Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/34352e362e3234382e302f32322d3232203d3e2031.roa
File:                     34352e362e3234382e302f32322d3232203d3e2031.roa (raw, json)
Hash identifier:          QjFp+UUnwWpQjHVLjbIC0w1DUpiZ3Cf2/++spXKHk8Q=
Subject key identifier:   45:71:E8:AA:7C:75:0E:45:19:25:78:0D:ED:3B:17:0B:09:3E:40:75
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       1876C14EC3F7A17B5550A3AF24F9ECA8D578576E
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/34352e362e3234382e302f32322d3232203d3e2031.roa
Signing time:             Mon 08 Sep 2025 18:43:52 +0000
ROA not before:           Mon 08 Sep 2025 18:38:52 +0000
ROA not after:            Mon 07 Sep 2026 18:43:52 +0000
asID:                     1
IP address blocks:        45.6.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Sep 2025 01:38:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:76:c1:4e:c3:f7:a1:7b:55:50:a3:af:24:f9:ec:a8:d5:78:57:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Sep  8 18:38:52 2025 GMT
            Not After : Sep  7 18:43:52 2026 GMT
        Subject: CN=4571E8AA7C750E451925780DED3B170B093E4075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2c:9e:f7:88:ae:68:f8:98:f0:1f:da:7c:05:
                    2a:f1:ab:03:eb:db:7f:a5:56:97:54:e7:93:42:c4:
                    fc:2b:98:d7:1c:91:3a:e5:69:33:26:6b:d1:e2:6a:
                    6e:6b:cd:51:66:92:ab:fa:2e:82:b6:d1:40:8b:9b:
                    20:e9:fe:4a:7d:d9:cd:b1:5f:ec:f8:e4:7c:dd:70:
                    44:5a:a5:e3:e8:20:ed:9f:c5:97:6a:ea:fb:08:a9:
                    4c:e2:23:4a:a0:d0:22:f7:6b:50:75:1d:93:49:1b:
                    23:95:1f:fa:0d:8d:b7:80:35:36:2c:89:00:e7:a7:
                    ee:45:9e:0b:a4:71:c2:e8:d4:85:b7:b0:51:28:98:
                    b4:d9:a0:ec:e3:e7:d8:e3:db:a4:6f:14:86:05:82:
                    08:84:fa:78:3d:19:43:7c:87:42:6c:23:a1:e9:af:
                    18:e5:2f:b2:ec:2b:49:a0:f8:ea:b9:13:01:bd:c5:
                    01:6f:cc:d7:87:e2:a1:32:c1:2c:bd:4b:a5:18:21:
                    d4:55:22:8b:86:db:e1:4d:38:b7:19:ec:9e:37:4a:
                    ee:ce:10:b7:c4:4c:af:92:e6:82:b8:10:9b:e3:ab:
                    ba:c1:95:b8:cc:21:2f:7e:ea:a3:4f:2f:e7:55:30:
                    85:9e:5f:a4:20:ca:92:b1:b2:d8:fb:e2:76:07:af:
                    f5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:71:E8:AA:7C:75:0E:45:19:25:78:0D:ED:3B:17:0B:09:3E:40:75
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/34352e362e3234382e302f32322d3232203d3e2031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:00:4b:11:0d:e9:b9:4c:f9:e8:2f:b2:a4:8c:40:15:35:6c:
         78:f3:6b:6f:a0:c5:98:5b:57:37:a2:49:27:4c:df:4c:30:a5:
         dc:56:35:23:5b:ee:4f:24:26:3d:d4:a1:1a:60:63:a7:b1:ae:
         70:b4:8d:d3:6d:e7:e1:24:b4:64:60:e9:83:60:1d:a4:62:14:
         f1:a6:e9:ba:42:3a:de:a0:35:89:c3:96:a4:70:01:b1:d7:3a:
         73:fa:6f:6e:47:8f:c5:29:e1:5d:a6:fa:6e:79:31:d0:4f:3b:
         de:84:06:c7:38:88:0e:9b:fd:9e:8b:ef:58:99:f2:82:0d:fa:
         14:ae:9b:e4:92:33:9b:d9:40:66:2b:f3:f1:f2:ca:75:9f:3b:
         53:41:bc:c8:62:f5:3c:20:c8:ce:93:8c:ff:88:38:7a:4f:64:
         5c:b4:5c:6f:11:c3:53:89:83:f8:b0:bb:16:43:1e:c3:5e:c8:
         11:ad:e5:09:c8:32:74:3f:b2:a9:63:37:39:63:ad:ab:a5:25:
         ab:3e:9b:bc:38:ba:76:85:86:5e:d8:3a:89:92:4a:09:d3:8c:
         c3:bf:40:17:0d:4c:93:f4:5b:8a:a0:1e:67:c3:f0:a9:05:df:
         ad:6e:ad:dc:96:9b:27:62:0a:82:6d:7f:0f:70:a5:0f:f4:19:
         ad:f9:55:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:14:52 2025 by rpki-client