Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/34352e3233342e33322e302f32322d3232203d3e20323636373639.roa
File:                     34352e3233342e33322e302f32322d3232203d3e20323636373639.roa (raw, json)
Hash identifier:          +14kAeekh2v9+mfTNqoXTPg7MnvvHMwHVJQBxnd40K4=
Subject key identifier:   65:B0:64:A1:42:F4:D0:FD:0A:CE:FC:F1:C0:4F:41:FB:FF:E9:3D:B8
Certificate issuer:       /CN=1F892BE2BF480CEC044B44BE95FB21F16BB4734C
Certificate serial:       61FCDF54E8D8AC5752C236126D545A8050A81BC2
Authority key identifier: 1F:89:2B:E2:BF:48:0C:EC:04:4B:44:BE:95:FB:21:F1:6B:B4:73:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/34352e3233342e33322e302f32322d3232203d3e20323636373639.roa
Signing time:             Thu 16 Oct 2025 16:50:29 +0000
ROA not before:           Thu 16 Oct 2025 16:45:29 +0000
ROA not after:            Thu 15 Oct 2026 16:50:29 +0000
asID:                     266769
IP address blocks:        45.234.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fc:df:54:e8:d8:ac:57:52:c2:36:12:6d:54:5a:80:50:a8:1b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F892BE2BF480CEC044B44BE95FB21F16BB4734C
        Validity
            Not Before: Oct 16 16:45:29 2025 GMT
            Not After : Oct 15 16:50:29 2026 GMT
        Subject: CN=65B064A142F4D0FD0ACEFCF1C04F41FBFFE93DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:28:23:bb:55:e8:26:ac:73:63:64:67:ec:cb:
                    60:bb:15:e3:f1:9d:3f:d5:34:e6:97:56:6b:b8:8b:
                    00:05:4f:8f:02:32:6c:1b:63:16:cc:aa:9b:9c:90:
                    e3:5b:99:23:81:10:2a:23:a3:46:3e:d3:d9:78:ab:
                    d9:cb:95:3b:c8:fb:3e:8e:d2:0b:5a:02:8e:98:47:
                    b6:32:65:6e:3a:4a:1b:58:61:ad:a0:45:8e:3c:f8:
                    34:35:cd:5f:6b:c3:74:6a:87:61:1f:6c:c5:46:27:
                    23:de:27:51:0f:99:be:60:a0:1f:b4:b4:56:25:55:
                    09:1b:c1:ed:ad:0e:8d:0b:62:d1:6d:6f:9f:2c:10:
                    cb:bb:01:1e:5b:18:49:84:cd:90:a6:84:c4:b5:b3:
                    f2:0a:8b:51:58:26:80:b7:f3:90:1f:ed:3f:da:10:
                    e3:ce:16:ee:79:e8:b5:38:5c:ac:59:6b:d1:b1:f0:
                    7e:7d:e7:31:34:af:93:02:a9:47:9c:7c:28:6b:ef:
                    ee:15:94:c7:db:b9:13:88:b8:1e:df:0f:1e:b4:fb:
                    09:65:b0:6a:3a:53:23:df:a3:45:27:93:0e:38:e0:
                    8a:3f:83:47:22:23:1f:eb:71:ad:c0:55:31:9e:f5:
                    04:b1:43:08:9a:00:02:58:43:b2:ea:df:bd:49:50:
                    8c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B0:64:A1:42:F4:D0:FD:0A:CE:FC:F1:C0:4F:41:FB:FF:E9:3D:B8
            X509v3 Authority Key Identifier:
                keyid:1F:89:2B:E2:BF:48:0C:EC:04:4B:44:BE:95:FB:21:F1:6B:B4:73:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/34352e3233342e33322e302f32322d3232203d3e20323636373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:bb:a7:1c:72:6f:24:c3:2c:b8:5b:bf:92:a7:48:70:d8:df:
         ae:c4:ed:45:e5:77:61:13:13:9f:ba:8b:ca:23:87:50:45:37:
         df:2a:c0:8d:71:45:a2:d9:47:c4:f6:f1:40:b4:a1:96:08:7c:
         ff:0e:3d:9f:9f:7a:6c:06:7f:4d:97:88:dd:9d:61:d1:df:d9:
         4b:d8:fb:40:92:1d:07:e4:e0:3a:20:eb:1b:44:76:a5:04:e3:
         42:0d:7f:5f:c9:d2:df:20:07:15:a4:c0:a8:0d:5f:0d:2a:92:
         7c:02:00:43:8f:cc:7a:c1:04:cd:99:6b:8f:ab:41:c1:ea:c9:
         69:a8:09:0f:70:4b:58:21:60:cc:c6:0c:1c:8d:6c:36:d2:f1:
         04:42:e3:1e:2b:48:ba:49:3a:d2:26:a0:d5:b9:d7:a7:05:8e:
         e0:5d:84:14:92:1a:78:87:bc:44:85:d9:1f:73:91:cd:5e:c5:
         6c:ce:3b:cf:69:98:fa:eb:ac:e7:88:be:f3:8e:fe:ab:13:27:
         1e:73:f2:ce:d6:68:fa:d2:d0:b3:c0:3c:c3:1b:4a:19:47:39:
         2a:8f:93:6e:08:15:ba:a9:61:3a:14:a9:f2:0f:8b:d9:4a:68:
         7a:4b:92:53:44:aa:03:49:97:b7:53:6e:63:89:40:12:93:90:
         eb:17:bc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:58:09 2025 by rpki-client