Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/34352e3233382e3137392e302f32342d3234203d3e20323733393733.roa
File:                     34352e3233382e3137392e302f32342d3234203d3e20323733393733.roa (raw, json)
Hash identifier:          8UPCS1dzoF98UBOHNteXNqE+w2sm6F1+2SY/j4Pf0HE=
Subject key identifier:   BA:19:AF:0B:D9:ED:1B:CE:23:C1:87:2D:42:81:90:52:36:30:CF:A8
Certificate issuer:       /CN=84B320834CA10CE018169848F7AE0810EB3E7C5D
Certificate serial:       45DA09963E990034C87971A5F2FBA258234AABC5
Authority key identifier: 84:B3:20:83:4C:A1:0C:E0:18:16:98:48:F7:AE:08:10:EB:3E:7C:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/34352e3233382e3137392e302f32342d3234203d3e20323733393733.roa
Signing time:             Thu 23 Oct 2025 03:05:00 +0000
ROA not before:           Thu 23 Oct 2025 03:00:00 +0000
ROA not after:            Thu 22 Oct 2026 03:05:00 +0000
asID:                     273973
IP address blocks:        45.238.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:da:09:96:3e:99:00:34:c8:79:71:a5:f2:fb:a2:58:23:4a:ab:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B320834CA10CE018169848F7AE0810EB3E7C5D
        Validity
            Not Before: Oct 23 03:00:00 2025 GMT
            Not After : Oct 22 03:05:00 2026 GMT
        Subject: CN=BA19AF0BD9ED1BCE23C1872D428190523630CFA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:94:d7:03:e9:40:8b:b7:c1:b3:e9:af:f6:0f:
                    e7:22:81:36:33:41:8b:99:77:ed:61:b5:db:65:7d:
                    d1:bb:13:67:76:8f:ca:56:19:41:f5:67:51:81:1a:
                    7f:19:50:63:f1:bf:14:fe:8e:c2:7e:02:43:81:38:
                    6b:04:d8:a3:b1:ed:09:83:70:1c:38:71:20:f7:81:
                    ff:56:0c:86:66:38:fe:a9:db:09:19:11:de:ac:24:
                    08:66:db:d6:28:08:5f:79:ee:b6:b3:63:e3:ca:27:
                    62:83:27:b1:3a:ac:ed:e5:cd:46:9c:6a:c0:6c:81:
                    57:f1:c3:35:00:75:0c:e9:87:3d:47:2c:68:44:22:
                    89:ba:3b:5d:9c:0f:f5:fa:be:41:43:2b:b7:21:02:
                    15:df:7a:ee:0a:31:af:eb:95:11:b6:9a:58:0c:fd:
                    a1:94:9a:83:86:9d:b9:bb:d9:1e:08:d4:19:9a:74:
                    bf:73:6d:b9:da:66:bc:cf:c9:98:c8:c2:be:1a:46:
                    4e:a4:66:c9:c2:36:a0:ee:5e:ef:b7:0d:60:11:ed:
                    a3:7d:44:c4:aa:45:a2:46:32:81:47:b8:f0:6f:4c:
                    4c:1f:fc:84:64:15:e7:ce:66:1b:a3:b8:40:d1:d9:
                    10:16:b1:dd:26:5c:a1:aa:d6:fa:d2:18:7a:1f:9c:
                    df:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:19:AF:0B:D9:ED:1B:CE:23:C1:87:2D:42:81:90:52:36:30:CF:A8
            X509v3 Authority Key Identifier:
                keyid:84:B3:20:83:4C:A1:0C:E0:18:16:98:48:F7:AE:08:10:EB:3E:7C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/34352e3233382e3137392e302f32342d3234203d3e20323733393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:6a:7e:56:c9:8a:a1:72:60:5c:16:1d:70:1c:9d:83:91:47:
         83:12:f9:2a:e3:9c:dc:9e:81:87:76:85:16:69:cd:cd:9f:f9:
         a2:f6:b5:fb:06:47:b4:a4:99:86:f6:33:e7:f8:bb:38:36:f5:
         fa:66:83:2f:37:14:2f:8b:96:f6:21:26:18:5b:33:73:c6:9e:
         84:95:21:b2:d4:64:42:78:2b:a0:1a:ff:25:9f:23:a3:dd:d9:
         0d:80:b6:b6:ca:18:79:aa:15:f3:db:a3:6b:a3:63:bb:d3:c8:
         09:12:ab:85:cf:28:4f:a4:a0:df:67:71:7c:d7:d9:c1:af:ac:
         95:39:16:ec:79:79:4b:7b:e0:30:bf:00:b6:12:66:e0:34:6c:
         6b:31:a7:b6:d0:4f:fa:e9:fd:ac:d4:4d:89:4a:99:b6:22:30:
         2c:d1:08:82:47:45:20:b0:f6:df:93:85:e4:29:42:b9:d5:e1:
         7a:16:ae:d3:92:6a:0c:9a:d9:64:25:cd:c6:a8:e8:51:b9:f8:
         ff:56:76:29:08:db:7f:9f:17:b7:b6:f6:34:c1:06:d0:f7:01:
         a4:55:0b:21:90:40:82:47:99:f9:4b:0f:90:72:2e:bd:d3:fd:
         04:d4:83:34:f0:e8:6a:cc:a1:1f:e2:e1:00:4e:83:ed:7f:85:
         ef:26:f7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:48:13 2025 by rpki-client