Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/920CEDFF052B7248461A11582D972C24672EB9F8FFC1A4E892ACEC000730A967/0/34352e3136362e38302e302f32332d3234203d3e20323637373132.roa
File:                     34352e3136362e38302e302f32332d3234203d3e20323637373132.roa (raw, json)
Hash identifier:          QN98XyhJaKr51DcqTeEsSVRGRJnOSn6clLu1m2AzN+Q=
Subject key identifier:   00:F7:20:6F:C6:1B:F8:90:44:77:07:BA:D9:D9:CB:E6:30:FA:62:A9
Certificate issuer:       /CN=7C72A982B828F9D84072FDFBA3549309D9A3F2F2
Certificate serial:       6544A4F18A78ACAEC5D35081EF1F4937BDC79C37
Authority key identifier: 7C:72:A9:82:B8:28:F9:D8:40:72:FD:FB:A3:54:93:09:D9:A3:F2:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C72A982B828F9D84072FDFBA3549309D9A3F2F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/920CEDFF052B7248461A11582D972C24672EB9F8FFC1A4E892ACEC000730A967/0/34352e3136362e38302e302f32332d3234203d3e20323637373132.roa
Signing time:             Thu 16 Oct 2025 15:00:00 +0000
ROA not before:           Thu 16 Oct 2025 14:55:00 +0000
ROA not after:            Thu 15 Oct 2026 15:00:00 +0000
asID:                     267712
IP address blocks:        45.166.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/920CEDFF052B7248461A11582D972C24672EB9F8FFC1A4E892ACEC000730A967/0/7C72A982B828F9D84072FDFBA3549309D9A3F2F2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/920CEDFF052B7248461A11582D972C24672EB9F8FFC1A4E892ACEC000730A967/0/7C72A982B828F9D84072FDFBA3549309D9A3F2F2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C72A982B828F9D84072FDFBA3549309D9A3F2F2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 17:54:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:44:a4:f1:8a:78:ac:ae:c5:d3:50:81:ef:1f:49:37:bd:c7:9c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C72A982B828F9D84072FDFBA3549309D9A3F2F2
        Validity
            Not Before: Oct 16 14:55:00 2025 GMT
            Not After : Oct 15 15:00:00 2026 GMT
        Subject: CN=00F7206FC61BF890447707BAD9D9CBE630FA62A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a7:7e:5b:a2:8c:f0:ab:d2:bd:a8:e0:2b:3a:
                    75:cd:4f:28:e5:1f:ab:86:10:27:fa:50:dd:8c:23:
                    23:9a:65:38:9c:9c:9e:fa:71:c4:b8:57:3c:51:02:
                    e1:92:ac:09:9d:ad:5b:92:f6:e2:db:9e:2d:ea:2c:
                    20:5e:2f:72:e6:c3:a8:b8:ac:c1:5f:62:44:a5:08:
                    36:a0:b5:10:57:50:76:01:7c:f1:08:98:8d:22:54:
                    aa:89:b8:ce:e2:5f:ff:b8:48:d2:95:c7:0e:6c:aa:
                    e7:29:4b:dd:9f:68:4d:97:7d:ad:a3:df:49:b3:52:
                    87:41:96:b1:75:35:3b:70:ff:d1:1d:89:0b:81:52:
                    72:d5:f2:e5:8c:82:25:0f:56:5a:86:3c:f3:e1:a3:
                    d1:c5:8c:a8:4c:80:8d:ae:93:dd:3c:51:df:db:f4:
                    d1:41:c1:d5:72:04:fd:3a:7e:87:c1:ed:dc:14:b9:
                    c5:91:24:38:45:07:e7:93:fc:85:14:d8:ae:43:11:
                    a3:30:7b:e3:d5:66:35:e9:22:2c:4b:44:d0:bc:fc:
                    87:1d:64:29:32:4b:45:4d:a6:03:ac:44:22:09:78:
                    05:25:96:87:69:0a:9c:42:3d:9c:23:05:a1:1e:cb:
                    f5:d9:08:fb:5e:c1:43:99:0d:a2:df:90:4a:99:f3:
                    04:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F7:20:6F:C6:1B:F8:90:44:77:07:BA:D9:D9:CB:E6:30:FA:62:A9
            X509v3 Authority Key Identifier:
                keyid:7C:72:A9:82:B8:28:F9:D8:40:72:FD:FB:A3:54:93:09:D9:A3:F2:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/920CEDFF052B7248461A11582D972C24672EB9F8FFC1A4E892ACEC000730A967/0/7C72A982B828F9D84072FDFBA3549309D9A3F2F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C72A982B828F9D84072FDFBA3549309D9A3F2F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/920CEDFF052B7248461A11582D972C24672EB9F8FFC1A4E892ACEC000730A967/0/34352e3136362e38302e302f32332d3234203d3e20323637373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:d2:ab:9d:3e:f7:56:62:ac:99:e9:1c:c0:6d:19:31:78:f6:
         9d:63:a1:73:48:4f:ad:1c:13:85:8c:8a:32:da:d6:41:ab:96:
         b2:0f:5c:70:95:d8:21:c9:7f:c3:95:72:d5:ef:6e:7c:ec:31:
         c0:92:85:87:e7:ad:59:ce:9d:cd:be:75:b7:90:25:a1:79:98:
         59:4a:47:4d:ef:11:2a:cd:db:c2:40:7a:21:d3:61:cf:1e:0d:
         9c:c7:b2:15:4d:60:a8:d3:21:84:f4:81:49:73:85:f7:5f:6c:
         da:86:5b:0e:f9:0d:d7:ab:6e:5e:a0:d5:b3:11:1e:43:82:4e:
         b1:be:fb:ac:6b:81:6e:1a:1d:38:d1:79:c4:e9:47:aa:db:f1:
         b6:5c:20:47:b9:a6:8d:27:24:18:0f:c4:9f:41:d2:84:c7:d8:
         1b:94:81:f3:a6:05:d3:0e:d0:cd:ea:95:14:ba:10:70:e9:f6:
         6b:0f:1d:a3:41:40:5b:a8:07:cf:4b:4c:8f:9b:74:fb:db:86:
         66:c9:c2:09:c1:b2:da:01:ae:3e:42:6f:f7:d4:7f:45:ec:b4:
         0f:06:f3:cb:0a:a2:61:8f:c5:0c:d3:03:70:94:bf:e9:ca:83:
         3b:5b:2a:11:5c:54:bd:70:5a:79:a4:00:8e:7c:8d:68:2e:12:
         10:30:82:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:02 2025 by rpki-client