Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/34352e3137302e3138342e302f32322d3234203d3e20323637373636.roa
File:                     34352e3137302e3138342e302f32322d3234203d3e20323637373636.roa (raw, json)
Hash identifier:          CE+Tcuqo1I6rFup1fzwX2GpOkareDHfW8bqBQwIMlRs=
Subject key identifier:   2C:51:72:35:42:B3:87:80:C9:C0:CF:BC:3F:B4:D2:B0:8F:9C:00:3D
Certificate issuer:       /CN=42EE9B624E098B952E8E073D8C62609958DB7CC3
Certificate serial:       48BE06A33AA2A5072437AB6FC20180BF1A6539FA
Authority key identifier: 42:EE:9B:62:4E:09:8B:95:2E:8E:07:3D:8C:62:60:99:58:DB:7C:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/34352e3137302e3138342e302f32322d3234203d3e20323637373636.roa
Signing time:             Tue 22 Jul 2025 14:26:13 +0000
ROA not before:           Tue 22 Jul 2025 14:21:13 +0000
ROA not after:            Tue 21 Jul 2026 14:26:13 +0000
asID:                     267766
IP address blocks:        45.170.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:be:06:a3:3a:a2:a5:07:24:37:ab:6f:c2:01:80:bf:1a:65:39:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42EE9B624E098B952E8E073D8C62609958DB7CC3
        Validity
            Not Before: Jul 22 14:21:13 2025 GMT
            Not After : Jul 21 14:26:13 2026 GMT
        Subject: CN=2C51723542B38780C9C0CFBC3FB4D2B08F9C003D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:9d:b2:b0:87:6d:74:cd:9f:bd:db:0b:00:
                    c0:4e:b4:c3:72:f1:38:b2:ae:0d:64:0b:33:79:61:
                    ad:fa:6a:0e:18:58:ad:6c:b8:ca:50:c5:39:4d:16:
                    f9:fb:1a:4e:64:b3:68:4c:59:35:2f:63:5a:88:c2:
                    5c:4e:c7:93:39:3a:97:61:8d:17:cd:3b:0e:4b:b9:
                    f1:55:ad:c2:9f:d4:d1:1b:99:24:be:03:cf:67:55:
                    bd:34:ea:d5:3a:7b:c4:ba:a4:9a:70:35:97:30:a0:
                    17:05:77:57:b6:03:59:9f:c6:ef:62:9b:ff:6e:f5:
                    04:69:63:e3:19:89:06:4b:e7:8e:96:01:c6:e8:5c:
                    f9:0f:14:aa:bc:38:96:ef:1e:a0:19:6f:ba:0e:49:
                    10:71:1f:c2:ec:52:45:37:43:56:f6:03:41:bf:ad:
                    41:64:42:ab:2e:01:f9:05:6f:36:be:c1:a0:e6:5b:
                    c1:ee:c1:41:6b:9c:4c:b2:e9:26:20:57:32:fe:02:
                    8b:fe:05:6a:79:54:91:74:a5:be:06:a6:b3:d4:e7:
                    e8:98:9b:fd:a1:07:0b:4a:97:bf:4e:a6:77:12:dc:
                    be:90:4b:41:90:89:c3:4d:3c:dc:29:0f:4f:0e:ae:
                    25:55:d4:ed:66:86:d8:0c:f6:a9:d1:88:33:02:70:
                    4c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:51:72:35:42:B3:87:80:C9:C0:CF:BC:3F:B4:D2:B0:8F:9C:00:3D
            X509v3 Authority Key Identifier:
                keyid:42:EE:9B:62:4E:09:8B:95:2E:8E:07:3D:8C:62:60:99:58:DB:7C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/34352e3137302e3138342e302f32322d3234203d3e20323637373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:b2:9c:a6:2c:8a:22:57:16:60:cf:74:25:62:6b:07:3d:14:
         62:99:d1:05:08:9c:03:b7:8c:06:49:80:b6:3b:52:8e:45:11:
         f2:4c:85:24:ab:a6:01:3a:1d:49:0d:85:3c:a4:81:57:53:05:
         04:f7:13:5c:91:b0:06:b3:e6:d2:d8:b8:4e:1e:e5:87:3a:10:
         ad:73:5f:87:f6:59:e0:38:84:90:9d:13:be:38:fd:31:2d:df:
         10:7b:9b:8e:88:ad:c8:7a:c5:01:b9:1c:f1:ff:c9:5c:9f:82:
         9f:49:bd:a4:ec:35:9c:db:85:e5:b8:1d:01:d6:68:e4:7c:09:
         25:9b:d0:c0:16:70:a8:e7:e5:e8:b7:33:4b:eb:b2:3d:2a:5d:
         0c:eb:50:83:4b:cf:e6:ce:98:0c:c4:58:f7:ef:b8:8b:e4:b6:
         a4:e0:45:b2:99:a0:a9:2c:09:fa:0e:d2:94:53:9b:be:6f:33:
         ae:b1:59:e6:c3:b6:c4:41:06:49:be:3b:83:6a:73:cb:b1:b6:
         ed:fe:78:34:e8:50:b6:55:f0:c8:8b:61:9e:d9:ff:a1:5d:8a:
         6e:31:81:39:0d:8c:28:f9:fe:24:91:c8:82:a4:26:05:65:f7:
         29:0b:be:d0:9e:09:35:f4:7c:73:cf:1b:b5:51:ae:20:fb:3a:
         88:d9:1a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:26:53 2025 by rpki-client