Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/34352e3137322e3134312e302f32342d3234203d3e20323634383030.roa
File:                     34352e3137322e3134312e302f32342d3234203d3e20323634383030.roa (raw, json)
Hash identifier:          YzIWfeOONHrJCBya+pF28M1Z5XAy+lTVrXm2nOTEYlI=
Subject key identifier:   D6:45:1C:8C:4D:7D:DC:94:9B:F3:47:E1:62:5C:1D:1E:7B:E7:12:29
Certificate issuer:       /CN=A452CC0A52E6766C48F9C7DF2D4337A911BA64D1
Certificate serial:       2E67C255B8CC3931B94EEC3C2C8DBDF3D6572506
Authority key identifier: A4:52:CC:0A:52:E6:76:6C:48:F9:C7:DF:2D:43:37:A9:11:BA:64:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/34352e3137322e3134312e302f32342d3234203d3e20323634383030.roa
Signing time:             Tue 12 Aug 2025 13:35:30 +0000
ROA not before:           Tue 12 Aug 2025 13:30:30 +0000
ROA not after:            Tue 11 Aug 2026 13:35:30 +0000
asID:                     264800
IP address blocks:        45.172.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Aug 2025 05:15:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:67:c2:55:b8:cc:39:31:b9:4e:ec:3c:2c:8d:bd:f3:d6:57:25:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A452CC0A52E6766C48F9C7DF2D4337A911BA64D1
        Validity
            Not Before: Aug 12 13:30:30 2025 GMT
            Not After : Aug 11 13:35:30 2026 GMT
        Subject: CN=D6451C8C4D7DDC949BF347E1625C1D1E7BE71229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:65:62:48:48:ba:ba:da:7b:9d:6c:c7:5d:
                    3a:56:82:2e:f4:d3:7b:e6:53:ec:2a:cf:01:81:40:
                    96:5b:b0:93:e7:2d:16:3a:74:67:69:7f:ca:4a:11:
                    9b:12:3b:9f:2a:d5:0b:89:36:7a:3b:5a:9c:f8:b7:
                    d2:2d:45:27:41:73:0f:fb:ef:da:c4:12:80:5c:b1:
                    c6:06:e0:a2:49:5a:4a:ab:b3:f9:85:74:70:ec:df:
                    6d:a5:13:6b:2a:26:12:5f:fb:e3:94:d0:79:32:f9:
                    f0:70:01:7a:d2:dd:aa:3b:4d:fb:2b:25:19:65:68:
                    46:1d:72:69:4a:7f:79:72:26:84:75:fe:21:e7:20:
                    7a:f1:9f:92:30:ca:77:ef:a9:3c:80:f1:01:0d:80:
                    be:eb:65:b9:7a:51:e8:42:91:3f:2c:16:ad:02:c2:
                    06:4d:72:5d:09:7e:27:5c:c5:98:bd:b9:e1:2f:4f:
                    be:f7:4e:30:f4:e0:69:16:0c:d8:05:fd:c1:d4:a7:
                    b6:c4:28:90:c8:e6:31:a2:1c:4a:d3:80:38:ab:c1:
                    c6:51:1c:e6:d9:00:21:00:5d:31:2c:ef:88:40:65:
                    0b:54:39:21:0e:78:c2:33:a8:59:38:2e:1b:a3:89:
                    16:81:ef:5f:05:62:a1:03:66:cb:a6:b3:02:4c:8c:
                    67:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:45:1C:8C:4D:7D:DC:94:9B:F3:47:E1:62:5C:1D:1E:7B:E7:12:29
            X509v3 Authority Key Identifier:
                keyid:A4:52:CC:0A:52:E6:76:6C:48:F9:C7:DF:2D:43:37:A9:11:BA:64:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/34352e3137322e3134312e302f32342d3234203d3e20323634383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:d5:38:04:a8:2a:7f:f1:12:6e:7e:f7:f1:c2:44:0c:54:a9:
         eb:71:ce:15:e0:da:3a:f4:19:58:ca:d0:35:a3:c6:7a:84:a9:
         5b:79:ad:3f:0f:5e:9f:99:17:0f:ea:d1:ec:c0:93:75:f8:d2:
         67:d6:28:20:ee:a1:2f:41:0f:b8:81:4d:d6:ee:f2:e9:8e:22:
         6d:16:e6:c7:a6:04:9e:0c:2b:1e:a3:1e:87:3c:96:b4:44:5b:
         ed:a1:60:20:4c:f6:d1:bd:c0:b8:58:da:f2:06:2c:c1:4c:08:
         62:d4:40:f0:10:e6:6f:04:f9:dd:46:ff:d5:34:57:d9:7e:71:
         db:36:15:5d:8e:d7:25:f5:78:9a:95:62:0b:a0:5e:17:9a:3a:
         9e:0f:34:14:a5:32:e3:89:89:42:54:58:73:fb:af:d9:9d:f6:
         59:e3:62:0c:d4:04:2c:ef:31:72:d7:b4:f3:76:9d:e4:15:b5:
         38:3b:19:78:b3:70:3e:74:e8:e6:12:82:ba:ee:65:33:16:64:
         c2:e9:a3:f2:6e:22:30:9a:0a:1d:26:ea:95:e1:e0:c4:95:31:
         7c:47:be:b1:4b:e6:9f:05:07:7f:dd:f1:aa:80:df:3a:d8:b0:
         e0:ec:ad:b2:e9:9b:8c:db:70:10:1a:f6:55:48:c2:e5:74:cb:
         b3:38:3d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:40:20 2025 by rpki-client