Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130312e302f32342d3237203d3e20323636373930.roa
File:                     34352e3233332e3130312e302f32342d3237203d3e20323636373930.roa (raw, json)
Hash identifier:          DeRKwM/An67pNgLXV/dpn4M/zPlXTJlpo2YXlUucA50=
Subject key identifier:   17:98:07:A1:0E:BB:B3:50:80:EA:A4:B9:C1:51:B4:7D:D6:88:0C:37
Certificate issuer:       /CN=69B942F2442A4B878DCF7E43089B60B94955608D
Certificate serial:       1607D504CB746A72A96726F5588D0B528462590D
Authority key identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130312e302f32342d3237203d3e20323636373930.roa
Signing time:             Wed 06 Aug 2025 21:50:00 +0000
ROA not before:           Wed 06 Aug 2025 21:45:00 +0000
ROA not after:            Wed 05 Aug 2026 21:50:00 +0000
asID:                     266790
IP address blocks:        45.233.101.0/24 maxlen: 27
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:07:d5:04:cb:74:6a:72:a9:67:26:f5:58:8d:0b:52:84:62:59:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B942F2442A4B878DCF7E43089B60B94955608D
        Validity
            Not Before: Aug  6 21:45:00 2025 GMT
            Not After : Aug  5 21:50:00 2026 GMT
        Subject: CN=179807A10EBBB35080EAA4B9C151B47DD6880C37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:35:a2:cf:1f:bb:20:ac:90:c2:bc:0b:67:5c:
                    22:cd:e9:fe:10:02:23:54:03:61:62:e9:59:7e:1a:
                    6c:7f:4b:bb:f4:c8:e1:b1:29:ed:af:62:74:c2:af:
                    9d:ad:c6:52:db:05:db:85:63:6c:fb:99:c3:0c:fe:
                    56:e0:8a:8c:63:2f:b2:3a:10:46:01:48:f3:62:00:
                    86:39:47:0d:d9:f5:ba:48:5b:e2:7e:3e:c5:04:32:
                    df:c0:07:90:dd:86:b2:01:cd:43:c6:fb:4c:b5:0a:
                    93:e2:4c:56:f6:d5:a3:54:ab:18:c7:b9:06:5e:92:
                    79:9e:66:b1:44:2f:3c:a2:26:0c:4b:c0:0e:cc:b1:
                    c5:25:de:52:4f:a4:41:6f:12:81:d7:c2:53:db:48:
                    20:d5:92:ac:13:b9:6e:b7:d1:80:3d:68:4b:0c:f5:
                    d2:4a:98:c5:3a:18:2f:c7:5a:1d:33:b7:4f:ba:f2:
                    e7:7a:a0:98:72:3b:52:ae:a0:02:25:35:b6:28:d7:
                    c8:cb:fd:ab:dc:5e:52:cc:6b:fb:a8:be:f3:0b:47:
                    5f:67:a6:e6:f4:93:0d:35:46:bf:0e:e0:c8:b2:47:
                    3d:42:7b:7c:3b:88:e3:a5:14:08:e6:59:88:6f:09:
                    39:1b:22:59:0d:f9:02:c0:0f:6d:c8:6c:76:5b:0a:
                    a4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:98:07:A1:0E:BB:B3:50:80:EA:A4:B9:C1:51:B4:7D:D6:88:0C:37
            X509v3 Authority Key Identifier:
                keyid:69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130312e302f32342d3237203d3e20323636373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:28:81:23:ab:0d:ee:d7:0e:15:52:29:6e:a5:f9:66:01:5c:
