Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/34352e3233352e39382e302f32342d3234203d3e20323636373737.roa
File:                     34352e3233352e39382e302f32342d3234203d3e20323636373737.roa (raw, json)
Hash identifier:          GQKRX3iJ5wUfQTr8OZxev9frcNoingfvIqFL8dT0bZE=
Subject key identifier:   B8:63:CC:58:2C:C3:A2:D7:7D:59:8E:C5:25:71:B7:86:66:DC:E4:EF
Certificate issuer:       /CN=E99008F3C333627E9F8C6939370696F7049C22EB
Certificate serial:       23F2D12938003B8384EFF1FE1D9A9117AA9B3EAB
Authority key identifier: E9:90:08:F3:C3:33:62:7E:9F:8C:69:39:37:06:96:F7:04:9C:22:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/34352e3233352e39382e302f32342d3234203d3e20323636373737.roa
Signing time:             Wed 03 Sep 2025 16:42:51 +0000
ROA not before:           Wed 03 Sep 2025 16:37:51 +0000
ROA not after:            Wed 02 Sep 2026 16:42:51 +0000
asID:                     266777
IP address blocks:        45.235.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f2:d1:29:38:00:3b:83:84:ef:f1:fe:1d:9a:91:17:aa:9b:3e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E99008F3C333627E9F8C6939370696F7049C22EB
        Validity
            Not Before: Sep  3 16:37:51 2025 GMT
            Not After : Sep  2 16:42:51 2026 GMT
        Subject: CN=B863CC582CC3A2D77D598EC52571B78666DCE4EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9a:5f:9d:6b:52:9f:98:74:05:0c:b4:ee:26:
                    3e:2e:71:57:27:2f:9b:9f:9a:b9:3f:e2:4d:84:89:
                    a8:d2:8b:7a:84:c5:c1:fb:f6:09:d8:98:eb:d0:18:
                    d1:b8:fb:3d:c7:61:6e:9e:95:50:b6:7c:03:8d:c5:
                    ca:63:57:c2:97:f3:54:91:e1:7b:00:fa:d1:f1:c3:
                    d0:a9:13:42:b3:28:e5:b4:b2:4a:d7:26:71:99:9d:
                    3a:d2:77:95:76:34:74:0d:a8:56:2a:75:b8:1f:48:
                    73:5a:5e:51:bc:c5:7a:2b:97:9c:86:d9:97:6d:54:
                    64:79:1b:92:3e:09:44:37:b9:d9:c0:1b:20:7b:35:
                    12:4d:8d:72:6a:c5:7c:7c:ad:6a:f9:a3:6d:e2:fe:
                    18:60:53:80:c8:28:6c:1c:6f:7e:79:ad:7b:2f:3b:
                    be:a3:96:98:62:aa:a6:d9:4f:6c:cc:33:f7:29:de:
                    d2:fb:e8:8b:90:31:77:2e:17:7a:f9:2e:2c:4e:38:
                    73:28:34:57:53:7c:e6:35:69:4e:97:5b:eb:60:09:
                    97:58:22:36:73:c5:00:96:34:30:29:87:62:6c:6c:
                    99:58:ca:bc:a3:28:6d:95:14:5d:16:9e:68:84:26:
                    1d:ba:6b:61:25:40:40:7d:77:6c:3e:d5:0c:93:0a:
                    47:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:63:CC:58:2C:C3:A2:D7:7D:59:8E:C5:25:71:B7:86:66:DC:E4:EF
            X509v3 Authority Key Identifier:
                keyid:E9:90:08:F3:C3:33:62:7E:9F:8C:69:39:37:06:96:F7:04:9C:22:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/34352e3233352e39382e302f32342d3234203d3e20323636373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:19:61:86:eb:c5:ef:79:06:bc:35:89:bd:0f:dc:e2:9d:00:
         49:8e:a2:5b:a1:3a:2c:92:ea:7e:f4:1c:5f:93:a5:53:3c:9e:
         ec:82:ac:db:84:d5:31:dc:02:40:fc:32:3c:2f:1d:42:e0:d6:
         25:48:18:a2:ca:9c:59:93:6a:35:9b:21:42:e7:32:01:e3:e9:
         ee:3b:d1:e7:b7:c7:76:40:4c:bc:00:68:7c:39:5c:c1:86:6d:
         d4:6b:41:0a:0f:ab:4f:b2:c0:4b:92:0d:58:a0:4e:84:dd:af:
         81:4a:c9:c8:94:e8:21:97:22:4d:c5:cc:ef:c6:ed:21:0e:bd:
         74:e4:30:3c:1f:4d:df:47:5a:23:ae:1b:09:f8:73:95:60:c1:
         ef:7a:f9:a7:82:d6:4c:d1:df:d2:73:a2:fa:82:11:c0:c1:d5:
         79:fe:b4:9f:66:16:8e:08:b8:e5:53:d3:cf:fe:34:8f:6e:fb:
         cc:e9:09:4d:ad:97:1f:05:14:f3:81:99:ed:68:b6:1a:77:37:
         a7:6a:05:e5:2e:de:03:71:d7:dc:4e:1a:bd:be:ca:a1:15:3d:
         b0:08:1c:28:38:6a:92:20:6e:7f:a9:f6:33:10:bb:54:3d:f4:
         03:c9:76:f7:6b:0c:e3:4e:2f:c3:ae:b6:d8:d4:b3:f6:ca:f9:
         5a:1c:72:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 11:08:07 2025 by rpki-client