Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/34352e3232392e3234372e302f32342d3234203d3e2036343731.roa
File:                     34352e3232392e3234372e302f32342d3234203d3e2036343731.roa (raw, json)
Hash identifier:          7MNz6ZQRUApPlL3vGmUgQ0EbVdigBXYWoWSmyMVAczA=
Subject key identifier:   F8:30:C5:73:2C:C5:28:42:14:E5:A8:01:E7:80:BE:AD:3B:28:34:5B
Certificate issuer:       /CN=8EEE8A60C988421683DBC2FDDE169C9AA912EF90
Certificate serial:       69EBACCA53405933195CFC47771F4276BCA4059C
Authority key identifier: 8E:EE:8A:60:C9:88:42:16:83:DB:C2:FD:DE:16:9C:9A:A9:12:EF:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/34352e3232392e3234372e302f32342d3234203d3e2036343731.roa
Signing time:             Fri 04 Jul 2025 15:24:36 +0000
ROA not before:           Fri 04 Jul 2025 15:19:36 +0000
ROA not after:            Fri 03 Jul 2026 15:24:36 +0000
asID:                     6471
IP address blocks:        45.229.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:eb:ac:ca:53:40:59:33:19:5c:fc:47:77:1f:42:76:bc:a4:05:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EEE8A60C988421683DBC2FDDE169C9AA912EF90
        Validity
            Not Before: Jul  4 15:19:36 2025 GMT
            Not After : Jul  3 15:24:36 2026 GMT
        Subject: CN=F830C5732CC5284214E5A801E780BEAD3B28345B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:38:5a:b9:f1:dd:e4:09:3a:d9:33:49:49:8d:
                    62:26:24:47:55:ea:bb:85:29:7f:8e:43:1a:db:c2:
                    29:67:77:77:60:48:13:84:95:70:99:62:9d:2c:73:
                    31:ec:21:bd:6d:3f:6b:2b:50:55:f0:f9:ed:00:ee:
                    58:77:ee:75:50:62:ca:5e:99:98:2c:b0:de:b9:12:
                    ff:06:69:67:8e:b6:94:c5:5e:1b:d5:59:d7:8e:5a:
                    ec:24:6f:53:b3:3a:fa:a4:b3:c0:7e:1e:29:a4:4e:
                    0b:51:62:0e:9e:49:78:4b:63:f6:38:39:f2:a9:ae:
                    b7:c0:69:ac:7e:36:b0:e6:ed:f3:9c:66:95:ec:02:
                    05:e3:a5:5e:98:ac:04:95:de:1a:d5:6b:0d:72:c9:
                    ff:00:13:ce:65:31:83:89:00:de:3c:88:5b:40:91:
                    73:a7:30:83:ea:b7:40:a9:06:75:c4:74:7c:17:ce:
                    2d:33:9f:90:94:2e:80:b5:23:eb:84:92:18:29:0a:
                    05:75:e3:da:70:13:07:de:e0:74:aa:db:44:00:48:
                    45:f8:67:0b:d9:a0:f7:fb:3e:f1:0f:bb:4c:d2:cb:
                    4d:df:13:db:ae:f6:9c:ac:48:6a:50:71:75:47:d4:
                    c1:66:4c:36:10:c7:b7:1a:77:f5:a3:8c:0e:a2:11:
                    41:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:30:C5:73:2C:C5:28:42:14:E5:A8:01:E7:80:BE:AD:3B:28:34:5B
            X509v3 Authority Key Identifier:
                keyid:8E:EE:8A:60:C9:88:42:16:83:DB:C2:FD:DE:16:9C:9A:A9:12:EF:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/34352e3232392e3234372e302f32342d3234203d3e2036343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:fe:8f:05:75:dc:a9:45:0e:80:5f:dc:56:d3:b5:e9:98:6f:
         ce:b0:dd:ff:3c:1f:49:7b:29:61:2b:65:4b:9f:98:f6:da:6a:
         39:6f:ed:0b:e6:09:a6:62:e2:e6:c1:59:1c:ca:01:96:af:54:
         0d:21:09:4c:6b:12:1d:ae:2c:ee:df:ea:53:0b:0f:7d:0e:7c:
         44:73:8a:a4:40:93:4e:68:8c:ae:9e:94:ca:df:4d:77:57:03:
         02:65:5c:02:36:dc:24:56:0c:25:6a:d4:20:58:90:d0:64:ef:
         90:bd:7e:c8:67:7e:b2:61:4b:c4:84:7a:02:98:ae:50:11:12:
         56:32:66:e9:e1:fd:3f:97:94:76:f1:51:1f:f5:ac:8c:b4:81:
         79:77:32:22:6d:b2:09:79:c5:9e:79:a3:80:b9:e5:fa:ee:31:
         74:c4:a4:0d:56:ad:46:28:97:de:d1:e5:1b:ee:c5:80:67:41:
         8a:8b:03:bc:9e:90:29:a7:1c:54:d6:1e:2e:a7:1a:cd:19:c7:
         5b:15:41:a9:ea:f9:80:be:e2:3e:f3:fe:b2:87:31:06:c0:40:
         f8:b7:78:8d:b6:89:eb:80:f5:c1:71:24:2f:89:0e:0c:b2:6b:
         bd:6a:1c:2c:56:d9:00:65:fc:63:62:82:48:47:06:33:f4:be:
         c3:ab:db:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:51:16 2025 by rpki-client