Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134332e302f32342d3234203d3e20323635363633.roa
File:                     34352e3137352e3134332e302f32342d3234203d3e20323635363633.roa (raw, json)
Hash identifier:          gPgoXF3Y+pfEhmn6RKHbP/Bp+wx709xxQF6XX2LWeOo=
Subject key identifier:   5E:5C:97:B7:0F:2D:0D:38:F6:4B:C9:8D:23:6C:30:39:48:86:AE:C3
Certificate issuer:       /CN=029141245BD9F1CE31BEF7964E181E44F17CE901
Certificate serial:       0BF49FFF4B52AA78CA315F16E163091857162A8E
Authority key identifier: 02:91:41:24:5B:D9:F1:CE:31:BE:F7:96:4E:18:1E:44:F1:7C:E9:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134332e302f32342d3234203d3e20323635363633.roa
Signing time:             Sat 13 Sep 2025 18:25:02 +0000
ROA not before:           Sat 13 Sep 2025 18:20:02 +0000
ROA not after:            Sat 12 Sep 2026 18:25:02 +0000
asID:                     265663
IP address blocks:        45.175.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 06:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f4:9f:ff:4b:52:aa:78:ca:31:5f:16:e1:63:09:18:57:16:2a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=029141245BD9F1CE31BEF7964E181E44F17CE901
        Validity
            Not Before: Sep 13 18:20:02 2025 GMT
            Not After : Sep 12 18:25:02 2026 GMT
        Subject: CN=5E5C97B70F2D0D38F64BC98D236C30394886AEC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:72:8b:fd:19:d7:e8:1f:ca:c3:aa:de:50:80:
                    59:2b:a9:fe:ab:e5:bd:71:92:80:b8:62:46:cc:9e:
                    2b:b1:fd:41:ad:a0:b7:0e:75:ed:5d:95:05:36:c2:
                    76:ab:f3:52:13:ae:7b:27:6f:3c:b2:46:ce:1e:6b:
                    2e:50:52:12:44:6e:b6:83:e5:3f:a8:89:04:1b:6d:
                    6a:0c:64:f9:b4:e0:98:29:de:b3:25:40:89:28:e0:
                    d4:c5:a7:72:f6:1c:0a:05:e8:22:bb:17:b2:97:9b:
                    10:f6:4a:aa:27:f1:15:49:33:fb:4c:a2:52:ab:66:
                    56:ff:93:da:61:ab:92:28:cc:da:cc:f6:ce:ed:a2:
                    60:06:45:a2:f6:1d:d6:0a:5f:81:32:fa:2c:38:9a:
                    2f:e8:14:c6:b4:80:eb:a5:ff:7e:ba:ec:2a:dc:8c:
                    e2:b4:6c:9d:43:52:a6:70:2f:88:8f:c7:79:e4:f9:
                    35:3c:38:df:ab:c0:78:b8:69:a4:63:0d:24:e6:03:
                    b3:90:8f:73:ee:8c:46:5b:19:62:1c:62:5b:05:b5:
                    41:10:91:37:b8:7d:f5:57:69:ba:3d:5e:53:25:1c:
                    98:02:bb:66:0e:db:85:65:86:55:fe:2c:26:b0:f8:
                    fa:79:b4:f3:be:80:02:d9:9b:44:8e:b9:64:7b:7d:
                    56:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5C:97:B7:0F:2D:0D:38:F6:4B:C9:8D:23:6C:30:39:48:86:AE:C3
            X509v3 Authority Key Identifier:
                keyid:02:91:41:24:5B:D9:F1:CE:31:BE:F7:96:4E:18:1E:44:F1:7C:E9:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134332e302f32342d3234203d3e20323635363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:ff:e4:38:3d:43:fc:84:32:75:28:6d:e3:61:01:85:58:06:
         e1:f3:0a:8a:0a:da:3d:31:e0:40:fa:b4:e4:73:3e:01:5d:5e:
         6a:5f:ab:15:36:67:fd:3f:2d:41:4d:bc:e9:a0:79:ee:6c:9f:
         28:ad:77:e9:81:5a:3e:7b:44:ce:96:70:6e:ee:cb:d4:0b:53:
         5f:67:cb:d3:d5:dc:57:7b:64:90:ff:33:e9:f1:1b:01:f0:26:
         4f:8e:93:3d:37:2b:0e:c3:ad:a5:39:1c:2d:e0:6b:26:27:b8:
         e9:22:21:fc:f9:a9:da:ad:34:a7:89:f7:f3:e7:af:f7:66:ca:
         76:be:b3:c0:c7:bd:e7:93:b5:60:75:27:4b:15:84:2e:ac:45:
         8d:5c:cf:93:4e:74:25:8d:41:d3:50:b6:9a:a1:71:71:3b:d2:
         b7:4c:68:11:c0:48:b4:07:86:b8:b3:58:46:e0:32:1d:52:ac:
         ad:b6:35:0d:ab:6b:d3:cf:19:d2:fd:be:dc:18:fa:40:28:f6:
         7a:dc:8a:dd:27:39:c0:20:85:81:69:40:7c:75:6e:0b:75:ed:
         ec:f0:22:a1:22:e8:b9:93:ad:3e:9f:87:34:d1:13:a3:b6:0d:
         fe:3d:90:64:e8:22:3d:53:0a:65:71:b5:0d:32:59:24:10:2e:
         76:63:e5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:13:48 2025 by rpki-client