Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/34352e3233392e38352e302f32342d3234203d3e20323636383733.roa
File:                     34352e3233392e38352e302f32342d3234203d3e20323636383733.roa (raw, json)
Hash identifier:          OdWTFD7E/7X2OQVoRHvsdlSiyBD652Fi/ar8eJSgMek=
Subject key identifier:   F3:D4:2F:D5:E3:54:A9:34:0E:2D:1D:B3:B7:6A:50:DA:CC:97:54:30
Certificate issuer:       /CN=792FCE054FD71DD6FC1999AD96B878769A102C50
Certificate serial:       266C81BD6C624B02B5F79FAC3B8DD71A88AB763A
Authority key identifier: 79:2F:CE:05:4F:D7:1D:D6:FC:19:99:AD:96:B8:78:76:9A:10:2C:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/792FCE054FD71DD6FC1999AD96B878769A102C50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/34352e3233392e38352e302f32342d3234203d3e20323636383733.roa
Signing time:             Tue 14 Oct 2025 12:50:14 +0000
ROA not before:           Tue 14 Oct 2025 12:45:14 +0000
ROA not after:            Tue 13 Oct 2026 12:50:14 +0000
asID:                     266873
IP address blocks:        45.239.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/792FCE054FD71DD6FC1999AD96B878769A102C50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/792FCE054FD71DD6FC1999AD96B878769A102C50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/792FCE054FD71DD6FC1999AD96B878769A102C50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6c:81:bd:6c:62:4b:02:b5:f7:9f:ac:3b:8d:d7:1a:88:ab:76:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792FCE054FD71DD6FC1999AD96B878769A102C50
        Validity
            Not Before: Oct 14 12:45:14 2025 GMT
            Not After : Oct 13 12:50:14 2026 GMT
        Subject: CN=F3D42FD5E354A9340E2D1DB3B76A50DACC975430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:bc:d4:6c:87:8b:3c:7c:0a:dd:7e:82:85:
                    6b:ec:3e:15:47:6c:40:54:d9:40:43:ff:7a:bb:65:
                    de:46:bc:bf:89:c7:1a:05:9a:31:bc:44:6b:6b:f0:
                    68:cd:c5:15:c1:a4:f7:72:4d:d8:dd:76:16:a1:9e:
                    ea:f4:e9:53:84:14:d3:6f:55:3f:30:9e:6c:a4:b6:
                    be:5d:7a:4c:a6:e1:0e:4a:83:d2:f6:e3:20:73:b0:
                    4e:9c:e3:22:00:64:e1:0c:4a:49:e2:18:6f:87:6f:
                    d3:fa:fc:2d:4d:bd:1c:73:00:4c:50:15:3b:62:25:
                    ad:55:a9:71:09:6b:18:c9:a8:2d:85:90:a5:9a:ba:
                    09:94:56:16:ec:a3:46:2f:6d:48:05:f0:e3:3f:ce:
                    dc:76:95:ad:09:e6:d3:e6:a8:27:e7:e6:d7:cc:5d:
                    99:d7:6e:e5:68:c0:9b:ad:ac:b3:41:7b:51:3a:d5:
                    43:c7:cc:50:d6:24:62:92:c1:7c:63:dc:39:77:23:
                    3f:5a:df:67:67:8c:81:b2:17:dd:00:54:78:49:1f:
                    da:c9:8e:fb:36:5f:96:bc:cd:70:4e:d7:f7:63:32:
                    ec:b5:d4:90:45:6d:d9:43:eb:55:7a:5b:33:bc:1b:
                    cd:0f:ce:ff:18:86:09:6c:e9:80:8f:48:6a:a4:b2:
                    ae:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D4:2F:D5:E3:54:A9:34:0E:2D:1D:B3:B7:6A:50:DA:CC:97:54:30
            X509v3 Authority Key Identifier:
