Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/34352e3232352e3231362e302f32322d3234203d3e20323635383632.roa
File:                     34352e3232352e3231362e302f32322d3234203d3e20323635383632.roa (raw, json)
Hash identifier:          p6gfH6+O9X3JUzrS3seDyt/LssJaHopCsnopCzc/P1A=
Subject key identifier:   5F:46:0E:15:EE:28:A3:C9:71:F9:5A:6B:C3:4C:08:E8:EE:19:5E:2B
Certificate issuer:       /CN=294404D5D1365B2F805F2EB408D0F8D20B0AF0E8
Certificate serial:       59DC2F60DCC0B5592A3ACEF88DAD64A6A2AE2488
Authority key identifier: 29:44:04:D5:D1:36:5B:2F:80:5F:2E:B4:08:D0:F8:D2:0B:0A:F0:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/34352e3232352e3231362e302f32322d3234203d3e20323635383632.roa
Signing time:             Thu 18 Sep 2025 03:25:00 +0000
ROA not before:           Thu 18 Sep 2025 03:20:00 +0000
ROA not after:            Thu 17 Sep 2026 03:25:00 +0000
asID:                     265862
IP address blocks:        45.225.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:dc:2f:60:dc:c0:b5:59:2a:3a:ce:f8:8d:ad:64:a6:a2:ae:24:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294404D5D1365B2F805F2EB408D0F8D20B0AF0E8
        Validity
            Not Before: Sep 18 03:20:00 2025 GMT
            Not After : Sep 17 03:25:00 2026 GMT
        Subject: CN=5F460E15EE28A3C971F95A6BC34C08E8EE195E2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ee:bc:65:f3:2c:d0:7d:a8:66:a2:f8:87:d0:
                    db:e7:66:29:42:99:2f:06:34:9a:8d:56:93:81:dc:
                    8a:c4:33:f3:9d:7f:7e:21:3c:3a:26:80:0d:6a:17:
                    d3:95:9f:6f:cb:a3:2c:d7:26:d8:8c:59:ab:2f:18:
                    8a:ff:07:8e:fc:20:f5:ab:ba:88:aa:96:ba:87:e7:
                    14:6b:79:9c:a0:1a:75:61:b7:0e:e7:c6:29:79:d6:
                    e8:ad:37:b0:6e:b9:dd:fa:f6:14:db:d9:ab:52:e3:
                    1e:f4:a9:b4:fd:ac:b2:ac:b2:f8:03:e1:e5:27:45:
                    f6:31:dc:c3:fe:da:92:90:45:f2:91:3e:61:0f:c3:
                    6b:3b:f9:3f:aa:6c:ad:30:c8:ec:0b:d8:99:3c:bd:
                    fb:0e:a8:4e:7e:3f:5b:c8:7e:f2:78:02:0a:56:88:
                    53:3b:36:f0:44:48:72:43:54:bd:d7:a0:f7:48:3b:
                    45:66:37:15:2a:d7:3e:cd:a5:c0:84:66:13:0e:86:
                    de:cb:ce:4a:41:99:6d:21:94:0d:a0:15:ea:ce:15:
                    2c:14:89:db:e2:c5:92:14:26:48:80:d7:84:c6:e7:
                    64:77:51:37:2a:53:ef:62:58:e4:8c:2c:34:34:61:
                    1e:2e:ab:4d:07:ea:03:aa:a8:64:b1:fd:a7:31:d0:
                    61:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:46:0E:15:EE:28:A3:C9:71:F9:5A:6B:C3:4C:08:E8:EE:19:5E:2B
            X509v3 Authority Key Identifier:
                keyid:29:44:04:D5:D1:36:5B:2F:80:5F:2E:B4:08:D0:F8:D2:0B:0A:F0:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/34352e3232352e3231362e302f32322d3234203d3e20323635383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:ce:b7:6c:7f:7c:b9:e7:2e:05:d8:4c:d5:19:ee:90:76:17:
         a6:3f:82:62:dd:f9:01:e8:70:c6:e6:a4:91:9d:55:cd:18:1b:
         ba:e6:45:d3:c8:b8:86:c7:bc:ca:6e:d9:cd:e8:28:fe:0b:39:
         b4:50:cb:1a:02:9c:54:40:36:3b:5b:91:6a:3c:fc:35:4f:63:
         8e:0b:7b:1e:a5:54:0d:7a:84:a7:99:5c:22:98:8a:52:b2:61:
         89:66:c0:3a:a7:c2:e9:df:6c:7d:6f:89:64:f4:0b:b9:0d:91:
         19:20:7d:84:81:9a:da:3c:0a:bb:1f:95:cb:b4:fb:2d:32:31:
         ef:fd:ae:6d:74:6b:3c:1f:49:e5:85:9e:8d:20:0a:66:06:0d:
         93:70:8c:86:43:95:f8:09:70:bb:53:dd:67:17:5d:f6:12:2f:
         8a:a2:02:e6:34:3f:93:dc:04:91:83:59:9a:53:f5:e5:90:9c:
         35:a9:c2:4e:b2:26:cc:c2:de:88:c8:85:24:c3:d3:25:6a:6f:
         98:0e:82:37:86:b3:40:f4:c5:da:42:39:d9:c2:71:8d:c6:8c:
         74:97:8b:d8:7d:d9:92:8a:60:16:ff:76:9a:b5:64:c1:17:82:
         13:21:24:5f:4d:c3:b3:50:02:db:4f:52:fe:0e:c5:66:a8:d8:
         18:1e:6d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:53:05 2025 by rpki-client