Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/34352e3137302e3138372e302f32342d3234203d3e20323637373636.roa
File:                     34352e3137302e3138372e302f32342d3234203d3e20323637373636.roa (raw, json)
Hash identifier:          I1ZI9zIc1cOdTx0YEX+jHlq4xXVfXmq9YBLoQv6AiF0=
Subject key identifier:   09:94:82:02:2A:42:1D:78:EB:04:4F:6D:E1:E6:9C:81:FF:20:07:1D
Certificate issuer:       /CN=42EE9B624E098B952E8E073D8C62609958DB7CC3
Certificate serial:       147D03285222396399BCE8E7B2E5C8E0EB5C0B25
Authority key identifier: 42:EE:9B:62:4E:09:8B:95:2E:8E:07:3D:8C:62:60:99:58:DB:7C:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/34352e3137302e3138372e302f32342d3234203d3e20323637373636.roa
Signing time:             Tue 22 Jul 2025 02:26:11 +0000
ROA not before:           Tue 22 Jul 2025 02:21:11 +0000
ROA not after:            Tue 21 Jul 2026 02:26:11 +0000
asID:                     267766
IP address blocks:        45.170.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7d:03:28:52:22:39:63:99:bc:e8:e7:b2:e5:c8:e0:eb:5c:0b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42EE9B624E098B952E8E073D8C62609958DB7CC3
        Validity
            Not Before: Jul 22 02:21:11 2025 GMT
            Not After : Jul 21 02:26:11 2026 GMT
        Subject: CN=099482022A421D78EB044F6DE1E69C81FF20071D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:04:bd:4c:9f:a0:50:e1:52:a7:31:09:3a:3f:
                    c8:18:07:6e:2f:b1:19:a7:12:c0:e5:63:ac:c0:37:
                    8b:0a:2b:8b:5f:b8:5f:0c:8e:85:d7:b0:0d:7b:45:
                    4f:d5:08:36:05:ff:fa:99:7c:77:fc:b4:31:cf:43:
                    62:9b:b4:ed:ec:3c:e5:ac:b3:4e:34:00:97:ef:af:
                    b7:da:2c:93:bd:a3:93:e1:c9:3f:9b:60:44:5a:c9:
                    8c:c4:32:8c:a4:b4:da:db:c2:59:0b:01:fd:53:fc:
                    3a:fe:c7:91:26:6d:22:c5:f6:ad:b3:3c:71:4f:82:
                    9a:ac:22:6c:46:07:cd:15:9f:f6:36:6e:e8:8d:67:
                    65:d0:76:f6:6f:df:7d:9e:c8:9a:9d:dd:b1:78:eb:
                    05:c0:4c:e3:01:db:1e:5c:c3:5d:87:50:ee:dc:41:
                    a5:47:3b:89:83:a9:cd:1a:44:50:e4:c3:91:79:d2:
                    ab:07:0f:f4:69:b9:52:26:79:e4:87:09:9d:8d:e2:
                    7d:c2:45:c6:d0:d4:93:97:0c:d8:ed:71:16:09:ea:
                    c1:12:1a:81:32:a8:ef:f0:5f:a3:50:a1:e0:89:17:
                    be:60:57:1e:47:dc:88:f1:02:18:3b:7d:01:1c:1e:
                    51:2e:aa:67:ec:0f:13:80:1e:f5:34:90:f0:43:d9:
                    6e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:94:82:02:2A:42:1D:78:EB:04:4F:6D:E1:E6:9C:81:FF:20:07:1D
            X509v3 Authority Key Identifier:
                keyid:42:EE:9B:62:4E:09:8B:95:2E:8E:07:3D:8C:62:60:99:58:DB:7C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/34352e3137302e3138372e302f32342d3234203d3e20323637373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:be:b0:36:6e:11:0c:cd:d7:bd:34:d6:4f:bc:66:9d:aa:b6:
         b7:80:e2:7c:f9:0d:7c:f2:ee:e1:d6:69:92:94:cf:8d:2e:1e:
         92:96:b6:2f:b2:cf:26:45:3c:9f:86:04:55:0f:5b:0e:44:dd:
         d3:73:32:cd:1f:43:76:c2:22:63:87:5c:86:0c:56:1e:6e:03:
         e5:de:21:50:61:cb:27:0d:ce:26:4a:04:82:91:87:ed:6b:bb:
         c5:ca:4f:39:7e:76:74:f5:af:20:bd:f1:8b:26:bc:dc:0c:d9:
         5a:2f:d0:59:6a:70:7f:d0:61:2b:19:e4:f1:df:29:29:56:b2:
         a0:f3:b7:07:78:4e:ea:26:9f:cc:d6:83:45:72:d3:3b:b9:d2:
         76:c9:70:54:30:e8:a1:3b:0e:30:a4:ff:6c:9c:ae:0c:e0:e0:
         50:63:e7:f4:ce:7a:55:7e:41:79:81:0f:b7:d8:ca:76:5a:02:
         a6:5c:d1:2b:14:b4:c4:6d:6c:f8:06:ff:56:f6:3d:50:56:b4:
         de:11:9f:87:bc:c5:71:7c:81:1b:f7:36:d3:a0:ed:dc:56:16:
         85:da:19:f0:65:0d:9d:8c:ff:53:bb:82:54:3f:db:76:32:4c:
         48:9c:bb:9a:92:f8:01:44:7f:5c:db:62:c2:75:fa:73:45:34:
         bb:23:fb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:26:48 2025 by rpki-client