Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138322e302f32342d3234203d3e20323636373634.roa
File:                     34352e3233342e3138322e302f32342d3234203d3e20323636373634.roa (raw, json)
Hash identifier:          O99qGzKAs+jQqFWMAl/+GMGAH/aweLrTeq2d6rANAR8=
Subject key identifier:   E1:79:42:93:4F:CF:3C:A3:27:0E:C5:E9:30:2E:71:55:C9:DB:1B:94
Certificate issuer:       /CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
Certificate serial:       711BB1B8283D32F559B2EF6534FD4F1F7833A39F
Authority key identifier: CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138322e302f32342d3234203d3e20323636373634.roa
Signing time:             Tue 07 Oct 2025 15:49:44 +0000
ROA not before:           Tue 07 Oct 2025 15:44:44 +0000
ROA not after:            Tue 06 Oct 2026 15:49:44 +0000
asID:                     266764
IP address blocks:        45.234.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Oct 2025 08:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:1b:b1:b8:28:3d:32:f5:59:b2:ef:65:34:fd:4f:1f:78:33:a3:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
        Validity
            Not Before: Oct  7 15:44:44 2025 GMT
            Not After : Oct  6 15:49:44 2026 GMT
        Subject: CN=E17942934FCF3CA3270EC5E9302E7155C9DB1B94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9f:28:ed:be:44:28:3e:54:51:ce:d2:df:dd:
                    0f:cb:2b:8b:48:3f:98:2d:1a:84:82:2e:76:36:3d:
                    41:31:4a:1e:30:67:34:e3:f6:e9:c2:c1:49:9d:fc:
                    87:f6:95:1b:2f:47:31:eb:d3:36:6f:ec:88:a3:31:
                    ce:69:58:58:75:6b:d7:74:d7:e6:34:26:f4:98:b1:
                    91:f4:6d:34:a4:b4:51:26:65:89:ab:d1:61:38:bd:
                    a1:80:2e:1d:54:d3:1b:ae:42:ac:d5:e0:1c:ff:a4:
                    1f:85:ec:43:0b:77:70:89:93:e0:7c:4b:5b:ba:f1:
                    df:31:96:d8:94:5d:44:0b:53:e2:f4:cb:6e:7a:29:
                    0b:e3:82:52:0e:0e:27:e6:ee:93:4c:11:fc:db:59:
                    ec:ee:95:82:93:18:9b:0a:f0:62:e8:5f:91:48:2a:
                    52:c7:57:d3:bc:db:2f:6e:c6:9a:ff:19:12:77:ee:
                    01:ef:f0:8a:90:13:bf:12:b8:4f:c0:49:39:87:18:
                    6d:01:87:3c:9a:0a:0d:b0:1f:f2:19:10:4f:a6:44:
                    cb:e8:af:9e:6f:7e:a1:df:ab:ee:fd:06:45:43:b8:
                    46:8e:50:99:79:92:72:73:d6:34:2f:d7:9b:40:2a:
                    e2:df:51:4c:9e:a4:d6:db:f0:8f:38:32:ac:ad:63:
                    41:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:79:42:93:4F:CF:3C:A3:27:0E:C5:E9:30:2E:71:55:C9:DB:1B:94
            X509v3 Authority Key Identifier:
                keyid:CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138322e302f32342d3234203d3e20323636373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:cc:2b:75:cf:14:a3:69:6f:8f:1f:2f:d8:11:8c:d6:a5:cf:
         86:52:aa:03:9d:e2:3b:a9:c1:28:d5:08:31:9a:1b:58:a2:e5:
         dd:fa:e0:58:af:f0:c0:1d:79:d4:41:f6:be:0f:38:18:77:56:
         6c:88:26:72:67:0a:b7:37:76:7f:b5:e8:d8:22:ce:9b:8b:e8:
         03:d8:cd:10:82:2b:7e:52:72:ae:4e:48:42:2c:08:54:48:27:
         d4:70:40:f3:c2:97:1a:96:4f:ed:b3:42:c5:08:fa:ea:c7:0d:
         bb:40:01:cc:00:25:8a:96:51:1e:ad:f8:8b:58:c5:1e:19:57:
         b5:00:56:47:b2:53:01:28:d1:2f:41:c3:0d:97:f6:b7:b0:39:
         83:fd:72:62:59:0c:7d:69:52:95:d8:3b:44:5a:0e:3d:18:e4:
         e6:3b:97:56:a1:b8:65:1b:31:d1:b7:29:05:41:1e:15:5e:ec:
         33:55:e2:6f:bc:9b:1a:7f:0d:c7:34:d2:ab:e8:09:4f:2e:8f:
         11:31:45:53:26:eb:b9:7c:34:f1:b4:8d:fd:00:48:2f:6f:13:
         c4:49:9e:fe:39:6f:e3:6a:d2:1d:58:83:b5:53:cd:33:33:29:
         21:24:33:7a:e2:40:96:25:df:b7:67:3a:44:64:c5:72:83:cf:
         fc:9f:9a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:36:48 2025 by rpki-client