Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/34352e3137372e3130382e302f32342d3234203d3e203237393531.roa
File:                     34352e3137372e3130382e302f32342d3234203d3e203237393531.roa (raw, json)
Hash identifier:          FQOijIFL5swjZ1bxEJkHU93lGq3iBteKK5DjHs4COIY=
Subject key identifier:   0D:05:EA:FB:29:7B:5D:3B:4E:29:D3:63:EF:93:9F:E7:84:9D:7D:03
Certificate issuer:       /CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
Certificate serial:       754475B96D9A022DF87860BB7D7ABF1084D24319
Authority key identifier: 8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/34352e3137372e3130382e302f32342d3234203d3e203237393531.roa
Signing time:             Wed 27 Aug 2025 17:35:01 +0000
ROA not before:           Wed 27 Aug 2025 17:30:01 +0000
ROA not after:            Wed 26 Aug 2026 17:35:01 +0000
asID:                     27951
IP address blocks:        45.177.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 07:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:44:75:b9:6d:9a:02:2d:f8:78:60:bb:7d:7a:bf:10:84:d2:43:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
        Validity
            Not Before: Aug 27 17:30:01 2025 GMT
            Not After : Aug 26 17:35:01 2026 GMT
        Subject: CN=0D05EAFB297B5D3B4E29D363EF939FE7849D7D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ec:ff:17:ef:55:ae:fc:d8:db:53:0a:77:bf:
                    2f:e9:f4:9f:63:d6:a0:3e:35:15:6a:ff:bb:a9:eb:
                    77:28:94:2f:97:1e:46:56:48:24:60:17:ba:14:9d:
                    32:b6:0e:aa:80:8c:54:4f:e0:24:09:82:43:98:ec:
                    07:2f:c5:cc:9c:7b:e0:54:6b:82:dd:c5:6d:7f:30:
                    15:99:dd:07:5c:82:7c:5b:20:5b:63:b1:8a:00:9f:
                    82:4e:d1:57:63:d0:85:7e:e5:d6:2c:0f:f0:46:e5:
                    f4:81:dd:93:92:82:2a:50:28:39:e4:8b:f7:07:d5:
                    41:12:41:0f:86:1f:b3:60:0e:aa:de:7c:0d:1b:2e:
                    9d:73:90:53:e0:42:df:2c:2c:6f:bc:3a:de:29:16:
                    af:56:ce:79:94:b7:60:d8:c5:41:56:65:ad:52:1b:
                    cf:f7:9c:0f:95:cf:81:fc:76:54:5f:b5:00:de:6c:
                    b3:01:3d:ce:3f:57:e4:d6:62:fe:26:1d:52:76:5c:
                    8c:1e:65:51:31:b7:a3:58:5b:02:d7:ac:8f:fd:09:
                    6c:e8:42:a3:d5:1a:72:73:33:62:2b:20:b5:ab:5a:
                    28:2c:8a:26:46:0c:ce:4b:52:6f:8e:0b:8a:6b:a3:
                    b6:f5:81:03:e5:a5:5e:9d:90:d7:8a:d1:95:5c:f7:
                    c5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:05:EA:FB:29:7B:5D:3B:4E:29:D3:63:EF:93:9F:E7:84:9D:7D:03
            X509v3 Authority Key Identifier:
                keyid:8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/34352e3137372e3130382e302f32342d3234203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:68:ef:1f:e1:b6:12:07:80:ce:4e:17:a7:44:8e:95:39:98:
