Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0FB08AD1CC3CF28E449F4B551589B1C823288F290AF57FCF3D78F89B82D3CC9/0/34352e3232342e3138382e302f32322d3234203d3e20323635383533.roa
File:                     34352e3232342e3138382e302f32322d3234203d3e20323635383533.roa (raw, json)
Hash identifier:          uLYYGS5RBnHQh6+pHzbBsbqKyw3RU53YpuqxZEfJ31U=
Subject key identifier:   B6:58:F2:8C:76:BD:01:65:17:BD:31:11:30:B2:E4:E3:4C:55:CB:36
Certificate issuer:       /CN=91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6
Certificate serial:       4D5B682081A2FCB39911CEF45CC0BC52AD1D03DC
Authority key identifier: 91:DB:B2:B4:BA:25:E4:71:DB:FD:1A:B6:84:91:63:BE:A0:77:E1:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0FB08AD1CC3CF28E449F4B551589B1C823288F290AF57FCF3D78F89B82D3CC9/0/34352e3232342e3138382e302f32322d3234203d3e20323635383533.roa
Signing time:             Thu 18 Sep 2025 11:20:00 +0000
ROA not before:           Thu 18 Sep 2025 11:15:00 +0000
ROA not after:            Thu 17 Sep 2026 11:20:00 +0000
asID:                     265853
IP address blocks:        45.224.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0FB08AD1CC3CF28E449F4B551589B1C823288F290AF57FCF3D78F89B82D3CC9/0/91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0FB08AD1CC3CF28E449F4B551589B1C823288F290AF57FCF3D78F89B82D3CC9/0/91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5b:68:20:81:a2:fc:b3:99:11:ce:f4:5c:c0:bc:52:ad:1d:03:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6
        Validity
            Not Before: Sep 18 11:15:00 2025 GMT
            Not After : Sep 17 11:20:00 2026 GMT
        Subject: CN=B658F28C76BD016517BD311130B2E4E34C55CB36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:9c:2d:4b:86:09:3c:31:c7:8f:10:a5:28:
                    ba:e5:87:9e:75:9a:07:79:3b:f0:d3:55:4d:7c:67:
                    c0:7b:dd:4e:09:6a:ab:e0:ef:f6:d1:5f:9c:c0:1f:
                    83:d6:0d:a6:78:bb:d1:f1:78:f0:e0:22:9c:c9:e4:
                    cd:9f:d4:47:45:fe:f6:0b:ea:9b:d6:43:76:21:74:
                    be:20:2f:c2:4e:e1:43:1e:04:fd:62:6e:cd:a1:0a:
                    c3:26:5f:a9:4b:87:1b:e7:61:3a:16:5d:41:e3:6e:
                    fb:66:df:e0:64:ec:0b:a3:23:06:4a:4c:f8:0d:a8:
                    7a:71:60:cc:03:20:bc:5b:46:ff:14:cb:3f:fd:44:
                    ec:14:e7:fb:87:3d:9c:d8:a5:a0:ba:dc:c1:68:94:
                    0c:46:66:7c:7b:1b:e0:6e:71:9e:71:54:2f:09:d3:
                    4f:3e:a1:0d:12:7d:87:3e:bb:31:46:91:b7:09:8f:
                    e3:4a:8a:10:f4:5b:21:dc:8e:23:5a:ed:82:80:73:
                    43:a8:fd:ec:e9:50:1d:f4:65:d5:c5:5c:57:53:f4:
                    fe:59:c7:92:ce:23:b8:05:e1:50:b8:49:ec:f3:3b:
                    ae:35:fa:de:f8:90:23:e3:dd:e9:d6:72:39:5a:c4:
                    5d:00:74:df:83:97:dd:79:dd:a7:54:d4:4d:61:f0:
                    69:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:58:F2:8C:76:BD:01:65:17:BD:31:11:30:B2:E4:E3:4C:55:CB:36
            X509v3 Authority Key Identifier:
