Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/34352e3137302e32392e302f32342d3234203d3e20323637373532.roa
File:                     34352e3137302e32392e302f32342d3234203d3e20323637373532.roa (raw, json)
Hash identifier:          sqHLD/NQVv5cmg2nj0SY05lc3sjngf8xqyu38kLwcus=
Subject key identifier:   5F:3C:81:51:32:A4:63:DB:82:6C:C7:8D:F2:15:DF:21:C8:67:0F:4E
Certificate issuer:       /CN=FD07AFBCC3FFB625EEA674F938508F1BC3309E00
Certificate serial:       2B2F22BD40C43A6E7050EC3B31DDFDC099F94E6A
Authority key identifier: FD:07:AF:BC:C3:FF:B6:25:EE:A6:74:F9:38:50:8F:1B:C3:30:9E:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/34352e3137302e32392e302f32342d3234203d3e20323637373532.roa
Signing time:             Thu 30 Oct 2025 22:51:22 +0000
ROA not before:           Thu 30 Oct 2025 22:46:22 +0000
ROA not after:            Thu 29 Oct 2026 22:51:22 +0000
asID:                     267752
IP address blocks:        45.170.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:2f:22:bd:40:c4:3a:6e:70:50:ec:3b:31:dd:fd:c0:99:f9:4e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD07AFBCC3FFB625EEA674F938508F1BC3309E00
        Validity
            Not Before: Oct 30 22:46:22 2025 GMT
            Not After : Oct 29 22:51:22 2026 GMT
        Subject: CN=5F3C815132A463DB826CC78DF215DF21C8670F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ac:dc:f9:63:d1:32:66:1b:a6:2d:92:d1:d2:
                    a3:fe:20:8f:c9:d5:57:d5:86:a2:cb:80:2f:28:4f:
                    b6:98:74:2f:59:e4:d2:ca:b7:79:c7:bb:35:1b:89:
                    8e:57:b9:89:95:78:34:77:d7:4c:6e:1e:6f:ea:fd:
                    f9:c6:06:21:69:3a:8f:12:ea:6f:33:ff:0e:f8:75:
                    da:e0:8a:23:97:9c:f6:3a:82:aa:e7:80:46:a4:25:
                    41:10:72:b3:bc:8a:7f:c4:7b:d4:ef:a8:29:31:ac:
                    ea:82:ae:e0:13:7e:69:2b:7c:b1:6c:1c:ca:a3:da:
                    0b:55:d4:1b:9d:28:c6:fc:fc:82:6a:ca:33:df:ee:
                    85:28:0b:00:15:9e:eb:93:55:19:62:92:7d:6b:ec:
                    24:ed:83:8b:29:26:39:84:0b:eb:e0:a3:b3:2f:bf:
                    96:a0:9e:a3:ce:86:83:2f:cb:6c:99:36:6a:84:b2:
                    06:c1:f1:cd:6d:1d:e2:a5:24:ee:03:9f:8e:1e:46:
                    38:c7:20:e1:3d:5b:50:3d:95:d9:08:4e:75:5e:5c:
                    84:1b:5a:d5:8b:4a:e5:f3:4e:42:44:eb:1a:27:a8:
                    81:4d:e8:e0:da:7a:82:2d:44:b2:02:9d:18:c2:58:
                    93:e0:fe:8c:a0:ba:a4:c0:64:71:06:f0:a1:b8:db:
                    01:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3C:81:51:32:A4:63:DB:82:6C:C7:8D:F2:15:DF:21:C8:67:0F:4E
            X509v3 Authority Key Identifier:
                keyid:FD:07:AF:BC:C3:FF:B6:25:EE:A6:74:F9:38:50:8F:1B:C3:30:9E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/34352e3137302e32392e302f32342d3234203d3e20323637373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:54:3e:9d:e0:63:64:72:2d:f9:7f:f6:18:79:26:7a:b5:e3:
         a2:0f:1d:19:df:36:0d:1e:bb:34:b6:d9:5a:02:43:3a:53:db:
         a7:16:3f:24:cf:ed:c2:8b:cf:e9:1b:85:71:9e:5f:09:f9:cc:
         52:30:db:53:d8:12:f2:ff:27:a3:34:a1:52:71:67:c1:a1:24:
         63:89:17:2d:2e:1c:8b:82:c7:7d:06:05:d5:71:40:02:cc:a1:
         5d:9b:6c:cd:01:cd:54:53:8d:b6:f0:cb:95:ea:29:b8:3a:bb:
         06:d2:0e:c0:67:56:c1:f7:9f:3a:ed:93:cf:12:65:04:cb:29:
         2c:ff:6f:36:5d:3e:62:a1:43:3a:1b:e7:4b:e2:de:3b:dc:c6:
         c1:30:87:5d:8c:06:79:b0:e8:7d:3c:12:06:e8:9e:7e:e4:42:
         07:ca:75:42:88:34:77:45:66:c7:ee:7a:5e:a2:92:ce:07:e5:
         ea:a2:69:5c:29:8c:04:26:25:b4:6f:49:a8:c6:8c:68:d0:ea:
         4a:26:55:1d:7d:b8:78:6e:8f:32:b1:a3:80:1c:bc:3a:e3:a3:
         91:11:20:3b:ae:25:ae:72:59:16:a7:1d:0a:62:9b:80:83:96:
         c8:a0:0e:f9:44:64:4d:a8:ad:e2:d9:0e:95:aa:f3:24:5a:2f:
         be:35:d8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:00:22 2025 by rpki-client