Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/34352e3138392e3138392e302f32342d3234203d3e203634313330.roa
File:                     34352e3138392e3138392e302f32342d3234203d3e203634313330.roa (raw, json)
Hash identifier:          Qyd7XGsp+WgBiLxglvqxSHfoaPOC68Qi8vLlmZ+T2mM=
Subject key identifier:   73:15:29:3E:49:71:17:3E:A0:17:F7:B7:8A:A3:80:CD:3B:51:45:97
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       6353276BCB07918879A262E7C6577E90D9F2B353
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/34352e3138392e3138392e302f32342d3234203d3e203634313330.roa
Signing time:             Mon 15 Sep 2025 23:30:00 +0000
ROA not before:           Mon 15 Sep 2025 23:25:00 +0000
ROA not after:            Mon 14 Sep 2026 23:30:00 +0000
asID:                     64130
IP address blocks:        45.189.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 20:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:53:27:6b:cb:07:91:88:79:a2:62:e7:c6:57:7e:90:d9:f2:b3:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Sep 15 23:25:00 2025 GMT
            Not After : Sep 14 23:30:00 2026 GMT
        Subject: CN=7315293E4971173EA017F7B78AA380CD3B514597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4e:51:95:70:3a:fa:72:f4:4d:e3:a1:ac:c8:
                    68:4b:2b:15:e5:3a:f6:89:cb:cd:be:1a:8b:18:c9:
                    a8:d2:ad:1c:bd:8c:23:f3:b6:21:e2:66:17:b4:32:
                    99:87:3f:bb:38:28:04:fc:de:2d:10:03:58:63:32:
                    6c:e5:8c:87:f7:b6:48:d4:7a:9a:d4:ab:03:04:c6:
                    c6:0d:36:3d:6e:c5:0d:6e:ca:c6:42:d6:4e:4b:b3:
                    9a:7a:00:8e:be:bd:e6:4a:d4:97:12:b8:0f:fa:cf:
                    57:f9:91:32:e6:7f:bd:cb:d3:b1:56:96:f4:21:91:
                    a4:ca:6f:90:8f:82:f3:d0:39:31:9e:8c:60:74:c9:
                    11:7b:33:48:38:dd:00:22:8e:91:c9:8e:72:61:30:
                    3e:8a:cf:db:3a:d4:53:bf:86:b0:4b:8b:2d:b6:aa:
                    ed:9a:0e:c2:d7:13:4f:c3:1d:6c:75:d0:6d:6e:e4:
                    d8:8b:22:2d:12:b6:e8:83:94:7f:e8:28:20:44:5e:
                    de:d0:9a:57:02:43:ef:4a:b4:93:2d:f9:99:f8:ca:
                    86:1c:c6:f5:1e:64:a9:18:7c:1b:47:99:37:d7:8b:
                    e7:bd:f6:26:0a:5e:41:42:9f:93:43:c3:59:f9:32:
                    45:9d:31:40:d2:80:82:87:21:72:82:30:fe:4a:1d:
                    00:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:15:29:3E:49:71:17:3E:A0:17:F7:B7:8A:A3:80:CD:3B:51:45:97
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/34352e3138392e3138392e302f32342d3234203d3e203634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:69:06:f5:b0:6b:6a:ab:26:d3:e4:1b:20:be:86:95:17:e0:
