Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/34352e3233342e33342e302f32342d3234203d3e20323636373639.roa
File:                     34352e3233342e33342e302f32342d3234203d3e20323636373639.roa (raw, json)
Hash identifier:          0smQPbd0iQ++eXsuKugwBd5J7O+8SlocrwZc3Aam1rA=
Subject key identifier:   D1:79:04:FC:70:71:E7:1B:BA:4D:EA:89:0E:3B:82:BC:19:BE:3C:E0
Certificate issuer:       /CN=1F892BE2BF480CEC044B44BE95FB21F16BB4734C
Certificate serial:       647387A539FB094F047BE98020831AFED69CAE19
Authority key identifier: 1F:89:2B:E2:BF:48:0C:EC:04:4B:44:BE:95:FB:21:F1:6B:B4:73:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/34352e3233342e33342e302f32342d3234203d3e20323636373639.roa
Signing time:             Thu 16 Oct 2025 16:50:28 +0000
ROA not before:           Thu 16 Oct 2025 16:45:28 +0000
ROA not after:            Thu 15 Oct 2026 16:50:28 +0000
asID:                     266769
IP address blocks:        45.234.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:73:87:a5:39:fb:09:4f:04:7b:e9:80:20:83:1a:fe:d6:9c:ae:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F892BE2BF480CEC044B44BE95FB21F16BB4734C
        Validity
            Not Before: Oct 16 16:45:28 2025 GMT
            Not After : Oct 15 16:50:28 2026 GMT
        Subject: CN=D17904FC7071E71BBA4DEA890E3B82BC19BE3CE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e2:b0:ae:eb:25:22:c9:4b:f9:16:f8:dd:b5:
                    ed:04:5d:cf:21:92:08:20:53:51:19:e0:86:e7:db:
                    60:43:b0:8b:6a:9e:01:42:04:f3:30:c6:ae:a5:7e:
                    af:e1:02:21:5e:90:31:63:39:e3:77:f1:e4:b2:a7:
                    9a:d3:37:d9:0f:9e:ed:e3:27:e5:6c:66:a8:94:8b:
                    28:81:ad:00:14:6e:3c:59:b0:3d:d7:17:27:a2:18:
                    c5:33:18:a4:d2:ed:36:5f:50:64:55:3c:ff:dc:46:
                    18:22:f1:39:29:e2:b9:54:18:74:c8:5c:27:56:52:
                    6b:70:b4:c7:73:e1:03:8d:19:ce:0d:cf:95:2f:cd:
                    f6:7d:d2:d2:a8:3f:46:ea:7f:c9:c1:cc:dc:25:68:
                    34:e7:fb:6b:79:73:21:90:5e:c6:08:49:97:78:9d:
                    29:4c:34:30:91:b9:bc:d6:08:a5:1b:e2:d0:6a:40:
                    6e:9b:12:93:b7:82:66:61:bd:55:5f:90:73:fc:98:
                    ad:02:e6:b2:84:6e:41:11:70:b3:e7:aa:7f:e1:27:
                    9a:19:cd:6b:58:3a:b8:b4:91:5e:0c:09:0e:27:0f:
                    00:65:f5:9a:dc:f5:03:ab:13:f3:de:5d:6e:fc:08:
                    48:9e:b8:69:5b:f0:ab:54:93:48:72:5e:ce:8a:5b:
                    93:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:79:04:FC:70:71:E7:1B:BA:4D:EA:89:0E:3B:82:BC:19:BE:3C:E0
            X509v3 Authority Key Identifier:
                keyid:1F:89:2B:E2:BF:48:0C:EC:04:4B:44:BE:95:FB:21:F1:6B:B4:73:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/34352e3233342e33342e302f32342d3234203d3e20323636373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:ee:fe:00:4e:42:c1:af:66:9e:0d:07:b6:1f:92:7f:0d:77:
         1f:a3:1a:04:52:79:2b:39:07:c4:eb:54:e3:2d:c7:f7:20:d6:
         36:eb:bc:04:e5:06:cb:54:09:ec:8c:98:62:84:8c:02:59:1b:
         fc:96:d5:fd:7d:3b:6c:11:14:c3:ee:e5:11:6b:ea:5c:2a:aa:
         a8:ba:3a:1f:c7:0a:75:1e:b4:e4:4d:eb:22:b7:94:3b:90:ad:
         8c:99:6c:8b:62:e2:0f:3e:ad:1b:ee:73:50:9d:2a:51:fe:90:
         5e:80:8a:40:32:a6:ab:dc:c5:9e:5b:14:cc:5f:cb:3c:96:ef:
         a8:7d:e7:14:af:19:cf:96:30:5d:37:b0:9e:e0:47:c4:dd:2b:
         ff:38:e5:75:55:d6:21:a0:45:6b:65:7f:8a:ad:43:7d:55:4f:
         f6:80:fa:21:eb:29:cd:6e:97:0c:74:52:d8:b6:9f:aa:24:6f:
         1b:b9:b6:cd:05:63:64:69:dc:1c:cd:93:63:8f:cd:1a:d4:f6:
         da:9c:b4:1f:2d:22:9e:b7:60:cc:76:3e:6b:5d:e9:5b:35:58:
         58:28:7a:60:e4:fa:56:93:1f:d7:c1:2c:1a:c5:80:83:1d:2e:
         3d:28:b9:34:ea:0f:bc:2c:bd:5a:51:57:ea:f1:46:72:c5:82:
         70:09:78:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:58:08 2025 by rpki-client