Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134322e302f32332d3233203d3e20323635363633.roa
File:                     34352e3137352e3134322e302f32332d3233203d3e20323635363633.roa (raw, json)
Hash identifier:          md3N7v3kyPBVtLnYoGF3mZh1hZdyZT4r4gf9Lm8GtxA=
Subject key identifier:   44:6B:C7:96:4D:1F:1D:10:72:EC:3C:1C:77:27:10:80:F3:FA:0C:AB
Certificate issuer:       /CN=029141245BD9F1CE31BEF7964E181E44F17CE901
Certificate serial:       7BD1166DA69B407078D064EF928B6EE977C515F5
Authority key identifier: 02:91:41:24:5B:D9:F1:CE:31:BE:F7:96:4E:18:1E:44:F1:7C:E9:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134322e302f32332d3233203d3e20323635363633.roa
Signing time:             Wed 06 Aug 2025 20:34:55 +0000
ROA not before:           Wed 06 Aug 2025 20:29:55 +0000
ROA not after:            Wed 05 Aug 2026 20:34:55 +0000
asID:                     265663
IP address blocks:        45.175.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Aug 2025 21:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d1:16:6d:a6:9b:40:70:78:d0:64:ef:92:8b:6e:e9:77:c5:15:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=029141245BD9F1CE31BEF7964E181E44F17CE901
        Validity
            Not Before: Aug  6 20:29:55 2025 GMT
            Not After : Aug  5 20:34:55 2026 GMT
        Subject: CN=446BC7964D1F1D1072EC3C1C77271080F3FA0CAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:37:ff:92:17:33:28:4b:3d:33:84:a6:25:b4:
                    2d:e8:5b:64:79:48:b0:e4:69:0f:05:e1:91:ea:c5:
                    ab:fe:fe:38:44:a2:af:a4:6d:6f:77:13:23:f7:6d:
                    56:8e:df:60:9a:0b:05:0c:04:12:ba:9a:3c:3a:bd:
                    02:1c:10:f8:c8:4b:30:3a:18:31:bd:52:4a:48:a3:
                    6a:5e:43:df:bc:43:1c:92:65:91:a7:6a:d9:2c:a9:
                    28:8f:3f:b4:00:55:ab:8c:1e:20:bf:41:35:64:b3:
                    d2:72:a4:a1:0f:f1:a6:78:73:8a:08:53:dc:8a:56:
                    dc:d2:db:0f:22:74:ef:c8:55:d2:f5:a0:1b:50:95:
                    13:14:42:83:78:2a:ce:1b:c5:dd:2d:60:dc:f9:fd:
                    c2:e9:3e:bc:65:b6:3d:7d:93:32:a5:aa:a8:6f:37:
                    cb:34:ec:ef:56:fe:d9:64:71:74:32:b8:89:25:50:
                    9d:0b:31:e0:b7:9c:7e:71:95:b5:92:e8:1a:c3:4d:
                    b4:eb:94:0d:4f:42:19:c9:56:ee:40:ac:45:18:58:
                    14:69:4e:6d:6b:25:8e:42:e1:89:72:12:e0:51:f6:
                    d7:96:04:93:9d:07:8c:5b:ec:f9:9b:64:6c:94:3f:
                    d2:4b:ac:09:d0:09:b7:64:9e:31:e5:b3:7d:8e:47:
                    29:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6B:C7:96:4D:1F:1D:10:72:EC:3C:1C:77:27:10:80:F3:FA:0C:AB
            X509v3 Authority Key Identifier:
                keyid:02:91:41:24:5B:D9:F1:CE:31:BE:F7:96:4E:18:1E:44:F1:7C:E9:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134322e302f32332d3233203d3e20323635363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:f1:ec:d3:af:7d:46:e0:2e:a7:a7:05:16:38:e9:3b:80:ea:
         e0:b0:d4:b8:2f:d8:fe:e5:84:11:f7:78:91:97:30:e5:07:3d:
         79:99:65:33:13:4a:e4:74:ca:7f:71:f1:d6:66:0b:5a:41:09:
         2f:4d:3d:9f:b3:45:77:e4:13:f6:55:e4:b0:ee:d2:ae:05:df:
         08:2b:50:63:1a:5a:b1:8d:14:bf:ec:68:41:9f:76:f2:fd:27:
         8f:6d:8c:5e:62:35:9b:b9:47:ce:cd:2b:54:50:10:31:5c:12:
         ad:a3:92:a2:dd:05:90:e5:90:3a:17:31:00:94:c9:08:40:36:
         1f:60:47:d5:7f:d3:51:8a:54:f5:93:93:d8:47:82:a7:d7:73:
         b3:7a:4e:66:45:71:4b:06:25:17:e9:ab:3c:11:7f:01:97:a5:
         64:82:c8:b9:3b:d4:32:9a:ce:d6:42:4c:82:51:48:56:86:37:
         b2:55:cd:14:70:fc:44:eb:f8:a6:54:d8:b0:05:5c:2d:47:ce:
         5b:5a:7a:98:08:bd:93:5a:91:81:15:60:32:39:b8:66:48:6c:
         cf:87:4b:1b:ce:e1:ad:06:c6:8b:25:6c:3b:ff:49:58:09:ec:
         1b:2a:a8:d5:1e:f9:51:38:de:99:7f:19:ca:b1:19:67:db:db:
         fe:95:60:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:38:22 2025 by rpki-client