Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130302e302f32342d3234203d3e20323636373930.roa
File:                     34352e3233332e3130302e302f32342d3234203d3e20323636373930.roa (raw, json)
Hash identifier:          S9r2VupuzpkhFS4NaJfHflWyQa7Sv6ScYiZt9zIBl5Y=
Subject key identifier:   52:07:34:25:B9:47:73:77:AB:7A:27:87:99:47:CB:EB:76:F0:4C:C6
Certificate issuer:       /CN=69B942F2442A4B878DCF7E43089B60B94955608D
Certificate serial:       6E91EAB83C8019AD9F95044900894F5E930CC91E
Authority key identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130302e302f32342d3234203d3e20323636373930.roa
Signing time:             Wed 06 Aug 2025 21:50:00 +0000
ROA not before:           Wed 06 Aug 2025 21:45:00 +0000
ROA not after:            Wed 05 Aug 2026 21:50:00 +0000
asID:                     266790
IP address blocks:        45.233.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:91:ea:b8:3c:80:19:ad:9f:95:04:49:00:89:4f:5e:93:0c:c9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B942F2442A4B878DCF7E43089B60B94955608D
        Validity
            Not Before: Aug  6 21:45:00 2025 GMT
            Not After : Aug  5 21:50:00 2026 GMT
        Subject: CN=52073425B9477377AB7A27879947CBEB76F04CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6b:95:25:66:46:d5:d5:3d:2f:42:84:67:ea:
                    df:a0:cd:13:63:31:5d:77:c3:70:0d:a3:3e:7d:68:
                    e0:a1:4d:1d:b0:9b:9e:09:60:76:97:15:88:54:11:
                    66:31:5a:45:a2:95:33:24:e9:60:7f:de:5c:c6:f4:
                    af:d7:84:91:29:0e:c1:26:6d:6b:28:0a:53:61:c4:
                    62:e7:ea:14:0c:ae:c3:f7:3f:fe:6f:63:1b:83:69:
                    65:e7:9b:e1:9f:40:ce:5b:ee:d3:5f:35:91:84:ef:
                    fb:f1:41:7c:5f:91:62:45:42:39:af:6f:8d:8d:67:
                    5e:74:c3:3c:ed:f0:10:9e:ac:15:4f:f4:96:95:ff:
                    0f:7d:f4:45:83:5a:c9:03:5e:95:6e:3c:c7:40:52:
                    1d:11:6e:95:4c:a5:b7:05:eb:7e:60:26:b4:25:21:
                    96:87:5d:93:47:b0:9b:a5:da:ba:fb:e7:8d:68:84:
                    94:8a:eb:7f:d5:b5:fb:45:58:0d:19:57:bf:39:1a:
                    20:a0:b7:6d:60:da:6e:dc:f9:85:ec:3c:d5:c0:9f:
                    42:93:ff:51:8e:7e:38:f0:4f:1c:fc:d6:bf:11:d7:
                    6b:4a:04:6e:b7:b5:20:cc:fc:f2:1b:2b:83:f4:f8:
                    c8:fd:3b:02:c7:f5:ba:10:a3:8e:9c:5e:fd:ca:e6:
                    3c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:07:34:25:B9:47:73:77:AB:7A:27:87:99:47:CB:EB:76:F0:4C:C6
            X509v3 Authority Key Identifier:
                keyid:69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130302e302f32342d3234203d3e20323636373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:95:67:9f:e0:31:de:02:eb:42:01:22:de:97:b8:b9:a9:48:
         3b:93:42:1b:61:36:73:6a:9a:75:6c:b6:14:a8:39:e8:83:dc:
         b9:a5:5a:b2:55:2f:bd:0d:61:6c:62:85:68:5c:49:9d:a1:e5:
         8f:d5:82:b7:5f:13:c3:4a:32:0a:1c:88:ef:2c:e4:b9:a9:4a:
         87:6e:44:14:43:ce:2b:c7:9f:34:a5:6c:c1:07:6d:5c:00:85:
         a3:e7:ce:8f:ff:9b:6a:37:7d:1f:57:70:52:57:21:7c:82:cd:
         de:08:df:a3:2d:e2:0a:11:b6:03:20:44:51:9c:05:38:0b:7e:
         8d:92:95:a3:48:76:59:ea:50:29:07:47:f1:1c:48:72:8f:bb:
         53:59:41:14:9b:d4:af:2f:3b:4b:dc:e1:ab:31:48:07:05:73:
         7f:c9:51:bd:77:d3:fb:be:49:39:76:14:d0:e5:f5:04:d5:1e:
         52:90:51:42:e2:cc:70:44:b8:42:c0:38:c4:79:fa:a2:9e:2b:
         ee:5f:86:41:5c:0f:57:d1:dd:61:67:08:14:93:32:bc:c9:a4:
         f0:b2:02:1c:a3:eb:7b:85:29:40:6c:08:59:1b:37:20:09:d9:
         2f:d3:46:5b:10:d4:ea:35:95:ad:e9:e0:98:c1:0d:5a:69:f2:
         d9:4a:51:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:21:32 2025 by rpki-client