Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/34352e3233392e38372e302f32342d3234203d3e20323636383733.roa
File:                     34352e3233392e38372e302f32342d3234203d3e20323636383733.roa (raw, json)
Hash identifier:          +j3nDDu0dzRf+Jg48uc7SXDmXQ4SwKk26l776uCJdwg=
Subject key identifier:   BB:A0:D1:13:56:65:05:09:1A:31:8F:2E:F0:A1:84:2F:0B:29:0F:85
Certificate issuer:       /CN=792FCE054FD71DD6FC1999AD96B878769A102C50
Certificate serial:       5F631F8CEA0780AE3C5BD18A04D5FE25D066DAE5
Authority key identifier: 79:2F:CE:05:4F:D7:1D:D6:FC:19:99:AD:96:B8:78:76:9A:10:2C:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/792FCE054FD71DD6FC1999AD96B878769A102C50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/34352e3233392e38372e302f32342d3234203d3e20323636383733.roa
Signing time:             Tue 14 Oct 2025 12:50:15 +0000
ROA not before:           Tue 14 Oct 2025 12:45:15 +0000
ROA not after:            Tue 13 Oct 2026 12:50:15 +0000
asID:                     266873
IP address blocks:        45.239.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/792FCE054FD71DD6FC1999AD96B878769A102C50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/792FCE054FD71DD6FC1999AD96B878769A102C50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/792FCE054FD71DD6FC1999AD96B878769A102C50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 16:34:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:63:1f:8c:ea:07:80:ae:3c:5b:d1:8a:04:d5:fe:25:d0:66:da:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792FCE054FD71DD6FC1999AD96B878769A102C50
        Validity
            Not Before: Oct 14 12:45:15 2025 GMT
            Not After : Oct 13 12:50:15 2026 GMT
        Subject: CN=BBA0D113566505091A318F2EF0A1842F0B290F85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:53:eb:60:01:c5:aa:91:38:9d:03:73:ab:2e:
                    28:e1:87:1b:0f:77:68:1a:68:c1:5f:1f:c3:bc:9f:
                    7e:19:e6:21:2c:fa:76:9a:2a:1f:40:77:af:8b:e9:
                    9c:9e:ed:2a:94:6c:29:6c:30:6e:fc:c7:c8:e4:33:
                    e9:2a:f9:91:63:8f:5d:29:ad:9a:d4:ba:9f:71:3d:
                    74:9c:91:3f:cf:bb:7d:d6:c2:d1:c0:27:8e:4e:61:
                    af:5e:cb:53:66:f9:0b:6d:ea:32:c5:c0:55:d1:65:
                    a4:e6:52:aa:eb:f5:d1:24:69:65:46:91:17:93:91:
                    33:bb:f7:d3:27:72:93:4a:8a:4d:68:b8:6e:93:a7:
                    ce:ea:75:c8:3a:2a:ac:2e:bd:52:fa:c6:68:88:29:
                    97:12:40:ee:3a:3d:a8:e7:68:ae:c5:62:04:0e:c8:
                    95:5f:ff:42:39:82:39:dd:b4:06:1d:bb:38:40:9d:
                    46:2c:c1:83:61:5e:40:48:d6:04:fe:66:ba:31:0c:
                    42:e7:10:38:94:51:a2:83:98:d8:e5:96:cb:9b:1e:
                    c0:cd:0a:52:eb:d3:04:9b:91:85:99:97:61:03:5b:
                    f0:27:1a:7c:d1:c2:2d:cf:b8:34:6d:cd:ae:79:f9:
                    e6:41:c1:39:06:35:ac:d0:66:cf:5e:2f:e9:f4:d3:
                    f3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A0:D1:13:56:65:05:09:1A:31:8F:2E:F0:A1:84:2F:0B:29:0F:85
            X509v3 Authority Key Identifier:
                keyid:79:2F:CE:05:4F:D7:1D:D6:FC:19:99:AD:96:B8:78:76:9A:10:2C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/792FCE054FD71DD6FC1999AD96B878769A102C50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/792FCE054FD71DD6FC1999AD96B878769A102C50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/34352e3233392e38372e302f32342d3234203d3e20323636383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:b6:d7:15:77:fe:cd:0f:bd:5f:2c:67:85:fa:c1:e5:b4:21:
         ce:12:c8:b6:73:54:19:30:18:6d:3c:f6:e5:90:f3:7e:1b:0c:
         5e:0a:76:c7:8b:89:c1:1f:ad:e4:a5:56:e6:3f:e0:f0:a7:fd:
         2a:31:61:3e:82:c1:07:b7:73:b6:aa:42:01:0f:42:ae:9b:7c:
         12:01:ef:f7:9b:45:94:45:9c:81:16:2e:54:75:53:56:6c:f1:
         eb:94:d9:a4:64:be:39:d1:89:ed:a5:39:a7:a9:50:de:2e:6d:
         c8:b5:f7:65:05:bc:0c:82:41:95:5d:31:c2:71:75:f5:55:ec:
         9b:f5:ad:ef:e2:1b:b9:29:26:f7:6c:69:a0:a1:d5:71:df:05:
         e1:ef:cf:e0:6a:45:88:76:d1:88:32:34:59:0f:96:9b:f9:06:
         1a:6d:d7:e9:73:48:e2:7b:74:4b:dc:75:69:1d:6e:ac:5f:b0:
         94:c1:77:34:27:db:49:28:f5:1a:05:b9:68:8c:f2:7e:e1:70:
         a9:7b:1b:b4:66:b4:2f:19:6d:85:b2:1c:43:13:10:e9:3a:73:
         dc:53:d3:4f:66:53:aa:44:29:8e:c7:d5:68:1b:63:ab:76:a2:
         53:46:4a:cd:9d:b7:b6:1b:fa:de:75:ad:0e:ea:80:c1:c6:70:
         c2:12:87:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:37:28 2025 by rpki-client