Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/34352e3233362e39302e302f32342d3234203d3e20323730303134.roa
File:                     34352e3233362e39302e302f32342d3234203d3e20323730303134.roa (raw, json)
Hash identifier:          jDXvCXZmrmwAZJn3fAG9M4u/Tx27JygvmVTGsbvAO0U=
Subject key identifier:   F0:C9:98:42:F9:5B:41:88:6A:38:E2:C6:A0:E1:1A:6B:10:3C:EC:61
Certificate issuer:       /CN=88E2BDEA430FFCDFCC0882418C4C3075773024C1
Certificate serial:       1197F6508BB1F977B790980713067266B8AAFFA3
Authority key identifier: 88:E2:BD:EA:43:0F:FC:DF:CC:08:82:41:8C:4C:30:75:77:30:24:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/34352e3233362e39302e302f32342d3234203d3e20323730303134.roa
Signing time:             Tue 16 Sep 2025 10:55:00 +0000
ROA not before:           Tue 16 Sep 2025 10:50:00 +0000
ROA not after:            Tue 15 Sep 2026 10:55:00 +0000
asID:                     270014
IP address blocks:        45.236.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:97:f6:50:8b:b1:f9:77:b7:90:98:07:13:06:72:66:b8:aa:ff:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88E2BDEA430FFCDFCC0882418C4C3075773024C1
        Validity
            Not Before: Sep 16 10:50:00 2025 GMT
            Not After : Sep 15 10:55:00 2026 GMT
        Subject: CN=F0C99842F95B41886A38E2C6A0E11A6B103CEC61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b9:4b:c5:d3:42:c1:0e:72:b1:88:d4:c0:97:
                    53:cd:58:26:b7:9e:1a:55:f6:cf:fb:6d:01:ef:d8:
                    b0:a6:94:dd:55:65:d1:1a:8c:99:6a:b6:35:82:70:
                    ae:95:21:20:50:3f:cb:c8:d4:33:bd:1e:7a:d2:31:
                    6c:c7:7d:92:8a:ec:4d:70:1b:ad:9b:d6:04:1e:53:
                    fb:58:7e:48:28:fe:01:37:ef:dd:a9:5c:66:a4:9b:
                    60:ab:6d:29:63:c6:d5:25:a0:e4:30:d2:d2:16:17:
                    b0:46:ec:b4:99:5d:e9:e1:20:4f:b9:df:f6:78:6e:
                    5d:47:3a:b9:66:04:b4:21:aa:53:f9:df:51:41:de:
                    fc:60:80:85:f7:60:e4:3d:e1:5f:ee:7c:69:ea:cb:
                    74:fd:6d:05:c1:19:64:86:59:b9:ca:b1:27:1b:09:
                    2a:0e:96:c3:77:7d:74:e0:a9:ad:62:72:72:9d:ab:
                    b3:b4:50:95:b3:41:b7:17:bc:fb:a1:4f:8b:6e:40:
                    91:26:e9:fa:07:84:ff:b4:fc:b9:3e:08:6b:8c:84:
                    82:f1:6d:93:54:66:4d:f0:72:a9:bc:7a:5a:04:8a:
                    21:82:da:db:27:c6:73:58:e8:f6:9f:07:03:6f:a9:
                    e5:54:6e:0c:84:84:c5:fa:9d:bb:c3:1c:d2:57:ed:
                    b1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C9:98:42:F9:5B:41:88:6A:38:E2:C6:A0:E1:1A:6B:10:3C:EC:61
            X509v3 Authority Key Identifier:
                keyid:88:E2:BD:EA:43:0F:FC:DF:CC:08:82:41:8C:4C:30:75:77:30:24:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/34352e3233362e39302e302f32342d3234203d3e20323730303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:8f:87:86:98:d4:6a:53:3b:b3:39:9d:bd:b1:c5:bb:a9:11:
         d3:94:36:56:c0:a1:41:ae:d5:82:6a:a9:3d:de:e8:3f:e4:bb:
         55:36:11:6c:cc:11:fa:a4:92:43:1b:9e:25:87:65:78:30:31:
         f3:09:20:04:ad:0d:d2:8a:5d:84:53:1c:25:12:7e:31:ac:70:
         1b:38:f6:1d:4f:08:aa:9b:6b:00:93:cb:59:e1:37:31:5b:f5:
         6b:a0:1a:e7:6f:34:fa:fa:66:46:b8:8c:40:2a:f1:4d:6d:ed:
         ab:ac:3f:68:6c:aa:5c:66:c5:dc:e2:c8:a2:14:55:36:82:9d:
         d7:04:e2:77:21:75:42:b4:9b:2f:e3:db:22:64:51:ae:93:41:
         cf:c1:cd:13:12:30:22:6e:9a:c7:02:9d:a0:74:ca:54:db:9c:
         1e:37:48:d6:32:e4:7e:b2:55:e1:40:13:15:b0:50:b5:6e:ba:
         b2:dd:c4:3b:44:b1:8a:80:6b:05:6e:0d:ae:88:53:f5:70:bd:
         76:98:fd:6c:85:a7:4b:f0:42:1e:de:9e:9c:9e:45:61:7b:06:
         6e:09:aa:60:cf:92:89:a4:c4:86:e2:3e:30:bb:dc:96:8f:6c:
         e3:e0:d2:92:57:ab:ac:44:60:c4:98:8b:58:88:5e:99:a7:65:
         4a:61:16:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 07:13:22 2025 by rpki-client