Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/34352e3232372e352e302f32342d3234203d3e20323636363639.roa
File:                     34352e3232372e352e302f32342d3234203d3e20323636363639.roa (raw, json)
Hash identifier:          HfOybiIfu235zllloZ80pZ0gdq3lu/Y7tdktYlXwuWE=
Subject key identifier:   C8:AA:D8:6E:D1:29:07:FE:E6:3B:6D:26:50:23:68:47:C2:0E:AC:B2
Certificate issuer:       /CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
Certificate serial:       1FBC96D904098FD56E5F5A2F6388FDD146CB5892
Authority key identifier: AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/34352e3232372e352e302f32342d3234203d3e20323636363639.roa
Signing time:             Mon 06 Oct 2025 16:49:38 +0000
ROA not before:           Mon 06 Oct 2025 16:44:38 +0000
ROA not after:            Mon 05 Oct 2026 16:49:38 +0000
asID:                     266669
IP address blocks:        45.227.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 10:12:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bc:96:d9:04:09:8f:d5:6e:5f:5a:2f:63:88:fd:d1:46:cb:58:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
        Validity
            Not Before: Oct  6 16:44:38 2025 GMT
            Not After : Oct  5 16:49:38 2026 GMT
        Subject: CN=C8AAD86ED12907FEE63B6D2650236847C20EACB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b5:c0:32:9f:97:e9:8e:3a:ac:de:10:a2:ec:
                    e3:c5:07:fa:e9:39:1a:c5:09:32:96:38:db:ba:33:
                    30:3c:f0:25:e7:a0:ae:8e:5f:72:58:67:17:25:36:
                    0d:8d:a1:0b:c0:aa:b0:e9:a8:f7:22:ac:fd:52:c1:
                    a3:89:e3:0c:f4:f0:ef:dd:72:53:51:c1:ec:f5:81:
                    1d:b0:c9:79:43:0b:45:b6:b4:4e:50:8b:89:de:0c:
                    d3:90:bd:0c:f4:39:ee:4e:22:b2:53:83:ef:15:1f:
                    8b:7f:cb:26:c7:1f:41:d1:41:68:f6:84:51:ef:5d:
                    a5:ca:b7:cf:32:8e:11:94:99:ce:bb:83:71:1c:5f:
                    a0:31:56:5b:17:3e:0d:d3:e5:25:e1:e7:cd:fe:fe:
                    23:79:e4:9c:51:a7:6e:fe:ae:0c:13:bf:7e:32:d7:
                    4c:cc:29:f9:da:91:1a:1f:da:75:e1:b2:96:a3:ef:
                    c7:ac:cb:48:2d:4a:44:81:d0:33:da:91:79:9a:7c:
                    d2:f7:18:9f:b8:52:f6:74:e2:f6:5b:5b:9f:18:7c:
                    1f:c1:ae:c1:50:ac:3e:79:09:57:0a:5e:0a:dc:0a:
                    24:3c:ed:fd:48:5e:f4:53:90:f9:93:c7:f7:6d:be:
                    4a:c0:29:b3:d9:30:cf:32:60:af:df:fb:e3:79:6d:
                    b0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AA:D8:6E:D1:29:07:FE:E6:3B:6D:26:50:23:68:47:C2:0E:AC:B2
            X509v3 Authority Key Identifier:
                keyid:AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/34352e3232372e352e302f32342d3234203d3e20323636363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:e6:87:ae:f2:b2:67:1e:b0:fe:be:33:b5:65:65:67:32:65:
         73:94:a9:fd:2e:25:a7:46:7e:14:bc:c7:e2:bd:d2:1d:11:b3:
         a7:5d:63:4e:4f:0f:44:21:a6:6c:19:37:5a:fb:b9:42:0f:1c:
         89:47:e4:d4:b4:34:ad:fc:ee:bd:e2:eb:42:9e:cc:e5:ed:c1:
         e1:2b:ce:fa:9b:d2:4e:a1:d0:03:a5:f2:63:80:cc:e8:31:6a:
         a6:e9:b9:f6:31:1c:c2:9e:a0:11:c2:31:13:9e:4e:f3:1c:5d:
         26:6e:39:3e:a2:7c:1c:62:3b:47:68:df:51:0c:3c:f8:99:dc:
         2f:74:1c:ff:47:b9:30:33:33:61:18:78:32:15:1d:98:d8:b4:
         4f:29:cb:5d:89:7d:1b:3a:5c:40:6a:2d:e7:1c:50:a1:e6:5c:
         b7:b7:08:e9:c8:87:d5:4b:a2:5b:02:e6:60:b4:14:dc:f6:08:
         9c:71:d2:df:f2:17:88:bb:66:22:f0:1a:b5:74:a6:6a:fd:37:
         c0:89:dc:59:75:31:be:0c:94:e8:86:09:24:38:b9:20:7a:1d:
         0d:a3:a2:87:e8:6c:dc:17:ec:1c:b9:43:ac:7d:98:b7:22:88:
         d1:86:9e:43:56:b9:ed:a3:8c:e1:d5:8b:db:09:6c:0b:46:83:
         70:d3:9c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:42:18 2025 by rpki-client