Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/34352e3136372e3235322e302f32322d3234203d3e20323635353635.roa
File:                     34352e3136372e3235322e302f32322d3234203d3e20323635353635.roa (raw, json)
Hash identifier:          ac21Fqcbo3ZuFY1ia1DrkgxBF/GDnYNW1SYyPRDQ0To=
Subject key identifier:   24:1D:4F:77:9C:B1:48:7C:EF:9D:A5:5B:A6:84:AE:2A:A4:39:F8:29
Certificate issuer:       /CN=119B7B5F0187CFCFD24CA5A7035670D2F09936C2
Certificate serial:       224203B4B6F08D971AE18D6226A15ABBF3043A3B
Authority key identifier: 11:9B:7B:5F:01:87:CF:CF:D2:4C:A5:A7:03:56:70:D2:F0:99:36:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/119B7B5F0187CFCFD24CA5A7035670D2F09936C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/34352e3136372e3235322e302f32322d3234203d3e20323635353635.roa
Signing time:             Thu 31 Jul 2025 22:34:29 +0000
ROA not before:           Thu 31 Jul 2025 22:29:29 +0000
ROA not after:            Thu 30 Jul 2026 22:34:29 +0000
asID:                     265565
IP address blocks:        45.167.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/119B7B5F0187CFCFD24CA5A7035670D2F09936C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/119B7B5F0187CFCFD24CA5A7035670D2F09936C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/119B7B5F0187CFCFD24CA5A7035670D2F09936C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:42:03:b4:b6:f0:8d:97:1a:e1:8d:62:26:a1:5a:bb:f3:04:3a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=119B7B5F0187CFCFD24CA5A7035670D2F09936C2
        Validity
            Not Before: Jul 31 22:29:29 2025 GMT
            Not After : Jul 30 22:34:29 2026 GMT
        Subject: CN=241D4F779CB1487CEF9DA55BA684AE2AA439F829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2e:9d:d8:3e:c0:82:46:3d:cf:a9:58:0f:ad:
                    d7:01:89:5e:7f:24:2a:9c:7c:b1:c2:c3:1f:5f:2e:
                    79:e5:eb:1b:ae:5a:76:42:9c:e0:36:41:0e:6e:8d:
                    1d:d5:42:2b:9c:ec:66:1c:9d:fe:75:60:79:c7:c4:
                    e3:07:7b:39:69:ef:e9:00:4b:21:8b:c3:c4:27:de:
                    8b:56:44:07:f7:ab:fa:10:fb:06:f1:d8:d9:cf:f4:
                    a6:51:03:a2:a6:3d:2c:c1:7e:5b:5f:f0:f0:0a:3d:
                    1b:af:1d:c0:d3:52:30:82:1b:0f:60:78:c3:6f:0c:
                    3a:02:94:df:2a:02:60:2a:52:6b:3f:56:2b:5e:94:
                    62:63:a3:4b:41:80:39:36:91:88:56:86:42:bb:d7:
                    76:56:39:ee:cb:70:94:ca:85:fe:3d:5d:ea:19:8d:
                    41:6c:2b:d1:7f:55:8a:e6:13:be:c2:f8:79:36:fe:
                    17:86:b9:ed:be:92:ce:46:29:91:61:ad:a4:f4:e3:
                    b9:f5:bc:2e:d6:dd:65:ce:b8:eb:14:9f:92:43:5e:
                    22:bf:94:47:43:8b:9f:ce:92:04:c2:58:07:a6:27:
                    16:e8:01:5c:63:c7:01:e7:38:28:c1:b3:aa:97:40:
                    01:cc:fc:00:04:e1:3f:7e:fb:17:4b:fb:38:dd:a9:
                    f4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1D:4F:77:9C:B1:48:7C:EF:9D:A5:5B:A6:84:AE:2A:A4:39:F8:29
            X509v3 Authority Key Identifier:
                keyid:11:9B:7B:5F:01:87:CF:CF:D2:4C:A5:A7:03:56:70:D2:F0:99:36:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/119B7B5F0187CFCFD24CA5A7035670D2F09936C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/119B7B5F0187CFCFD24CA5A7035670D2F09936C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/34352e3136372e3235322e302f32322d3234203d3e20323635353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:47:8d:3f:81:e6:28:08:53:4a:8a:9c:a7:66:37:a7:22:a9:
         06:05:40:6b:5c:3a:25:26:a7:8c:62:c9:9d:22:5f:c7:74:79:
         1a:00:ea:ec:9a:89:7a:79:fb:f4:2b:6f:7e:5b:5c:a4:a9:4d:
         98:f0:3a:c1:0f:4b:88:b6:e2:4d:31:cf:c9:be:bb:62:04:50:
         92:99:e2:86:04:23:86:f7:b4:b2:68:c9:2a:43:17:35:78:4d:
         fe:5c:7e:bb:6d:43:81:71:6f:11:c4:70:d0:54:f4:69:69:4d:
         4b:99:5f:fc:c0:ab:bb:9f:25:4c:24:b4:f6:7e:b9:00:c4:da:
         f6:cc:d7:30:d8:e0:85:1f:ec:2d:c7:ac:30:63:14:1a:86:cb:
         e2:d7:ef:a5:d5:8f:c0:cc:54:d4:e8:dc:8f:fe:77:9d:db:4a:
         7a:85:d1:36:f6:ea:fb:ee:95:d6:c4:be:92:e7:f7:f6:0a:2d:
         4c:cf:b0:91:4b:0d:eb:7e:00:b9:82:bc:80:9f:0b:2e:34:92:
         7e:1e:5a:00:c0:9e:6e:e2:9b:96:00:b9:f9:f0:cd:95:bf:0a:
         64:37:fa:ac:9b:0b:27:34:43:f2:e1:12:a9:b3:81:ac:58:7e:
         f0:88:df:08:54:89:66:c3:e1:d4:ba:a5:3a:db:13:c8:c5:47:
         23:16:f9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:41:29 2025 by rpki-client