Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130302e302f32342d3234203d3e20323636373930.roa
File:                     34352e3233332e3130302e302f32342d3234203d3e20323636373930.roa (raw, json)
Hash identifier:          lF8aI+WlZvQWwYRe90Kh8tI0d5t3X6NgwcWDSTmZUA4=
Subject key identifier:   33:E1:62:AB:53:C7:65:59:3B:B4:2D:76:86:5A:E8:CB:BE:72:D6:9E
Certificate issuer:       /CN=69B942F2442A4B878DCF7E43089B60B94955608D
Certificate serial:       1F481DD11CF643BE76D8373CD779EBD3C0DF5838
Authority key identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130302e302f32342d3234203d3e20323636373930.roa
Signing time:             Wed 08 Jul 2026 21:51:31 +0000
ROA not before:           Wed 08 Jul 2026 21:46:31 +0000
ROA not after:            Wed 07 Jul 2027 21:51:31 +0000
asID:                     266790
IP address blocks:        45.233.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:48:1d:d1:1c:f6:43:be:76:d8:37:3c:d7:79:eb:d3:c0:df:58:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B942F2442A4B878DCF7E43089B60B94955608D
        Validity
            Not Before: Jul  8 21:46:31 2026 GMT
            Not After : Jul  7 21:51:31 2027 GMT
        Subject: CN=33E162AB53C765593BB42D76865AE8CBBE72D69E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:17:d2:57:01:30:b5:0f:a5:13:db:b5:0f:
                    50:2b:37:42:36:75:ba:42:de:a9:8d:2b:49:52:02:
                    b8:e0:d9:45:1c:cf:3c:e6:a5:25:61:e5:6b:3c:1d:
                    82:56:1d:3a:a7:f5:48:02:f3:3d:28:54:3e:e9:7d:
                    f1:c2:78:58:04:df:8d:50:0e:27:95:b6:34:2c:f8:
                    c2:4f:49:9e:2f:78:f8:48:88:6d:82:98:8a:68:d8:
                    28:7c:cd:4f:0f:ca:09:01:fa:b3:28:a3:fc:0e:e2:
                    a5:9f:85:36:73:9a:db:60:8c:0d:6f:b6:dc:31:4e:
                    de:c4:ef:9b:18:d0:45:3d:fd:98:34:b3:30:ef:44:
                    bf:85:46:6f:7e:22:e2:5a:8e:d6:5c:b5:7f:33:be:
                    d6:96:e7:5d:cd:4e:ac:16:1f:15:ae:f7:84:3f:b8:
                    38:23:6d:eb:7f:04:bc:7c:4a:cc:dd:68:41:95:65:
                    4a:73:34:44:a2:da:ca:e2:3e:d1:01:b7:0f:27:a5:
                    5c:fb:1d:1e:ec:be:26:54:81:28:55:5b:2e:d6:c1:
                    c6:d2:b6:3d:c4:61:89:de:08:91:97:f4:1b:e2:e9:
                    73:ff:47:30:b8:40:92:3a:b7:6f:3d:24:35:8e:5b:
                    2d:c6:98:a2:6b:1b:66:b6:76:20:68:61:44:79:f0:
                    d6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E1:62:AB:53:C7:65:59:3B:B4:2D:76:86:5A:E8:CB:BE:72:D6:9E
            X509v3 Authority Key Identifier:
                keyid:69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130302e302f32342d3234203d3e20323636373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:f0:05:a9:97:1b:02:75:ed:51:95:a1:4c:9c:cc:4e:42:77:
         fd:4b:a5:6e:b8:4e:a3:69:10:bc:90:65:81:1f:1a:e2:8a:b7:
         90:63:a9:36:d2:a3:fe:03:da:f1:80:47:47:12:9d:84:fd:8b:
         e4:6e:78:d0:4f:fe:17:5c:0e:27:fe:8d:a6:26:de:a3:69:8b:
         b7:61:9e:f4:d9:ef:6d:2f:1e:6f:89:2e:a7:fc:8b:95:57:d4:
         c0:da:67:4d:5c:6f:95:98:39:15:c8:42:b2:2a:a5:c9:00:f3:
         d6:c0:8e:6d:60:f8:f3:fe:73:8e:3c:56:92:72:50:39:2a:90:
         0b:52:fe:6a:8b:d3:76:8b:8f:68:50:e3:d6:07:54:d9:5b:d5:
         7b:db:d6:2c:6f:4a:3e:b0:4b:7b:99:74:45:cd:06:43:15:93:
         93:b9:68:90:35:24:7b:4d:b4:9f:3e:0e:cd:54:fe:73:ee:56:
         3b:b2:dc:9f:f3:e1:67:84:5c:c6:5b:02:e5:62:c8:f2:d2:21:
         9d:6f:42:4a:74:f6:2e:3e:ba:be:68:91:eb:b3:47:52:0d:e1:
         7b:aa:2e:db:7a:5c:02:db:a6:4f:5a:52:c4:51:09:36:7f:12:
         61:75:cc:25:3e:5e:ce:40:fd:9d:1d:c6:3f:1b:a5:6b:a2:57:
         b4:1f:72:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:42:47 2026 by rpki-client