Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/34352e3233362e3234342e302f32322d3234203d3e20323633373332.roa
File:                     34352e3233362e3234342e302f32322d3234203d3e20323633373332.roa (raw, json)
Hash identifier:          4qg66NkL5RjXy9+3d0jRKOcjkiyWRdi2lxqBaoivGRQ=
Subject key identifier:   1A:E9:A8:09:86:BF:0D:0E:10:97:24:1E:DF:3E:80:7C:F6:BF:CD:78
Certificate issuer:       /CN=8B5877089EE5620C180446F9B30B225C6209D812
Certificate serial:       3B6E019C5CABEA3FE77BB5DCC29D5B2BC6AE1055
Authority key identifier: 8B:58:77:08:9E:E5:62:0C:18:04:46:F9:B3:0B:22:5C:62:09:D8:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B5877089EE5620C180446F9B30B225C6209D812.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/34352e3233362e3234342e302f32322d3234203d3e20323633373332.roa
Signing time:             Wed 15 Oct 2025 07:50:19 +0000
ROA not before:           Wed 15 Oct 2025 07:45:19 +0000
ROA not after:            Wed 14 Oct 2026 07:50:19 +0000
asID:                     263732
IP address blocks:        45.236.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/8B5877089EE5620C180446F9B30B225C6209D812.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/8B5877089EE5620C180446F9B30B225C6209D812.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B5877089EE5620C180446F9B30B225C6209D812.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6e:01:9c:5c:ab:ea:3f:e7:7b:b5:dc:c2:9d:5b:2b:c6:ae:10:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B5877089EE5620C180446F9B30B225C6209D812
        Validity
            Not Before: Oct 15 07:45:19 2025 GMT
            Not After : Oct 14 07:50:19 2026 GMT
        Subject: CN=1AE9A80986BF0D0E1097241EDF3E807CF6BFCD78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:b3:d4:d3:d9:16:cd:7b:31:75:04:47:9c:
                    8b:da:eb:fc:b5:13:6c:e4:45:9f:95:c2:c7:9f:1e:
                    e1:27:0f:72:98:4d:e8:cd:03:8e:2c:0d:e6:62:ab:
                    51:e6:55:42:5c:16:40:5e:f1:cc:ce:6a:4a:50:c1:
                    b1:a2:5a:aa:f4:12:af:50:1a:79:43:6a:e2:e9:d8:
                    c4:6c:04:7b:dc:9a:c6:ba:d8:f4:e5:7c:d6:b9:62:
                    72:d3:88:b0:43:64:73:61:bf:95:31:73:00:ae:47:
                    e9:17:4b:bf:bd:eb:f4:a6:42:70:84:84:0c:ed:5c:
                    46:7f:c5:44:57:f5:9d:f9:54:6a:f1:44:fd:c7:61:
                    c5:c1:13:2e:53:d1:4e:9d:1c:aa:6a:5f:f0:b3:c2:
                    ff:98:40:06:d1:a4:e9:6e:06:45:6a:97:8e:12:cf:
                    40:58:f7:38:36:66:b2:d4:a1:1a:8a:9b:f8:42:c7:
                    f5:72:b7:37:34:47:34:7d:f2:68:84:62:bc:f1:0b:
                    9f:93:f9:91:db:d7:b8:fd:65:30:d7:94:1d:99:d3:
                    7e:f0:eb:3d:af:41:06:07:08:30:0d:8e:fc:0c:ec:
                    dc:b7:2d:91:1d:c8:c4:b0:b7:59:eb:f6:e3:c2:fd:
                    23:8d:af:0d:ed:23:75:3b:8b:86:d5:3e:51:a9:a0:
                    ec:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E9:A8:09:86:BF:0D:0E:10:97:24:1E:DF:3E:80:7C:F6:BF:CD:78
            X509v3 Authority Key Identifier:
                keyid:8B:58:77:08:9E:E5:62:0C:18:04:46:F9:B3:0B:22:5C:62:09:D8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/8B5877089EE5620C180446F9B30B225C6209D812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B5877089EE5620C180446F9B30B225C6209D812.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/34352e3233362e3234342e302f32322d3234203d3e20323633373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:de:4f:58:a2:cc:6e:fc:5b:a4:eb:d7:3a:6d:28:7d:b9:7f:
         31:2e:48:6e:15:a3:b7:ea:8c:65:1e:03:f0:ee:cb:ef:fc:b5:
         a9:6b:52:06:b4:d1:58:c2:5d:94:9e:e5:2f:fc:e2:ea:e4:19:
         bd:ec:7e:da:89:5c:91:25:b6:ba:06:91:bc:16:8a:b1:bf:71:
         45:74:f4:45:e7:e9:00:c5:21:91:05:26:10:d2:95:07:5e:21:
         5a:5e:a2:af:d8:ca:36:e3:59:3c:b1:d6:7f:64:82:5c:ff:cb:
         49:d9:b9:b7:ea:c3:34:a3:d5:80:c2:0e:b4:ac:d8:7c:5e:66:
         a4:9c:78:4c:79:e0:c1:68:a8:64:07:17:19:fe:87:15:ee:34:
         4c:da:98:92:22:87:e7:ec:c1:dc:e3:b9:f3:ba:10:c2:ce:68:
         3f:26:e3:d0:ba:78:67:fb:23:e2:51:7c:24:f4:ba:28:82:c9:
         31:d1:62:ef:41:dc:22:1d:0e:68:37:f8:85:ed:3a:63:29:da:
         29:fb:99:89:03:82:b9:93:10:fc:89:43:89:60:11:5e:d8:fe:
         32:4b:4f:48:1c:e2:1e:fe:46:61:4f:73:d7:0f:ab:2c:28:02:
         5d:5c:b7:01:bf:2a:3e:c9:cc:84:4c:80:41:76:3f:f4:b8:07:
         de:7d:e1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:28:37 2025 by rpki-client