Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/34352e3232392e3234372e302f32342d3234203d3e203237393031.roa
File:                     34352e3232392e3234372e302f32342d3234203d3e203237393031.roa (raw, json)
Hash identifier:          Jp2WBtRqZzTYkTyTx/f7noZ8XoV8iDrnudRxl96JhhY=
Subject key identifier:   DC:A0:C9:4B:67:F8:61:3D:72:BC:2D:50:A9:2F:B2:BB:2E:07:3A:99
Certificate issuer:       /CN=8EEE8A60C988421683DBC2FDDE169C9AA912EF90
Certificate serial:       101F699773A3094B651766EFC5DF48EFDEE22361
Authority key identifier: 8E:EE:8A:60:C9:88:42:16:83:DB:C2:FD:DE:16:9C:9A:A9:12:EF:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/34352e3232392e3234372e302f32342d3234203d3e203237393031.roa
Signing time:             Fri 04 Jul 2025 15:24:36 +0000
ROA not before:           Fri 04 Jul 2025 15:19:36 +0000
ROA not after:            Fri 03 Jul 2026 15:24:36 +0000
asID:                     27901
IP address blocks:        45.229.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:1f:69:97:73:a3:09:4b:65:17:66:ef:c5:df:48:ef:de:e2:23:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EEE8A60C988421683DBC2FDDE169C9AA912EF90
        Validity
            Not Before: Jul  4 15:19:36 2025 GMT
            Not After : Jul  3 15:24:36 2026 GMT
        Subject: CN=DCA0C94B67F8613D72BC2D50A92FB2BB2E073A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e6:93:46:01:91:02:db:92:36:5c:c7:15:7e:
                    3f:27:f1:a6:00:26:d9:e0:39:d6:53:42:0c:8d:00:
                    0c:de:45:29:26:6b:cb:c1:bf:9e:43:c5:ce:5d:d4:
                    4e:0f:56:27:e7:f0:45:9d:db:f5:5f:b6:72:be:5e:
                    14:fb:0e:dc:c6:c1:26:ce:a1:de:f6:47:fc:73:61:
                    73:6d:5c:ef:33:0e:b8:7a:1d:be:6a:f0:03:93:00:
                    39:94:cf:f6:51:61:46:91:40:9d:2a:ed:21:23:9f:
                    78:a2:aa:98:50:ba:a6:a3:c2:47:bc:1e:0e:15:d8:
                    93:1c:1f:2b:6d:6b:dd:83:97:d6:7a:fd:e9:0b:72:
                    bf:2f:7b:ba:eb:17:4c:ac:1c:e7:3b:47:53:f5:61:
                    c4:38:27:a1:e1:f6:17:80:6d:35:fa:b2:5a:35:0d:
                    c3:35:3a:e8:e9:41:da:11:64:d1:b3:7b:82:46:0f:
                    d6:65:90:10:d8:7a:4a:52:a4:3c:17:d9:02:30:d5:
                    9b:49:39:71:3d:68:19:8b:50:94:a3:1b:86:25:ea:
                    30:30:06:84:7e:74:8a:51:7e:07:6a:bc:e4:93:5d:
                    dc:3f:6c:26:f9:46:69:bd:7b:67:05:05:b1:97:41:
                    2e:06:b3:f1:de:a9:b0:64:07:7e:0f:de:d1:36:1d:
                    9b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A0:C9:4B:67:F8:61:3D:72:BC:2D:50:A9:2F:B2:BB:2E:07:3A:99
            X509v3 Authority Key Identifier:
                keyid:8E:EE:8A:60:C9:88:42:16:83:DB:C2:FD:DE:16:9C:9A:A9:12:EF:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/34352e3232392e3234372e302f32342d3234203d3e203237393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:7b:39:e8:cb:45:00:b5:8b:3a:7b:de:d9:03:39:cd:04:d3:
         28:84:dd:d8:ee:0e:b5:2c:8a:7c:89:54:a0:e2:ec:0f:41:34:
         a2:56:72:f3:5a:58:5a:ed:ec:b7:12:91:62:97:67:a5:de:fd:
         c4:e8:8b:26:1e:8c:b9:33:b8:bb:4a:b0:5b:7a:a4:04:b0:8d:
         7f:6c:09:cb:8e:e4:bd:47:1e:ff:62:4c:67:15:35:34:35:db:
         62:17:a6:aa:02:1d:29:41:07:bc:4f:b7:8a:d1:eb:3f:6e:83:
         57:2c:c0:dd:05:0d:16:04:d9:52:41:51:d9:16:14:e8:18:46:
         0e:81:e7:08:dc:d8:63:cb:c7:97:a3:aa:c9:a8:d7:d6:93:5e:
         3a:c8:29:cc:f7:93:2c:4c:43:d7:41:f0:9b:da:fb:11:5a:60:
         8b:3b:79:10:6e:20:b9:eb:f6:93:8a:f2:3c:1d:bd:b0:a8:6f:
         1a:cd:6c:13:00:f7:84:f9:36:cb:ec:72:4b:d1:73:23:6c:2d:
         6c:8d:cb:0b:83:14:d8:86:48:ff:ed:ba:d6:f1:e1:d8:c9:1c:
         69:4c:f9:b8:8b:53:c9:8b:e5:33:93:a6:41:92:19:1e:8a:14:
         c1:ae:7a:d9:d6:13:99:d4:35:4d:44:42:7f:ec:32:d4:5c:04:
         fa:55:14:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:44:21 2025 by rpki-client