                keyid:79:2F:CE:05:4F:D7:1D:D6:FC:19:99:AD:96:B8:78:76:9A:10:2C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/792FCE054FD71DD6FC1999AD96B878769A102C50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/792FCE054FD71DD6FC1999AD96B878769A102C50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/34352e3233392e38352e302f32342d3234203d3e20323636383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:c6:56:55:d3:3e:08:85:ab:9c:05:7f:1b:45:32:17:52:a2:
         32:30:21:fb:0a:2e:bb:32:4b:19:e5:55:ae:8b:51:d8:4b:67:
         e4:ee:b7:aa:d1:72:38:b5:73:ba:90:ea:10:74:dc:0a:90:e4:
         ca:d6:16:d2:a5:3c:1d:f2:df:41:df:86:48:51:25:89:70:d0:
         40:0e:13:9c:f0:8a:e7:75:5b:f6:f7:6a:f6:cf:49:57:48:6e:
         4e:8d:04:ae:b4:23:d3:33:42:88:4c:60:9a:d6:df:0f:e0:58:
         29:0e:b8:7d:31:c6:91:95:31:0f:4e:ac:a7:c4:0f:a0:44:5d:
         79:be:a4:4f:24:08:d1:ff:a2:d4:b3:08:71:ea:ac:a2:91:05:
         d2:42:ef:e3:3d:11:ee:1e:1b:56:21:63:34:73:0b:5e:f7:6a:
         7f:6d:d0:30:64:b0:cf:30:e0:15:0f:61:24:2b:97:e7:c1:70:
         2f:71:d6:9f:a8:24:a9:50:3d:b1:a8:78:b1:a9:43:88:d0:9e:
         cd:d5:28:92:ed:0a:21:cf:23:b4:5b:d1:9c:3a:50:97:b9:c4:
         72:c9:9f:5d:b1:cb:d7:ab:1d:86:e9:6c:0a:a1:09:34:10:5d:
         3f:00:37:b0:02:45:52:23:ee:57:5b:a8:39:37:86:42:dd:7e:
         ad:80:ad:3c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJmyBvWxiSwK195+sO43XGoirdjowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkyRkNFMDU0RkQ3MURENkZDMTk5OUFEOTZCODc4NzY5
QTEwMkM1MDAeFw0yNTEwMTQxMjQ1MTRaFw0yNjEwMTMxMjUwMTRaMDMxMTAvBgNV
BAMTKEYzRDQyRkQ1RTM1NEE5MzQwRTJEMURCM0I3NkE1MERBQ0M5NzU0MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7OrzUbIeLPHwK3X6ChWvsPhVH
bEBU2UBD/3q7Zd5GvL+JxxoFmjG8RGtr8GjNxRXBpPdyTdjddhahnur06VOEFNNv
VT8wnmyktr5dekym4Q5Kg9L24yBzsE6c4yIAZOEMSkniGG+Hb9P6/C1NvRxzAExQ
FTtiJa1VqXEJaxjJqC2FkKWaugmUVhbso0YvbUgF8OM/ztx2la0J5tPmqCfn5tfM
XZnXbuVowJutrLNBe1E61UPHzFDWJGKSwXxj3Dl3Iz9a32dnjIGyF90AVHhJH9rJ
jvs2X5a8zXBO1/djMuy11JBFbdlD61V6WzO8G80Pzv8Yhgls6YCPSGqksq7bAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU89Qv1eNUqTQOLR2zt2pQ2syXVDAwHwYDVR0j
BBgwFoAUeS/OBU/XHdb8GZmtlrh4dpoQLFAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNEFCQkM2QUI2RDQxRDAyRDUxMDM4MDNFMjRDOENFNzg3
RjhFNDlBRkQ4RjUzNTkwMTVERjg4OUM0M0FGNUU1LzAvNzkyRkNFMDU0RkQ3MURE
NkZDMTk5OUFEOTZCODc4NzY5QTEwMkM1MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83OTJGQ0UwNTRGRDcxREQ2RkMx
OTk5QUQ5NkI4Nzg3NjlBMTAyQzUwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzRBQkJDNkFCNkQ0MUQwMkQ1MTAzODAzRTI0QzhDRTc4N0Y4RTQ5QUZE
OEY1MzU5MDE1REY4ODlDNDNBRjVFNS8wLzM0MzUyZTMyMzMzOTJlMzgzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM4MzczMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3vVTAN
BgkqhkiG9w0BAQsFAAOCAQEAC8ZWVdM+CIWrnAV/G0UyF1KiMjAh+wouuzJLGeVV
rotR2Etn5O63qtFyOLVzupDqEHTcCpDkytYW0qU8HfLfQd+GSFEliXDQQA4TnPCK
53Vb9vdq9s9JV0huTo0ErrQj0zNCiExgmtbfD+BYKQ64fTHGkZUxD06sp8QPoERd
eb6kTyQI0f+i1LMIceqsopEF0kLv4z0R7h4bViFjNHMLXvdqf23QMGSwzzDgFQ9h
JCuX58FwL3HWn6gkqVA9sah4salDiNCezdUoku0KIc8jtFvRnDpQl7nEcsmfXbHL
16sdhulsCqEJNBBdPwA3sAJFUiPuV1uoOTeGQt1+rYCtPA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:30:40 2025 by rpki-client