Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138312e302f32342d3234203d3e20323636373634.roa
File:                     34352e3233342e3138312e302f32342d3234203d3e20323636373634.roa (raw, json)
Hash identifier:          AxLPg062qeODW6dLPl/RvwtwF448W39IjHkWNWEohUc=
Subject key identifier:   A5:A2:44:FA:AD:B8:59:1A:11:E0:17:40:80:82:0D:71:BD:CC:9B:8A
Certificate issuer:       /CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
Certificate serial:       331F88EE16ABBA74546080ED527911633C23F04F
Authority key identifier: CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138312e302f32342d3234203d3e20323636373634.roa
Signing time:             Tue 07 Oct 2025 15:49:45 +0000
ROA not before:           Tue 07 Oct 2025 15:44:45 +0000
ROA not after:            Tue 06 Oct 2026 15:49:45 +0000
asID:                     266764
IP address blocks:        45.234.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Oct 2025 08:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1f:88:ee:16:ab:ba:74:54:60:80:ed:52:79:11:63:3c:23:f0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
        Validity
            Not Before: Oct  7 15:44:45 2025 GMT
            Not After : Oct  6 15:49:45 2026 GMT
        Subject: CN=A5A244FAADB8591A11E0174080820D71BDCC9B8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a9:30:74:6e:c2:70:08:93:41:36:2e:cd:ed:
                    7b:de:f1:ae:d9:f8:cd:e3:57:5a:ef:b0:9e:ae:40:
                    48:e3:ae:b2:76:93:4f:c5:5e:5e:36:ba:30:c3:5a:
                    3f:97:7a:0f:99:27:d2:ab:8f:aa:67:ce:10:dd:4e:
                    78:54:aa:e0:c2:be:b0:2f:90:e1:af:29:34:da:49:
                    6b:17:e1:b0:ef:8a:04:f5:3c:4a:45:7e:15:31:68:
                    dd:7e:8c:e5:45:77:c6:92:80:27:dc:b6:92:93:5c:
                    c1:df:1f:0a:32:6b:ca:15:1b:8b:c4:f4:da:e7:4a:
                    f6:7e:ca:3b:68:03:02:57:75:66:54:b2:2e:56:17:
                    5d:03:a9:0c:96:0a:df:59:04:15:64:35:52:ef:dc:
                    77:f3:85:60:cd:ee:8a:06:4e:fa:aa:3b:a5:da:63:
                    c2:31:52:2a:b9:8b:c9:7a:ff:9a:61:d2:57:3c:25:
                    d7:34:4d:a0:bd:7e:85:a4:c4:00:67:ff:77:5a:12:
                    f2:2a:48:ec:55:9d:1a:b7:72:ba:c6:b1:d2:d9:64:
                    6b:91:19:ba:f0:3e:a5:78:9d:cd:ca:77:be:57:27:
                    3b:d1:19:6b:70:6a:97:20:8c:73:26:f6:df:78:53:
                    1c:ed:21:fd:1b:f8:b5:09:6f:25:19:15:24:be:e1:
                    fb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A2:44:FA:AD:B8:59:1A:11:E0:17:40:80:82:0D:71:BD:CC:9B:8A
            X509v3 Authority Key Identifier:
                keyid:CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138312e302f32342d3234203d3e20323636373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:db:88:ec:4d:7e:bd:21:7b:a6:ed:e6:3f:5f:cb:f4:72:85:
         16:b5:e9:ec:c6:e8:ab:9d:62:35:06:07:9d:7b:01:42:f4:2d:
         41:c6:5a:62:7c:e5:c2:4a:3c:35:52:35:37:69:68:4b:b0:c5:
         32:f5:78:4b:50:63:d2:2f:47:59:83:2b:1b:e1:af:31:3d:7e:
         09:46:bb:7d:e9:f0:c9:59:c8:f5:9d:21:37:6a:b8:7e:de:c8:
         a2:93:33:cb:75:75:7b:ae:64:5e:7f:0b:eb:2a:5b:b4:73:ba:
         64:71:13:25:24:74:a9:97:0f:a9:8e:14:2a:04:04:90:c1:69:
         42:42:e1:bb:91:dc:6a:75:19:13:18:bd:d6:80:ab:60:1e:9d:
         5f:d1:fc:ec:56:f2:f8:ac:be:3b:d0:3a:26:33:69:68:31:54:
         83:e9:e9:a8:a5:c5:58:e1:85:1a:e2:57:ec:63:be:3e:ee:51:
         9e:10:0c:25:a9:ec:5b:f4:1d:25:93:0d:01:ed:88:76:71:01:
         7c:79:b1:8a:05:d6:13:9d:41:78:de:13:9a:27:cb:ba:26:f9:
         c8:88:98:e7:57:e0:b1:22:a0:68:8d:2c:7c:1a:d1:b8:f7:6c:
         01:15:9e:7b:dc:3a:85:b1:70:b7:27:c5:f7:73:e4:67:f8:46:
         04:1b:81:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:36:49 2025 by rpki-client