Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/34352e3137302e3130302e302f32342d3234203d3e20323733393733.roa
File:                     34352e3137302e3130302e302f32342d3234203d3e20323733393733.roa (raw, json)
Hash identifier:          bvRs3jp6Uo1leEQec8UdQhEiINYxayNwPNNI3nwngb0=
Subject key identifier:   3C:E6:7C:4E:05:24:3C:7C:7D:10:0E:43:C2:8D:B9:63:1C:5C:66:BE
Certificate issuer:       /CN=84B320834CA10CE018169848F7AE0810EB3E7C5D
Certificate serial:       354D8EA302CA8EFB4A9E09A3731198F6D2B21BB1
Authority key identifier: 84:B3:20:83:4C:A1:0C:E0:18:16:98:48:F7:AE:08:10:EB:3E:7C:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/34352e3137302e3130302e302f32342d3234203d3e20323733393733.roa
Signing time:             Sat 07 Jun 2025 00:20:00 +0000
ROA not before:           Sat 07 Jun 2025 00:15:00 +0000
ROA not after:            Sat 06 Jun 2026 00:20:00 +0000
asID:                     273973
IP address blocks:        45.170.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4d:8e:a3:02:ca:8e:fb:4a:9e:09:a3:73:11:98:f6:d2:b2:1b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B320834CA10CE018169848F7AE0810EB3E7C5D
        Validity
            Not Before: Jun  7 00:15:00 2025 GMT
            Not After : Jun  6 00:20:00 2026 GMT
        Subject: CN=3CE67C4E05243C7C7D100E43C28DB9631C5C66BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d7:e7:91:89:8a:1d:be:1e:d3:da:07:d6:2f:
                    f9:c8:6a:9d:5c:19:29:03:15:a3:8d:dc:17:6c:a8:
                    6b:89:b3:92:ce:7f:22:ce:b0:20:39:1f:81:b6:ea:
                    b9:9d:28:8f:cd:88:5c:aa:8c:9b:07:20:97:f3:1b:
                    93:a1:5f:80:ec:75:80:72:3a:0a:b5:5a:ba:60:2c:
                    81:98:81:92:a6:6f:2f:f1:c2:7d:45:d4:fb:5e:26:
                    c5:12:46:8e:b3:7d:c0:09:24:06:7e:cd:e5:f5:aa:
                    2d:8b:1d:05:e6:bb:73:89:4f:60:2e:51:f5:bf:1e:
                    4f:0e:46:11:8e:26:be:07:f2:7b:7c:71:fd:83:54:
                    e7:e3:e1:d2:01:48:9b:4c:43:60:0b:1f:1c:97:fc:
                    22:20:c8:a5:08:2e:05:20:2a:3f:11:f5:02:89:16:
                    b5:cc:b4:8f:c9:a5:ef:c9:d0:75:2b:4a:66:1c:6f:
                    1a:2d:9a:8b:b1:ad:1e:9f:63:52:c9:01:51:d2:1a:
                    0f:54:8d:d3:ee:73:50:93:35:57:20:fd:cc:ba:da:
                    9a:a8:e3:8d:f4:3e:33:41:ec:67:31:e8:c2:88:3a:
                    ec:15:db:13:74:f6:85:cd:a8:b1:c0:3c:23:75:07:
                    e2:c2:c0:cc:15:68:91:d4:b5:25:3f:00:63:89:2a:
                    ed:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E6:7C:4E:05:24:3C:7C:7D:10:0E:43:C2:8D:B9:63:1C:5C:66:BE
            X509v3 Authority Key Identifier:
                keyid:84:B3:20:83:4C:A1:0C:E0:18:16:98:48:F7:AE:08:10:EB:3E:7C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/34352e3137302e3130302e302f32342d3234203d3e20323733393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:db:6e:f4:c1:a7:02:a6:37:41:42:16:2f:77:b7:b7:96:cb:
         fd:f1:6c:3e:b3:c9:af:23:22:7d:f1:8e:c0:65:3a:3e:b1:6e:
         0c:9f:da:c7:f0:e7:da:d6:a1:26:0f:15:52:db:de:1f:42:0d:
         8e:89:5f:64:49:50:ba:d4:af:f5:e5:e6:1f:67:ff:c1:4e:6b:
         d6:07:59:17:75:58:be:b5:81:a9:b6:16:00:d9:c4:c3:29:81:
         12:90:3c:c7:56:27:07:69:77:0b:be:9a:93:20:fc:d0:7e:21:
         26:d5:54:bf:aa:2c:33:13:74:dc:f4:92:44:34:8a:41:e1:e7:
         64:96:02:3d:11:85:3b:b0:6f:6a:72:1d:31:35:01:cc:77:6a:
         d4:df:f0:5d:7f:5c:37:be:10:8a:99:2f:59:70:88:ad:5c:59:
         91:dc:a0:81:79:12:b9:a0:55:c5:0c:05:14:01:0e:e2:f7:bd:
         9f:4c:5f:0b:9b:70:5b:a4:09:ab:f0:1c:23:b6:30:08:6b:a3:
         ce:a7:80:b4:34:28:21:c7:e4:fd:97:ad:04:6a:1f:8d:77:fb:
         db:2d:33:b2:5f:65:92:0f:1e:03:cf:a5:62:be:2c:87:a0:55:
         9a:83:66:b8:03:30:54:4b:3c:8e:28:51:0d:92:0a:77:96:6e:
         09:1a:4e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 16:23:55 2025 by rpki-client