFICATE-----
Generated at Fri Sep 11 10:07:46 2026 by rpki-client