Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135352e302f32342d3234203d3e20323637393134.roa
File:                     34352e3137392e3135352e302f32342d3234203d3e20323637393134.roa (raw, json)
Hash identifier:          fmFLv0PdQVYrexsPHhNXr0PxZoKlvi0uaPq7WL+g4pk=
Subject key identifier:   E4:50:07:09:08:EC:F0:2D:BD:31:BD:5E:25:87:C6:33:12:4F:FC:73
Certificate issuer:       /CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
Certificate serial:       2A2F6F382347AAD15936157DF609788FB507072F
Authority key identifier: C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135352e302f32342d3234203d3e20323637393134.roa
Signing time:             Wed 01 Jul 2026 20:50:28 +0000
ROA not before:           Wed 01 Jul 2026 20:45:28 +0000
ROA not after:            Wed 30 Jun 2027 20:50:28 +0000
asID:                     267914
IP address blocks:        45.179.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl
                          rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2f:6f:38:23:47:aa:d1:59:36:15:7d:f6:09:78:8f:b5:07:07:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
        Validity
            Not Before: Jul  1 20:45:28 2026 GMT
            Not After : Jun 30 20:50:28 2027 GMT
        Subject: CN=E450070908ECF02DBD31BD5E2587C633124FFC73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ea:ad:5a:f0:7b:ea:57:8d:cc:9a:06:59:c8:
                    ca:b1:4b:31:06:ff:bf:1b:f4:e7:40:97:6d:cd:b2:
                    50:2d:20:08:6f:fa:7c:a3:5e:92:60:d7:fb:7e:e1:
                    6b:ca:50:02:ed:ba:7e:66:22:e3:f4:46:09:3e:b7:
                    98:b6:30:d4:5e:68:4f:34:af:db:9d:3d:1d:4a:76:
                    0f:ec:ec:0f:f3:a1:de:88:7e:70:fb:3b:92:17:e8:
                    c8:8d:70:b0:1c:4e:e8:9f:d9:a3:b3:59:6c:05:e1:
                    a0:a4:e7:9c:bc:7a:45:8c:fc:6d:16:ed:0f:3a:77:
                    03:54:11:f4:4f:96:59:4f:cc:2e:55:9d:ef:0e:93:
                    6d:d8:d5:b4:ca:30:34:a6:95:b3:b3:e2:19:38:58:
                    7b:10:8c:ca:02:10:74:a6:ed:5e:8d:72:72:66:8e:
                    bd:62:0c:54:73:de:70:6c:7a:bf:db:8f:89:58:7c:
                    82:54:56:9b:47:19:f9:67:f0:5d:8f:4a:b7:f2:ef:
                    26:37:47:25:70:21:84:cd:38:b2:09:b4:7a:a0:12:
                    0d:f9:91:8f:ea:1b:f9:7d:c5:9f:3e:df:c0:d3:dc:
                    4c:91:78:c0:06:ef:79:0d:fe:20:b0:7f:21:c5:e6:
                    1e:1a:78:3f:69:b8:55:e7:98:ae:83:18:1d:52:84:
                    0d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:50:07:09:08:EC:F0:2D:BD:31:BD:5E:25:87:C6:33:12:4F:FC:73
            X509v3 Authority Key Identifier:
                keyid:C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135352e302f32342d3234203d3e20323637393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:c1:f8:b5:f1:4e:28:db:f6:55:20:d0:54:bc:e7:5f:12:c8:
