Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130322e302f32342d3234203d3e20323636373930.roa
File:                     34352e3233332e3130322e302f32342d3234203d3e20323636373930.roa (raw, json)
Hash identifier:          hlq3XlDXe8YHSWX2YRz2wyTcLToQrI6C0PePtevZl54=
Subject key identifier:   A9:6D:FC:D5:49:3E:CC:5C:8A:5B:74:2A:75:5C:18:25:FD:BE:A4:F8
Certificate issuer:       /CN=69B942F2442A4B878DCF7E43089B60B94955608D
Certificate serial:       2FA37357AEA26E5B90C960915AC6FA17A23A916A
Authority key identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130322e302f32342d3234203d3e20323636373930.roa
Signing time:             Wed 06 Aug 2025 21:50:00 +0000
ROA not before:           Wed 06 Aug 2025 21:45:00 +0000
ROA not after:            Wed 05 Aug 2026 21:50:00 +0000
asID:                     266790
IP address blocks:        45.233.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a3:73:57:ae:a2:6e:5b:90:c9:60:91:5a:c6:fa:17:a2:3a:91:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B942F2442A4B878DCF7E43089B60B94955608D
        Validity
            Not Before: Aug  6 21:45:00 2025 GMT
            Not After : Aug  5 21:50:00 2026 GMT
        Subject: CN=A96DFCD5493ECC5C8A5B742A755C1825FDBEA4F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7b:c2:2a:8e:a5:9e:d8:ab:29:19:1e:d8:03:
                    59:cd:a4:7f:b5:bd:bc:e3:69:2c:00:a8:ee:93:13:
                    3f:c1:93:23:d9:52:ed:fb:28:ca:6c:4d:d6:41:60:
                    62:14:d3:db:3a:63:39:ab:29:1d:6f:cc:7f:84:35:
                    5b:c9:f6:72:4d:19:4f:85:f9:db:88:fe:fa:86:54:
                    66:60:43:76:e9:df:dc:96:83:8b:14:e3:48:04:bd:
                    96:35:40:9d:52:eb:94:1e:9c:d3:29:8d:12:03:a1:
                    91:bc:73:f7:57:23:96:da:64:03:2f:51:19:9f:61:
                    cb:ef:eb:ab:a2:46:46:5b:6f:c0:34:7b:b6:a2:69:
                    11:10:91:82:c1:4a:1c:df:78:9f:f9:d7:55:e2:7e:
                    cc:80:2b:ee:5b:5b:f1:03:66:6b:94:5e:80:b9:52:
                    41:04:93:2c:64:5e:08:16:f3:bc:29:44:e5:2a:37:
                    3d:37:b1:77:b3:6e:56:f7:ed:24:cb:1c:17:6d:41:
                    bd:65:a8:d5:77:c5:40:61:40:b2:a8:e4:bd:23:ca:
                    1e:48:c2:9e:b2:6c:d5:43:c4:a2:63:3f:9a:63:25:
                    f7:2b:da:35:c9:ff:01:96:a0:14:6c:ab:60:e8:80:
                    24:a5:2d:b1:95:b9:95:62:1b:d2:5f:5b:11:74:23:
                    08:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6D:FC:D5:49:3E:CC:5C:8A:5B:74:2A:75:5C:18:25:FD:BE:A4:F8
            X509v3 Authority Key Identifier:
                keyid:69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130322e302f32342d3234203d3e20323636373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:41:8c:9f:0d:c7:7c:af:bb:b4:bc:df:29:3b:98:f6:88:ae:
         40:80:e4:84:c9:3a:40:10:cb:13:d4:7f:25:24:53:f7:db:27:
         40:31:1d:f0:61:77:e1:eb:a9:97:96:0d:2d:09:4f:d3:b2:c8:
         d8:58:71:02:df:95:4c:18:fe:42:15:6d:a3:d6:9e:7e:49:eb:
         6c:33:e4:6b:25:67:fe:d6:ed:26:a1:a9:1f:10:ac:21:93:b5:
         c4:82:d8:f4:20:8a:90:83:18:c4:86:7d:af:ca:b3:e1:23:39:
         33:9d:fb:58:2f:f8:ec:53:ff:e9:cb:ad:20:ed:20:e9:3f:c6:
         a9:8a:9c:29:ad:4d:a2:9e:94:38:3d:ef:77:91:19:0a:71:76:
         f6:18:c1:3d:2d:39:bc:da:33:bb:0d:ea:e4:6a:20:22:18:b5:
         82:a1:d8:91:7e:45:75:b5:2f:a2:7d:92:2e:50:99:eb:f5:f0:
         90:e5:05:41:92:8f:25:75:7a:c0:e8:6d:4b:ed:d8:59:10:6a:
         b6:58:fb:fd:a1:8b:79:fd:78:40:4b:c6:2d:28:40:41:18:e6:
         23:78:e1:be:c2:54:cf:97:83:09:2b:e7:d9:07:76:e1:ed:ec:
         7d:d0:54:17:33:81:67:f7:5e:06:11:5f:93:89:6d:06:8f:0c:
         f0:c2:f3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:22:39 2025 by rpki-client