Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135322e302f32342d3234203d3e20323637393134.roa
File:                     34352e3137392e3135322e302f32342d3234203d3e20323637393134.roa (raw, json)
Hash identifier:          olInbNICzMKESmuVJUiNPF+Zp6c+AqR/z3wxrQldSu8=
Subject key identifier:   5D:77:59:A4:F1:FB:E5:6F:A6:45:A1:F3:5B:58:FA:05:6D:9B:AA:21
Certificate issuer:       /CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
Certificate serial:       70555B28E72B79CA8E0F24E3153A6DD73825D6FD
Authority key identifier: C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135322e302f32342d3234203d3e20323637393134.roa
Signing time:             Wed 01 Jul 2026 20:50:28 +0000
ROA not before:           Wed 01 Jul 2026 20:45:28 +0000
ROA not after:            Wed 30 Jun 2027 20:50:28 +0000
asID:                     267914
IP address blocks:        45.179.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl
                          rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:55:5b:28:e7:2b:79:ca:8e:0f:24:e3:15:3a:6d:d7:38:25:d6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
        Validity
            Not Before: Jul  1 20:45:28 2026 GMT
            Not After : Jun 30 20:50:28 2027 GMT
        Subject: CN=5D7759A4F1FBE56FA645A1F35B58FA056D9BAA21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:04:26:f1:34:d5:5d:36:ee:0f:9e:9e:5a:e6:
                    79:37:d2:00:43:cf:91:dc:c1:6d:9b:05:03:56:bc:
                    dd:2b:14:55:20:cc:a4:50:97:24:ec:8e:d1:5f:9b:
                    81:b4:15:ac:ae:cd:f4:55:a2:d1:5c:7e:ac:63:82:
                    89:27:50:ba:a2:9a:23:23:c1:63:07:12:ef:13:28:
                    ea:bd:98:52:53:6b:de:17:cb:3d:4e:a7:7b:ce:35:
                    51:28:39:57:ab:66:14:5a:ba:5d:ae:7e:4c:7a:78:
                    66:9d:d4:14:de:f4:af:8f:de:0c:ba:68:dd:28:3b:
                    55:06:ca:3c:fa:aa:d5:d0:ef:08:5b:7f:69:f2:42:
                    ed:75:a4:a7:d5:47:a3:c6:ce:c6:69:0e:24:cd:14:
                    d7:e0:fe:b8:a1:1f:62:0c:aa:07:cd:f7:d5:46:a5:
                    4c:3b:3d:88:4e:cf:0e:6e:e8:f4:d5:db:d1:d0:e0:
                    f1:95:1f:80:45:e5:9d:93:09:c5:ea:3a:b1:1c:e0:
                    cd:0a:93:5e:26:47:0c:e0:c3:3e:aa:aa:9c:9a:6f:
                    cb:7f:dc:3c:83:ff:3f:2a:d0:fb:c0:a2:16:41:74:
                    32:63:b1:36:20:7c:c5:23:7f:45:12:c0:cd:86:fd:
                    f8:65:9d:cf:4d:17:3e:d4:47:9d:10:82:bd:39:a9:
                    79:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:77:59:A4:F1:FB:E5:6F:A6:45:A1:F3:5B:58:FA:05:6D:9B:AA:21
            X509v3 Authority Key Identifier:
                keyid:C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135322e302f32342d3234203d3e20323637393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:c4:97:d5:3e:5a:36:2d:ce:fd:f9:bb:14:f7:a4:ec:c4:36:
