Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/34352e362e34302e302f32322d3332203d3e20323634363035.roa
File:                     34352e362e34302e302f32322d3332203d3e20323634363035.roa (raw, json)
Hash identifier:          1aKMLlhskCCYSBk7UheTkGZTu/lEYa1kHZFcPt5EX20=
Subject key identifier:   45:7C:EB:36:D6:E4:FB:1A:16:2A:D3:5E:67:D9:50:27:CB:A1:98:06
Certificate issuer:       /CN=B8196866E8E404DE886895D0DF5004CF22D49297
Certificate serial:       128E2214BE5E3B1AD00A44C11978CBBBADB421CB
Authority key identifier: B8:19:68:66:E8:E4:04:DE:88:68:95:D0:DF:50:04:CF:22:D4:92:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8196866E8E404DE886895D0DF5004CF22D49297.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/34352e362e34302e302f32322d3332203d3e20323634363035.roa
Signing time:             Thu 11 Sep 2025 15:44:33 +0000
ROA not before:           Thu 11 Sep 2025 15:39:33 +0000
ROA not after:            Thu 10 Sep 2026 15:44:33 +0000
asID:                     264605
IP address blocks:        45.6.40.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/B8196866E8E404DE886895D0DF5004CF22D49297.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/B8196866E8E404DE886895D0DF5004CF22D49297.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8196866E8E404DE886895D0DF5004CF22D49297.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 23:30:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8e:22:14:be:5e:3b:1a:d0:0a:44:c1:19:78:cb:bb:ad:b4:21:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8196866E8E404DE886895D0DF5004CF22D49297
        Validity
            Not Before: Sep 11 15:39:33 2025 GMT
            Not After : Sep 10 15:44:33 2026 GMT
        Subject: CN=457CEB36D6E4FB1A162AD35E67D95027CBA19806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:34:29:d2:1a:0c:83:5e:af:64:f8:71:94:b5:
                    dd:d9:42:ad:50:b8:c8:cb:93:bc:ef:b9:45:fd:e9:
                    e1:be:39:f6:ce:92:56:ba:9a:d6:e3:ab:6a:fa:05:
                    f0:5a:8b:fc:f6:91:d6:d7:2f:4f:c3:ae:80:d2:d0:
                    8a:fd:b3:86:67:ae:cf:3c:59:ac:76:d2:7f:ed:9d:
                    d6:4b:a7:3e:b4:71:eb:9a:66:05:94:97:c0:a7:07:
                    26:ca:e9:3a:a4:55:17:8b:4e:18:82:e0:20:2a:d7:
                    44:de:31:eb:c0:f1:83:2a:eb:00:a8:72:01:30:bf:
                    23:24:81:29:0c:f8:b4:87:11:df:ea:ae:50:68:0d:
                    68:48:50:fb:61:62:fd:e5:77:e3:a4:72:bb:68:48:
                    0e:8c:12:8d:86:c8:bd:3a:0d:be:ba:00:4d:26:56:
                    04:e1:58:ad:95:c7:a7:0b:32:23:54:59:52:23:17:
                    b5:5c:92:8a:d0:28:4a:53:4c:41:72:df:48:a7:2c:
                    3e:d6:75:5a:da:14:31:51:2b:e5:b2:90:08:e3:c1:
                    e8:de:6e:fc:3b:6e:aa:c7:91:7c:f8:8f:9c:65:b8:
                    39:96:35:07:ee:2f:3f:5f:0c:d6:43:8f:fc:a8:c8:
                    3d:a6:5b:30:a5:f8:b2:b4:b9:a5:43:85:17:81:aa:
                    bf:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7C:EB:36:D6:E4:FB:1A:16:2A:D3:5E:67:D9:50:27:CB:A1:98:06
            X509v3 Authority Key Identifier:
                keyid:B8:19:68:66:E8:E4:04:DE:88:68:95:D0:DF:50:04:CF:22:D4:92:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/B8196866E8E404DE886895D0DF5004CF22D49297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8196866E8E404DE886895D0DF5004CF22D49297.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/34352e362e34302e302f32322d3332203d3e20323634363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:89:27:df:05:d9:11:65:d1:71:34:cd:bb:33:a8:f1:9b:9d:
         9b:d4:01:52:9a:69:4a:5d:2c:08:0d:66:5a:42:29:95:05:e2:
         1d:b9:1c:a7:49:29:03:42:77:88:71:7a:46:ec:8d:bb:5c:a1:
         9f:21:a0:8d:26:75:07:cd:0a:76:73:0b:3d:f8:3f:85:fa:d5:
         44:4b:01:84:ab:7c:9e:dc:ae:dc:d8:ee:66:7d:a6:84:e4:90:
         e0:7f:a9:7c:1b:d1:80:aa:36:6b:75:a7:48:9c:4c:46:35:66:
         58:4b:a9:50:c6:4a:6b:60:ab:7b:fd:f5:4a:eb:43:9c:1f:3f:
         c1:e0:f5:57:96:ed:7c:87:10:c7:f7:7b:b6:05:2f:d9:94:e3:
         ef:7a:2f:b0:f3:ef:c5:f9:8f:88:a1:91:f2:04:cf:96:56:13:
         d7:8a:83:38:89:8f:b4:da:c4:74:e6:00:29:40:cc:40:a1:cb:
         f5:99:96:fd:eb:d7:fa:40:ad:79:de:cc:03:15:43:84:16:3a:
         eb:2c:f5:da:8b:1e:64:f6:ce:ab:b3:14:a9:1d:e3:6b:a5:58:
         42:20:70:2d:76:14:45:87:df:0b:42:7a:33:0b:f4:18:c3:a3:
         d0:95:3c:cc:51:a8:27:47:4c:f0:44:a7:54:b2:2c:67:86:3a:
         9c:30:9b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:55:35 2025 by rpki-client