         21:10:19:ac:78:f4:ae:44:b9:55:a9:b3:b6:27:f9:c8:e8:3a:
         f6:c2:49:d3:fb:25:8f:23:ec:3a:f5:c7:16:e5:cd:76:97:de:
         15:90:91:cf:a2:95:3a:2b:c5:2e:19:bf:23:d3:d0:f7:7d:1f:
         15:56:68:a6:af:9f:be:19:1b:0d:57:bb:79:44:90:ea:fa:71:
         2a:d3:c4:cb:01:92:50:d0:c2:eb:f9:f9:06:c9:31:65:c8:20:
         6c:73:4f:25:d1:9c:6d:5d:fc:7f:07:15:ad:81:f8:c1:86:a2:
         6e:0a:ab:cb:ea:5d:2e:3c:77:4b:a2:3a:b5:01:3a:57:5d:2a:
         a4:a0:b0:d3:41:63:eb:42:82:05:9f:9d:72:6b:c1:c9:4c:24:
         cd:d4:ba:3d:17:21:30:c1:99:46:b6:f2:30:35:e0:be:cc:34:
         f8:0f:e1:73:c8:f2:60:10:53:63:5c:4c:5a:e7:8f:3f:dc:14:
         53:14:2e:30:a9:58:e4:a8:98:9e:5d:73:03:c0:3e:7d:68:7e:
         41:90:7b:82:cc:3b:1e:75:e0:49:e9:2e:d8:ae:48:8e:ee:3d:
         5b:20:8e:17:31:bd:1d:34:e2:3f:49:eb:ea:d2:2b:5c:49:ce:
         00:be:88:ff
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUY1Mna8sHkYh5omLnxld+kNnys1MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk2NjFCMEU3RkM3NUVENzY3RDE4QjU2RkM3NDlCQUVE
MjFGQzE5NTAeFw0yNTA5MTUyMzI1MDBaFw0yNjA5MTQyMzMwMDBaMDMxMTAvBgNV
BAMTKDczMTUyOTNFNDk3MTE3M0VBMDE3RjdCNzhBQTM4MENEM0I1MTQ1OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaTlGVcDr6cvRN46GsyGhLKxXl
OvaJy82+GosYyajSrRy9jCPztiHiZhe0MpmHP7s4KAT83i0QA1hjMmzljIf3tkjU
eprUqwMExsYNNj1uxQ1uysZC1k5Ls5p6AI6+veZK1JcSuA/6z1f5kTLmf73L07FW
lvQhkaTKb5CPgvPQOTGejGB0yRF7M0g43QAijpHJjnJhMD6Kz9s61FO/hrBLiy22
qu2aDsLXE0/DHWx10G1u5NiLIi0StuiDlH/oKCBEXt7QmlcCQ+9KtJMt+Zn4yoYc
xvUeZKkYfBtHmTfXi+e99iYKXkFCn5NDw1n5MkWdMUDSgIKHIXKCMP5KHQDRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUcxUpPklxFz6gF/e3iqOAzTtRRZcwHwYDVR0j
BBgwFoAUuWYbDn/HXtdn0YtW/HSbrtIfwZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NzIzNkI0Q0NFRkJDNDM4MjFBQTQyRDQ1RDFBRjJBMzc0
NzA4N0Y2QTA0NzY3MDFFNkYwQTg3MUUxRTE1QkJGLzAvQjk2NjFCMEU3RkM3NUVE
NzY3RDE4QjU2RkM3NDlCQUVEMjFGQzE5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COTY2MUIwRTdGQzc1RUQ3NjdE
MThCNTZGQzc0OUJBRUQyMUZDMTk1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjcyMzZCNENDRUZCQzQzODIxQUE0MkQ0NUQxQUYyQTM3NDcwODdGNkEw
NDc2NzAxRTZGMEE4NzFFMUUxNUJCRi8wLzM0MzUyZTMxMzgzOTJlMzEzODM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzNDMxMzMzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC29vTAN
BgkqhkiG9w0BAQsFAAOCAQEAnmkG9bBraqsm0+QbIL6GlRfgIRAZrHj0rkS5Vamz
tif5yOg69sJJ0/sljyPsOvXHFuXNdpfeFZCRz6KVOivFLhm/I9PQ930fFVZopq+f
vhkbDVe7eUSQ6vpxKtPEywGSUNDC6/n5BskxZcggbHNPJdGcbV38fwcVrYH4wYai
bgqry+pdLjx3S6I6tQE6V10qpKCw00Fj60KCBZ+dcmvByUwkzdS6PRchMMGZRrby
MDXgvsw0+A/hc8jyYBBTY1xMWuePP9wUUxQuMKlY5KiYnl1zA8A+fWh+QZB7gsw7
HnXgSeku2K5Iju49WyCOFzG9HTTiP0nr6tIrXEnOAL6I/w==
-----END CERTIFICATE-----
Generated at Thu Sep 18 19:29:05 2025 by rpki-client