Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/34352e3233312e3231342e302f32332d3233203d3e20323636373638.roa
File:                     34352e3233312e3231342e302f32332d3233203d3e20323636373638.roa (raw, json)
Hash identifier:          XrZUU3ef9p5F97iJ2HV315ebc1AYsPhjqg+RNTU/RAE=
Subject key identifier:   89:E1:AD:12:AA:95:8E:09:DE:0E:52:15:E7:CB:10:8D:D7:97:4B:CC
Certificate issuer:       /CN=445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F
Certificate serial:       6A9CB8148559831F1DB1BCE04FF466F7978130EA
Authority key identifier: 44:5E:B5:AB:EE:7D:EC:22:09:4F:11:C6:A6:DC:E5:68:ED:16:D5:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/34352e3233312e3231342e302f32332d3233203d3e20323636373638.roa
Signing time:             Tue 02 Sep 2025 20:42:46 +0000
ROA not before:           Tue 02 Sep 2025 20:37:46 +0000
ROA not after:            Tue 01 Sep 2026 20:42:46 +0000
asID:                     266768
IP address blocks:        45.231.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 20:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9c:b8:14:85:59:83:1f:1d:b1:bc:e0:4f:f4:66:f7:97:81:30:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F
        Validity
            Not Before: Sep  2 20:37:46 2025 GMT
            Not After : Sep  1 20:42:46 2026 GMT
        Subject: CN=89E1AD12AA958E09DE0E5215E7CB108DD7974BCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:38:76:9c:31:9e:a5:d1:2d:12:e2:91:0e:bb:
                    28:a5:ce:3e:88:85:11:ee:08:bb:6a:7a:24:21:0f:
                    3c:80:2e:cd:ed:33:cb:7d:14:b3:47:41:8f:d3:4c:
                    56:b7:f5:0b:02:38:3d:4c:92:04:a0:1a:87:bd:93:
                    db:80:2f:db:f0:16:08:32:23:ac:c9:8c:14:75:64:
                    52:98:37:8d:8e:9d:14:f4:cf:f9:4a:18:41:7b:8c:
                    14:f5:b1:ce:99:c7:63:bd:b4:4f:59:d6:15:d9:36:
                    93:25:24:b8:83:f5:50:a2:29:93:5a:00:43:cc:36:
                    b4:f5:60:24:d5:2a:82:15:18:b4:41:72:aa:2b:ea:
                    30:01:aa:0d:e4:d8:3b:46:04:3d:15:ff:e8:90:fe:
                    a6:a5:9d:ad:fe:8e:c1:73:ec:4d:a2:8a:6d:07:a9:
                    55:fa:d8:e6:1c:86:ad:d7:c0:d2:e2:5b:b1:ff:54:
                    d9:61:9d:ff:07:2c:d3:c7:fd:69:1b:f2:45:ee:ce:
                    26:fa:5e:74:4c:bb:a9:70:23:e3:65:fd:82:f0:e2:
                    2c:3c:e6:9b:47:bf:2b:cd:32:a2:ee:ee:2e:8f:27:
                    d1:26:16:5c:f9:b9:a5:1f:89:60:d9:1b:14:9d:f4:
                    f1:d5:27:5f:ff:a5:4d:d8:a2:ed:76:dd:cf:11:95:
                    71:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E1:AD:12:AA:95:8E:09:DE:0E:52:15:E7:CB:10:8D:D7:97:4B:CC
            X509v3 Authority Key Identifier:
                keyid:44:5E:B5:AB:EE:7D:EC:22:09:4F:11:C6:A6:DC:E5:68:ED:16:D5:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/34352e3233312e3231342e302f32332d3233203d3e20323636373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:61:7e:e1:0d:69:54:38:db:11:a4:0b:59:e4:45:b4:65:8a:
         8d:3f:ae:75:b7:7e:1a:4d:c8:dd:e5:15:5e:2c:19:98:87:8c:
         8f:96:ce:4c:82:f9:9a:2f:13:11:8f:23:6f:92:ae:21:b6:44:
         b9:72:52:1a:26:6a:be:62:ac:31:fc:6a:e9:45:17:10:1e:15:
         2a:fd:e8:aa:ce:b4:79:93:22:0a:f6:66:1c:9b:a3:e4:ea:01:
         81:a0:43:9b:bb:64:a7:3d:fd:2f:40:fa:10:47:94:4a:d0:33:
         09:48:43:88:9f:59:5b:61:85:34:ff:23:d2:d0:4f:8d:1f:6b:
         5d:f8:7a:bf:2e:ef:b6:c9:da:47:e7:86:b3:de:fa:13:f9:3b:
         fb:8d:87:f2:19:3c:6c:86:d0:e2:e0:01:08:02:33:d4:f7:e4:
         69:b3:03:e4:94:26:03:e2:e8:f6:03:6b:54:30:6f:19:33:7d:
         e0:af:a5:0e:9b:29:9b:ef:0a:64:e8:1d:9e:0f:43:d2:95:91:
         6b:57:4a:d2:c8:39:72:88:4d:e1:ff:c9:f4:d6:0a:7f:e9:46:
         0d:41:e4:27:66:38:a9:14:24:21:e5:a9:60:9c:cd:e5:6e:d1:
         7b:82:c9:9c:58:25:7d:4e:7c:3b:69:e0:13:fa:57:f4:5d:e1:
         4b:c1:ee:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:19:26 2025 by rpki-client