Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232322e302f32342d3234203d3e2032363738323332.roa
File:                     34352e3137322e3232322e302f32342d3234203d3e2032363738323332.roa (raw, json)
Hash identifier:          5xqJ7O+HrvB5ek7VnvNUX/pgycbF8ITfOt6uav4X938=
Subject key identifier:   3E:9A:63:72:73:1B:9C:3B:75:6B:E4:42:37:7C:34:95:1F:A6:EC:D1
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       4B2B20CC5EFCDA1910B77C4832D6DD57A2876B74
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232322e302f32342d3234203d3e2032363738323332.roa
Signing time:             Tue 12 Aug 2025 06:15:00 +0000
ROA not before:           Tue 12 Aug 2025 06:10:00 +0000
ROA not after:            Tue 11 Aug 2026 06:15:00 +0000
asID:                     2678232
IP address blocks:        45.172.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:2b:20:cc:5e:fc:da:19:10:b7:7c:48:32:d6:dd:57:a2:87:6b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Aug 12 06:10:00 2025 GMT
            Not After : Aug 11 06:15:00 2026 GMT
        Subject: CN=3E9A6372731B9C3B756BE442377C34951FA6ECD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e8:f4:76:5f:61:64:46:f2:1d:a4:0f:2e:39:
                    5f:09:c2:1c:e9:80:7c:14:a8:e7:4f:83:b3:ed:11:
                    e6:87:cf:4f:2f:09:97:2c:fe:94:28:23:04:02:01:
                    94:11:b9:e5:6d:4e:76:66:7b:e2:af:ca:08:40:7c:
                    18:2a:93:0c:94:41:2b:5a:89:6f:8f:93:45:ab:dc:
                    58:03:38:70:ef:90:f6:e9:c0:b7:32:b2:06:bc:fd:
                    f2:d9:c6:0e:ed:7a:b3:a8:55:bf:ea:82:f0:90:39:
                    35:8d:e0:95:18:9d:0d:3e:84:05:ff:50:b5:09:08:
                    c2:c2:73:16:79:34:15:e3:fd:8d:38:c9:ae:95:b4:
                    a4:13:a7:f8:c0:e0:80:a1:74:6e:52:60:f8:f8:28:
                    3c:f9:fe:de:7a:28:37:b1:e6:1d:41:55:ad:e3:f0:
                    03:f6:7e:b8:99:65:33:7a:28:fe:50:42:9c:75:65:
                    cc:b3:94:e3:80:21:22:fd:84:52:b6:77:73:75:a3:
                    b6:50:ce:a0:b2:f0:fb:cb:0b:f3:35:7c:55:9d:98:
                    f5:91:e5:d4:b4:26:a3:3b:c1:f0:b6:b3:80:20:b4:
                    86:59:84:30:aa:da:b1:c8:96:10:d9:4f:b8:a6:dd:
                    60:18:9b:c6:61:a1:fb:f0:d6:e6:0c:d0:8b:e1:45:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9A:63:72:73:1B:9C:3B:75:6B:E4:42:37:7C:34:95:1F:A6:EC:D1
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232322e302f32342d3234203d3e2032363738323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:7a:72:f3:46:7f:00:3f:05:11:0d:5b:a4:c5:2a:39:c4:c0:
         31:f2:c2:4c:67:e5:01:c5:03:67:f3:ec:43:e1:7c:bb:a2:33:
         de:15:8f:a7:ea:ae:72:e2:65:f1:cc:6a:43:e1:14:68:3d:ee:
         2f:52:d8:26:a9:35:1e:6d:5c:ff:1a:e3:70:7a:ee:fc:db:30:
         45:b9:78:f5:81:65:5d:a3:6a:91:b2:36:9c:92:09:63:29:ad:
         82:1f:40:08:78:e0:2a:80:fa:9e:de:7c:8d:b8:8f:6d:07:ec:
         cc:5f:e6:cf:7d:fa:0e:80:5a:47:6c:8f:bf:2b:95:5e:ce:51:
         01:88:57:eb:c3:f6:a6:fd:fc:35:11:46:d8:0d:56:31:ec:ed:
         aa:33:ff:45:7a:fb:d8:ae:4f:4a:8b:03:a0:f6:4a:59:a3:0d:
         aa:34:c5:4c:c0:ac:5f:e6:c3:67:69:e3:62:c7:79:dd:00:b7:
         98:85:7c:8f:71:9b:89:a5:4b:7a:87:05:47:42:39:46:d4:3f:
         bc:73:42:8c:55:bb:bb:5e:4d:95:4f:cc:13:51:9b:64:82:22:
         ec:d1:f5:d1:d9:46:34:13:4a:40:a2:fd:67:e1:a8:7f:a0:11:
         9f:fb:fc:94:cb:0c:3c:16:a7:18:e1:a4:03:4c:84:0f:ce:dc:
         cd:68:e2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:44:21 2025 by rpki-client