Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E97D8127EA5822A63D6584242E108218DBA59633062989258BE6CE5F621DEECB/0/34352e3137302e31302e302f32332d3234203d3e20323637373530.roa
File:                     34352e3137302e31302e302f32332d3234203d3e20323637373530.roa (raw, json)
Hash identifier:          yRKX+7nLgd4dUqJ8Wg6+fWPsF2ihdPh0mRhqeDrb+Ko=
Subject key identifier:   DB:F7:53:8C:7D:99:4B:DF:44:5A:43:6D:9B:30:CD:DB:EF:E7:FF:0A
Certificate issuer:       /CN=3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B
Certificate serial:       5C127FAACD3638B3F8E063F59B884B46B8F999A7
Authority key identifier: 3C:6C:D7:B6:CF:5A:58:9C:4C:5D:14:DA:4C:69:42:B6:13:E8:2A:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E97D8127EA5822A63D6584242E108218DBA59633062989258BE6CE5F621DEECB/0/34352e3137302e31302e302f32332d3234203d3e20323637373530.roa
Signing time:             Mon 13 Oct 2025 15:10:00 +0000
ROA not before:           Mon 13 Oct 2025 15:05:00 +0000
ROA not after:            Mon 12 Oct 2026 15:10:00 +0000
asID:                     267750
IP address blocks:        45.170.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E97D8127EA5822A63D6584242E108218DBA59633062989258BE6CE5F621DEECB/0/3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E97D8127EA5822A63D6584242E108218DBA59633062989258BE6CE5F621DEECB/0/3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:12:7f:aa:cd:36:38:b3:f8:e0:63:f5:9b:88:4b:46:b8:f9:99:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B
        Validity
            Not Before: Oct 13 15:05:00 2025 GMT
            Not After : Oct 12 15:10:00 2026 GMT
        Subject: CN=DBF7538C7D994BDF445A436D9B30CDDBEFE7FF0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9a:b2:ff:0f:2d:7e:cf:e7:9b:71:dd:3d:0c:
                    f8:e3:9e:5c:36:6e:f1:ad:cc:d0:dc:4c:18:bd:3e:
                    46:51:a1:26:e3:78:57:47:0d:74:cb:72:64:fd:c0:
                    ab:fe:6a:6d:09:71:4f:f3:75:79:0a:f0:b9:06:65:
                    e6:a2:2f:a5:7b:74:8f:b3:71:27:94:12:ff:b1:09:
                    4f:5a:79:c8:0e:24:b1:46:a2:36:d5:fd:47:9c:da:
                    84:35:0b:b1:0b:db:41:e8:17:c2:45:3a:b1:85:3a:
                    39:6f:6d:62:4b:73:2c:a1:83:19:46:24:0d:30:b2:
                    f2:2a:87:43:c4:02:f1:10:36:65:21:b7:26:1e:2d:
                    d3:2f:b4:fc:99:4d:7e:a2:4b:f3:b0:b7:6a:ca:f1:
                    78:f2:9a:f6:be:2e:10:b9:86:2d:9c:50:34:1d:39:
                    ab:44:bf:62:dd:cf:1a:3e:a9:ef:2f:8a:f1:37:08:
                    6f:60:51:fc:cc:d8:70:45:92:4b:ec:e3:44:78:d2:
                    fe:39:28:1b:18:3e:1b:33:6c:e5:8e:84:a3:e9:94:
                    6a:6e:9a:51:38:55:83:c2:ce:50:1c:52:f1:f1:2d:
                    5b:e7:28:62:8f:42:ef:55:4a:b6:2d:06:a5:62:70:
                    2a:68:d1:fb:ef:85:2d:66:f3:2b:06:d4:e4:c5:b0:
                    75:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F7:53:8C:7D:99:4B:DF:44:5A:43:6D:9B:30:CD:DB:EF:E7:FF:0A
            X509v3 Authority Key Identifier:
                keyid:3C:6C:D7:B6:CF:5A:58:9C:4C:5D:14:DA:4C:69:42:B6:13:E8:2A:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E97D8127EA5822A63D6584242E108218DBA59633062989258BE6CE5F621DEECB/0/3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E97D8127EA5822A63D6584242E108218DBA59633062989258BE6CE5F621DEECB/0/34352e3137302e31302e302f32332d3234203d3e20323637373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:0d:e0:74:6a:70:4c:2c:85:64:7a:41:51:eb:e4:63:dc:38:
         8e:a8:38:5d:e0:a7:00:38:4c:e1:eb:6b:cf:bd:53:16:4a:35:
         c5:66:e3:ad:58:fe:da:57:d0:29:c1:79:ed:01:37:e7:6d:75:
         b1:59:45:c5:0d:23:e5:37:bc:37:86:d8:02:05:ae:07:90:41:
         6d:6e:b0:0d:68:c8:55:ad:6f:09:6f:aa:42:b2:fe:70:1d:fc:
         46:1c:41:d6:a4:fe:bc:ac:92:15:40:9b:23:48:27:78:1c:75:
         10:dd:f3:0b:e6:7d:e8:2e:37:55:bd:06:02:b5:24:47:05:74:
         35:f3:59:b3:52:b7:60:57:ba:0a:89:e9:09:33:8f:9c:af:bb:
         ab:b3:4a:3a:e3:b0:ab:9f:88:2c:f6:02:e2:3c:9f:5f:a5:bd:
         8c:7b:fb:a8:87:9a:cc:f7:bd:93:99:ad:b0:60:b2:ce:93:08:
         3e:1b:f2:be:60:0a:aa:d6:55:80:ef:c7:75:e8:93:50:c8:2e:
         1e:76:88:cd:ad:24:e4:b3:e3:13:c0:9e:ea:09:11:0c:30:55:
         ac:ca:85:4b:ec:39:73:9a:4d:37:3c:72:6e:64:ef:55:7b:3b:
         0c:c9:fe:09:5f:10:80:cf:5e:7f:75:f1:95:72:1a:05:74:9a:
         d2:67:35:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:21 2025 by rpki-client