Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/34352e352e31322e302f32342d3234203d3e203136393036.roa
File:                     34352e352e31322e302f32342d3234203d3e203136393036.roa (raw, json)
Hash identifier:          /3J6LPg8BY3XSX1Cko5odGmhio5FIm2vERS2cKB97qo=
Subject key identifier:   47:76:71:E3:A7:9A:F7:FE:AF:5F:9B:E4:74:24:BC:B0:CF:3E:EC:B6
Certificate issuer:       /CN=D5752923966F847D0B5CFFF17C8C51A4E595421C
Certificate serial:       2D726D4B252DDBF3A89EB64E945483251F5F7783
Authority key identifier: D5:75:29:23:96:6F:84:7D:0B:5C:FF:F1:7C:8C:51:A4:E5:95:42:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/34352e352e31322e302f32342d3234203d3e203136393036.roa
Signing time:             Thu 07 Aug 2025 15:35:06 +0000
ROA not before:           Thu 07 Aug 2025 15:30:06 +0000
ROA not after:            Thu 06 Aug 2026 15:35:06 +0000
asID:                     16906
IP address blocks:        45.5.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:72:6d:4b:25:2d:db:f3:a8:9e:b6:4e:94:54:83:25:1f:5f:77:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5752923966F847D0B5CFFF17C8C51A4E595421C
        Validity
            Not Before: Aug  7 15:30:06 2025 GMT
            Not After : Aug  6 15:35:06 2026 GMT
        Subject: CN=477671E3A79AF7FEAF5F9BE47424BCB0CF3EECB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9e:22:5d:ae:4d:19:ee:92:cb:0d:e6:9f:b0:
                    a4:6a:b6:7c:a0:6a:02:44:2a:5a:78:44:26:c3:79:
                    d2:39:67:1a:c5:04:d8:50:57:f9:4b:30:ec:f1:ad:
                    55:2b:d2:9f:db:d7:aa:65:f7:6e:29:72:a1:36:3d:
                    e2:3a:4d:a9:73:0d:3e:58:57:3f:2a:47:32:6e:22:
                    aa:13:82:78:4d:3b:49:b4:9b:76:ac:ab:ab:9a:bb:
                    00:11:5c:ec:b6:37:b2:74:c6:7d:19:12:ce:a9:a0:
                    de:9f:5c:e9:a9:27:64:d6:7c:a9:84:54:38:a9:64:
                    5c:64:eb:a9:4c:a5:1e:7d:ac:a1:2a:1f:74:af:17:
                    2b:f1:82:51:f7:35:e3:7e:3f:3c:e5:f5:5b:2b:4e:
                    fd:aa:f9:95:a1:3d:84:e7:9a:3e:85:f5:c1:f2:d6:
                    37:a6:b1:59:84:12:13:7b:67:8e:53:22:2c:17:dd:
                    92:de:73:47:b1:35:8d:0f:c2:7c:96:45:d5:6d:ce:
                    5a:6d:b4:e4:14:c1:11:17:73:16:9a:65:16:81:0a:
                    2b:cb:40:6c:4a:ae:b4:bf:92:3e:96:e0:ed:a8:11:
                    d3:8d:1e:25:b6:67:95:0f:50:90:0e:56:5d:fa:c0:
                    4b:eb:e9:ff:71:52:cc:22:17:66:8a:29:ec:2d:98:
                    87:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:76:71:E3:A7:9A:F7:FE:AF:5F:9B:E4:74:24:BC:B0:CF:3E:EC:B6
            X509v3 Authority Key Identifier:
                keyid:D5:75:29:23:96:6F:84:7D:0B:5C:FF:F1:7C:8C:51:A4:E5:95:42:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/34352e352e31322e302f32342d3234203d3e203136393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:72:12:7d:ad:c6:e6:f3:0e:7b:08:38:c8:c9:16:c2:c2:f1:
         0b:da:56:20:c0:cc:10:a6:35:23:c6:45:43:b8:ed:50:07:59:
         7f:0b:a8:f8:1d:e5:9e:99:da:e8:67:66:c8:16:34:e2:10:d1:
         d4:6b:47:d6:b8:f2:d7:a7:35:17:3d:a1:48:ec:ee:94:52:4a:
         77:44:e3:2e:d2:9a:e3:ed:6f:46:5e:ac:c3:05:63:a4:77:b5:
         56:5b:35:f1:e4:9a:31:cc:f2:cb:9a:f0:fb:78:c0:2d:22:96:
         d7:4c:99:85:b1:aa:8c:d7:de:68:46:d8:7a:f0:cf:3c:ec:26:
         00:e5:af:fb:e7:52:39:90:ef:07:4d:2a:e0:a6:ad:ca:ea:0d:
         e1:ae:80:ec:29:6a:90:33:00:80:5b:48:06:00:0d:80:cd:88:
         22:19:f9:be:c9:88:84:3d:f2:49:c2:18:8c:b3:fa:c5:f6:cb:
         a6:b1:13:a8:de:ae:d0:ec:c0:54:03:10:1c:c1:78:e0:62:5e:
         0c:9b:04:93:6a:ee:8f:a6:ba:ba:30:1d:27:e7:5c:10:dd:f2:
         37:08:d7:61:9f:3c:0d:b0:52:41:2c:3b:3d:c1:17:ee:ba:84:
         02:e3:ab:9a:cb:97:d1:af:9f:3d:72:74:a7:c7:e2:27:54:6d:
         9a:b7:23:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:42:22 2025 by rpki-client