Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/34352e3139312e38342e302f32322d3234203d3e203634313233.roa
File:                     34352e3139312e38342e302f32322d3234203d3e203634313233.roa (raw, json)
Hash identifier:          TrjGFwy3ER7lr2QnfVLvY7GE0P7VEMLnqJJ+eVr8kpg=
Subject key identifier:   28:19:6E:CD:CD:D0:C5:3F:9C:94:16:FF:ED:41:44:9A:93:13:52:21
Certificate issuer:       /CN=91D78B9CDEF27F283AF72785886EF69B689AF95C
Certificate serial:       77C293AEA5AC1EFDB7629DD6DF4C094C8BCFD1BA
Authority key identifier: 91:D7:8B:9C:DE:F2:7F:28:3A:F7:27:85:88:6E:F6:9B:68:9A:F9:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/34352e3139312e38342e302f32322d3234203d3e203634313233.roa
Signing time:             Wed 20 Aug 2025 15:35:00 +0000
ROA not before:           Wed 20 Aug 2025 15:30:00 +0000
ROA not after:            Wed 19 Aug 2026 15:35:00 +0000
asID:                     64123
IP address blocks:        45.191.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c2:93:ae:a5:ac:1e:fd:b7:62:9d:d6:df:4c:09:4c:8b:cf:d1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D78B9CDEF27F283AF72785886EF69B689AF95C
        Validity
            Not Before: Aug 20 15:30:00 2025 GMT
            Not After : Aug 19 15:35:00 2026 GMT
        Subject: CN=28196ECDCDD0C53F9C9416FFED41449A93135221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:91:82:e4:41:93:56:4e:f6:df:a6:34:08:bb:
                    2b:ab:85:b2:b7:5e:cf:04:30:ce:a8:b3:8f:8b:c7:
                    92:3c:4a:f4:8b:b9:93:7d:fd:3c:70:83:ee:d6:da:
                    d9:5d:7b:3f:52:29:8a:af:f8:27:f2:14:a7:8e:2c:
                    b8:5d:85:4a:b8:76:c4:ad:e8:4b:1b:48:5c:6b:96:
                    a9:80:be:fd:8f:f8:ff:bc:3f:0f:46:e3:81:26:2c:
                    31:e1:07:74:11:c3:fb:77:f4:17:bc:79:5a:7c:aa:
                    26:37:a5:f9:33:5a:89:76:f8:08:72:65:65:24:96:
                    3f:7c:49:13:a1:ae:89:2a:25:aa:a2:87:e1:36:d6:
                    ac:7e:4c:f9:9a:6d:7e:7d:9d:e9:01:a7:d1:10:8d:
                    da:5e:db:90:2d:69:93:83:65:bf:ac:6e:14:64:ed:
                    6f:f6:6f:1e:f6:ad:82:2b:47:89:93:62:28:b1:1a:
                    b6:1e:e0:1e:dc:f5:1d:48:f0:76:91:e7:b3:ac:55:
                    ff:d5:eb:00:30:9f:42:7c:93:75:ad:cc:ca:42:4b:
                    bd:52:da:3d:69:74:3f:2d:48:33:e1:8c:e8:01:de:
                    4d:ce:c4:4b:06:e7:b8:f3:21:40:92:e6:f6:b1:2f:
                    59:d5:89:ea:45:93:e4:37:60:66:c9:00:3b:40:f6:
                    28:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:19:6E:CD:CD:D0:C5:3F:9C:94:16:FF:ED:41:44:9A:93:13:52:21
            X509v3 Authority Key Identifier:
                keyid:91:D7:8B:9C:DE:F2:7F:28:3A:F7:27:85:88:6E:F6:9B:68:9A:F9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/34352e3139312e38342e302f32322d3234203d3e203634313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:c3:ef:17:53:18:20:41:99:03:a9:f2:4b:e7:f1:cb:36:55:
         b2:c2:35:08:57:46:56:0c:be:61:be:e8:db:e4:7b:2b:ad:c1:
         7c:1c:34:ef:63:98:16:d2:8e:ec:80:4a:18:70:55:1e:68:ee:
         b0:d5:75:4e:97:03:4f:69:04:74:3d:67:47:80:1f:d0:c0:25:
         39:7c:62:cf:26:e8:ed:91:eb:cc:7e:b5:76:29:56:bd:f4:da:
         14:9a:a1:2d:4f:4b:e3:97:f2:4b:37:be:9b:96:13:43:df:ad:
         a7:7c:27:3b:de:a5:f2:65:76:5c:3a:45:c8:b5:6f:0a:ea:49:
         5e:0f:d9:ee:78:07:51:9a:92:5a:2e:45:3a:d7:56:7f:77:51:
         ee:5a:de:c6:eb:18:83:3d:7d:00:68:5a:b9:7c:66:e0:9b:10:
         fd:d5:ba:a5:01:93:e2:e0:61:b8:b6:fc:48:81:f2:e3:b6:54:
         87:17:12:c9:1a:41:57:88:ac:8f:c0:5a:db:e7:d1:66:d3:dc:
         07:a6:b3:f3:a1:78:32:17:c7:cf:28:02:b2:d1:f3:ee:02:39:
         29:0a:6c:3b:74:14:bc:36:71:39:de:3f:1b:cf:ed:f1:d1:47:
         89:0b:35:57:e0:24:19:bd:b1:af:df:7f:d7:b8:37:75:ce:d3:
         78:6d:68:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:44:54 2025 by rpki-client