Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130322e302f32342d3234203d3e20323636373930.roa
File:                     34352e3233332e3130322e302f32342d3234203d3e20323636373930.roa (raw, json)
Hash identifier:          UwWCqD+Wq7Cc+drxziITTdnto5Hu+Tb5mGMsDPHVbCc=
Subject key identifier:   74:EB:BF:B6:36:27:5F:32:CB:3A:CC:79:E2:66:3D:E6:A3:87:02:DE
Certificate issuer:       /CN=69B942F2442A4B878DCF7E43089B60B94955608D
Certificate serial:       643843A5AC1B117372FD1A09FC6C936212961F6D
Authority key identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130322e302f32342d3234203d3e20323636373930.roa
Signing time:             Wed 08 Jul 2026 21:51:31 +0000
ROA not before:           Wed 08 Jul 2026 21:46:31 +0000
ROA not after:            Wed 07 Jul 2027 21:51:31 +0000
asID:                     266790
IP address blocks:        45.233.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:38:43:a5:ac:1b:11:73:72:fd:1a:09:fc:6c:93:62:12:96:1f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B942F2442A4B878DCF7E43089B60B94955608D
        Validity
            Not Before: Jul  8 21:46:31 2026 GMT
            Not After : Jul  7 21:51:31 2027 GMT
        Subject: CN=74EBBFB636275F32CB3ACC79E2663DE6A38702DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e9:17:fd:a2:10:e1:53:ae:00:8d:00:6d:22:
                    89:56:7a:d3:b6:6b:b6:e7:15:26:b6:d8:3a:46:cf:
                    9e:ee:aa:85:67:4b:d8:08:67:16:84:d5:d2:d3:ad:
                    f2:6e:77:8e:4e:18:c9:0c:d2:a7:31:5d:e7:a5:65:
                    6c:88:f0:73:2c:fd:16:c2:64:79:2f:68:9e:c6:94:
                    5b:f7:06:64:e9:9b:8e:d0:96:fd:9f:2f:98:e0:e4:
                    03:9e:bb:9b:40:20:c6:d1:3d:36:be:c4:fd:4a:85:
                    9a:a9:ce:d1:14:37:df:ac:de:db:4b:7d:61:44:ae:
                    7e:e0:57:05:11:4a:0f:e9:cc:b4:f2:a5:70:15:8f:
                    aa:5b:f7:ea:9b:6d:c4:e0:44:eb:9b:47:f1:54:3d:
                    c2:be:ef:42:6b:92:6b:33:b0:25:47:39:fc:fb:fe:
                    0c:3c:a0:e7:9c:ae:f1:36:a6:ef:c8:aa:a8:53:93:
                    ee:a2:76:cb:95:a8:52:6e:71:b2:5d:bb:5e:0e:67:
                    97:3f:7e:33:6b:fd:5e:8a:64:b8:ce:3e:fa:c2:86:
                    ce:ea:95:ef:18:0c:18:a6:41:d8:b3:51:ce:f6:b3:
                    5c:d1:c1:bd:1a:5c:1a:a7:19:f2:ad:74:1c:e4:bc:
                    76:b6:3e:93:9b:6e:8c:46:da:5e:08:1e:93:6c:f5:
                    4e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EB:BF:B6:36:27:5F:32:CB:3A:CC:79:E2:66:3D:E6:A3:87:02:DE
            X509v3 Authority Key Identifier:
                keyid:69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130322e302f32342d3234203d3e20323636373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:bc:ef:4c:99:a4:d4:ed:4c:e6:26:2f:d0:80:3d:6e:30:45:
         dd:5e:e4:ff:17:19:ba:bf:ad:c8:da:86:4c:6b:5c:de:90:bd:
         6e:67:76:ff:70:f9:22:e1:56:70:73:41:84:e4:6a:8f:9a:f2:
         7f:2b:ee:d6:12:57:c9:50:a5:82:d8:a0:f1:44:e3:87:c3:44:
         84:bf:e8:bf:f2:78:ad:a4:9b:76:df:97:7c:f3:60:1c:cd:42:
         d4:a9:ce:25:6b:4c:55:38:81:38:5d:b1:c0:f7:ba:97:35:97:
         14:21:90:b2:d0:93:a5:24:57:3f:15:bf:ce:60:e1:d4:6c:cd:
         0e:2e:74:1c:5b:58:4d:9f:78:86:fb:c7:5d:3e:52:c1:44:23:
         38:e9:87:18:0f:57:2a:06:2d:d5:f0:42:3f:f2:90:54:7b:ce:
         82:38:93:be:70:d6:94:d8:51:09:5a:90:65:5b:86:25:ef:fd:
         dd:8c:b5:16:11:52:94:e7:b0:11:17:49:90:24:94:f4:49:95:
         17:5b:b0:bc:d0:bc:8b:82:fd:7a:c0:4b:25:55:35:89:0f:9a:
         16:c6:aa:9e:99:4f:08:1f:86:2f:89:f6:0f:a3:52:4f:1b:fc:
         1c:44:c1:8d:12:48:89:a3:f0:f6:fc:9b:63:3f:9a:80:93:7a:
         83:f1:a5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:43:24 2026 by rpki-client