         24:02:d6:04:b9:df:28:a7:80:79:72:6a:53:7d:07:59:54:31:
         29:cf:23:f0:eb:61:13:d9:24:c5:45:a5:df:e9:fa:16:70:73:
         cd:89:1d:d5:d5:d0:99:c0:49:02:74:62:03:07:34:d1:3c:aa:
         b1:8a:49:dc:ff:52:05:0c:8f:b8:2b:f7:6a:c2:51:fd:f9:cf:
         04:d8:14:01:51:c0:47:cc:76:ad:5a:9e:03:ed:0b:ab:58:a5:
         51:40:d4:3b:e8:65:52:8f:f8:38:7e:81:6b:5c:8c:25:a3:78:
         17:cd:ff:2e:d7:42:71:fc:3f:79:4c:53:70:89:a4:82:0f:05:
         01:ce:74:ca:59:1c:ca:c7:44:ee:82:98:af:70:4b:78:0e:29:
         14:18:4b:18:0c:aa:99:46:f4:5d:45:81:46:5e:c8:c4:ce:3a:
         45:de:6c:5a:0b:06:e0:b7:c6:9b:5d:26:46:66:f4:89:14:cb:
         86:cb:0b:01:91:96:39:7e:36:eb:e2:aa:f1:be:aa:65:e0:1c:
         1c:cb:40:9d:e8:4c:2d:84:cb:26:d6:34:cb:6a:cd:76:23:89:
         e6:e8:c5:08:dd:ec:9f:d4:72:b2:57:3f:94:3e:7f:81:03:a8:
         4c:98:5d:a1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcFVbKOcrecqODyTjFTpt1zgl1v0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZGN0NCMkVFNTJGQkNEQ0RFRkM0NjEzMTU4NDc4M0ZD
OEE2MDU1NzAeFw0yNjA3MDEyMDQ1MjhaFw0yNzA2MzAyMDUwMjhaMDMxMTAvBgNV
BAMTKDVENzc1OUE0RjFGQkU1NkZBNjQ1QTFGMzVCNThGQTA1NkQ5QkFBMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHBCbxNNVdNu4Pnp5a5nk30gBD
z5HcwW2bBQNWvN0rFFUgzKRQlyTsjtFfm4G0FayuzfRVotFcfqxjgoknULqimiMj
wWMHEu8TKOq9mFJTa94Xyz1Op3vONVEoOVerZhRaul2ufkx6eGad1BTe9K+P3gy6
aN0oO1UGyjz6qtXQ7whbf2nyQu11pKfVR6PGzsZpDiTNFNfg/rihH2IMqgfN99VG
pUw7PYhOzw5u6PTV29HQ4PGVH4BF5Z2TCcXqOrEc4M0Kk14mRwzgwz6qqpyab8t/
3DyD/z8q0PvAohZBdDJjsTYgfMUjf0USwM2G/fhlnc9NFz7UR50Qgr05qXkpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUXXdZpPH75W+mRaHzW1j6BW2bqiEwHwYDVR0j
BBgwFoAUxvfLLuUvvNze/EYTFYR4P8imBVcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NjM1NDFDNjc3MjA3REQ5NDA4NERBN0U2NEM1REM0MTlB
MDIzNTE5ODM1RjIyNzYzQjVCMEU1MDdDOTIzNjdDLzAvQzZGN0NCMkVFNTJGQkNE
Q0RFRkM0NjEzMTU4NDc4M0ZDOEE2MDU1Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNkY3Q0IyRUU1MkZCQ0RDREVG
QzQ2MTMxNTg0NzgzRkM4QTYwNTU3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODYzNTQxQzY3NzIwN0REOTQwODREQTdFNjRDNURDNDE5QTAyMzUxOTgz
NUYyMjc2M0I1QjBFNTA3QzkyMzY3Qy8wLzM0MzUyZTMxMzczOTJlMzEzNTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzkzMTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALbOY
MA0GCSqGSIb3DQEBCwUAA4IBAQBQxJfVPlo2Lc79+bsU96TsxDYkAtYEud8op4B5
cmpTfQdZVDEpzyPw62ET2STFRaXf6foWcHPNiR3V1dCZwEkCdGIDBzTRPKqxiknc
/1IFDI+4K/dqwlH9+c8E2BQBUcBHzHatWp4D7QurWKVRQNQ76GVSj/g4foFrXIwl
o3gXzf8u10Jx/D95TFNwiaSCDwUBznTKWRzKx0TugpivcEt4DikUGEsYDKqZRvRd
RYFGXsjEzjpF3mxaCwbgt8abXSZGZvSJFMuGywsBkZY5fjbr4qrxvqpl4Bwcy0Cd
6EwthMsm1jTLas12I4nm6MUI3eyf1HKyVz+UPn+BA6hMmF2h
-----END CERTIFICATE-----
Generated at Tue Jul 21 07:17:13 2026 by rpki-client