Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135322e302f32332d3233203d3e20323637393134.roa
File:                     34352e3137392e3135322e302f32332d3233203d3e20323637393134.roa (raw, json)
Hash identifier:          PNHz+PUujRIDcjqDfdc5bmA/oGttA/UDrLpjkn2IYQs=
Subject key identifier:   0D:F8:31:98:24:33:AA:D3:ED:6A:7D:CB:89:DD:74:35:C9:45:4E:19
Certificate issuer:       /CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
Certificate serial:       7ED16789FA9163DD4C0D476300D890FE8DA52B2C
Authority key identifier: C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135322e302f32332d3233203d3e20323637393134.roa
Signing time:             Wed 01 Jul 2026 20:50:27 +0000
ROA not before:           Wed 01 Jul 2026 20:45:27 +0000
ROA not after:            Wed 30 Jun 2027 20:50:27 +0000
asID:                     267914
IP address blocks:        45.179.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl
                          rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d1:67:89:fa:91:63:dd:4c:0d:47:63:00:d8:90:fe:8d:a5:2b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
        Validity
            Not Before: Jul  1 20:45:27 2026 GMT
            Not After : Jun 30 20:50:27 2027 GMT
        Subject: CN=0DF831982433AAD3ED6A7DCB89DD7435C9454E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:53:e7:ec:04:01:f5:76:01:59:c6:ea:cf:51:
                    0d:48:5f:c8:eb:df:6d:29:7e:d3:49:4d:74:02:c0:
                    c8:bb:6f:df:ae:05:b8:db:db:a6:54:30:41:ab:cd:
                    14:58:64:6e:b4:96:fe:cc:70:ef:e9:96:c0:99:73:
                    49:29:65:01:70:58:92:3f:e6:ce:a0:96:da:bd:48:
                    06:a3:41:ef:5b:39:4f:88:98:c5:85:07:6b:d8:60:
                    39:cf:84:8c:aa:1e:28:57:3e:09:1e:63:b7:a0:3a:
                    78:26:0c:d7:f3:65:c9:da:4a:ed:18:90:7b:33:26:
                    e7:e6:57:70:e8:09:77:2b:ff:7e:83:3a:65:32:2c:
                    08:08:37:f1:ca:47:8f:a4:10:36:ff:f2:00:85:86:
                    75:3a:bc:c1:f6:12:53:51:22:db:dd:fc:b4:fd:18:
                    4d:14:92:37:59:e3:f0:71:72:f4:22:88:4d:a3:70:
                    59:a2:b1:30:7c:64:97:a0:42:a9:7a:19:7f:38:b8:
                    56:81:08:aa:5e:68:d2:bf:df:df:a8:9c:28:01:0a:
                    0a:c4:ca:6a:54:ec:06:a5:3d:b5:fb:9c:0e:b7:4c:
                    44:aa:cb:3d:77:cb:73:06:63:c3:ab:52:c5:ea:ac:
                    06:d0:6d:fd:fe:bb:b8:28:56:39:5a:48:40:6e:bc:
                    81:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F8:31:98:24:33:AA:D3:ED:6A:7D:CB:89:DD:74:35:C9:45:4E:19
            X509v3 Authority Key Identifier:
                keyid:C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135322e302f32332d3233203d3e20323637393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:48:c0:07:4e:49:87:45:88:b8:d3:19:50:37:76:58:0f:19:
         9d:48:eb:a1:c5:32:01:2c:7b:a5:c5:e1:b5:87:0d:0c:41:15:
         53:a9:e2:0c:b8:a1:cc:44:e6:6a:0c:52:86:08:3b:74:dd:8f:
         49:3e:52:c1:38:05:4a:7b:02:0d:ed:54:67:1b:da:c9:4f:d8:
         33:24:b3:c3:09:dd:55:96:04:f9:e1:95:0f:6e:3c:a8:76:05:
         d1:45:9e:a1:1a:cd:2a:bb:90:61:69:91:dc:c7:9e:dd:a4:64:
         5a:18:0c:be:79:56:ae:ec:40:99:6d:57:74:79:fb:e3:eb:1d:
         15:06:12:6a:13:84:4c:f2:d3:8a:14:ab:5e:88:36:bb:fe:b0:
         e9:7a:ba:20:b5:83:a7:2b:2c:0d:85:4d:79:fb:80:95:7b:b0:
         1a:60:c1:23:ee:81:93:44:74:bf:9f:dd:fa:6d:9b:1e:a7:9a:
         af:10:6c:9b:20:53:a1:66:1a:44:7c:73:a7:85:d1:43:78:08:
         e4:41:75:58:0e:6a:68:4f:79:2f:55:bb:cd:7f:af:43:7e:16:
         e3:cd:fc:2f:98:cb:9c:2d:4a:29:6c:2f:11:1c:8d:09:72:42:
         4e:76:1d:3b:07:45:da:60:73:56:7a:cd:30:11:8f:2d:df:39:
         42:e9:91:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:16:54 2026 by rpki-client