Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/34352e3137392e3139372e302f32342d3234203d3e20323734313830.roa
File:                     34352e3137392e3139372e302f32342d3234203d3e20323734313830.roa (raw, json)
Hash identifier:          DQT67Oirc1FxX542jwkz16RNUgNJBeFSIyV416jR/E0=
Subject key identifier:   1E:BA:75:08:E7:E0:09:95:DF:99:D0:10:13:04:A4:90:19:EC:99:77
Certificate issuer:       /CN=9F825D61F8FE63A1E801F91110272AA8A180A78F
Certificate serial:       3AB96D00B6F69B807DF649B810E1BE88BFDFBB78
Authority key identifier: 9F:82:5D:61:F8:FE:63:A1:E8:01:F9:11:10:27:2A:A8:A1:80:A7:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/34352e3137392e3139372e302f32342d3234203d3e20323734313830.roa
Signing time:             Fri 03 Oct 2025 17:50:00 +0000
ROA not before:           Fri 03 Oct 2025 17:45:00 +0000
ROA not after:            Fri 02 Oct 2026 17:50:00 +0000
asID:                     274180
IP address blocks:        45.179.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b9:6d:00:b6:f6:9b:80:7d:f6:49:b8:10:e1:be:88:bf:df:bb:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F825D61F8FE63A1E801F91110272AA8A180A78F
        Validity
            Not Before: Oct  3 17:45:00 2025 GMT
            Not After : Oct  2 17:50:00 2026 GMT
        Subject: CN=1EBA7508E7E00995DF99D0101304A49019EC9977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:ca:25:11:6c:05:9f:90:f4:af:20:57:ee:
                    06:d1:87:30:a3:48:5d:c2:f7:da:51:27:f8:83:5a:
                    cd:e7:d0:67:66:d0:cb:f6:24:be:ca:98:fb:df:7d:
                    b4:27:34:d2:96:05:46:25:89:0a:c1:ea:dd:34:6a:
                    7d:92:7f:c8:25:95:ce:10:79:65:f1:40:d7:80:1b:
                    c7:6c:61:5c:73:05:42:20:80:a1:b9:a3:d5:91:f1:
                    f6:62:f4:03:7f:c2:ff:bb:8f:41:d6:a9:26:e5:0e:
                    90:0d:74:0e:99:73:b9:5b:3c:4d:31:a8:a9:86:54:
                    89:5e:09:52:91:df:70:46:86:c0:c4:cd:a0:87:55:
                    0d:ad:af:a4:71:82:76:e5:5f:0e:00:2e:19:7c:16:
                    ec:33:fe:d6:ec:00:50:51:90:f6:8e:e9:bc:82:6c:
                    82:7d:3b:2e:83:99:2c:ff:97:5b:0a:6a:ed:10:1d:
                    ab:f8:59:a1:4b:95:df:fa:38:de:04:61:97:c6:d4:
                    22:fe:52:12:fa:38:d5:d7:d6:08:07:b5:1f:d7:e8:
                    a4:15:79:34:12:02:d0:f5:a9:ea:04:68:8e:7d:99:
                    a4:c2:cc:0a:7d:a7:a3:61:7e:d9:8e:23:f2:55:26:
                    46:a5:1d:f9:07:96:f1:16:83:31:e0:00:b6:f9:a3:
                    2b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BA:75:08:E7:E0:09:95:DF:99:D0:10:13:04:A4:90:19:EC:99:77
            X509v3 Authority Key Identifier:
                keyid:9F:82:5D:61:F8:FE:63:A1:E8:01:F9:11:10:27:2A:A8:A1:80:A7:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/34352e3137392e3139372e302f32342d3234203d3e20323734313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:41:f1:a8:17:91:31:91:ad:52:5d:0d:ba:f1:1e:f4:78:42:
