Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232332e302f32342d3234203d3e2032363738323332.roa
File:                     34352e3137322e3232332e302f32342d3234203d3e2032363738323332.roa (raw, json)
Hash identifier:          psvexseS42XMsrU8B6U/a7vSYL/pduQbXbZm2+Sc6lM=
Subject key identifier:   23:FA:CA:BD:9E:23:66:58:1C:C3:8D:3D:A1:FF:47:C9:F2:81:FD:AB
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       7B00B1C40FFB56E96D0F7BCB96DEB5F7279641D4
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232332e302f32342d3234203d3e2032363738323332.roa
Signing time:             Tue 12 Aug 2025 06:15:00 +0000
ROA not before:           Tue 12 Aug 2025 06:10:00 +0000
ROA not after:            Tue 11 Aug 2026 06:15:00 +0000
asID:                     2678232
IP address blocks:        45.172.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:00:b1:c4:0f:fb:56:e9:6d:0f:7b:cb:96:de:b5:f7:27:96:41:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Aug 12 06:10:00 2025 GMT
            Not After : Aug 11 06:15:00 2026 GMT
        Subject: CN=23FACABD9E2366581CC38D3DA1FF47C9F281FDAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:42:2e:23:ad:82:71:d5:b4:56:c0:0b:5c:b2:
                    cc:32:88:f5:8c:2a:a3:6b:71:f8:7a:f2:bf:04:c0:
                    bf:2f:36:36:ef:c9:98:69:d1:21:c2:2e:e4:34:c6:
                    01:9a:47:66:54:2f:a5:6f:6a:88:d7:4e:57:91:f2:
                    3b:a0:17:60:ef:12:96:5e:af:b2:c9:8d:f9:5b:66:
                    ea:72:69:27:d4:5c:9b:f9:52:9e:13:06:be:e9:be:
                    62:1c:39:59:65:28:40:39:3f:7a:68:1c:78:3d:33:
                    ba:3a:e2:29:0b:c7:85:62:b0:27:ed:4f:66:71:69:
                    04:47:93:03:b8:ea:ed:81:3f:1f:ee:50:0b:2a:9d:
                    60:21:9b:f1:3e:5f:81:d5:37:24:1e:c4:dd:41:37:
                    e9:c0:91:51:9d:9d:b6:61:58:b7:de:91:64:25:39:
                    5e:a1:d0:30:db:64:03:69:ab:ac:e3:29:8a:4c:e4:
                    59:23:d2:dd:13:aa:0b:8d:d8:6a:e4:1d:4f:8c:1d:
                    e5:47:b0:ed:e4:95:c7:99:33:3c:a6:ee:2e:0b:13:
                    dd:cb:59:27:ab:d9:ea:3f:ae:d8:11:cf:6d:be:9f:
                    da:f7:45:78:b6:95:77:e0:de:16:67:81:9c:87:47:
                    21:64:f9:97:8a:ce:f8:d1:c3:65:5c:2f:57:82:68:
                    e5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FA:CA:BD:9E:23:66:58:1C:C3:8D:3D:A1:FF:47:C9:F2:81:FD:AB
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232332e302f32342d3234203d3e2032363738323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:fc:96:c2:7d:8a:e6:12:20:f1:dd:38:5f:e0:04:03:1a:e6:
         dc:3b:6f:ee:b9:bb:de:9d:b4:a1:98:45:ea:e2:60:d6:bf:99:
         5a:59:34:33:d1:67:4f:ca:cd:2c:9d:0b:1c:62:21:94:e3:1b:
         06:b4:b5:a1:3c:c0:e4:c0:3a:1b:d1:21:58:df:d3:b7:8e:f5:
         86:86:8c:64:63:76:ac:2b:8f:67:6c:c1:fb:25:26:91:9d:6c:
         d4:7d:a3:24:d7:92:7b:ed:3e:9c:1b:3d:3f:2c:32:1c:ec:44:
         bb:8d:d1:28:cc:5c:0f:ff:ac:6b:c6:12:78:57:a8:10:6e:48:
         8e:9f:db:16:89:f1:ad:98:6e:c8:45:97:2b:5a:2f:32:cc:82:
         76:ba:b6:e7:dd:0c:96:d0:62:de:78:6d:67:60:10:c7:84:47:
         9b:bf:45:a5:6d:fd:4b:92:a8:77:5f:7d:f2:81:78:0c:bd:7c:
         88:38:9d:13:2f:de:68:b8:42:10:84:c1:49:87:94:cb:a8:3f:
         31:76:90:b0:cf:bd:e7:2d:27:5d:8b:e0:82:36:e1:dc:45:bc:
         e6:05:f8:59:76:bc:63:40:b8:c3:c9:8c:dd:33:30:dd:54:eb:
         79:83:64:8c:25:f4:af:d4:f3:31:6b:da:56:fb:7d:b6:13:f4:
         f2:6b:29:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:44:12 2025 by rpki-client