Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/34352e3137322e3137392e302f32342d3234203d3e20323732393337.roa
File:                     34352e3137322e3137392e302f32342d3234203d3e20323732393337.roa (raw, json)
Hash identifier:          l+p+MWqxIONTSZDF8P4e3j+SLxJ2Cv6QSE8RNB9WGjc=
Subject key identifier:   6E:B3:DE:0A:60:46:92:54:F9:A0:46:C3:6B:4B:7F:E8:AA:4A:BD:12
Certificate issuer:       /CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863
Certificate serial:       55F218C667B6BB54F98F14AF2673FBF91B5D5D2B
Authority key identifier: 70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/34352e3137322e3137392e302f32342d3234203d3e20323732393337.roa
Signing time:             Tue 30 Sep 2025 23:49:15 +0000
ROA not before:           Tue 30 Sep 2025 23:44:15 +0000
ROA not after:            Tue 29 Sep 2026 23:49:15 +0000
asID:                     272937
IP address blocks:        45.172.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f2:18:c6:67:b6:bb:54:f9:8f:14:af:26:73:fb:f9:1b:5d:5d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863
        Validity
            Not Before: Sep 30 23:44:15 2025 GMT
            Not After : Sep 29 23:49:15 2026 GMT
        Subject: CN=6EB3DE0A60469254F9A046C36B4B7FE8AA4ABD12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a7:a2:ff:42:b0:40:cd:03:0a:ee:e4:7a:97:
                    d4:b4:be:75:6e:18:01:12:5f:87:c1:88:ae:6e:e3:
                    a0:10:eb:91:32:63:af:09:02:a9:ca:43:40:b3:09:
                    0b:7c:cb:59:22:5f:36:d4:85:42:ed:5e:e8:56:1c:
                    c8:da:bd:d6:5f:08:ad:0a:09:64:e3:2e:74:29:d6:
                    5f:4a:69:cb:f5:96:1e:26:d5:2a:5c:0d:59:78:d3:
                    14:1b:e9:c5:d7:63:19:fb:83:ed:06:ac:ae:1a:aa:
                    90:95:7d:d5:56:31:94:f8:10:d8:4d:3d:e6:9d:64:
                    b2:86:ff:a6:92:01:2e:8b:b3:a8:c8:e6:9c:80:6b:
                    a3:2b:6e:12:93:38:56:a2:88:c6:4d:5b:34:88:9c:
                    79:e8:62:4b:17:30:c9:5c:1f:8f:83:08:bc:f0:84:
                    86:70:18:3c:82:ea:d6:13:8c:b5:1e:ac:dc:95:9a:
                    f1:65:ac:01:34:1f:01:ac:73:af:63:66:33:61:84:
                    63:03:3f:b0:f4:7f:28:98:f4:21:78:45:0f:9d:cb:
                    cc:c9:90:d9:c5:45:cf:7b:1c:20:02:52:bc:24:3f:
                    53:3d:cc:17:c0:78:ba:fc:82:d3:db:62:f6:54:59:
                    f1:52:7d:67:8c:0d:f0:f4:4f:be:f5:5e:25:22:74:
                    23:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B3:DE:0A:60:46:92:54:F9:A0:46:C3:6B:4B:7F:E8:AA:4A:BD:12
            X509v3 Authority Key Identifier:
                keyid:70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/34352e3137322e3137392e302f32342d3234203d3e20323732393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:bc:26:ff:1b:84:33:98:9d:e5:2c:ad:bb:f5:83:62:79:7a:
         a4:9b:fd:25:65:7d:b6:31:1d:aa:31:6a:5a:e9:6d:39:70:48:
         87:f1:dd:8c:73:8e:88:b6:a8:c0:c1:d5:61:2f:81:31:6a:45:
         60:da:d1:8d:2b:a4:3f:f9:b6:01:b2:62:08:0a:c2:7e:47:5f:
         67:8d:42:88:29:09:54:12:2e:6a:3c:f7:4b:33:61:6b:46:64:
         d0:38:76:5b:d1:7f:94:fb:51:f0:c9:ca:85:c6:18:ce:b9:91:
         0e:b0:6f:48:ff:15:b1:31:84:85:5a:c3:31:be:87:88:9a:ca:
         95:7a:e3:79:b0:e8:7f:8f:d3:a1:f9:8a:ad:52:e5:af:b5:27:
         26:bd:e2:56:79:5c:4a:60:24:f9:92:4b:b4:f3:ce:e2:8b:ff:
         73:af:46:d8:0e:12:d6:36:c5:1c:7c:38:a3:85:f8:44:81:c3:
         df:1a:c9:2e:37:f9:fe:7b:b8:97:8f:34:82:76:d0:78:2b:4c:
         33:49:45:a8:2f:e1:b8:5f:b7:55:8b:40:f8:2a:c9:90:54:31:
         70:9d:31:32:fb:64:b0:ea:c1:38:ed:72:e6:8b:96:dc:e6:b6:
         1a:e1:eb:7f:d7:08:41:49:d2:47:12:69:90:70:12:ba:48:64:
         15:93:4c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:40:18 2025 by rpki-client