         c1:e4:d3:0b:5e:d8:fe:8a:8b:33:c4:39:e4:8c:05:1b:70:e6:
         22:17:6a:b7:0d:f3:e8:80:88:c9:18:34:d4:92:2f:91:41:ed:
         a5:19:cd:13:b4:d2:75:db:df:d0:e2:b4:49:b7:5b:f0:fb:c6:
         e5:c6:30:31:d7:02:65:71:4b:ef:c5:30:f5:7e:8d:2a:0e:e3:
         32:9d:f1:84:f8:f0:7d:5f:23:db:72:38:18:9d:4c:92:b0:4e:
         f4:78:ed:00:0c:d5:36:80:62:f4:d0:2c:a3:12:f2:c1:87:2a:
         d5:c2:9c:94:0f:d2:85:58:43:3b:19:be:c8:1f:19:fe:02:84:
         57:36:db:9f:f4:08:1f:35:14:a1:e3:d8:12:6a:98:bc:d7:a7:
         02:da:3c:7b:70:81:0e:f3:58:cc:d6:9a:25:55:b5:bb:2f:6d:
         85:e3:bd:e0:f4:f5:a1:cf:07:bb:25:d0:78:ea:07:1e:e7:6e:
         57:aa:57:a4:23:ef:2b:fe:73:4d:2a:88:82:ce:a6:21:88:ed:
         12:d5:c0:38:02:2d:55:76:f8:40:19:54:66:d9:99:30:bb:ff:
         11:5a:a3:4d:6e:61:e3:a9:a4:12:35:32:a9:ec:7e:32:ac:6a:
         0a:f1:45:33
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKi9vOCNHqtFZNhV99gl4j7UHBy8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZGN0NCMkVFNTJGQkNEQ0RFRkM0NjEzMTU4NDc4M0ZD
OEE2MDU1NzAeFw0yNjA3MDEyMDQ1MjhaFw0yNzA2MzAyMDUwMjhaMDMxMTAvBgNV
BAMTKEU0NTAwNzA5MDhFQ0YwMkRCRDMxQkQ1RTI1ODdDNjMzMTI0RkZDNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6q1a8HvqV43MmgZZyMqxSzEG
/78b9OdAl23NslAtIAhv+nyjXpJg1/t+4WvKUALtun5mIuP0Rgk+t5i2MNReaE80
r9udPR1Kdg/s7A/zod6IfnD7O5IX6MiNcLAcTuif2aOzWWwF4aCk55y8ekWM/G0W
7Q86dwNUEfRPlllPzC5Vne8Ok23Y1bTKMDSmlbOz4hk4WHsQjMoCEHSm7V6NcnJm
jr1iDFRz3nBser/bj4lYfIJUVptHGfln8F2PSrfy7yY3RyVwIYTNOLIJtHqgEg35
kY/qG/l9xZ8+38DT3EyReMAG73kN/iCwfyHF5h4aeD9puFXnmK6DGB1ShA0ZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU5FAHCQjs8C29Mb1eJYfGMxJP/HMwHwYDVR0j
BBgwFoAUxvfLLuUvvNze/EYTFYR4P8imBVcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NjM1NDFDNjc3MjA3REQ5NDA4NERBN0U2NEM1REM0MTlB
MDIzNTE5ODM1RjIyNzYzQjVCMEU1MDdDOTIzNjdDLzAvQzZGN0NCMkVFNTJGQkNE
Q0RFRkM0NjEzMTU4NDc4M0ZDOEE2MDU1Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNkY3Q0IyRUU1MkZCQ0RDREVG
QzQ2MTMxNTg0NzgzRkM4QTYwNTU3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODYzNTQxQzY3NzIwN0REOTQwODREQTdFNjRDNURDNDE5QTAyMzUxOTgz
NUYyMjc2M0I1QjBFNTA3QzkyMzY3Qy8wLzM0MzUyZTMxMzczOTJlMzEzNTM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzkzMTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALbOb
MA0GCSqGSIb3DQEBCwUAA4IBAQBfwfi18U4o2/ZVINBUvOdfEsjB5NMLXtj+iosz
xDnkjAUbcOYiF2q3DfPogIjJGDTUki+RQe2lGc0TtNJ129/Q4rRJt1vw+8blxjAx
1wJlcUvvxTD1fo0qDuMynfGE+PB9XyPbcjgYnUySsE70eO0ADNU2gGL00CyjEvLB
hyrVwpyUD9KFWEM7Gb7IHxn+AoRXNtuf9AgfNRSh49gSapi816cC2jx7cIEO81jM
1polVbW7L22F473g9PWhzwe7JdB46gce525XqlekI+8r/nNNKoiCzqYhiO0S1cA4
Ai1VdvhAGVRm2Zkwu/8RWqNNbmHjqaQSNTKp7H4yrGoK8UUz
-----END CERTIFICATE-----
Generated at Tue Jul 21 07:17:25 2026 by rpki-client