Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E97D8127EA5822A63D6584242E108218DBA59633062989258BE6CE5F621DEECB/0/34352e3137302e382e302f32342d3234203d3e20323637373530.roa
File:                     34352e3137302e382e302f32342d3234203d3e20323637373530.roa (raw, json)
Hash identifier:          UMzzjeWFdaoiQwzxZT8av16tDM2kZWoWuc1SmZanOOM=
Subject key identifier:   FC:37:C4:BF:61:B9:01:F0:1C:D1:18:2D:E8:D3:23:66:8A:2B:CC:83
Certificate issuer:       /CN=3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B
Certificate serial:       0108A75C8FC10226018906DD0DF5116440DF8A4D
Authority key identifier: 3C:6C:D7:B6:CF:5A:58:9C:4C:5D:14:DA:4C:69:42:B6:13:E8:2A:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E97D8127EA5822A63D6584242E108218DBA59633062989258BE6CE5F621DEECB/0/34352e3137302e382e302f32342d3234203d3e20323637373530.roa
Signing time:             Mon 13 Oct 2025 15:10:00 +0000
ROA not before:           Mon 13 Oct 2025 15:05:00 +0000
ROA not after:            Mon 12 Oct 2026 15:10:00 +0000
asID:                     267750
IP address blocks:        45.170.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E97D8127EA5822A63D6584242E108218DBA59633062989258BE6CE5F621DEECB/0/3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E97D8127EA5822A63D6584242E108218DBA59633062989258BE6CE5F621DEECB/0/3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:08:a7:5c:8f:c1:02:26:01:89:06:dd:0d:f5:11:64:40:df:8a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B
        Validity
            Not Before: Oct 13 15:05:00 2025 GMT
            Not After : Oct 12 15:10:00 2026 GMT
        Subject: CN=FC37C4BF61B901F01CD1182DE8D323668A2BCC83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:b3:ad:db:87:d2:db:a8:42:e5:72:2c:98:05:
                    e4:de:02:c7:96:2e:68:8d:3a:56:ff:0e:ec:01:d7:
                    a4:3a:6c:29:03:70:b2:2c:cc:d7:37:c1:0d:68:8d:
                    41:e2:ef:7f:d9:f0:86:bb:ce:b8:29:ee:f7:95:f5:
                    c3:0f:3e:8c:a7:9f:4b:9b:b4:25:fe:da:36:4b:d2:
                    a4:db:ab:8a:00:d4:08:7e:d0:ad:eb:5f:47:6a:4d:
                    6e:ff:09:7c:f7:40:d7:38:4a:4e:e8:65:4d:7e:b2:
                    15:32:78:9a:62:0e:39:a9:9c:2d:18:52:d4:71:be:
                    eb:72:eb:3e:17:a0:ac:44:2f:75:42:42:2f:c3:ad:
                    ba:fb:0c:69:e0:1b:aa:19:88:57:62:ed:1e:7a:af:
                    c0:a4:cf:26:d5:06:33:53:c2:f3:3e:7a:3c:14:ad:
                    a0:ad:63:e4:94:4e:72:ae:89:e3:ef:16:6e:a4:f2:
                    a0:45:28:a2:e0:26:12:e7:84:ef:1c:ab:d5:a2:36:
                    e5:44:e3:ed:da:f9:49:87:5f:ec:35:7f:e2:c4:ba:
                    22:17:45:65:10:01:d5:2e:80:16:16:8d:7c:38:a8:
                    bc:4a:6d:e8:6c:3e:d2:6d:e6:9e:9e:69:fc:dc:96:
                    49:36:50:6b:2f:8f:09:38:3d:91:76:1b:95:27:dc:
                    e9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:37:C4:BF:61:B9:01:F0:1C:D1:18:2D:E8:D3:23:66:8A:2B:CC:83
            X509v3 Authority Key Identifier:
                keyid:3C:6C:D7:B6:CF:5A:58:9C:4C:5D:14:DA:4C:69:42:B6:13:E8:2A:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E97D8127EA5822A63D6584242E108218DBA59633062989258BE6CE5F621DEECB/0/3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C6CD7B6CF5A589C4C5D14DA4C6942B613E82A7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E97D8127EA5822A63D6584242E108218DBA59633062989258BE6CE5F621DEECB/0/34352e3137302e382e302f32342d3234203d3e20323637373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:18:e6:43:fc:db:2c:95:b1:44:af:f3:55:6a:1b:41:b3:b2:
         07:59:a8:db:c7:94:2d:f0:88:35:27:21:c4:37:da:1b:ba:29:
         47:bf:58:29:33:48:b6:68:2b:c3:8c:b4:2f:1f:59:99:35:89:
         31:8f:48:d2:60:dd:5e:41:63:ca:91:c9:89:d9:bb:cc:9c:ba:
         d9:a7:68:6d:65:50:67:0a:b6:e4:c3:45:47:d9:f4:ea:31:6f:
         3d:b4:ab:86:3e:d9:35:6b:1a:c8:77:0f:13:0b:7a:3f:2d:3e:
         ed:99:c2:ea:35:b1:a3:8d:a0:d7:be:c9:4c:ca:1b:b8:e9:ce:
         40:b1:24:59:48:27:10:33:68:14:c1:04:af:09:bd:66:54:23:
         84:8c:76:fd:7b:59:b4:ea:6b:f3:43:c0:08:97:84:a1:9d:0e:
         9a:fc:26:1d:cb:4a:e3:74:3f:ef:6c:6f:e8:b3:26:74:d0:f5:
         68:5d:a8:f8:18:e4:69:43:3c:11:88:7a:64:2a:cd:36:3d:82:
         4d:dc:a0:5f:24:94:9e:0d:60:4a:ad:45:29:c5:e1:aa:2d:b2:
         72:6e:0c:00:a9:f8:ed:b2:98:2b:78:20:86:18:37:7c:88:db:
         26:d1:73:50:97:bb:1c:ff:8d:12:43:c6:fb:bc:e8:ec:cc:a4:
         7e:09:8c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:25 2025 by rpki-client