Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135332e302f32342d3234203d3e20323637393134.roa
File:                     34352e3137392e3135332e302f32342d3234203d3e20323637393134.roa (raw, json)
Hash identifier:          sqrDCmG4hyOb3OauP29KjcW+OsQedjNiNjF5kzJPg3U=
Subject key identifier:   D0:FE:6E:01:B2:5C:C4:93:82:A6:70:DD:DF:92:EE:BA:58:33:56:FE
Certificate issuer:       /CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
Certificate serial:       7BF0EF75F96931F2CFFE81369C993E6C153446E1
Authority key identifier: C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135332e302f32342d3234203d3e20323637393134.roa
Signing time:             Wed 01 Jul 2026 20:50:27 +0000
ROA not before:           Wed 01 Jul 2026 20:45:27 +0000
ROA not after:            Wed 30 Jun 2027 20:50:27 +0000
asID:                     267914
IP address blocks:        45.179.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl
                          rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f0:ef:75:f9:69:31:f2:cf:fe:81:36:9c:99:3e:6c:15:34:46:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
        Validity
            Not Before: Jul  1 20:45:27 2026 GMT
            Not After : Jun 30 20:50:27 2027 GMT
        Subject: CN=D0FE6E01B25CC49382A670DDDF92EEBA583356FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7e:b6:34:04:8c:13:43:45:20:27:37:a8:cf:
                    16:5b:c2:2c:16:56:45:77:eb:18:89:ac:1e:8d:27:
                    a9:c8:43:87:4a:bf:43:91:6b:ba:23:b4:9f:e1:72:
                    b5:55:ae:37:ac:2e:9b:ca:76:c0:c8:98:04:ea:3a:
                    4f:e8:11:a0:63:80:ad:03:0f:fe:48:35:c0:5c:0a:
                    66:61:df:06:70:7d:34:dc:b8:47:93:f1:29:1c:4a:
                    74:01:93:99:88:f8:de:46:3b:74:5f:1d:2d:43:27:
                    8b:b2:60:8b:c2:34:e6:9a:a3:d1:3b:96:a8:31:23:
                    cb:fd:67:ac:9f:c3:d2:26:05:d4:a9:ad:b8:54:58:
                    e2:33:5a:aa:a1:5e:a3:c8:f6:02:39:25:57:55:5b:
                    7b:02:ef:38:cf:c9:b0:5e:79:84:f1:0a:19:40:a9:
                    23:2c:e4:c6:cd:78:94:59:c0:3e:64:25:a6:cf:7e:
                    9e:3f:3e:f7:32:85:1d:53:96:64:dd:43:19:a5:e3:
                    ed:eb:80:c5:0b:59:9b:b7:71:1e:6b:a6:e7:45:57:
                    d1:47:d1:a2:9f:ce:d7:34:e1:08:83:a7:3a:b3:b5:
                    ed:c1:48:78:48:bb:03:2e:f1:a4:8b:2b:8d:40:40:
                    4a:a2:90:96:f6:85:1d:48:fb:b1:57:4b:9d:77:9a:
                    57:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FE:6E:01:B2:5C:C4:93:82:A6:70:DD:DF:92:EE:BA:58:33:56:FE
            X509v3 Authority Key Identifier:
                keyid:C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135332e302f32342d3234203d3e20323637393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:4d:56:8d:df:8d:b2:2f:bd:11:6e:94:e7:bb:33:a5:4a:af:
