Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/34352e3137322e3131302e302f32342d3234203d3e20323637383034.roa
File:                     34352e3137322e3131302e302f32342d3234203d3e20323637383034.roa (raw, json)
Hash identifier:          RGl7tw/j+0iHNtCr6WYJKVoQGu9zGqcqCr3kRk5LZlw=
Subject key identifier:   68:B1:38:8B:72:09:F4:9F:B8:C4:9B:20:DB:04:E9:A7:DC:91:2A:69
Certificate issuer:       /CN=DB64E4361CC10336A50698A495856E73977BB462
Certificate serial:       1DEBF4C1829DCF98DA053F75FDEFEB5666987CC0
Authority key identifier: DB:64:E4:36:1C:C1:03:36:A5:06:98:A4:95:85:6E:73:97:7B:B4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/34352e3137322e3131302e302f32342d3234203d3e20323637383034.roa
Signing time:             Mon 11 Aug 2025 19:15:01 +0000
ROA not before:           Mon 11 Aug 2025 19:10:01 +0000
ROA not after:            Mon 10 Aug 2026 19:15:01 +0000
asID:                     267804
IP address blocks:        45.172.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:eb:f4:c1:82:9d:cf:98:da:05:3f:75:fd:ef:eb:56:66:98:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB64E4361CC10336A50698A495856E73977BB462
        Validity
            Not Before: Aug 11 19:10:01 2025 GMT
            Not After : Aug 10 19:15:01 2026 GMT
        Subject: CN=68B1388B7209F49FB8C49B20DB04E9A7DC912A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:38:55:95:de:ec:82:3d:bc:19:69:01:fc:9e:
                    61:ef:4b:a3:2a:86:5f:f0:d7:d3:35:46:7a:2d:23:
                    8e:93:01:48:e6:a7:5b:26:02:0c:22:88:3a:a3:09:
                    4d:a0:c1:76:bf:4f:b0:b4:bc:6d:3b:66:84:b3:eb:
                    7e:e4:31:bd:5b:84:cf:3b:bf:a4:97:b0:3b:ee:b2:
                    3d:ec:71:8f:fb:b4:00:7d:1e:73:f9:81:34:2e:c9:
                    0d:a9:3e:ca:be:94:8a:3f:5f:18:18:69:74:3e:b1:
                    aa:0d:2a:92:c6:78:6b:55:4d:25:5d:9b:69:8b:18:
                    ee:de:fe:bc:4c:26:67:2b:72:90:70:b4:42:99:61:
                    08:84:b4:9d:28:fe:b0:c8:66:6a:b4:3c:fb:96:ee:
                    39:70:7a:43:c0:b5:d0:52:d3:17:7a:15:ef:d4:96:
                    22:99:0e:da:76:14:66:ab:09:c4:94:b8:eb:6e:84:
                    91:8d:a1:b6:28:15:a0:c8:65:07:70:c0:70:b9:02:
                    ec:c8:b1:3a:83:17:0f:8a:ab:f9:1e:ae:f4:71:e9:
                    02:94:c5:62:c5:6d:f8:44:99:10:87:ec:11:09:91:
                    2a:ea:a3:1d:9a:b3:37:c2:41:6b:82:3a:fb:fa:92:
                    6a:55:3a:a6:2d:65:dd:a5:87:53:4f:ba:c4:2d:57:
                    94:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B1:38:8B:72:09:F4:9F:B8:C4:9B:20:DB:04:E9:A7:DC:91:2A:69
            X509v3 Authority Key Identifier:
                keyid:DB:64:E4:36:1C:C1:03:36:A5:06:98:A4:95:85:6E:73:97:7B:B4:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/34352e3137322e3131302e302f32342d3234203d3e20323637383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:99:28:7e:e1:28:09:d5:e6:0c:f8:b2:a6:61:d4:69:12:37:
         02:34:6c:90:6a:a5:ae:3d:2d:94:35:82:55:cf:11:21:51:50:
         34:77:08:88:2e:9b:74:69:6d:fc:40:9c:32:3f:6b:6e:10:63:
         79:3e:a9:b7:3c:da:b5:c8:8b:cc:ed:da:81:51:51:ed:8b:cd:
         39:e8:aa:a3:f3:66:7f:6f:f9:2f:9f:97:6a:60:45:98:fe:33:
         b8:d9:86:7d:b1:20:76:dc:58:66:12:eb:a9:16:44:26:86:7d:
         fc:4c:81:86:e3:75:74:bc:05:76:e4:64:05:d0:43:7f:72:f0:
         5c:91:68:d4:7d:97:2b:3d:7f:42:50:1b:a6:93:a9:99:cb:44:
         13:60:f4:8c:54:d0:76:64:f6:62:6b:3a:6a:72:ba:cc:b3:f9:
         d0:f5:f1:a4:5f:0a:c7:90:c1:55:d5:14:d7:61:d5:be:93:68:
         6b:65:e7:87:2d:cf:14:35:96:3a:94:4d:a9:f4:64:a7:b5:ad:
         c0:76:ab:36:d0:22:8e:b5:29:9d:12:59:bb:0d:71:65:69:ef:
         b3:f5:78:7e:04:3d:73:82:2f:a3:8b:bc:e4:36:05:95:95:da:
         a1:aa:da:25:25:e8:b0:30:0c:e3:f7:38:ca:7b:3b:99:64:d8:
         51:85:4e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:40:43 2025 by rpki-client