Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/34352e3138382e37372e302f32342d3234203d3e20323635363038.roa
File:                     34352e3138382e37372e302f32342d3234203d3e20323635363038.roa (raw, json)
Hash identifier:          vYmricdNmVBRR8s4u2vvqsr34A5r3/9gtN41dDdw0KU=
Subject key identifier:   69:16:0A:3A:88:61:03:EB:72:4F:AD:2C:B3:33:D9:7C:08:6A:46:1D
Certificate issuer:       /CN=794E430D43ABFA5039F655E9806296B630AD4189
Certificate serial:       52FAD7AF96AA53E1251CABB94050309FA419F422
Authority key identifier: 79:4E:43:0D:43:AB:FA:50:39:F6:55:E9:80:62:96:B6:30:AD:41:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/794E430D43ABFA5039F655E9806296B630AD4189.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/34352e3138382e37372e302f32342d3234203d3e20323635363038.roa
Signing time:             Wed 29 Oct 2025 18:30:01 +0000
ROA not before:           Wed 29 Oct 2025 18:25:01 +0000
ROA not after:            Wed 28 Oct 2026 18:30:01 +0000
asID:                     265608
IP address blocks:        45.188.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/794E430D43ABFA5039F655E9806296B630AD4189.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/794E430D43ABFA5039F655E9806296B630AD4189.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/794E430D43ABFA5039F655E9806296B630AD4189.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fa:d7:af:96:aa:53:e1:25:1c:ab:b9:40:50:30:9f:a4:19:f4:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794E430D43ABFA5039F655E9806296B630AD4189
        Validity
            Not Before: Oct 29 18:25:01 2025 GMT
            Not After : Oct 28 18:30:01 2026 GMT
        Subject: CN=69160A3A886103EB724FAD2CB333D97C086A461D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bf:e4:6b:72:39:54:ee:78:33:87:7e:6d:a1:
                    de:7a:3c:30:9b:b1:08:86:a2:70:b0:3f:b6:95:48:
                    89:1b:b8:cb:38:e8:10:72:30:b7:9e:9f:0a:a1:9d:
                    1a:60:a3:5e:f2:07:58:31:d4:51:65:ee:53:05:8c:
                    69:17:30:bd:92:0b:6e:e3:82:0a:32:ee:de:7d:3e:
                    d4:5f:a9:29:ae:39:e1:94:73:6c:c0:7e:71:55:b9:
                    1b:f3:81:63:3a:20:85:55:d2:0f:a9:05:b4:de:b2:
                    c7:1c:a0:56:96:08:09:e7:7b:ff:14:4b:f9:05:73:
                    4f:79:b6:e8:5c:f5:8a:4f:6a:39:c6:c0:a5:a6:da:
                    e4:a5:ea:81:46:c6:5f:49:be:af:18:42:83:b4:66:
                    6f:33:c3:f4:f6:52:c8:a5:a7:2e:f8:d1:67:02:84:
                    05:f6:3c:02:d8:84:37:6d:3e:ce:35:38:19:68:86:
                    a9:0e:7c:d1:87:ec:de:a0:8d:ca:f6:a8:de:27:d0:
                    69:0c:6b:53:b8:48:88:bb:c3:0c:10:db:ea:f8:dd:
                    e3:35:c4:3b:bb:fb:54:78:42:76:51:25:7e:8f:fa:
                    fe:e4:36:d0:a5:91:8b:4b:81:29:de:a8:3d:27:7b:
                    8f:6e:0b:e9:4f:83:7c:e4:2f:28:d9:cd:28:09:ff:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:16:0A:3A:88:61:03:EB:72:4F:AD:2C:B3:33:D9:7C:08:6A:46:1D
            X509v3 Authority Key Identifier:
                keyid:79:4E:43:0D:43:AB:FA:50:39:F6:55:E9:80:62:96:B6:30:AD:41:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/794E430D43ABFA5039F655E9806296B630AD4189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/794E430D43ABFA5039F655E9806296B630AD4189.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/34352e3138382e37372e302f32342d3234203d3e20323635363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:9f:28:2c:c0:fd:63:5f:97:0b:c5:a9:5d:3f:2d:55:80:ee:
         bd:9d:11:85:7a:00:67:18:87:ef:ee:f0:52:06:f4:41:07:0e:
         11:44:bc:41:ff:2f:77:17:2c:ee:16:96:63:50:0a:16:b2:86:
         cb:84:e1:cd:55:5f:73:64:ea:3f:2a:9c:84:e9:6d:90:22:60:
         d3:a0:97:42:2b:2d:75:03:94:1d:51:51:6a:e2:1a:0d:27:8f:
         56:a6:c2:ff:25:a5:0f:7c:91:5a:cb:fd:7f:08:2e:65:e0:70:
         24:db:50:ad:42:c5:d3:5d:57:4d:c9:34:32:ad:70:93:fa:36:
         f5:04:4f:78:76:27:68:aa:76:37:ed:0c:7f:0d:78:90:a5:3c:
         26:78:32:03:a0:ba:09:e9:67:04:1f:35:a2:8e:4f:51:00:ef:
         f0:23:3d:15:6f:0c:3d:02:9e:23:14:7b:0b:c3:ad:40:53:73:
         2b:40:aa:2d:3e:26:bf:01:13:88:70:90:ae:f5:5c:48:b0:31:
         c9:c7:73:19:07:f9:2c:39:03:47:50:4c:f9:62:be:0e:03:ef:
         11:e5:62:65:3a:59:e2:6c:59:cb:e6:3a:d0:17:d3:a0:c3:95:
         fe:da:e2:55:08:72:10:54:59:85:af:bd:a0:20:64:77:55:a0:
         62:7c:f9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:13:16 2025 by rpki-client