Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/34352e3233322e322e302f32342d3234203d3e20323636373534.roa
File:                     34352e3233322e322e302f32342d3234203d3e20323636373534.roa (raw, json)
Hash identifier:          f1o2mDDLrDfzh0N+/rL4eHTm8IrceXfryQfnTLi02EQ=
Subject key identifier:   D7:E6:0A:87:05:3C:3D:27:FB:EA:3F:1C:A1:38:E4:AD:C2:BB:39:D5
Certificate issuer:       /CN=64E2A9B1818F618CC381651138A0484A9CB1B197
Certificate serial:       673D9D18867A14E5778BB72083EA2181CD640E87
Authority key identifier: 64:E2:A9:B1:81:8F:61:8C:C3:81:65:11:38:A0:48:4A:9C:B1:B1:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64E2A9B1818F618CC381651138A0484A9CB1B197.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/34352e3233322e322e302f32342d3234203d3e20323636373534.roa
Signing time:             Wed 16 Jul 2025 21:25:43 +0000
ROA not before:           Wed 16 Jul 2025 21:20:43 +0000
ROA not after:            Wed 15 Jul 2026 21:25:43 +0000
asID:                     266754
IP address blocks:        45.232.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/64E2A9B1818F618CC381651138A0484A9CB1B197.crl
                          rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/64E2A9B1818F618CC381651138A0484A9CB1B197.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64E2A9B1818F618CC381651138A0484A9CB1B197.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:3d:9d:18:86:7a:14:e5:77:8b:b7:20:83:ea:21:81:cd:64:0e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E2A9B1818F618CC381651138A0484A9CB1B197
        Validity
            Not Before: Jul 16 21:20:43 2025 GMT
            Not After : Jul 15 21:25:43 2026 GMT
        Subject: CN=D7E60A87053C3D27FBEA3F1CA138E4ADC2BB39D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0b:08:df:87:51:56:32:60:15:86:09:10:17:
                    a9:51:79:dc:9a:ec:5e:e9:60:15:99:a0:11:86:c8:
                    94:7b:eb:bd:6c:c7:1d:fd:1f:2f:fa:31:69:98:e3:
                    c9:01:72:ba:d7:91:87:51:7c:56:85:95:42:e7:f6:
                    72:86:56:40:95:ab:4f:e9:ea:c2:db:c1:bd:4b:41:
                    cb:9a:97:40:fc:1b:7f:c3:35:00:a5:b6:cd:bd:4f:
                    82:2b:66:19:50:10:2a:b9:73:19:d3:24:7a:aa:49:
                    f1:be:41:19:fe:29:5c:c1:f2:cd:7f:8f:d0:52:a7:
                    28:55:f6:0a:0e:2e:ce:85:df:3f:7a:39:5e:16:b3:
                    f2:46:57:9b:62:41:72:14:9a:62:05:06:73:cb:5b:
                    92:f5:65:7c:ff:6d:cf:31:24:78:0d:54:87:af:7c:
                    ec:6f:a5:3d:d6:e9:1d:27:47:91:89:68:51:04:3b:
                    0a:1b:8e:5b:21:07:f1:70:22:2b:25:36:5d:2c:d3:
                    13:77:4e:d5:47:e4:eb:56:39:82:58:08:8c:64:24:
                    d5:2d:8d:cc:b1:29:87:b7:52:87:12:53:f8:83:45:
                    59:67:d0:0b:bb:e5:81:8d:d1:b3:26:65:76:b9:11:
                    06:48:5b:10:d0:de:a8:b8:32:b3:c1:c2:40:c4:d4:
                    43:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E6:0A:87:05:3C:3D:27:FB:EA:3F:1C:A1:38:E4:AD:C2:BB:39:D5
            X509v3 Authority Key Identifier:
                keyid:64:E2:A9:B1:81:8F:61:8C:C3:81:65:11:38:A0:48:4A:9C:B1:B1:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/64E2A9B1818F618CC381651138A0484A9CB1B197.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64E2A9B1818F618CC381651138A0484A9CB1B197.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/34352e3233322e322e302f32342d3234203d3e20323636373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:d2:e4:b5:f8:4a:0d:fa:dd:be:b5:db:fd:90:4c:1e:0c:50:
         75:3b:46:d7:74:96:e8:62:75:bc:ce:2f:3b:49:4d:3e:ed:af:
         02:46:ac:b1:1c:cf:0f:5b:5f:13:da:59:24:43:0f:72:7d:c0:
         6d:90:f1:64:05:01:13:de:e6:ec:15:38:90:91:05:ef:0e:60:
         3b:79:78:f4:3c:dc:27:65:7e:8f:4f:10:05:f9:4d:9c:ed:45:
         9b:cd:f6:9d:13:51:4d:98:0f:67:4f:3e:38:85:ad:5d:de:31:
         1b:2d:2f:4c:de:11:22:57:33:34:2b:ff:34:59:54:48:3e:4a:
         cf:f6:82:44:dd:e9:d4:fb:8a:dd:1d:45:af:c7:71:00:20:fb:
         93:e3:d5:8d:42:72:6a:05:a6:26:1a:07:62:8b:84:3b:cd:67:
         47:6b:97:82:c9:a8:ca:03:10:fe:5d:dc:80:eb:f4:f3:95:94:
         f0:55:34:b2:33:5a:66:aa:a3:5c:b9:be:e3:2f:d3:22:b2:b5:
         5d:53:61:be:ae:cc:7d:85:06:83:e3:39:60:43:a5:5e:92:2d:
         4b:9d:77:12:3f:f6:f6:d4:a5:85:14:f3:4c:ac:1f:d4:12:3b:
         b6:50:6f:07:67:d3:03:fa:b2:35:38:e5:ac:5f:04:3e:06:a2:
         c8:f0:ca:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 20:02:59 2025 by rpki-client