Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1B1FAD315E58422FB3642BF333709AB88AEB6BDA14A806D7C43FDB57C377285/0/34352e3232392e3234382e302f32322d3234203d3e20323734323232.roa
File:                     34352e3232392e3234382e302f32322d3234203d3e20323734323232.roa (raw, json)
Hash identifier:          RnDwq9e/MHwTYYPndgxZdwk7L+vD578uTIjvcuFQljk=
Subject key identifier:   E2:25:51:71:6C:41:7F:C8:EC:29:25:13:64:E5:70:8C:BC:68:5F:E8
Certificate issuer:       /CN=04DA5678A6D80556909D2141072E40172BEFF2A5
Certificate serial:       25D48EB178DDACB378A0DC957CA7300E0B5BB004
Authority key identifier: 04:DA:56:78:A6:D8:05:56:90:9D:21:41:07:2E:40:17:2B:EF:F2:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04DA5678A6D80556909D2141072E40172BEFF2A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1B1FAD315E58422FB3642BF333709AB88AEB6BDA14A806D7C43FDB57C377285/0/34352e3232392e3234382e302f32322d3234203d3e20323734323232.roa
Signing time:             Wed 08 Oct 2025 13:40:00 +0000
ROA not before:           Wed 08 Oct 2025 13:35:00 +0000
ROA not after:            Wed 07 Oct 2026 13:40:00 +0000
asID:                     274222
IP address blocks:        45.229.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1B1FAD315E58422FB3642BF333709AB88AEB6BDA14A806D7C43FDB57C377285/0/04DA5678A6D80556909D2141072E40172BEFF2A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1B1FAD315E58422FB3642BF333709AB88AEB6BDA14A806D7C43FDB57C377285/0/04DA5678A6D80556909D2141072E40172BEFF2A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04DA5678A6D80556909D2141072E40172BEFF2A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d4:8e:b1:78:dd:ac:b3:78:a0:dc:95:7c:a7:30:0e:0b:5b:b0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04DA5678A6D80556909D2141072E40172BEFF2A5
        Validity
            Not Before: Oct  8 13:35:00 2025 GMT
            Not After : Oct  7 13:40:00 2026 GMT
        Subject: CN=E22551716C417FC8EC29251364E5708CBC685FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:c2:6b:fb:3b:cc:e1:be:f2:34:f0:51:69:
                    4b:2d:61:96:51:81:55:d2:44:e2:e7:ad:88:fb:81:
                    3f:f1:ef:2e:52:33:a2:53:e3:06:d7:ca:83:9c:70:
                    dc:3b:9b:d4:1a:d2:b1:79:c3:7e:57:61:67:af:8c:
                    31:66:af:f0:11:c2:a9:0f:ab:de:3e:29:9f:7e:0b:
                    13:ea:a4:5c:80:8c:64:bf:51:ee:e6:03:b5:2a:1e:
                    49:46:77:c2:09:e2:1e:03:a3:2f:a4:c7:0d:3b:17:
                    7c:bb:e3:ac:8c:03:88:71:c4:d8:cc:d2:8f:da:e7:
                    f7:f5:c2:8e:a8:2f:83:bc:73:2b:3a:a4:b6:a5:86:
                    fa:2c:92:f6:21:55:90:3b:ee:84:57:21:b7:54:98:
                    1b:fa:55:24:89:55:6d:50:47:a7:cc:9b:ff:a2:0c:
                    91:cf:f0:ec:28:9c:f0:07:94:37:4a:d1:83:09:f2:
                    58:da:a2:8a:32:8b:99:0f:ca:05:7d:f1:74:63:1f:
                    10:f7:ca:c9:79:ea:fc:88:15:20:61:00:69:99:a9:
                    d5:36:3f:c4:60:cc:07:00:ef:ba:19:e5:db:25:82:
                    60:e0:e0:39:62:e2:27:c5:b7:e9:5d:78:c3:f4:90:
                    fd:41:09:c3:6f:45:bc:72:c7:4e:d1:ed:3a:8b:60:
                    21:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:25:51:71:6C:41:7F:C8:EC:29:25:13:64:E5:70:8C:BC:68:5F:E8
            X509v3 Authority Key Identifier:
                keyid:04:DA:56:78:A6:D8:05:56:90:9D:21:41:07:2E:40:17:2B:EF:F2:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1B1FAD315E58422FB3642BF333709AB88AEB6BDA14A806D7C43FDB57C377285/0/04DA5678A6D80556909D2141072E40172BEFF2A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04DA5678A6D80556909D2141072E40172BEFF2A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1B1FAD315E58422FB3642BF333709AB88AEB6BDA14A806D7C43FDB57C377285/0/34352e3232392e3234382e302f32322d3234203d3e20323734323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:02:f1:69:9f:a7:43:8f:1a:53:94:49:d1:af:5e:c0:f2:7e:
         ca:61:5d:72:f8:9f:af:df:de:69:8a:07:54:05:1b:c1:f0:aa:
         92:c3:42:2a:99:3a:38:a6:08:d3:f0:d0:25:cf:15:b8:71:f9:
         c2:57:ca:d0:52:c5:54:4a:f7:3a:99:dc:13:39:49:f1:5a:94:
         66:e3:b5:80:35:a3:d2:ec:2d:dc:b8:6a:e3:3c:b8:60:d5:29:
         dd:ba:00:2c:85:97:41:ca:7e:73:a0:35:a6:b0:1d:17:8c:1d:
         13:13:97:f3:26:50:ad:d5:5d:9b:86:08:68:c3:d2:c9:35:de:
         89:46:e6:53:a0:db:31:8c:79:7d:21:f5:9f:de:50:ed:d0:bd:
         b8:2e:08:0e:3b:2d:92:90:5b:53:3d:99:e9:45:8e:b7:28:14:
         29:43:83:c7:43:b8:43:bd:b4:0a:32:27:b3:8d:6f:8d:74:49:
         d1:97:7c:0f:3b:46:2f:76:e2:0e:d4:8c:df:62:71:ea:e7:81:
         85:44:fe:26:04:0c:d4:45:1b:70:b3:30:57:71:33:81:a9:ec:
         ed:07:48:f7:69:d7:c8:e0:c9:ab:5f:66:03:07:e6:5d:25:9c:
         a1:f5:58:31:f5:55:37:9a:4e:57:02:89:86:91:8e:69:7f:e0:
         17:11:ac:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:45:48 2025 by rpki-client