         6a:99:4c:71:4e:16:cb:ea:b4:4c:a3:9b:21:fe:bf:6f:f6:68:
         3b:2c:de:b0:c4:e9:e2:56:65:88:92:01:af:d1:29:7b:13:97:
         d3:f6:b0:08:f2:6e:1a:6e:3f:b4:ce:c3:e2:f9:1f:3a:87:76:
         92:68:90:1d:40:ef:da:5e:24:d3:e0:47:5a:5e:38:a5:61:07:
         c5:e4:f8:67:c5:46:23:34:3b:04:15:0a:92:7d:a2:c4:f8:02:
         e7:14:d7:f7:1c:41:25:0a:b1:71:16:7c:39:a0:25:4e:a4:bb:
         61:45:07:65:b3:4d:a0:96:aa:fc:5c:3a:7f:c8:5c:f9:88:6f:
         83:00:28:03:a1:43:c4:20:05:42:44:63:96:bd:63:6a:ed:d3:
         f7:94:9e:c5:46:6e:10:44:d5:ee:9a:97:53:f1:90:3b:71:5a:
         3a:42:3d:e6:8d:4a:59:43:e9:1b:f7:3d:48:08:fd:57:92:bf:
         b0:98:8a:50:7d:eb:c0:8c:e9:f9:bd:40:2c:26:a9:6a:d6:10:
         eb:a2:5b:4c:99:a2:be:fa:25:eb:d5:3d:40:83:3a:d5:c8:3c:
         12:4c:d5:98:6c:3e:43:95:81:49:4e:5e:40:21:5e:6a:ac:6e:
         f7:c6:76:c4
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUOrltALb2m4B99km4EOG+iL/fu3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY4MjVENjFGOEZFNjNBMUU4MDFGOTExMTAyNzJBQThB
MTgwQTc4RjAeFw0yNTEwMDMxNzQ1MDBaFw0yNjEwMDIxNzUwMDBaMDMxMTAvBgNV
BAMTKDFFQkE3NTA4RTdFMDA5OTVERjk5RDAxMDEzMDRBNDkwMTlFQzk5NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC18olEWwFn5D0ryBX7gbRhzCj
SF3C99pRJ/iDWs3n0Gdm0Mv2JL7KmPvffbQnNNKWBUYliQrB6t00an2Sf8gllc4Q
eWXxQNeAG8dsYVxzBUIggKG5o9WR8fZi9AN/wv+7j0HWqSblDpANdA6Zc7lbPE0x
qKmGVIleCVKR33BGhsDEzaCHVQ2tr6RxgnblXw4ALhl8Fuwz/tbsAFBRkPaO6byC
bIJ9Oy6DmSz/l1sKau0QHav4WaFLld/6ON4EYZfG1CL+UhL6ONXX1ggHtR/X6KQV
eTQSAtD1qeoEaI59maTCzAp9p6NhftmOI/JVJkalHfkHlvEWgzHgALb5oyv3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUHrp1COfgCZXfmdAQEwSkkBnsmXcwHwYDVR0j
BBgwFoAUn4JdYfj+Y6HoAfkRECcqqKGAp48wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Mjg2OTg2NkY3NEYyOTU3MTk0NDRCN0M4QTYwNEY1MDRG
N0IyREUyRTE1NDNGMDQ2QUMxNTQzQjMwMzc2NjNDLzAvOUY4MjVENjFGOEZFNjNB
MUU4MDFGOTExMTAyNzJBQThBMTgwQTc4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjgyNUQ2MUY4RkU2M0ExRTgw
MUY5MTExMDI3MkFBOEExODBBNzhGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDI4Njk4NjZGNzRGMjk1NzE5NDQ0QjdDOEE2MDRGNTA0RjdCMkRFMkUx
NTQzRjA0NkFDMTU0M0IzMDM3NjYzQy8wLzM0MzUyZTMxMzczOTJlMzEzOTM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM0MzEzODMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALbPF
MA0GCSqGSIb3DQEBCwUAA4IBAQCAQfGoF5Exka1SXQ268R70eEJqmUxxThbL6rRM
o5sh/r9v9mg7LN6wxOniVmWIkgGv0Sl7E5fT9rAI8m4abj+0zsPi+R86h3aSaJAd
QO/aXiTT4EdaXjilYQfF5PhnxUYjNDsEFQqSfaLE+ALnFNf3HEElCrFxFnw5oCVO
pLthRQdls02glqr8XDp/yFz5iG+DACgDoUPEIAVCRGOWvWNq7dP3lJ7FRm4QRNXu
mpdT8ZA7cVo6Qj3mjUpZQ+kb9z1ICP1Xkr+wmIpQfevAjOn5vUAsJqlq1hDroltM
maK++iXr1T1AgzrVyDwSTNWYbD5DlYFJTl5AIV5qrG73xnbE
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:45:49 2025 by rpki-client