                keyid:91:DB:B2:B4:BA:25:E4:71:DB:FD:1A:B6:84:91:63:BE:A0:77:E1:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0FB08AD1CC3CF28E449F4B551589B1C823288F290AF57FCF3D78F89B82D3CC9/0/91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0FB08AD1CC3CF28E449F4B551589B1C823288F290AF57FCF3D78F89B82D3CC9/0/34352e3232342e3138382e302f32322d3234203d3e20323635383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:ca:d7:ca:42:56:59:4d:1d:88:51:27:05:4b:5c:0b:49:ea:
         d6:58:17:8e:1e:19:6a:19:18:42:fa:52:a6:03:5b:b6:ac:3a:
         76:89:c9:0c:b9:ca:23:ba:5d:f2:a3:02:e3:85:a0:46:33:20:
         db:8c:6f:0d:8b:0a:bb:a5:57:90:4b:69:d4:30:8d:d0:2d:8a:
         7d:69:ed:cb:b4:8e:b6:55:ad:60:b9:bc:3f:e1:13:4a:b3:6b:
         66:fa:9f:cb:b9:e9:52:b3:11:71:39:de:45:fa:ed:f3:d7:bd:
         1b:db:da:de:a0:dc:15:8b:f3:cf:93:c4:42:18:6e:51:92:5f:
         bf:69:bd:18:79:b1:30:19:d6:f8:b4:c9:ca:e3:c8:db:43:a7:
         36:27:54:06:e1:e8:ff:d9:12:c6:f4:04:91:0d:69:35:ab:79:
         ec:f3:7c:34:ca:62:70:0d:58:ec:2b:cc:8f:ed:10:6d:9f:65:
         74:36:d7:79:68:3f:da:01:81:d9:0f:18:f6:43:90:ec:85:85:
         63:22:84:4b:07:01:25:3b:50:e9:1b:9d:9c:96:05:b6:90:82:
         f4:65:86:43:a8:a7:77:d3:b9:04:52:de:8d:27:e5:27:ee:3f:
         06:85:86:2e:96:81:96:f3:aa:cc:85:ed:df:13:2f:99:1f:a5:
         d2:ba:5e:3f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTVtoIIGi/LOZEc70XMC8Uq0dA9wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFEQkIyQjRCQTI1RTQ3MURCRkQxQUI2ODQ5MTYzQkVB
MDc3RTFBNjAeFw0yNTA5MTgxMTE1MDBaFw0yNjA5MTcxMTIwMDBaMDMxMTAvBgNV
BAMTKEI2NThGMjhDNzZCRDAxNjUxN0JEMzExMTMwQjJFNEUzNEM1NUNCMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5LpwtS4YJPDHHjxClKLrlh551
mgd5O/DTVU18Z8B73U4Jaqvg7/bRX5zAH4PWDaZ4u9HxePDgIpzJ5M2f1EdF/vYL
6pvWQ3YhdL4gL8JO4UMeBP1ibs2hCsMmX6lLhxvnYToWXUHjbvtm3+Bk7AujIwZK
TPgNqHpxYMwDILxbRv8Uyz/9ROwU5/uHPZzYpaC63MFolAxGZnx7G+BucZ5xVC8J
008+oQ0SfYc+uzFGkbcJj+NKihD0WyHcjiNa7YKAc0Oo/ezpUB30ZdXFXFdT9P5Z
x5LOI7gF4VC4SezzO641+t74kCPj3enWcjlaxF0AdN+Dl9153adU1E1h8GkjAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUtljyjHa9AWUXvTERMLLk40xVyzYwHwYDVR0j
BBgwFoAUkduytLol5HHb/Rq2hJFjvqB34aYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMEZCMDhBRDFDQzNDRjI4RTQ0OUY0QjU1MTU4OUIxQzgy
MzI4OEYyOTBBRjU3RkNGM0Q3OEY4OUI4MkQzQ0M5LzAvOTFEQkIyQjRCQTI1RTQ3
MURCRkQxQUI2ODQ5MTYzQkVBMDc3RTFBNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MURCQjJCNEJBMjVFNDcxREJG
RDFBQjY4NDkxNjNCRUEwNzdFMUE2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTBGQjA4QUQxQ0MzQ0YyOEU0NDlGNEI1NTE1ODlCMUM4MjMyODhGMjkw
QUY1N0ZDRjNENzhGODlCODJEM0NDOS8wLzM0MzUyZTMyMzIzNDJlMzEzODM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzgzNTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLeC8
MA0GCSqGSIb3DQEBCwUAA4IBAQBtytfKQlZZTR2IUScFS1wLSerWWBeOHhlqGRhC
+lKmA1u2rDp2ickMucojul3yowLjhaBGMyDbjG8Niwq7pVeQS2nUMI3QLYp9ae3L
tI62Va1gubw/4RNKs2tm+p/LuelSsxFxOd5F+u3z170b29reoNwVi/PPk8RCGG5R
kl+/ab0YebEwGdb4tMnK48jbQ6c2J1QG4ej/2RLG9ASRDWk1q3ns83w0ymJwDVjs
K8yP7RBtn2V0Ntd5aD/aAYHZDxj2Q5DshYVjIoRLBwElO1DpG52clgW2kIL0ZYZD
qKd307kEUt6NJ+Un7j8GhYYuloGW86rMhe3fEy+ZH6XSul4/
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:03:57 2025 by rpki-client