Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134332e302f32342d3234203d3e20323635363633.roa
File:                     34352e3137352e3134332e302f32342d3234203d3e20323635363633.roa (raw, json)
Hash identifier:          nGWIipvu0IZbqO3UsHIJFzBkK64HOGxe0qanBrUZHfE=
Subject key identifier:   67:21:B7:74:F3:2A:10:5F:8F:11:DE:26:E1:06:06:4C:FC:BE:BE:76
Certificate issuer:       /CN=029141245BD9F1CE31BEF7964E181E44F17CE901
Certificate serial:       5CAEE6333697976DD4300A2A6A861BD90964C2CB
Authority key identifier: 02:91:41:24:5B:D9:F1:CE:31:BE:F7:96:4E:18:1E:44:F1:7C:E9:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134332e302f32342d3234203d3e20323635363633.roa
Signing time:             Sat 15 Aug 2026 18:25:35 +0000
ROA not before:           Sat 15 Aug 2026 18:20:35 +0000
ROA not after:            Sat 14 Aug 2027 18:25:35 +0000
asID:                     265663
IP address blocks:        45.175.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ae:e6:33:36:97:97:6d:d4:30:0a:2a:6a:86:1b:d9:09:64:c2:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=029141245BD9F1CE31BEF7964E181E44F17CE901
        Validity
            Not Before: Aug 15 18:20:35 2026 GMT
            Not After : Aug 14 18:25:35 2027 GMT
        Subject: CN=6721B774F32A105F8F11DE26E106064CFCBEBE76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6a:93:25:58:38:64:ae:70:58:3f:1a:00:59:
                    53:60:fb:ea:b4:fe:e2:ee:62:87:36:7d:48:c5:da:
                    1d:bb:9d:f8:64:13:fa:35:84:45:b9:2c:a3:69:1e:
                    30:1f:4b:4d:a4:5e:16:9e:fe:3a:8f:24:96:b5:6d:
                    34:8e:36:f0:cd:21:f1:ea:e9:d3:02:2c:34:7d:e3:
                    2e:0d:78:1e:92:66:0d:4e:36:f6:fe:d2:c4:99:9c:
                    3b:d0:f3:d8:05:bc:e7:b9:5c:e5:32:22:54:25:d7:
                    68:ba:9b:16:2b:b8:40:4b:63:cf:af:54:16:75:66:
                    34:60:11:28:4a:a3:e1:4c:d1:60:cd:a0:43:73:78:
                    96:4f:ea:e2:1f:b2:dc:17:31:16:21:9a:e8:4d:c7:
                    d8:32:0d:e9:d3:60:08:31:c0:6a:4f:8a:d6:2a:50:
                    49:c2:5b:93:ed:bb:0a:27:77:52:d4:cd:3f:1d:02:
                    94:03:e8:5d:3d:2a:fb:a6:6f:ce:1f:b7:d6:80:f1:
                    cb:e9:e2:33:e1:30:80:c1:34:a4:46:e3:8c:59:5b:
                    2c:dc:87:67:34:bf:90:e6:6f:aa:d6:6e:91:11:38:
                    9c:36:60:8f:56:0c:ea:de:5b:98:7f:c8:02:16:36:
                    62:46:38:ba:b2:bc:ca:32:5c:43:6c:3d:67:79:e1:
                    8b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:21:B7:74:F3:2A:10:5F:8F:11:DE:26:E1:06:06:4C:FC:BE:BE:76
            X509v3 Authority Key Identifier:
                keyid:02:91:41:24:5B:D9:F1:CE:31:BE:F7:96:4E:18:1E:44:F1:7C:E9:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134332e302f32342d3234203d3e20323635363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:3e:6d:6b:cd:18:41:04:ef:ad:63:98:09:d9:9d:8c:b5:fc:
         94:f5:01:00:b5:d4:2a:1c:4c:91:2f:28:3e:b8:04:e7:0f:e9:
         bd:32:9d:2a:de:6a:f4:e4:c7:c4:c8:72:63:30:ae:77:98:6b:
         04:fd:cc:99:6e:3a:7a:de:cd:8c:97:be:b5:e2:06:0a:c3:c3:
         23:08:dd:79:59:a0:eb:95:98:31:3d:c4:2b:09:2e:16:c8:c0:
         53:47:0f:88:35:22:95:73:e2:26:21:9a:63:be:d1:7a:5b:29:
         30:f9:7e:7c:66:e7:29:8e:25:f8:b5:d5:d0:bf:0b:65:bd:a5:
         7c:c6:35:fe:a3:df:be:f2:d6:48:69:82:3b:5d:b7:b1:7a:13:
         cd:f6:25:34:7e:c7:a9:68:78:b1:f3:c6:80:09:be:d2:1f:57:
         4e:ae:7b:e1:5d:73:1c:15:fa:60:f1:89:d2:63:5c:36:51:45:
         69:94:f6:9b:3c:19:8c:be:4d:88:cb:88:7a:f2:0c:d3:86:2e:
         93:8d:df:1c:06:08:af:76:ca:6d:ce:ca:37:5a:ee:00:4c:68:
         85:32:3b:14:f5:7d:6b:a8:9f:5c:38:75:7c:25:65:75:4f:a4:
         0d:1f:85:62:6b:94:98:da:4e:38:85:13:3e:08:86:1e:4d:5c:
         9f:8e:99:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:19:12 2026 by rpki-client