Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EF40A7B2FE0C4A9C6A1F449401FA3F64271CCD6FBDF05E956FD69A3039460964/0/34352e3137392e3235342e302f32342d3234203d3e20323636373834.roa
File:                     34352e3137392e3235342e302f32342d3234203d3e20323636373834.roa (raw, json)
Hash identifier:          Wpt1yi7hbNPc32qY7zjIQGXkkzPD3wJOeYzfjQLZpWE=
Subject key identifier:   4D:0C:D5:27:6E:61:7C:6B:01:59:5E:F9:9C:AA:FC:FB:95:46:2B:98
Certificate issuer:       /CN=FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D
Certificate serial:       238B7B8B951D5352D54473D8BD02EEB45076A8F3
Authority key identifier: FA:45:26:A5:B6:F9:4A:3A:0B:F1:9B:48:F8:54:C3:7A:F4:E9:78:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EF40A7B2FE0C4A9C6A1F449401FA3F64271CCD6FBDF05E956FD69A3039460964/0/34352e3137392e3235342e302f32342d3234203d3e20323636373834.roa
Signing time:             Wed 16 Jul 2025 05:25:37 +0000
ROA not before:           Wed 16 Jul 2025 05:20:37 +0000
ROA not after:            Wed 15 Jul 2026 05:25:37 +0000
asID:                     266784
IP address blocks:        45.179.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EF40A7B2FE0C4A9C6A1F449401FA3F64271CCD6FBDF05E956FD69A3039460964/0/FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EF40A7B2FE0C4A9C6A1F449401FA3F64271CCD6FBDF05E956FD69A3039460964/0/FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 15:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8b:7b:8b:95:1d:53:52:d5:44:73:d8:bd:02:ee:b4:50:76:a8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D
        Validity
            Not Before: Jul 16 05:20:37 2025 GMT
            Not After : Jul 15 05:25:37 2026 GMT
        Subject: CN=4D0CD5276E617C6B01595EF99CAAFCFB95462B98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a8:f9:b6:7a:42:82:16:16:c5:e8:15:b8:a8:
                    c3:04:27:7a:5b:f5:df:24:c5:fc:9b:ae:68:50:53:
                    a7:74:e7:93:e0:d8:3c:83:19:26:4a:c6:07:db:de:
                    70:44:c0:5f:b9:c3:42:e7:87:c8:13:8e:81:7f:71:
                    b5:8a:64:7e:6e:03:2d:3b:82:50:06:e2:17:15:ab:
                    70:1c:85:13:1d:09:ab:13:27:33:a6:8d:93:a8:73:
                    f1:60:19:3b:e8:5c:1c:f8:6f:75:5b:f4:f0:a7:1d:
                    a6:86:0e:46:94:4d:10:7b:ef:81:3d:cf:9c:5f:51:
                    47:e4:dd:30:f6:0a:c9:ff:f2:02:d0:1c:e2:b3:cd:
                    d5:3e:b3:80:d1:a7:8a:75:a5:1c:b8:87:1c:b1:a1:
                    1b:aa:e5:d0:71:21:e4:ac:79:51:22:f2:65:3a:ea:
                    f7:b2:56:3e:03:24:a6:75:7f:84:61:1f:ab:9b:a5:
                    dd:55:27:9f:53:ab:c0:7a:5f:04:fe:35:45:ac:c6:
                    4a:d0:bd:46:1c:8d:c9:d1:f4:01:87:5c:0f:fb:5a:
                    81:7d:e6:96:00:a9:22:3e:d1:a2:c0:48:03:2f:27:
                    ff:ca:7c:fa:91:33:4b:a1:ea:df:80:7d:ac:65:17:
                    ec:c3:f7:c4:7a:df:a3:00:c2:19:4f:51:ea:40:ac:
                    5d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0C:D5:27:6E:61:7C:6B:01:59:5E:F9:9C:AA:FC:FB:95:46:2B:98
            X509v3 Authority Key Identifier:
                keyid:FA:45:26:A5:B6:F9:4A:3A:0B:F1:9B:48:F8:54:C3:7A:F4:E9:78:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EF40A7B2FE0C4A9C6A1F449401FA3F64271CCD6FBDF05E956FD69A3039460964/0/FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EF40A7B2FE0C4A9C6A1F449401FA3F64271CCD6FBDF05E956FD69A3039460964/0/34352e3137392e3235342e302f32342d3234203d3e20323636373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:73:98:2a:d8:25:ad:9f:a5:d2:aa:a9:f7:2b:34:54:84:81:
         5f:9d:30:8c:ef:53:3b:bf:e6:a9:74:d0:26:e5:32:17:b3:66:
         48:a1:05:4a:32:fb:c3:b9:7a:bc:c6:23:81:c1:b1:9b:2b:74:
         8e:92:f0:44:b5:4d:34:38:8c:a5:41:d1:97:dc:21:19:60:ae:
         c1:a3:89:9f:dd:74:29:bf:88:df:9b:b4:d9:dc:e4:62:50:33:
         5e:8f:f8:a7:40:7b:8b:a2:d4:39:c3:0c:f6:5a:a0:9c:93:c8:
         cb:d3:75:61:d9:f4:4e:5a:1b:90:4e:b0:bf:93:d9:8c:e1:2e:
         f9:3d:43:f9:d6:61:8e:53:15:a4:68:65:45:e0:85:92:64:5a:
         7c:55:f0:be:8a:19:4d:9a:de:38:f5:49:19:59:ad:ab:c6:65:
         59:6e:77:07:a3:4b:8d:94:5a:00:22:92:6b:19:1b:c7:68:8e:
         e2:64:31:47:5d:85:1a:cd:44:bb:77:03:a1:fa:28:83:84:cc:
         1d:ec:10:82:46:c2:23:12:ae:f8:ef:1e:38:7d:8f:9e:7c:89:
         1f:76:e6:4e:33:db:1f:05:32:0a:2f:7f:67:03:d2:83:a4:01:
         ee:98:e8:bd:cd:6c:f8:03:cf:ad:a7:a2:b3:48:c3:3e:bb:93:
         94:08:23:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:30:41 2025 by rpki-client