Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134322e302f32332d3233203d3e20323635363633.roa
File:                     34352e3137352e3134322e302f32332d3233203d3e20323635363633.roa (raw, json)
Hash identifier:          7I0azZLKrY2XDm6HOa7zqokPhTuANt807xFP7WpnOb8=
Subject key identifier:   09:C9:C2:CE:23:01:16:8A:E2:7C:02:D6:47:94:EE:6D:A0:63:8B:EB
Certificate issuer:       /CN=029141245BD9F1CE31BEF7964E181E44F17CE901
Certificate serial:       592A09F009FB4DB87FE6F2CBBF208D0624FD9EFE
Authority key identifier: 02:91:41:24:5B:D9:F1:CE:31:BE:F7:96:4E:18:1E:44:F1:7C:E9:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134322e302f32332d3233203d3e20323635363633.roa
Signing time:             Sat 13 Sep 2025 18:25:00 +0000
ROA not before:           Sat 13 Sep 2025 18:20:00 +0000
ROA not after:            Sat 12 Sep 2026 18:25:00 +0000
asID:                     265663
IP address blocks:        45.175.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 06:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2a:09:f0:09:fb:4d:b8:7f:e6:f2:cb:bf:20:8d:06:24:fd:9e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=029141245BD9F1CE31BEF7964E181E44F17CE901
        Validity
            Not Before: Sep 13 18:20:00 2025 GMT
            Not After : Sep 12 18:25:00 2026 GMT
        Subject: CN=09C9C2CE2301168AE27C02D64794EE6DA0638BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:13:c0:8e:4a:c4:61:80:88:b0:ff:f8:62:27:
                    27:ca:65:46:49:97:fd:33:8b:6a:c7:cd:6f:3a:1e:
                    04:4e:2b:f6:80:aa:29:85:11:05:97:f7:9f:41:b0:
                    1b:16:e8:91:fb:2c:70:08:1d:29:d8:ec:4a:51:40:
                    f2:a6:dd:24:cd:c1:43:26:32:2e:cc:21:46:ca:b1:
                    b8:7d:ad:1d:d7:81:e3:03:4d:1a:d2:c8:4f:a1:de:
                    fd:45:62:e5:3f:82:06:02:cd:72:aa:0e:a6:c7:d0:
                    2d:c8:f6:6e:8a:30:6e:4d:09:fa:f6:35:1c:e4:b8:
                    d1:c7:e5:a6:14:ee:4c:37:a4:87:da:b8:37:c4:aa:
                    5d:d5:bd:65:b0:b8:8f:a4:60:60:99:b3:09:3f:8b:
                    6e:12:cb:8b:4f:7d:03:72:9a:ec:15:86:e7:e4:17:
                    e2:bc:95:27:4f:08:8f:59:5f:56:d7:7d:e4:1b:af:
                    de:43:99:1f:c0:9c:6a:32:ea:5f:41:7e:61:99:b7:
                    0e:15:7a:47:8d:5f:60:88:76:b5:b5:46:4d:9c:98:
                    7d:8f:21:8c:18:56:db:c3:97:ed:45:bf:17:e9:50:
                    26:1b:4f:42:a6:83:e0:5e:0c:bc:a9:db:29:03:d6:
                    fc:19:d0:c6:bf:dd:e2:13:e2:85:1e:e1:49:b0:61:
                    49:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C9:C2:CE:23:01:16:8A:E2:7C:02:D6:47:94:EE:6D:A0:63:8B:EB
            X509v3 Authority Key Identifier:
                keyid:02:91:41:24:5B:D9:F1:CE:31:BE:F7:96:4E:18:1E:44:F1:7C:E9:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134322e302f32332d3233203d3e20323635363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:75:b4:0d:50:bd:20:89:21:76:b3:0c:b4:bb:25:2a:6c:c0:
         85:f6:2a:75:76:83:f1:2d:88:2a:9d:af:26:84:ed:4a:20:b4:
         71:05:1e:91:11:15:fb:21:85:f4:a1:c5:60:09:21:c5:77:1b:
         4f:a2:30:07:a7:81:55:46:e3:74:25:96:8b:6a:a8:ab:9c:67:
         ab:00:03:b3:f7:d3:e8:81:2a:65:e5:9f:44:bf:99:34:e8:03:
         07:1b:80:7f:d7:59:8a:f3:9f:c8:e4:53:6f:6a:f5:a5:36:c8:
         31:76:60:8b:06:d4:3a:d4:9c:10:07:61:74:8b:f7:8d:2a:74:
         ab:6f:d0:bd:bf:16:d0:14:07:ae:29:8a:e2:51:14:8c:fe:39:
         e2:85:37:81:48:9a:7b:32:e9:f9:d0:38:d4:84:7c:6c:2a:1b:
         57:a5:dc:65:cb:9c:d9:ec:45:54:46:7f:15:44:5f:b9:8b:49:
         34:cf:23:c7:2e:2d:90:33:c5:49:d0:ee:27:fa:6b:e3:e9:99:
         45:00:27:b1:3f:19:e0:01:b4:aa:af:8a:1e:ef:eb:a9:a8:04:
         ce:43:73:cf:27:dc:9f:e7:7b:0d:f8:35:07:c6:89:a0:8f:d6:
         40:77:65:86:fd:48:6d:ce:ce:c1:02:d2:d4:a2:42:8d:5d:61:
         b3:a3:42:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:52:54 2025 by rpki-client