Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/34352e3137382e33372e302f32342d3234203d3e203232373234.roa
File:                     34352e3137382e33372e302f32342d3234203d3e203232373234.roa (raw, json)
Hash identifier:          0HhnYrRRVi7CHJEvS9xN8EZDppFHk6whkimhveshWDc=
Subject key identifier:   2E:06:A9:AE:E8:67:C6:3D:82:AC:CA:41:8D:5A:81:C0:A6:C0:E7:EA
Certificate issuer:       /CN=3214A9089E97D5F53B714A9F9256A933E4595E53
Certificate serial:       5850801E718B7082B04FB25E808D2A6B7F0939B2
Authority key identifier: 32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/34352e3137382e33372e302f32342d3234203d3e203232373234.roa
Signing time:             Mon 11 Aug 2025 21:35:28 +0000
ROA not before:           Mon 11 Aug 2025 21:30:28 +0000
ROA not after:            Mon 10 Aug 2026 21:35:28 +0000
asID:                     22724
IP address blocks:        45.178.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 05:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:50:80:1e:71:8b:70:82:b0:4f:b2:5e:80:8d:2a:6b:7f:09:39:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3214A9089E97D5F53B714A9F9256A933E4595E53
        Validity
            Not Before: Aug 11 21:30:28 2025 GMT
            Not After : Aug 10 21:35:28 2026 GMT
        Subject: CN=2E06A9AEE867C63D82ACCA418D5A81C0A6C0E7EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:38:c9:79:1e:32:a2:e8:74:71:eb:79:18:
                    76:6c:1a:f9:f3:c7:e2:ed:2b:22:72:ad:69:54:f6:
                    fe:ba:1d:2b:bf:00:c8:b4:69:ca:df:cc:07:b8:1f:
                    bd:02:a5:88:9d:08:76:89:42:3e:dd:2a:da:04:a7:
                    cb:2b:41:c6:e5:fa:66:73:c5:80:58:e0:1c:60:82:
                    a0:d8:13:92:dd:a3:f3:79:3e:ad:e9:3d:ce:46:92:
                    b2:60:04:ed:ee:7e:d4:a9:91:cd:b4:f8:e1:17:70:
                    da:0d:fd:c5:a5:67:73:20:0c:90:a7:a2:fe:15:a9:
                    75:52:3a:b0:c4:7f:13:d4:93:c0:4a:a8:3e:c3:f6:
                    75:78:42:2c:a7:ab:a9:da:1e:19:ee:ad:4c:02:02:
                    bf:8f:b9:42:50:a7:6f:c0:49:55:7c:61:b0:2a:af:
                    8f:fd:20:d2:57:45:05:20:b1:32:9d:43:38:e1:94:
                    a4:14:72:d3:8c:3c:6b:44:61:9b:51:68:75:98:f2:
                    64:d5:cb:fe:31:c4:8c:84:4a:a7:29:e1:b7:c0:22:
                    37:0a:b5:db:06:62:cd:f8:ed:15:6e:b3:f9:3a:34:
                    56:87:04:df:b0:14:99:48:bb:2d:6a:2d:d9:54:75:
                    4f:ca:62:15:0f:68:f8:76:21:05:3a:6e:5f:66:d2:
                    8f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:06:A9:AE:E8:67:C6:3D:82:AC:CA:41:8D:5A:81:C0:A6:C0:E7:EA
            X509v3 Authority Key Identifier:
                keyid:32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/34352e3137382e33372e302f32342d3234203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e7:66:94:42:9a:80:2a:8d:9c:ed:39:25:dd:99:0e:57:6b:0f:
         9c:3a:0f:dc:51:31:94:43:7f:a1:0d:91:4f:c2:fb:e5:bf:2c:
         7e:af:92:82:46:c1:0c:78:02:2f:f1:b9:dd:c2:d1:a7:bc:c3:
         3b:bf:a6:4f:5c:28:e0:77:c6:db:bc:3e:79:4b:10:59:13:18:
         9a:c4:5b:44:62:0d:e9:f5:63:15:01:b3:d6:fb:98:33:6e:52:
         51:2c:c8:2f:ad:22:a6:fd:60:e0:0b:5b:a5:d3:48:ee:f2:92:
         4d:ef:c4:7e:be:cf:c8:d9:ea:c6:d8:b2:1e:bc:fb:c1:bf:56:
         ff:ba:83:d4:b0:15:73:b0:4d:e0:a4:f6:63:85:d1:79:fc:b1:
         ad:a3:54:bd:ab:72:d3:1d:fd:4a:7a:92:93:bd:51:ab:f9:95:
         ff:6e:32:0b:2c:1c:1b:8e:f2:96:8b:37:a4:36:d0:bb:3e:cf:
         14:e5:13:45:06:1f:f0:ea:63:c4:d5:67:c3:d9:e8:d0:50:84:
         15:be:a8:11:00:46:2b:71:06:e0:39:26:61:29:cc:e9:ea:27:
         76:65:bc:f7:30:5d:81:73:7c:15:e9:fb:d0:b4:6f:31:d2:ba:
         57:a2:80:78:fb:4a:e4:bc:54:b4:02:d7:29:a3:77:2a:e9:25:
         ec:e9:87:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:29:11 2025 by rpki-client