         95:78:15:5a:c8:c4:79:bb:6d:4c:f0:02:79:16:d3:ef:57:19:
         27:c7:b1:ef:3b:50:6f:11:8b:86:12:72:2f:88:96:9f:77:4d:
         2b:2c:e5:b9:4f:e5:38:bc:49:74:f9:de:1d:04:f0:99:0c:d6:
         46:27:d3:29:93:16:a7:bd:a7:24:a8:3d:ed:a0:94:e8:d9:12:
         04:9b:7f:29:72:f6:d4:57:4e:f8:2a:2d:f1:c9:41:be:6e:d6:
         b8:ff:e7:5d:0c:33:5d:32:22:87:7c:26:32:ff:b1:6f:d6:2b:
         14:d5:1d:9f:4c:c6:f7:c2:5b:78:77:b4:97:e3:fe:42:9e:29:
         3b:a7:93:07:51:95:51:2a:28:65:a2:c0:06:d1:7a:6f:53:44:
         20:4f:84:fd:e2:02:3a:35:50:a5:39:2b:55:60:4f:19:04:8f:
         2b:ce:b7:89:f3:13:e3:f1:ac:54:d5:88:a6:28:a2:e7:08:95:
         45:b2:68:98:12:6a:ff:65:5c:0a:d2:c0:e9:ae:e5:3c:b6:b6:
         80:a2:c3:da:11:1e:65:40:5b:b2:59:19:62:50:8a:ad:b6:3b:
         43:8d:eb:b0:1d:ea:9c:2b:e1:26:92:a7:9a:02:c8:60:3e:6a:
         c0:bf:a8:a1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFgfVBMt0anKpZyb1WI0LUoRiWQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlCOTQyRjI0NDJBNEI4NzhEQ0Y3RTQzMDg5QjYwQjk0
OTU1NjA4RDAeFw0yNTA4MDYyMTQ1MDBaFw0yNjA4MDUyMTUwMDBaMDMxMTAvBgNV
BAMTKDE3OTgwN0ExMEVCQkIzNTA4MEVBQTRCOUMxNTFCNDdERDY4ODBDMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4NaLPH7sgrJDCvAtnXCLN6f4Q
AiNUA2Fi6Vl+Gmx/S7v0yOGxKe2vYnTCr52txlLbBduFY2z7mcMM/lbgioxjL7I6
EEYBSPNiAIY5Rw3Z9bpIW+J+PsUEMt/AB5DdhrIBzUPG+0y1CpPiTFb21aNUqxjH
uQZeknmeZrFELzyiJgxLwA7MscUl3lJPpEFvEoHXwlPbSCDVkqwTuW630YA9aEsM
9dJKmMU6GC/HWh0zt0+68ud6oJhyO1KuoAIlNbYo18jL/avcXlLMa/uovvMLR19n
pub0kw01Rr8O4MiyRz1Ce3w7iOOlFAjmWYhvCTkbIlkN+QLAD23IbHZbCqRxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUF5gHoQ67s1CA6qS5wVG0fdaIDDcwHwYDVR0j
BBgwFoAUablC8kQqS4eNz35DCJtguUlVYI0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENUMxQTNDMjIwMENBNEE1QjJEQ0M2RUZGNjNGRkE3N0Y4
M0IyNTRCRTIyQjA3NTI2REUzOUFDRkUzREU4QzVELzAvNjlCOTQyRjI0NDJBNEI4
NzhEQ0Y3RTQzMDg5QjYwQjk0OTU1NjA4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OUI5NDJGMjQ0MkE0Qjg3OERD
RjdFNDMwODlCNjBCOTQ5NTU2MDhELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDVDMUEzQzIyMDBDQTRBNUIyRENDNkVGRjYzRkZBNzdGODNCMjU0QkUy
MkIwNzUyNkRFMzlBQ0ZFM0RFOEM1RC8wLzM0MzUyZTMyMzMzMzJlMzEzMDMxMmUz
MDJmMzIzNDJkMzIzNzIwM2QzZTIwMzIzNjM2MzczOTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALell
MA0GCSqGSIb3DQEBCwUAA4IBAQBuKIEjqw3u1w4VUilupflmAVyVeBVayMR5u21M
8AJ5FtPvVxknx7HvO1BvEYuGEnIviJafd00rLOW5T+U4vEl0+d4dBPCZDNZGJ9Mp
kxanvackqD3toJTo2RIEm38pcvbUV074Ki3xyUG+bta4/+ddDDNdMiKHfCYy/7Fv
1isU1R2fTMb3wlt4d7SX4/5Cnik7p5MHUZVRKihlosAG0XpvU0QgT4T94gI6NVCl
OStVYE8ZBI8rzreJ8xPj8axU1YimKKLnCJVFsmiYEmr/ZVwK0sDpruU8traAosPa
ER5lQFuyWRliUIqttjtDjeuwHeqcK+EmkqeaAshgPmrAv6ih
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:44:15 2025 by rpki-client