         36:32:b0:8d:68:97:51:11:29:f9:93:ea:29:c3:91:92:7f:eb:
         24:e1:7a:2f:1f:38:0d:68:6a:d5:26:65:e5:cc:2c:e5:c7:0c:
         64:7d:da:36:70:e8:5d:dc:19:11:11:e4:03:6e:92:af:66:1d:
         1e:eb:eb:72:c6:df:2e:48:37:5a:10:fd:73:b2:90:4d:f8:75:
         7d:13:5d:d1:bb:95:27:f2:f0:16:e3:21:11:b3:4d:af:a5:43:
         cf:5b:11:16:11:15:f8:f4:0a:4e:59:8e:79:d3:12:d3:d8:1f:
         b1:b9:e4:48:13:8f:de:01:9e:11:18:f8:ea:df:e2:9e:86:32:
         bd:65:3d:7d:95:02:c5:b2:43:f1:f2:5a:9c:38:22:a1:b3:e9:
         81:eb:76:ca:87:26:11:7d:d8:ce:f3:a6:49:92:d8:32:2b:4f:
         23:74:a7:68:67:f8:c9:4f:1d:30:ef:db:dd:e7:8c:bc:56:95:
         79:d8:ae:43:50:a1:28:71:cb:12:35:bc:b6:f3:47:66:93:b0:
         00:f0:0f:87:37:e6:30:e7:18:6b:a1:f6:57:2f:a3:5d:10:86:
         a0:84:e0:78:3e:18:e9:31:49:af:06:bd:ad:a1:fb:99:20:4e:
         e9:d3:64:f0
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUe/DvdflpMfLP/oE2nJk+bBU0RuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZGN0NCMkVFNTJGQkNEQ0RFRkM0NjEzMTU4NDc4M0ZD
OEE2MDU1NzAeFw0yNjA3MDEyMDQ1MjdaFw0yNzA2MzAyMDUwMjdaMDMxMTAvBgNV
BAMTKEQwRkU2RTAxQjI1Q0M0OTM4MkE2NzBERERGOTJFRUJBNTgzMzU2RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZfrY0BIwTQ0UgJzeozxZbwiwW
VkV36xiJrB6NJ6nIQ4dKv0ORa7ojtJ/hcrVVrjesLpvKdsDImATqOk/oEaBjgK0D
D/5INcBcCmZh3wZwfTTcuEeT8SkcSnQBk5mI+N5GO3RfHS1DJ4uyYIvCNOaao9E7
lqgxI8v9Z6yfw9ImBdSprbhUWOIzWqqhXqPI9gI5JVdVW3sC7zjPybBeeYTxChlA
qSMs5MbNeJRZwD5kJabPfp4/PvcyhR1TlmTdQxml4+3rgMULWZu3cR5rpudFV9FH
0aKfztc04QiDpzqzte3BSHhIuwMu8aSLK41AQEqikJb2hR1I+7FXS513mleLAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU0P5uAbJcxJOCpnDd35LuulgzVv4wHwYDVR0j
BBgwFoAUxvfLLuUvvNze/EYTFYR4P8imBVcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NjM1NDFDNjc3MjA3REQ5NDA4NERBN0U2NEM1REM0MTlB
MDIzNTE5ODM1RjIyNzYzQjVCMEU1MDdDOTIzNjdDLzAvQzZGN0NCMkVFNTJGQkNE
Q0RFRkM0NjEzMTU4NDc4M0ZDOEE2MDU1Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNkY3Q0IyRUU1MkZCQ0RDREVG
QzQ2MTMxNTg0NzgzRkM4QTYwNTU3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODYzNTQxQzY3NzIwN0REOTQwODREQTdFNjRDNURDNDE5QTAyMzUxOTgz
NUYyMjc2M0I1QjBFNTA3QzkyMzY3Qy8wLzM0MzUyZTMxMzczOTJlMzEzNTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzkzMTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALbOZ
MA0GCSqGSIb3DQEBCwUAA4IBAQAPTVaN342yL70RbpTnuzOlSq82MrCNaJdRESn5
k+opw5GSf+sk4XovHzgNaGrVJmXlzCzlxwxkfdo2cOhd3BkREeQDbpKvZh0e6+ty
xt8uSDdaEP1zspBN+HV9E13Ru5Un8vAW4yERs02vpUPPWxEWERX49ApOWY550xLT
2B+xueRIE4/eAZ4RGPjq3+KehjK9ZT19lQLFskPx8lqcOCKhs+mB63bKhyYRfdjO
86ZJktgyK08jdKdoZ/jJTx0w79vd54y8VpV52K5DUKEoccsSNby280dmk7AA8A+H
N+Yw5xhrofZXL6NdEIaghOB4PhjpMUmvBr2tofuZIE7p02Tw
-----END CERTIFICATE-----
Generated at Tue Jul 21 07:17:25 2026 by rpki-client