         55:63:1d:36:f4:0c:a0:89:53:ac:62:11:39:e1:35:79:10:90:
         4f:8e:b7:79:49:7a:e3:51:46:5e:57:ae:ea:67:cb:10:87:d5:
         a6:89:76:81:d4:c5:38:21:cb:b1:a1:55:bf:0f:37:1a:da:cd:
         e0:a7:3a:13:9d:f6:d9:c4:a5:23:b8:d6:80:49:bb:77:9a:6d:
         8a:5b:da:df:a6:af:7e:64:78:2b:c4:08:62:84:38:2a:f8:39:
         22:aa:02:c6:7c:12:76:94:26:34:a0:5e:c6:e6:90:3c:f2:24:
         91:4a:55:71:5e:9a:e1:53:78:e0:da:00:e2:5a:14:1b:4e:ce:
         22:ab:32:8d:dc:60:9e:b4:1c:e8:6a:09:fe:b3:bd:c0:fa:8d:
         f9:9a:3b:b1:e1:86:c5:b1:56:bd:00:f4:2f:35:13:22:1c:18:
         bd:d7:2d:65:90:e2:64:9e:79:6b:7e:34:21:03:d0:0b:54:01:
         ca:f9:95:22:a6:2d:ed:31:58:87:dc:b6:48:00:fb:cd:71:68:
         c2:39:2d:ed:5a:ae:43:a1:53:ae:dd:a8:a9:6a:ed:44:45:9c:
         33:94:93:8a:e3:13:23:0f:90:2a:f3:74:4f:8a:ca:06:77:ee:
         ac:fb:89:c0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdUR1uW2aAi34eGC7fXq/EITSQxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY5NjQxRjM0MUIzMTc4MkFBRDQ0REU0MUVFMENEOTcw
RkY5RUNENTAeFw0yNTA4MjcxNzMwMDFaFw0yNjA4MjYxNzM1MDFaMDMxMTAvBgNV
BAMTKDBEMDVFQUZCMjk3QjVEM0I0RTI5RDM2M0VGOTM5RkU3ODQ5RDdEMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ7P8X71Wu/NjbUwp3vy/p9J9j
1qA+NRVq/7up63colC+XHkZWSCRgF7oUnTK2DqqAjFRP4CQJgkOY7Acvxcyce+BU
a4LdxW1/MBWZ3QdcgnxbIFtjsYoAn4JO0Vdj0IV+5dYsD/BG5fSB3ZOSgipQKDnk
i/cH1UESQQ+GH7NgDqrefA0bLp1zkFPgQt8sLG+8Ot4pFq9WznmUt2DYxUFWZa1S
G8/3nA+Vz4H8dlRftQDebLMBPc4/V+TWYv4mHVJ2XIweZVExt6NYWwLXrI/9CWzo
QqPVGnJzM2IrILWrWigsiiZGDM5LUm+OC4pro7b1gQPlpV6dkNeK0ZVc98W1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUDQXq+yl7XTtOKdNj75Of54SdfQMwHwYDVR0j
BBgwFoAUj5ZB80GzF4Kq1E3kHuDNlw/57NUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CM0QzOUJBNEI4MUEzQzAyQjg1NENDMjQ3RjRDRkU1MzUy
NUJGMjQyM0YyOThCOEM1MzVBMDY1QkJGMDkxOTkwLzAvOEY5NjQxRjM0MUIzMTc4
MkFBRDQ0REU0MUVFMENEOTcwRkY5RUNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84Rjk2NDFGMzQxQjMxNzgyQUFE
NDRERTQxRUUwQ0Q5NzBGRjlFQ0Q1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjNEMzlCQTRCODFBM0MwMkI4NTRDQzI0N0Y0Q0ZFNTM1MjVCRjI0MjNG
Mjk4QjhDNTM1QTA2NUJCRjA5MTk5MC8wLzM0MzUyZTMxMzczNzJlMzEzMDM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM5MzUzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2xbDAN
BgkqhkiG9w0BAQsFAAOCAQEAHmjvH+G2EgeAzk4Xp0SOlTmYVWMdNvQMoIlTrGIR
OeE1eRCQT463eUl641FGXleu6mfLEIfVpol2gdTFOCHLsaFVvw83GtrN4Kc6E532
2cSlI7jWgEm7d5ptilva36avfmR4K8QIYoQ4Kvg5IqoCxnwSdpQmNKBexuaQPPIk
kUpVcV6a4VN44NoA4loUG07OIqsyjdxgnrQc6GoJ/rO9wPqN+Zo7seGGxbFWvQD0
LzUTIhwYvdctZZDiZJ55a340IQPQC1QByvmVIqYt7TFYh9y2SAD7zXFowjkt7Vqu
Q6FTrt2oqWrtREWcM5STiuMTIw+QKvN0T4rKBnfurPuJwA==
-----END CERTIFICATE-----
Generated at Mon Sep 15 06:10:35 2025 by rpki-client