Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/34352e3233342e36332e302f32342d3234203d3e20323732383635.roa
File:                     34352e3233342e36332e302f32342d3234203d3e20323732383635.roa (raw, json)
Hash identifier:          JnHrcURzpga4YC2opV6zNkojVQJhrDonKCnhFJ7yvTY=
Subject key identifier:   15:FA:E0:40:50:62:9B:D9:2F:1B:FF:80:14:23:AD:71:6D:E1:61:6D
Certificate issuer:       /CN=DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D
Certificate serial:       35962F3E75BA8ED4763227AF40B8496F375B29D1
Authority key identifier: DD:28:6A:83:BE:77:C4:2B:A2:D2:BB:C8:E5:A4:CC:AF:19:60:26:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/34352e3233342e36332e302f32342d3234203d3e20323732383635.roa
Signing time:             Thu 07 Aug 2025 18:35:07 +0000
ROA not before:           Thu 07 Aug 2025 18:30:07 +0000
ROA not after:            Thu 06 Aug 2026 18:35:07 +0000
asID:                     272865
IP address blocks:        45.234.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Aug 2025 06:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:96:2f:3e:75:ba:8e:d4:76:32:27:af:40:b8:49:6f:37:5b:29:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D
        Validity
            Not Before: Aug  7 18:30:07 2025 GMT
            Not After : Aug  6 18:35:07 2026 GMT
        Subject: CN=15FAE04050629BD92F1BFF801423AD716DE1616D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:48:9d:a8:90:fb:8d:32:ff:6e:eb:89:79:61:
                    e3:e8:44:9d:83:38:5b:d7:03:23:b6:f9:94:93:a0:
                    9b:a5:22:38:db:c0:27:93:c6:b3:c8:02:3d:b0:ab:
                    2f:ae:18:71:04:68:33:83:65:1d:c1:66:42:18:77:
                    b5:72:08:db:e7:ab:25:91:94:25:80:bf:32:96:5c:
                    5e:3f:0e:28:6e:e0:46:18:8f:02:58:83:a3:ad:af:
                    d5:db:83:94:c1:76:60:19:c8:01:ed:7d:33:5b:75:
                    28:c5:f5:ab:88:4d:e8:3a:80:be:aa:03:34:5e:96:
                    e9:a9:fa:0f:35:dc:f9:02:22:b3:c1:e8:1f:92:a5:
                    38:46:7f:ce:83:1f:e3:bb:1e:57:df:6d:8c:08:b8:
                    7d:bd:30:60:ac:56:1d:27:ec:de:e5:b1:b2:95:c7:
                    dc:b5:5b:af:1e:13:97:d2:9d:8c:5a:06:63:55:44:
                    a5:d5:cd:a0:c3:40:a7:20:8d:b3:1c:fc:67:8e:a9:
                    00:da:51:9a:4d:45:2f:0b:50:9c:8d:41:28:fb:6f:
                    5d:92:85:3e:5f:00:ea:b2:c7:98:e4:00:5f:f0:3a:
                    c9:95:c6:fd:b0:65:0a:c7:5d:79:d8:a9:8f:85:3a:
                    4c:0d:e2:ac:5d:46:af:da:55:c2:83:f2:45:54:4e:
                    4a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FA:E0:40:50:62:9B:D9:2F:1B:FF:80:14:23:AD:71:6D:E1:61:6D
            X509v3 Authority Key Identifier:
                keyid:DD:28:6A:83:BE:77:C4:2B:A2:D2:BB:C8:E5:A4:CC:AF:19:60:26:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/34352e3233342e36332e302f32342d3234203d3e20323732383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:1a:0b:e3:d7:99:db:7e:ed:a0:85:a2:2b:d7:9e:69:da:18:
         46:4d:57:4c:b3:ef:bd:fc:20:72:6d:35:5e:f4:fb:6b:69:dd:
         d6:d0:68:a5:ae:4b:be:b1:ce:aa:3e:0e:07:99:e7:b2:eb:84:
         9f:eb:e2:16:5b:00:4a:df:d8:de:5d:85:b2:03:4d:54:e6:e6:
         d3:1e:25:31:3b:b7:20:90:65:34:e6:5a:e7:15:e2:89:d2:a5:
         39:de:c9:ab:a5:81:5e:32:c3:b1:14:5e:76:40:5b:63:2d:25:
         cc:85:d5:cd:da:07:55:1f:9c:50:10:e8:86:6c:f9:78:5d:7a:
         9b:ab:18:75:17:ce:ac:76:f2:6e:59:c7:0e:7d:4d:c0:66:b9:
         c9:24:65:53:00:62:77:e3:7f:36:0d:6e:fd:7d:4d:08:f2:ee:
         6a:c2:fd:2d:e6:1e:b4:4e:27:7e:d3:c7:c6:8e:41:a9:8e:dd:
         43:d3:04:8f:12:8d:9e:08:fb:c8:88:f7:1d:36:34:f6:f9:46:
         07:a4:8d:92:c2:cf:93:21:6e:88:c5:03:fe:55:64:46:96:66:
         0d:04:54:75:c0:49:32:8f:34:26:7c:6f:39:8f:5e:10:35:c0:
         45:ba:97:8a:37:c0:cc:d9:cf:e5:61:61:40:2b:21:08:ff:b7:
         af:aa:ac:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 03:55:37 2025 by rpki-client