Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138322e302f32332d3233203d3e20323636373634.roa
File:                     34352e3233342e3138322e302f32332d3233203d3e20323636373634.roa (raw, json)
Hash identifier:          YldxsazFUSEJEvugu1yLW6kFRDMFjiA6SW5ZtibLU10=
Subject key identifier:   37:61:A2:D8:D2:E2:3A:54:E2:1F:5F:E4:2D:BF:49:35:32:F8:3C:EA
Certificate issuer:       /CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
Certificate serial:       0BFDC41BF4EB2F26D9356688D3B81B7EFA1FFF24
Authority key identifier: CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138322e302f32332d3233203d3e20323636373634.roa
Signing time:             Tue 07 Oct 2025 15:49:44 +0000
ROA not before:           Tue 07 Oct 2025 15:44:44 +0000
ROA not after:            Tue 06 Oct 2026 15:49:44 +0000
asID:                     266764
IP address blocks:        45.234.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Oct 2025 08:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:fd:c4:1b:f4:eb:2f:26:d9:35:66:88:d3:b8:1b:7e:fa:1f:ff:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
        Validity
            Not Before: Oct  7 15:44:44 2025 GMT
            Not After : Oct  6 15:49:44 2026 GMT
        Subject: CN=3761A2D8D2E23A54E21F5FE42DBF493532F83CEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b3:a2:d1:e7:9d:f8:9e:1c:ad:f8:cc:f9:0d:
                    8f:c5:4c:71:a1:a4:96:d9:4c:74:d1:45:9b:7c:32:
                    34:34:99:be:6b:f1:c7:bb:b0:78:8b:0a:58:51:a3:
                    c6:d3:52:99:82:bc:77:03:fb:0d:60:62:c1:ed:88:
                    18:a0:cf:df:21:63:db:ab:85:4f:0a:08:41:0a:8e:
                    71:0a:b1:f8:d4:37:e4:7d:4f:06:06:dc:3c:8b:ea:
                    41:25:81:7c:83:4c:57:80:dc:e3:c4:08:49:de:ae:
                    39:08:4b:36:7b:c0:e4:b5:50:06:1f:c2:4d:d1:3d:
                    a5:e6:3f:0a:17:c0:80:d6:00:2d:8e:e2:2e:b5:aa:
                    ba:7f:8b:11:48:6f:db:d4:ad:a3:36:0c:0c:1d:dd:
                    9a:f2:85:be:de:88:4e:a6:5c:f8:b6:b1:8b:ab:d4:
                    c4:59:98:2e:2c:6b:88:64:25:df:47:5d:ee:d0:df:
                    b9:67:5e:ff:dd:27:2f:c4:30:81:54:b1:77:50:1b:
                    a5:87:10:a6:2d:3b:b4:6b:c2:3c:3f:7e:b5:ab:2d:
                    b2:f0:7e:c7:22:4f:ec:ba:4b:b1:c3:c4:79:71:79:
                    5a:5f:d8:bd:93:6f:f4:be:31:b6:b7:81:45:72:f9:
                    56:64:9a:64:07:a2:3c:f8:dd:5b:6f:92:92:fd:20:
                    2d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:61:A2:D8:D2:E2:3A:54:E2:1F:5F:E4:2D:BF:49:35:32:F8:3C:EA
            X509v3 Authority Key Identifier:
                keyid:CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138322e302f32332d3233203d3e20323636373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:14:ea:51:67:76:23:f5:74:81:b3:34:20:9b:c8:9b:7f:6d:
         15:d6:f4:e4:c1:ca:01:ce:49:55:6d:22:c8:21:00:78:98:be:
         85:7c:b5:e8:b7:eb:73:a4:20:0f:eb:f2:2a:3b:95:35:8d:d4:
         9c:e1:18:3b:c2:ac:c2:7d:85:0c:e1:e5:2d:f2:cb:33:9a:52:
         ac:72:31:2d:c4:d3:11:a7:4c:7d:f3:26:74:ae:45:85:f0:08:
         49:5c:10:12:2e:92:cd:0a:fa:ab:23:23:e0:9d:40:31:ca:3d:
         d8:aa:7d:f6:fc:fc:0e:7b:2b:48:e1:e9:da:f5:f3:61:00:df:
         95:7e:27:e8:12:6d:22:ed:bb:9c:87:19:4f:2a:91:8e:1d:9b:
         7f:40:61:b8:1f:db:47:b2:0a:ec:29:df:3a:4e:8f:db:40:73:
         e5:fc:c0:05:80:09:86:f3:f6:70:02:bd:73:a5:f8:99:47:27:
         97:3f:dc:dd:e3:2c:31:28:2f:ac:01:33:1e:18:4f:64:16:e3:
         6c:4f:07:32:38:92:a9:82:f1:73:06:65:7d:40:34:31:47:cd:
         8b:f3:81:eb:83:8d:a2:72:0c:a5:39:60:5b:74:d3:67:90:35:
         25:32:25:60:8c:0e:dd:fb:c0:f5:45:bc:11:57:d7:9c:56:de:
         ee:34:58:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:36:51 2025 by rpki-client