Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/34352e3137392e3139362e302f32342d3234203d3e20323734313830.roa
File:                     34352e3137392e3139362e302f32342d3234203d3e20323734313830.roa (raw, json)
Hash identifier:          8uVu97zY+4NhmvfBQlfZgx6/9uN5G8oMqveeuWGJ1zs=
Subject key identifier:   00:8B:D9:DD:DC:D4:EB:A6:D8:FE:66:87:EC:1A:82:48:27:95:3E:FC
Certificate issuer:       /CN=9F825D61F8FE63A1E801F91110272AA8A180A78F
Certificate serial:       638DAEAFBEF97BA52D07493D7C6A3BB1760FD9CE
Authority key identifier: 9F:82:5D:61:F8:FE:63:A1:E8:01:F9:11:10:27:2A:A8:A1:80:A7:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/34352e3137392e3139362e302f32342d3234203d3e20323734313830.roa
Signing time:             Fri 03 Oct 2025 17:50:00 +0000
ROA not before:           Fri 03 Oct 2025 17:45:00 +0000
ROA not after:            Fri 02 Oct 2026 17:50:00 +0000
asID:                     274180
IP address blocks:        45.179.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8d:ae:af:be:f9:7b:a5:2d:07:49:3d:7c:6a:3b:b1:76:0f:d9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F825D61F8FE63A1E801F91110272AA8A180A78F
        Validity
            Not Before: Oct  3 17:45:00 2025 GMT
            Not After : Oct  2 17:50:00 2026 GMT
        Subject: CN=008BD9DDDCD4EBA6D8FE6687EC1A824827953EFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ba:e3:fc:03:e4:ad:ca:97:ee:6f:fe:77:81:
                    60:1b:4c:51:c8:cc:96:96:02:96:34:d0:97:ed:4a:
                    b0:30:fd:2e:ae:0b:23:ec:aa:68:ba:a7:8f:43:91:
                    97:1c:51:98:10:5e:d1:16:e9:f6:5c:0f:26:9a:38:
                    df:44:40:69:61:21:5f:6a:f8:97:e1:c7:c9:d9:4f:
                    2d:95:cb:ec:ba:c8:13:4d:5e:7d:c0:3f:23:9f:1b:
                    78:5b:6a:40:58:87:08:6e:db:5f:4e:45:58:14:94:
                    6b:82:36:6d:4b:a8:d1:00:d6:b0:eb:b4:2c:69:df:
                    ab:60:57:92:d5:28:2e:8d:72:be:9a:8f:77:c0:8a:
                    98:c4:d9:1d:58:3b:62:5f:48:6b:e7:2b:3d:50:dd:
                    ae:df:b6:d3:1d:90:5b:da:49:55:e7:75:14:12:55:
                    7e:68:84:d1:00:7b:d2:74:9b:08:83:58:a4:dc:d0:
                    fa:15:9a:4e:cd:5d:60:9c:02:9f:64:9a:91:5b:81:
                    e6:3c:67:b1:94:1e:7d:7c:a4:a9:3e:7f:2c:d1:a1:
                    c2:f6:91:f1:b9:94:41:09:5a:65:7f:1b:be:ce:1d:
                    0e:59:73:60:7d:16:d8:2c:c8:b3:7b:66:fa:56:0d:
                    fe:11:b0:87:61:01:23:c8:c4:a2:a0:05:cb:2e:5c:
                    ed:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8B:D9:DD:DC:D4:EB:A6:D8:FE:66:87:EC:1A:82:48:27:95:3E:FC
            X509v3 Authority Key Identifier:
                keyid:9F:82:5D:61:F8:FE:63:A1:E8:01:F9:11:10:27:2A:A8:A1:80:A7:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/34352e3137392e3139362e302f32342d3234203d3e20323734313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:36:4a:4e:9f:2b:7a:de:7c:c4:e1:52:32:35:ad:e6:f8:ee:
         7f:d0:f1:c7:c7:fb:5d:3c:e5:f9:6d:b3:f9:2d:45:2d:e8:e7:
         1b:df:87:68:e3:7f:0e:cd:cd:aa:61:2d:fb:d6:28:a7:7c:02:
         1e:2e:bb:a0:85:7e:00:fa:ba:13:5c:32:3f:51:91:e2:f0:57:
         db:26:72:14:ee:68:23:4e:47:10:d1:56:fc:97:08:51:c1:da:
         b4:ad:47:6a:2c:92:87:b9:b8:77:51:5a:5a:06:c2:82:18:9c:
         41:4b:63:5d:14:4f:65:53:32:19:23:79:66:2d:5e:da:de:55:
         92:d6:82:77:d9:09:7d:d0:3a:2e:c7:c5:19:c5:93:49:9b:4f:
         51:1c:98:94:96:24:bf:f0:18:36:ae:bd:8b:b4:f1:2e:93:1e:
         97:09:e5:7b:2e:76:ca:48:c6:6c:1a:af:bf:c4:ac:49:37:86:
         f2:e0:ba:a7:6c:66:23:0a:25:f4:b2:37:f7:78:30:44:36:03:
         f0:24:ee:13:5e:96:12:20:90:40:b1:ea:36:1c:74:ea:53:50:
         26:84:bf:2a:94:0b:dd:fe:a9:cb:f1:4d:d1:5f:f8:10:4b:56:
         6d:48:54:5a:d7:ee:3f:2f:ca:eb:b9:c1:43:f1:c1:71:6f:0e:
         80:cb:36:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:45:47 2025 by rpki-client