Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135322e302f32342d3234203d3e20323637393134.roa
File:                     34352e3137392e3135322e302f32342d3234203d3e20323637393134.roa (raw, json)
Hash identifier:          CE0a93OAYn1sJvMgO/XGB+vxa9CJZ5KYW/F4JEftSiI=
Subject key identifier:   68:A8:67:57:3A:86:BE:E8:E5:04:3D:1B:22:BF:83:E6:63:A8:31:19
Certificate issuer:       /CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
Certificate serial:       5D0CAB9D818019F846B9CC8219B7E50769E3A91F
Authority key identifier: C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135322e302f32342d3234203d3e20323637393134.roa
Signing time:             Wed 30 Jul 2025 20:34:19 +0000
ROA not before:           Wed 30 Jul 2025 20:29:19 +0000
ROA not after:            Wed 29 Jul 2026 20:34:19 +0000
asID:                     267914
IP address blocks:        45.179.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl
                          rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0c:ab:9d:81:80:19:f8:46:b9:cc:82:19:b7:e5:07:69:e3:a9:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
        Validity
            Not Before: Jul 30 20:29:19 2025 GMT
            Not After : Jul 29 20:34:19 2026 GMT
        Subject: CN=68A867573A86BEE8E5043D1B22BF83E663A83119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:22:9d:2c:3f:98:0b:e0:b6:e9:32:e0:bb:15:
                    5e:59:3d:8e:0c:56:bf:81:fb:0f:1d:1b:23:5e:51:
                    09:69:1d:06:42:cf:43:e8:ce:07:08:d5:42:b2:ee:
                    b0:a8:7c:f9:f8:78:bf:cb:f1:12:5d:28:8b:a1:54:
                    0e:46:d7:21:29:d3:32:47:16:ee:83:43:85:da:c1:
                    57:34:86:07:8e:80:d3:4c:e1:68:c3:30:dc:95:7a:
                    6a:64:36:78:1d:29:8a:41:8a:2f:4c:bc:e9:24:d5:
                    fa:11:ea:8f:28:6e:f5:3a:44:57:1a:14:fb:e6:46:
                    8e:ba:3e:4f:20:0a:81:bb:a1:8e:60:93:a1:45:1a:
                    f4:73:1c:55:07:a2:12:77:39:d5:c7:32:c0:38:88:
                    da:05:01:3f:45:af:a3:92:bd:6d:a9:37:6b:a8:bc:
                    6f:13:3e:10:96:e2:c1:e5:c7:10:32:78:74:be:d9:
                    83:a2:57:b6:6f:09:5b:2f:e9:5d:5a:79:86:b6:1e:
                    4b:b1:f7:07:94:a5:ea:e3:84:77:46:27:0a:e9:94:
                    c0:68:80:68:0b:bd:d1:d2:a0:54:46:0d:c5:f6:ed:
                    ed:48:75:79:33:c6:b1:c2:24:12:80:79:ce:99:d7:
                    29:bb:57:60:ed:07:10:62:45:c4:c7:10:ca:53:8c:
                    f8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A8:67:57:3A:86:BE:E8:E5:04:3D:1B:22:BF:83:E6:63:A8:31:19
            X509v3 Authority Key Identifier:
                keyid:C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135322e302f32342d3234203d3e20323637393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:d5:24:ca:b2:2e:94:af:f5:7c:c7:e3:50:e6:99:24:a9:fc:
         2b:42:72:6d:e0:c5:fa:e9:92:bd:b7:00:36:f1:22:47:80:72:
         5b:1f:b6:1b:50:4e:4e:22:cc:9a:70:dc:b6:6a:c1:b9:39:ff:
         aa:9b:fd:d7:ad:3d:e4:c9:ec:be:3f:1d:03:8d:ac:f9:c2:19:
         cb:47:c3:7c:1a:ca:93:82:05:54:47:99:8d:74:0f:e5:1d:f9:
         00:da:99:75:e4:53:65:5c:47:ad:26:08:f6:c2:9d:c5:c4:26:
         38:ef:97:a5:f6:34:31:74:28:64:9b:82:1c:d7:41:73:06:cf:
         b4:e3:c5:56:91:4e:99:4d:ec:50:89:c8:da:f4:dc:90:43:a7:
         2f:e9:d0:3a:62:27:38:18:54:4c:0c:9a:f5:d3:36:e3:1b:b6:
         54:a5:de:61:d8:7e:4c:c3:26:02:93:5e:33:b5:55:38:1a:1c:
         2f:79:c5:8b:11:fa:df:8c:88:d4:1d:5e:ab:23:7e:cc:be:1b:
         53:f3:96:62:e9:de:f7:fd:ac:ec:97:92:94:d4:e1:a0:fa:07:
         58:27:43:a7:9d:a5:4a:28:5f:bc:8b:08:14:48:dd:8b:2f:d8:
         9f:10:b5:69:3a:19:7e:78:f1:ce:86:87:36:98:2a:98:4d:68:
         22:35:73:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:42:50 2025 by rpki-client