Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/34352e3232372e3230312e302f32342d3234203d3e20323636363635.roa
File:                     34352e3232372e3230312e302f32342d3234203d3e20323636363635.roa (raw, json)
Hash identifier:          7R762sYNsy+MF2ehpsSAf5KHriSwpVVlUwmJxhBBAks=
Subject key identifier:   6F:97:52:A7:48:F5:76:83:19:99:F8:CE:A1:A1:B1:F4:F2:87:C1:B1
Certificate issuer:       /CN=A42C2536663031C220CC68656426F3680C410069
Certificate serial:       56528477EB6DD979163D15DA557C1ACF75D763E8
Authority key identifier: A4:2C:25:36:66:30:31:C2:20:CC:68:65:64:26:F3:68:0C:41:00:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A42C2536663031C220CC68656426F3680C410069.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/34352e3232372e3230312e302f32342d3234203d3e20323636363635.roa
Signing time:             Mon 28 Jul 2025 19:34:12 +0000
ROA not before:           Mon 28 Jul 2025 19:29:12 +0000
ROA not after:            Mon 27 Jul 2026 19:34:12 +0000
asID:                     266665
IP address blocks:        45.227.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/A42C2536663031C220CC68656426F3680C410069.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/A42C2536663031C220CC68656426F3680C410069.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A42C2536663031C220CC68656426F3680C410069.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:52:84:77:eb:6d:d9:79:16:3d:15:da:55:7c:1a:cf:75:d7:63:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A42C2536663031C220CC68656426F3680C410069
        Validity
            Not Before: Jul 28 19:29:12 2025 GMT
            Not After : Jul 27 19:34:12 2026 GMT
        Subject: CN=6F9752A748F576831999F8CEA1A1B1F4F287C1B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2e:b2:e1:95:6c:70:23:6f:60:58:49:d1:22:
                    18:36:c5:ff:d2:1a:52:78:d3:45:ee:0a:77:2f:39:
                    cd:58:5f:3b:b9:a8:ee:4b:a8:4f:90:10:d8:9e:69:
                    c2:5d:96:81:ea:4a:1d:f1:78:4d:33:36:e5:f8:01:
                    0e:30:26:e0:72:8c:a4:00:21:58:fe:bc:73:69:93:
                    a4:e2:bd:71:c2:85:5d:b2:7d:3d:a3:43:cf:9b:0f:
                    a7:9e:19:4f:11:83:0a:e8:95:7e:cd:52:0a:68:3f:
                    fb:53:0e:52:80:25:15:02:d3:3f:14:a1:18:49:ca:
                    b5:f3:58:f1:b2:77:b1:33:26:c0:7c:2d:e7:07:b3:
                    58:91:ad:01:0f:fd:ac:8e:3f:a7:fd:c2:f3:f8:fb:
                    2e:b8:b2:52:2b:d0:0b:b3:4c:9a:09:e2:c5:e3:a4:
                    13:4e:e1:5b:59:02:9d:88:4d:3c:cf:98:15:c9:84:
                    ad:11:68:0d:bd:b5:aa:77:8c:3f:81:3d:1a:97:fd:
                    cd:ac:7d:92:dc:a2:d9:10:db:3f:e7:37:80:5c:82:
                    ce:7d:8d:b2:0e:ff:2b:19:8d:84:0f:bd:39:f5:f0:
                    c8:f1:40:c4:6f:3a:2e:bd:25:3c:83:b8:63:37:44:
                    4b:02:a4:96:29:70:6f:b1:eb:3a:56:e6:74:78:91:
                    83:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:97:52:A7:48:F5:76:83:19:99:F8:CE:A1:A1:B1:F4:F2:87:C1:B1
            X509v3 Authority Key Identifier:
                keyid:A4:2C:25:36:66:30:31:C2:20:CC:68:65:64:26:F3:68:0C:41:00:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/A42C2536663031C220CC68656426F3680C410069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A42C2536663031C220CC68656426F3680C410069.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/34352e3232372e3230312e302f32342d3234203d3e20323636363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:a3:fa:3d:3e:6d:10:f2:a6:4d:56:6e:46:3c:51:d3:2e:cc:
         ca:a2:f0:a2:23:05:78:64:9f:d1:1e:be:29:4a:a4:a9:b1:06:
         ca:d8:ef:a6:f7:1e:cf:fe:6b:a7:e2:0b:f6:8c:9f:64:42:14:
         d1:05:88:87:fb:4f:62:6b:88:13:e2:0c:c1:33:08:ce:2c:cb:
         29:39:c5:9f:72:1e:85:d8:8e:0f:1a:ef:e2:77:f0:86:e0:70:
         62:d3:1c:4e:98:c1:0e:56:c0:8e:2a:4e:ca:0f:22:71:f5:a5:
         16:1e:8e:66:06:73:19:1a:96:ba:92:fe:5d:10:d4:ce:78:37:
         f2:d5:4c:2d:ba:0b:cf:44:9a:41:90:62:45:69:3e:52:48:14:
         c8:15:11:e8:8c:75:77:90:87:da:2c:5f:ce:33:5c:cc:81:8c:
         2c:70:32:4b:a6:58:38:df:40:7c:8b:27:50:e1:86:22:61:d5:
         11:10:31:03:e6:35:88:78:84:b1:c6:06:f3:0d:f1:45:43:f5:
         49:14:da:ce:86:0b:fb:72:02:0f:7c:87:1e:58:8d:04:63:42:
         90:19:4f:a1:35:0c:16:ef:ca:4f:11:a0:83:5b:07:de:a2:76:
         a7:55:9c:f4:22:fe:1b:f9:f2:1d:ea:b9:fa:a2:7a:d9:7a:01:
         14:b7:73:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:55:26 2025 by rpki-client