Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81AEA0C3BE79184F5FD4BA05DC11E6C44E187E4DBB55F49B62AC3973D83D10D2/0/34352e3233352e3137322e302f32322d3234203d3e203238333934.roa
File:                     34352e3233352e3137322e302f32322d3234203d3e203238333934.roa (raw, json)
Hash identifier:          aaknzrLlSGjRv6Cj/MiaqShDYdb24dtT/9ikubAVAwY=
Subject key identifier:   29:9D:C0:72:C1:F7:89:C9:54:EC:8E:CE:8C:B4:14:F4:94:76:16:6B
Certificate issuer:       /CN=F8D2CD826F48FFE7ECEA8EC44B680DFE2A21F8CC
Certificate serial:       31AB898F917165B97AB857C29D18AB27974F3F97
Authority key identifier: F8:D2:CD:82:6F:48:FF:E7:EC:EA:8E:C4:4B:68:0D:FE:2A:21:F8:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8D2CD826F48FFE7ECEA8EC44B680DFE2A21F8CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81AEA0C3BE79184F5FD4BA05DC11E6C44E187E4DBB55F49B62AC3973D83D10D2/0/34352e3233352e3137322e302f32322d3234203d3e203238333934.roa
Signing time:             Tue 22 Jul 2025 01:26:10 +0000
ROA not before:           Tue 22 Jul 2025 01:21:10 +0000
ROA not after:            Tue 21 Jul 2026 01:26:10 +0000
asID:                     28394
IP address blocks:        45.235.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/81AEA0C3BE79184F5FD4BA05DC11E6C44E187E4DBB55F49B62AC3973D83D10D2/0/F8D2CD826F48FFE7ECEA8EC44B680DFE2A21F8CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/81AEA0C3BE79184F5FD4BA05DC11E6C44E187E4DBB55F49B62AC3973D83D10D2/0/F8D2CD826F48FFE7ECEA8EC44B680DFE2A21F8CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8D2CD826F48FFE7ECEA8EC44B680DFE2A21F8CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ab:89:8f:91:71:65:b9:7a:b8:57:c2:9d:18:ab:27:97:4f:3f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8D2CD826F48FFE7ECEA8EC44B680DFE2A21F8CC
        Validity
            Not Before: Jul 22 01:21:10 2025 GMT
            Not After : Jul 21 01:26:10 2026 GMT
        Subject: CN=299DC072C1F789C954EC8ECE8CB414F49476166B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:80:0c:56:70:4c:16:0a:69:48:f9:77:13:
                    df:97:e5:38:3b:10:79:b3:e9:ec:24:e4:f7:1e:7e:
                    fd:d5:25:a4:09:a1:43:da:c3:b8:ee:e8:fb:94:e2:
                    cd:56:3c:ee:0e:67:3f:85:c3:83:7a:e8:f5:65:92:
                    77:e4:d9:3a:b4:3c:c1:af:a7:1f:6c:0b:19:b4:71:
                    9e:ec:68:7f:bb:41:7c:7a:28:8d:fe:b3:9e:75:3e:
                    e2:dd:52:ca:01:2f:05:8b:85:1e:e0:08:e0:11:ff:
                    b4:e4:18:7a:07:9c:c7:d4:01:b1:41:15:43:05:31:
                    0b:26:71:65:57:51:1a:13:fa:c8:2c:b1:30:03:d4:
                    bd:a0:b2:b0:57:f2:c0:cb:97:ab:d2:a7:2d:6b:49:
                    85:f7:79:bb:43:2d:c3:cd:d9:fa:17:6a:75:29:b2:
                    7c:9a:76:e8:d5:5c:9e:7e:dc:fd:48:d4:1a:3a:6e:
                    0c:d8:ca:50:d3:2f:f9:cb:56:c5:ee:18:45:12:46:
                    1f:89:54:7f:3c:47:06:d9:9f:6e:25:89:2f:51:04:
                    89:ed:c8:20:5c:87:d5:e8:96:e9:bc:c2:b1:14:c0:
                    1b:5e:9c:ac:5b:ce:bc:4f:77:cb:f9:29:f5:3a:7b:
                    66:45:b5:43:f4:7e:58:a3:bb:5e:69:79:5d:16:c6:
                    67:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9D:C0:72:C1:F7:89:C9:54:EC:8E:CE:8C:B4:14:F4:94:76:16:6B
            X509v3 Authority Key Identifier:
                keyid:F8:D2:CD:82:6F:48:FF:E7:EC:EA:8E:C4:4B:68:0D:FE:2A:21:F8:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81AEA0C3BE79184F5FD4BA05DC11E6C44E187E4DBB55F49B62AC3973D83D10D2/0/F8D2CD826F48FFE7ECEA8EC44B680DFE2A21F8CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8D2CD826F48FFE7ECEA8EC44B680DFE2A21F8CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81AEA0C3BE79184F5FD4BA05DC11E6C44E187E4DBB55F49B62AC3973D83D10D2/0/34352e3233352e3137322e302f32322d3234203d3e203238333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:7b:e9:34:8c:30:92:cf:80:93:d9:7d:f5:8b:40:23:02:3e:
         ab:f9:5d:6c:1f:ca:ca:32:0f:5c:dc:a0:5f:04:9d:41:6e:50:
         ee:dc:82:0f:84:d1:25:ba:b5:53:9c:5b:c9:16:45:12:a5:7a:
         ef:90:5e:94:28:8a:15:7d:0c:28:fb:c6:c9:81:8a:f5:99:78:
         41:e4:3c:30:4a:17:60:c4:83:0b:74:7b:d0:f0:ff:16:dc:1c:
         71:83:78:81:1f:4c:e8:48:93:66:9e:7b:70:66:36:36:a4:3b:
         08:d5:7a:52:b2:37:4d:7c:c0:27:08:77:ee:84:55:6f:15:21:
         6b:c2:27:dc:26:7d:02:b0:84:d6:e9:18:37:64:53:40:ae:fe:
         0a:98:d9:dd:05:c9:c7:3d:8c:c9:a3:74:4b:6e:d1:c5:8d:fa:
         d8:81:d9:52:8c:0d:ec:fa:a4:7f:02:66:79:b5:47:dd:16:a1:
         08:16:c6:e4:73:0b:70:26:d2:05:31:6e:18:f0:0f:90:cb:01:
         01:ed:60:17:8f:a5:39:1c:3f:d3:f9:12:3a:43:bc:1b:fe:ad:
         61:2b:37:c9:b3:14:eb:91:8a:91:fb:64:9c:e1:df:0f:f1:0a:
         71:6d:fb:72:91:ba:63:bb:70:47:6f:a7:2f:ae:4e:16:d1:68:
         d2:a2:04:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 14:11:00 2025 by rpki-client