Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/34352e3233382e382e302f32322d3234203d3e20323633373735.roa
File:                     34352e3233382e382e302f32322d3234203d3e20323633373735.roa (raw, json)
Hash identifier:          Z3lz6doNgxOpR++1ttrr4jdZ3ASiFhz8BqShgTMT1fU=
Subject key identifier:   44:D9:4B:83:48:29:62:16:39:C3:FE:85:47:AA:96:A0:37:DB:7C:9B
Certificate issuer:       /CN=C3B8E297B1CFDAFE3E214D9FDC1380260406DB97
Certificate serial:       3E6B03C51C5032C2E55FC0526D7F893189DE784D
Authority key identifier: C3:B8:E2:97:B1:CF:DA:FE:3E:21:4D:9F:DC:13:80:26:04:06:DB:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/34352e3233382e382e302f32322d3234203d3e20323633373735.roa
Signing time:             Thu 25 Sep 2025 14:50:00 +0000
ROA not before:           Thu 25 Sep 2025 14:45:00 +0000
ROA not after:            Thu 24 Sep 2026 14:50:00 +0000
asID:                     263775
IP address blocks:        45.238.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:6b:03:c5:1c:50:32:c2:e5:5f:c0:52:6d:7f:89:31:89:de:78:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3B8E297B1CFDAFE3E214D9FDC1380260406DB97
        Validity
            Not Before: Sep 25 14:45:00 2025 GMT
            Not After : Sep 24 14:50:00 2026 GMT
        Subject: CN=44D94B834829621639C3FE8547AA96A037DB7C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:31:54:00:9f:71:7e:1e:45:40:7e:37:48:
                    d7:0c:88:3e:ca:f7:9f:fd:3d:e0:d6:48:d9:f3:df:
                    c1:ff:2e:0b:4d:3d:6e:43:2d:65:89:2d:c4:6b:32:
                    44:8f:bd:d1:2a:1d:88:d5:27:32:37:54:42:8e:db:
                    75:e2:97:30:aa:cc:49:82:5b:5c:bf:1b:61:15:e9:
                    0e:7a:fd:cd:f0:86:cb:10:7a:ae:15:6c:f9:1a:6c:
                    8e:c2:30:ca:b0:0e:67:88:7c:a7:70:e9:72:9d:38:
                    b1:4c:0c:d9:78:89:fd:cb:a3:3f:39:d6:2c:cb:09:
                    21:e5:dc:e9:f1:36:ba:77:b7:4f:1c:18:05:c6:30:
                    e6:ed:81:6a:30:dd:f1:2b:14:45:ee:43:5c:d4:0a:
                    ed:c3:1f:b8:08:e3:a9:82:d7:d2:c3:3b:5b:e6:42:
                    90:97:8f:aa:1f:3f:df:4a:cd:51:54:2b:00:fa:64:
                    e2:7f:00:0f:4c:86:94:1e:ec:c3:24:b0:9b:f3:50:
                    20:ed:2c:8e:00:d1:50:62:aa:62:93:03:37:e2:33:
                    87:22:8e:ea:89:51:8d:9b:2c:92:92:ed:c9:2b:1b:
                    66:72:5c:8f:72:1d:e0:6b:f3:e2:2a:d9:a6:05:0b:
                    ad:31:a7:57:76:1c:08:30:82:b8:6a:6d:97:4d:4f:
                    cb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D9:4B:83:48:29:62:16:39:C3:FE:85:47:AA:96:A0:37:DB:7C:9B
            X509v3 Authority Key Identifier:
                keyid:C3:B8:E2:97:B1:CF:DA:FE:3E:21:4D:9F:DC:13:80:26:04:06:DB:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/34352e3233382e382e302f32322d3234203d3e20323633373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:bb:ef:64:09:63:2d:d7:0d:47:3b:d4:e2:ef:0f:54:75:47:
         a5:87:c4:1f:5c:bc:0b:c4:18:6c:8d:a2:0c:18:d6:ba:26:5c:
         e4:23:19:b0:c6:e1:c3:81:13:1b:b7:d1:86:59:35:75:34:f9:
         be:b5:72:e6:5e:b5:1b:9e:f3:af:ea:17:33:af:82:19:91:f1:
         34:4c:6b:2d:60:24:b8:07:49:fa:67:fc:9a:ba:31:1c:20:6f:
         0e:40:84:75:d5:b6:4d:bd:09:67:ad:eb:de:bf:22:b4:f3:5c:
         84:8d:35:58:fa:b2:5c:68:67:e1:42:e6:03:01:a8:54:2d:d0:
         8c:9e:43:1a:ed:08:e9:cd:1f:97:9a:3b:49:b4:84:6a:2b:41:
         53:e9:2d:85:3c:4e:0f:84:74:9e:0d:34:c1:a3:e3:e3:22:d3:
         d8:71:04:f4:8e:19:0c:b3:e0:0a:a3:b6:26:d8:a2:0c:d6:1f:
         f2:57:01:bd:bc:19:ce:9f:bc:f3:c7:9d:94:a8:a8:18:93:1b:
         5d:06:a2:d6:d5:89:60:ce:8b:27:5b:6d:3e:49:9b:d4:6d:37:
         30:c4:4e:23:2f:88:77:79:c5:f9:41:64:6d:48:ae:f7:56:f3:
         8e:fa:27:4a:8b:b6:f3:e6:68:c9:50:73:b8:5c:d8:21:cb:ad:
         a5:a5:d7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:29:14 2025 by rpki-client