Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/34352e3136302e33322e302f32342d3234203d3e20323636383736.roa
File:                     34352e3136302e33322e302f32342d3234203d3e20323636383736.roa (raw, json)
Hash identifier:          HqQNIqFmoDML5FvmebDE3cm9XVeavTZjG9axacIQ/pw=
Subject key identifier:   E3:91:16:5B:A6:D2:AF:7F:74:84:26:87:EF:46:CD:3A:96:5E:EA:04
Certificate issuer:       /CN=9A0A973B46C2B2B4900ED226E666340849864C77
Certificate serial:       78F35A3EF76D2805E4EA634571B1A033A36FA3F7
Authority key identifier: 9A:0A:97:3B:46:C2:B2:B4:90:0E:D2:26:E6:66:34:08:49:86:4C:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A0A973B46C2B2B4900ED226E666340849864C77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/34352e3136302e33322e302f32342d3234203d3e20323636383736.roa
Signing time:             Thu 02 Oct 2025 12:00:00 +0000
ROA not before:           Thu 02 Oct 2025 11:55:00 +0000
ROA not after:            Thu 01 Oct 2026 12:00:00 +0000
asID:                     266876
IP address blocks:        45.160.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/9A0A973B46C2B2B4900ED226E666340849864C77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/9A0A973B46C2B2B4900ED226E666340849864C77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A0A973B46C2B2B4900ED226E666340849864C77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 07:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f3:5a:3e:f7:6d:28:05:e4:ea:63:45:71:b1:a0:33:a3:6f:a3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A0A973B46C2B2B4900ED226E666340849864C77
        Validity
            Not Before: Oct  2 11:55:00 2025 GMT
            Not After : Oct  1 12:00:00 2026 GMT
        Subject: CN=E391165BA6D2AF7F74842687EF46CD3A965EEA04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c4:6f:83:0a:bd:53:d0:9b:32:df:ba:a4:67:
                    84:fe:77:4e:e1:75:bf:13:31:8f:57:a9:81:c2:01:
                    fe:0d:5d:2c:50:99:f6:35:be:3d:52:35:3f:71:e9:
                    b5:0a:33:9f:ad:da:6a:d1:50:fa:cb:ae:e5:10:d5:
                    bd:c8:a8:19:6b:09:29:78:79:22:87:9f:fa:fc:ec:
                    c1:98:89:6e:40:d0:86:f1:5b:c6:3a:0a:36:20:f4:
                    72:45:c7:98:4f:4e:79:ab:55:fd:83:05:fa:7c:ae:
                    68:3d:e1:02:b8:91:85:16:01:a0:76:a2:53:45:d2:
                    b9:11:96:71:ea:bb:01:99:bc:ec:17:bb:3a:8a:df:
                    c0:97:3f:f9:0d:0e:13:4c:12:52:03:63:0d:fe:ad:
                    27:69:fa:f0:6c:1e:f7:dd:c8:f0:7f:2f:b3:95:e1:
                    7e:48:22:e5:da:cf:4c:ed:55:a1:ec:ca:12:c0:cd:
                    5e:d6:05:88:d3:a8:65:46:99:5f:94:cd:3d:5a:e1:
                    31:14:13:4a:88:3e:d0:e3:08:52:46:2c:86:97:a5:
                    6f:18:db:24:ce:a4:cc:de:7d:77:54:de:cd:9f:d3:
                    2e:19:4f:7a:73:cc:87:e9:42:e1:d2:0b:13:eb:57:
                    fa:98:b3:82:58:40:ea:cf:d8:78:24:7b:7e:50:ef:
                    a5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:91:16:5B:A6:D2:AF:7F:74:84:26:87:EF:46:CD:3A:96:5E:EA:04
            X509v3 Authority Key Identifier:
