Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/34352e3233382e3138322e302f32342d3234203d3e20323636383630.roa
File:                     34352e3233382e3138322e302f32342d3234203d3e20323636383630.roa (raw, json)
Hash identifier:          k6UGIV7HBA84NZyAKbLkvLbLuZXz8zl9Jp0rJl3fqCg=
Subject key identifier:   F9:E6:98:CC:D6:68:7A:32:1B:6E:3A:CE:59:5E:FA:57:13:9A:C3:96
Certificate issuer:       /CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
Certificate serial:       19CB94511136980A97874E8A839F35BCBAD2453A
Authority key identifier: C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/34352e3233382e3138322e302f32342d3234203d3e20323636383630.roa
Signing time:             Tue 09 Sep 2025 12:35:00 +0000
ROA not before:           Tue 09 Sep 2025 12:30:00 +0000
ROA not after:            Tue 08 Sep 2026 12:35:00 +0000
asID:                     266860
IP address blocks:        45.238.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 20:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:cb:94:51:11:36:98:0a:97:87:4e:8a:83:9f:35:bc:ba:d2:45:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
        Validity
            Not Before: Sep  9 12:30:00 2025 GMT
            Not After : Sep  8 12:35:00 2026 GMT
        Subject: CN=F9E698CCD6687A321B6E3ACE595EFA57139AC396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f2:2d:8a:a4:91:e1:fd:0a:eb:6c:2d:e9:0e:
                    58:70:8b:d3:c4:29:6c:38:3d:f6:d3:0e:17:28:b2:
                    ee:39:c7:48:20:ea:36:a9:75:7d:58:a0:10:7e:9f:
                    33:4b:30:49:9f:c1:ab:67:ba:d9:f1:8a:be:53:95:
                    36:ff:b9:11:16:ff:c0:5e:62:61:6c:97:b2:9f:aa:
                    6c:b5:df:29:33:03:86:e8:9a:43:05:21:0d:cc:6e:
                    00:f0:8c:f7:5d:5c:9a:d7:8d:70:a4:ea:47:6b:17:
                    a1:46:7c:d0:ec:db:7b:ef:3e:50:b7:da:8a:81:7b:
                    33:13:70:3f:68:ee:03:fc:23:15:72:17:e9:e4:6e:
                    75:4b:89:b7:14:c3:88:f8:c2:72:5e:50:d5:0d:a5:
                    9f:bb:76:e2:a9:ec:08:dd:13:ae:ac:12:64:78:0c:
                    a5:da:b3:03:4b:a7:fd:24:2e:90:53:a9:72:e4:47:
                    79:90:a6:82:c5:76:f3:78:28:46:30:8f:5b:fd:d3:
                    01:c9:51:ea:bc:05:ac:c7:32:44:40:fb:22:60:7b:
                    45:42:c2:cd:42:f1:a8:c8:cd:10:20:d2:10:33:6e:
                    f2:e4:c6:4e:83:61:5e:39:0e:95:ab:b0:6c:d5:c7:
                    aa:be:c7:eb:81:7a:bc:22:94:a1:7c:e2:21:82:c3:
                    d0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E6:98:CC:D6:68:7A:32:1B:6E:3A:CE:59:5E:FA:57:13:9A:C3:96
            X509v3 Authority Key Identifier:
                keyid:C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/34352e3233382e3138322e302f32342d3234203d3e20323636383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:ce:2c:9b:21:84:3e:12:7b:6d:5e:b4:cd:eb:ed:03:99:05:
         8f:5c:4e:c7:ce:92:b9:c3:92:1b:ad:a4:ea:b1:cc:1c:b6:28:
         e7:76:26:6d:09:bf:a1:7f:e3:e5:c1:41:70:cc:e4:f9:d2:b2:
         6f:04:f1:dc:7b:94:44:7e:d3:20:c0:05:1c:45:3d:6e:34:e6:
         da:1f:1e:04:9a:c1:38:32:8c:0f:c9:21:9b:df:be:66:9e:d7:
         ab:70:59:54:29:fd:8b:63:08:83:05:23:4e:1d:1e:cd:33:b3:
         c5:04:64:ac:30:a7:fa:01:b8:5e:c9:8f:a2:06:ac:2b:57:ca:
         07:66:90:45:38:2f:cc:99:0b:66:7f:47:d6:07:ec:cc:59:90:
         2b:31:3b:14:e9:6b:be:c3:9c:95:d8:60:6b:48:e5:34:8d:69:
         54:dc:ad:75:e5:76:b4:4a:13:5a:e5:0a:f0:5e:a2:46:d5:b3:
         55:ca:e4:7a:72:f8:d2:98:14:3e:76:88:72:45:99:84:13:53:
         ed:d3:22:b3:85:1d:e1:b3:ee:af:2f:13:c1:9b:fe:97:9d:8e:
         74:5c:6d:87:7c:28:9a:26:7c:77:ad:8c:9b:07:67:43:89:d0:
         7a:3c:7e:59:c1:38:8c:37:53:d5:85:65:92:f4:f7:db:a9:a6:
         30:99:84:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:58:46 2025 by rpki-client