Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/34352e37312e3135362e302f32322d3232203d3e20323635383235.roa
File:                     34352e37312e3135362e302f32322d3232203d3e20323635383235.roa (raw, json)
Hash identifier:          6FRM7NqnRJeFADa/VH1wjQisxP/L6qEJ4EdcJnkmo2c=
Subject key identifier:   84:11:50:57:DE:7F:8D:EA:E0:2B:96:CF:51:A5:86:E8:3B:02:6B:A8
Certificate issuer:       /CN=68736797179852482212F2380438B90C707A82C2
Certificate serial:       0E7A7E142718842F5EE4616A9CFA167D000FF1A8
Authority key identifier: 68:73:67:97:17:98:52:48:22:12:F2:38:04:38:B9:0C:70:7A:82:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/34352e37312e3135362e302f32322d3232203d3e20323635383235.roa
Signing time:             Fri 08 Aug 2025 01:10:01 +0000
ROA not before:           Fri 08 Aug 2025 01:05:01 +0000
ROA not after:            Fri 07 Aug 2026 01:10:01 +0000
asID:                     265825
IP address blocks:        45.71.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/68736797179852482212F2380438B90C707A82C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/68736797179852482212F2380438B90C707A82C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 05:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7a:7e:14:27:18:84:2f:5e:e4:61:6a:9c:fa:16:7d:00:0f:f1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68736797179852482212F2380438B90C707A82C2
        Validity
            Not Before: Aug  8 01:05:01 2025 GMT
            Not After : Aug  7 01:10:01 2026 GMT
        Subject: CN=84115057DE7F8DEAE02B96CF51A586E83B026BA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:58:77:75:d3:c7:55:a0:9b:76:b1:78:39:aa:
                    77:0b:9e:f6:73:2a:d2:a9:05:64:fe:99:ce:e5:85:
                    da:b9:f6:2e:8e:66:cd:02:98:54:f0:62:bb:4f:7b:
                    cc:8a:94:60:8b:48:22:5d:a6:82:73:9f:c2:90:ba:
                    55:7c:80:3a:06:21:07:80:90:71:6a:00:c7:c9:98:
                    1a:28:3f:af:42:a0:30:51:41:30:bf:47:6e:a7:59:
                    c9:23:64:40:7d:3d:5d:ce:4b:39:ca:2a:ef:0f:88:
                    2e:10:40:30:f9:ff:ed:fe:fe:42:d4:30:56:4d:b9:
                    79:98:32:a2:ee:0c:6a:d6:86:48:ed:44:48:9a:34:
                    84:f0:a8:d1:ae:9f:60:c3:7d:55:0f:9c:90:43:63:
                    90:9f:ec:50:e5:68:31:47:2e:91:ad:d4:e6:f6:9a:
                    3a:a3:ca:91:57:c6:49:6f:3f:7f:0b:0d:54:41:fa:
                    e6:a3:8c:8a:ca:51:c2:cf:5f:bd:5b:db:72:25:41:
                    20:5d:5e:b3:a6:20:8d:dd:85:32:35:78:da:9c:91:
                    e7:4b:3e:fd:f9:b6:e5:9b:b3:0f:0c:5b:e9:1a:f9:
                    2d:69:09:b9:44:d0:3e:a8:6a:e0:92:91:08:ed:0b:
                    c9:2a:3d:7c:a0:2e:fd:c2:69:e6:cb:9d:c1:44:28:
                    cb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:11:50:57:DE:7F:8D:EA:E0:2B:96:CF:51:A5:86:E8:3B:02:6B:A8
            X509v3 Authority Key Identifier:
                keyid:68:73:67:97:17:98:52:48:22:12:F2:38:04:38:B9:0C:70:7A:82:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/68736797179852482212F2380438B90C707A82C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/34352e37312e3135362e302f32322d3232203d3e20323635383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:6a:64:57:3d:db:f8:82:39:4e:9f:8a:29:04:dd:18:96:1a:
         2f:88:33:94:f9:3f:11:30:48:45:0b:39:4b:03:04:d0:08:47:
         eb:3c:3a:ea:98:91:09:75:d6:59:d9:95:d2:39:14:13:44:d4:
         98:22:2f:53:94:3f:43:19:f0:9b:4e:86:d4:87:2b:0a:e2:07:
         51:42:d1:de:54:38:db:54:1b:f0:99:3e:71:7f:a4:63:c9:c7:
         8b:92:94:9c:04:16:c5:ee:2a:a2:7d:8c:0e:cd:00:cb:d7:76:
         38:76:d3:49:44:53:8a:e9:2d:72:db:6a:4f:ff:16:65:06:ac:
         ea:1a:c3:d1:58:fd:a9:d3:06:73:04:b7:05:a5:4c:c6:a2:c9:
         da:93:7d:41:85:e2:7d:78:1b:5b:d6:91:d5:51:ad:c5:bf:28:
         47:8d:dc:a2:2c:f5:1b:49:2f:fe:12:3f:c8:48:34:90:5e:bb:
         95:eb:0b:6e:b3:ed:85:b8:6c:69:81:25:3f:d4:07:37:f3:0d:
         de:31:de:e7:5c:0c:8a:ad:36:04:a7:14:c5:45:81:e1:9e:02:
         c2:06:05:18:9a:7a:ac:eb:7a:09:ad:c7:e4:2e:f9:cf:0c:41:
         1f:41:d5:99:77:2f:63:ac:1b:05:e2:54:90:eb:3b:23:53:ba:
         75:62:76:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 08:03:42 2025 by rpki-client