Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/34352e3136372e3139392e302f32342d3234203d3e20323633373835.roa
File:                     34352e3136372e3139392e302f32342d3234203d3e20323633373835.roa (raw, json)
Hash identifier:          LZmDnNGgTszlhNWm4Xd+CVFIlOYea8vmLZT5ponQnxc=
Subject key identifier:   C6:74:70:10:7E:29:3F:0F:51:78:A9:BE:EA:78:12:D4:7A:3E:74:70
Certificate issuer:       /CN=E69FE49708F2E468CDB13D588F7D464E0166D1D9
Certificate serial:       5773B6B3508F17BAB0AC36147B3552E4C6212A15
Authority key identifier: E6:9F:E4:97:08:F2:E4:68:CD:B1:3D:58:8F:7D:46:4E:01:66:D1:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/34352e3136372e3139392e302f32342d3234203d3e20323633373835.roa
Signing time:             Wed 23 Jul 2025 02:05:04 +0000
ROA not before:           Wed 23 Jul 2025 02:00:04 +0000
ROA not after:            Wed 22 Jul 2026 02:05:04 +0000
asID:                     263785
IP address blocks:        45.167.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 21:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:73:b6:b3:50:8f:17:ba:b0:ac:36:14:7b:35:52:e4:c6:21:2a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E69FE49708F2E468CDB13D588F7D464E0166D1D9
        Validity
            Not Before: Jul 23 02:00:04 2025 GMT
            Not After : Jul 22 02:05:04 2026 GMT
        Subject: CN=C67470107E293F0F5178A9BEEA7812D47A3E7470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bf:fb:56:7b:2e:b6:ee:7d:85:55:c1:bf:49:
                    3a:a3:6b:0a:c9:7b:a7:0a:fd:70:93:6d:75:0c:7b:
                    c4:d0:cd:89:aa:a6:b5:d5:97:c8:41:0f:2f:55:3b:
                    79:57:ae:bc:32:1e:86:1f:94:17:8f:42:5c:39:a3:
                    52:aa:b4:26:62:7f:c8:04:94:b5:1c:77:7a:58:99:
                    4d:da:a8:d6:25:71:1c:4e:39:4b:dd:ac:4a:54:a5:
                    bc:cf:a7:80:54:e9:21:45:eb:0a:f5:0f:6a:bb:b5:
                    b4:25:2d:f6:57:dd:80:00:43:71:ee:71:62:3a:d7:
                    d5:bf:eb:78:f0:7c:fb:57:d3:8b:d2:46:bc:b6:d4:
                    94:03:eb:10:e0:cc:ea:4c:4b:c6:44:fb:af:e7:b9:
                    88:13:f2:a2:8a:88:73:19:1b:65:cf:2b:f7:88:f6:
                    56:28:89:bd:73:b0:ef:d8:e1:d2:66:58:3f:5d:4e:
                    ee:64:f6:ae:e9:22:b7:03:c2:66:25:52:16:ae:07:
                    b8:0b:40:f6:f1:b9:a4:ee:eb:62:87:4c:be:69:33:
                    4e:ad:70:57:52:7c:a4:73:30:95:05:fa:9e:bc:f5:
                    60:75:e4:c8:d8:5b:b0:af:e4:aa:b7:b7:fe:8c:e8:
                    8b:b2:27:1e:10:a1:39:fa:2b:c7:05:28:e6:45:c3:
                    ee:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:74:70:10:7E:29:3F:0F:51:78:A9:BE:EA:78:12:D4:7A:3E:74:70
            X509v3 Authority Key Identifier:
                keyid:E6:9F:E4:97:08:F2:E4:68:CD:B1:3D:58:8F:7D:46:4E:01:66:D1:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/34352e3136372e3139392e302f32342d3234203d3e20323633373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:7a:cd:10:53:11:b3:ca:08:a9:32:72:9a:04:45:a9:91:02:
         e6:51:93:3f:4a:c4:e9:5d:de:0c:6c:55:e1:3a:2b:b0:d8:ca:
         ec:87:0e:30:e2:50:03:60:59:cc:7a:4e:7c:30:48:4f:d8:f1:
         05:8f:36:36:02:e5:9f:df:82:0b:18:f8:e0:d8:44:8c:22:15:
         fa:37:a8:96:ff:a4:5e:34:cd:e2:74:0f:7a:9f:aa:36:60:f3:
         f5:89:9e:10:c5:46:b8:d3:d0:80:5d:e3:b1:9e:ec:e1:40:35:
         ff:fe:ea:02:f0:a8:98:45:71:08:52:ac:4b:ef:ed:bc:4c:9e:
         81:2c:c1:68:11:8b:02:9d:aa:86:6f:8e:d1:93:ed:28:66:8c:
         94:d3:fd:53:1e:f1:4f:37:ff:7d:8f:fc:7e:ee:17:f1:c7:13:
         f8:4d:91:67:29:78:ec:88:ae:c7:2f:0f:f8:d2:2a:13:b3:02:
         b5:0c:8a:39:a4:df:10:7f:4b:2e:83:6b:2a:fa:3a:ad:18:5e:
         e0:f0:5d:fa:e9:3c:cc:0d:92:55:64:01:d4:6e:76:85:2f:54:
         93:c6:ac:eb:66:97:4b:04:ba:68:12:01:09:4a:50:15:36:69:
         f0:c1:ad:65:58:b1:67:1a:b1:3f:5f:ec:d1:82:42:26:a8:87:
         dd:e8:8c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 18:59:43 2025 by rpki-client