                keyid:9A:0A:97:3B:46:C2:B2:B4:90:0E:D2:26:E6:66:34:08:49:86:4C:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/9A0A973B46C2B2B4900ED226E666340849864C77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A0A973B46C2B2B4900ED226E666340849864C77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/34352e3136302e33322e302f32342d3234203d3e20323636383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:5c:6f:8f:9c:1e:cc:19:0f:83:f9:f4:e4:ef:9b:62:3a:4e:
         66:3a:fd:3a:45:22:6f:86:a2:e6:ea:33:79:36:7b:d6:8e:f8:
         ef:10:55:94:ff:e5:41:0d:e5:80:fb:e6:78:77:96:86:25:a3:
         d5:c6:ac:92:82:e0:48:d5:6b:60:29:34:48:27:35:b8:24:78:
         6c:95:bc:af:fe:b7:0b:16:23:60:41:ef:2d:0b:d7:1a:06:2d:
         59:6a:d7:8f:7e:c4:5a:b6:80:1e:29:aa:81:9e:08:17:86:20:
         44:b4:19:82:09:32:43:cb:5d:a2:2b:cb:b6:ab:56:7c:43:31:
         71:3a:b4:e3:37:c1:3a:cd:12:2a:87:02:40:dd:26:37:7b:fa:
         c8:89:a2:ef:43:98:c2:42:6a:d2:d7:3e:96:9d:68:62:df:f1:
         c7:c3:42:a8:ee:41:6e:ee:f5:2e:76:f6:32:a6:a0:bd:5b:28:
         e7:4f:cc:0e:41:7e:e0:52:7c:64:54:c3:f2:30:2e:31:da:53:
         54:fd:f0:f1:b4:4c:ae:6e:ee:fd:3d:ab:f2:c1:c0:50:9b:89:
         da:6e:c1:94:9d:92:2c:1c:18:de:34:b5:36:66:d7:e8:9a:e4:
         c7:24:c3:b8:bf:e8:52:23:71:a5:68:e4:7f:93:79:c7:92:6a:
         6e:fe:b0:43
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUePNaPvdtKAXk6mNFcbGgM6Nvo/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUEwQTk3M0I0NkMyQjJCNDkwMEVEMjI2RTY2NjM0MDg0
OTg2NEM3NzAeFw0yNTEwMDIxMTU1MDBaFw0yNjEwMDExMjAwMDBaMDMxMTAvBgNV
BAMTKEUzOTExNjVCQTZEMkFGN0Y3NDg0MjY4N0VGNDZDRDNBOTY1RUVBMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdxG+DCr1T0Jsy37qkZ4T+d07h
db8TMY9XqYHCAf4NXSxQmfY1vj1SNT9x6bUKM5+t2mrRUPrLruUQ1b3IqBlrCSl4
eSKHn/r87MGYiW5A0IbxW8Y6CjYg9HJFx5hPTnmrVf2DBfp8rmg94QK4kYUWAaB2
olNF0rkRlnHquwGZvOwXuzqK38CXP/kNDhNMElIDYw3+rSdp+vBsHvfdyPB/L7OV
4X5IIuXaz0ztVaHsyhLAzV7WBYjTqGVGmV+UzT1a4TEUE0qIPtDjCFJGLIaXpW8Y
2yTOpMzefXdU3s2f0y4ZT3pzzIfpQuHSCxPrV/qYs4JYQOrP2Hgke35Q76XTAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU45EWW6bSr390hCaH70bNOpZe6gQwHwYDVR0j
BBgwFoAUmgqXO0bCsrSQDtIm5mY0CEmGTHcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMjkyMjYyQ0MxREY4QThEQUNEOEEzNzEzQTY1MzBFOTM2
ODI4MDM5RkFDNEE0MjY4RTJFOTFFQjAzQzZDOTFFLzAvOUEwQTk3M0I0NkMyQjJC
NDkwMEVEMjI2RTY2NjM0MDg0OTg2NEM3Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QTBBOTczQjQ2QzJCMkI0OTAw
RUQyMjZFNjY2MzQwODQ5ODY0Qzc3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjI5MjI2MkNDMURGOEE4REFDRDhBMzcxM0E2NTMwRTkzNjgyODAzOUZB
QzRBNDI2OEUyRTkxRUIwM0M2QzkxRS8wLzM0MzUyZTMxMzYzMDJlMzMzMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM4MzczNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2gIDAN
BgkqhkiG9w0BAQsFAAOCAQEAmFxvj5wezBkPg/n05O+bYjpOZjr9OkUib4ai5uoz
eTZ71o747xBVlP/lQQ3lgPvmeHeWhiWj1caskoLgSNVrYCk0SCc1uCR4bJW8r/63
CxYjYEHvLQvXGgYtWWrXj37EWraAHimqgZ4IF4YgRLQZggkyQ8tdoivLtqtWfEMx
cTq04zfBOs0SKocCQN0mN3v6yImi70OYwkJq0tc+lp1oYt/xx8NCqO5Bbu71Lnb2
MqagvVso50/MDkF+4FJ8ZFTD8jAuMdpTVP3w8bRMrm7u/T2r8sHAUJuJ2m7BlJ2S
LBwY3jS1NmbX6JrkxyTDuL/oUiNxpWjkf5N5x5Jqbv6wQw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:52:21 2025 by rpki-client