Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/34352e3139312e3233322e302f32342d3239203d3e20323639383935.roa
File:                     34352e3139312e3233322e302f32342d3239203d3e20323639383935.roa (raw, json)
Hash identifier:          cGRoOVXBkRXqt6Owhd0j7llbKgui7GX8FS01JHzOXHs=
Subject key identifier:   9C:0D:03:95:47:CB:10:7C:11:95:E9:65:77:9A:5B:FF:36:14:4C:19
Certificate issuer:       /CN=680773B2A8DBC05A0245D6CD9E175BD7B10995DB
Certificate serial:       752AA4ADD70227A385E114F65386966CE513B949
Authority key identifier: 68:07:73:B2:A8:DB:C0:5A:02:45:D6:CD:9E:17:5B:D7:B1:09:95:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/34352e3139312e3233322e302f32342d3239203d3e20323639383935.roa
Signing time:             Wed 05 Aug 2026 02:30:00 +0000
ROA not before:           Wed 05 Aug 2026 02:25:00 +0000
ROA not after:            Wed 04 Aug 2027 02:30:00 +0000
asID:                     269895
IP address blocks:        45.191.232.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 21:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:2a:a4:ad:d7:02:27:a3:85:e1:14:f6:53:86:96:6c:e5:13:b9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=680773B2A8DBC05A0245D6CD9E175BD7B10995DB
        Validity
            Not Before: Aug  5 02:25:00 2026 GMT
            Not After : Aug  4 02:30:00 2027 GMT
        Subject: CN=9C0D039547CB107C1195E965779A5BFF36144C19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d7:04:73:b7:9a:83:c5:bf:85:a4:05:8c:e8:
                    49:83:74:03:3b:28:1d:84:e7:fa:07:8e:38:7b:06:
                    36:df:5a:c2:e1:27:8b:6a:46:a9:b3:e2:74:32:de:
                    63:bd:b8:1e:cc:0d:95:fc:25:57:4b:9f:d6:62:a7:
                    36:81:1e:d3:a0:9d:c8:75:68:5f:a0:29:c7:d1:40:
                    aa:76:c0:90:0b:bd:c6:62:17:24:25:71:bf:1e:2f:
                    32:f4:8a:fa:04:69:70:cd:5f:39:15:19:29:c4:f2:
                    8a:8a:53:7b:9a:20:fc:ea:d9:40:88:f3:fe:33:03:
                    ca:b3:88:c2:6a:57:f9:e7:fe:57:67:26:39:ef:f6:
                    68:15:5b:72:6b:7f:d4:fa:d9:68:38:66:92:7f:af:
                    df:ba:67:79:63:0c:df:8c:60:11:b0:83:45:09:68:
                    81:2c:25:63:8b:48:7a:8b:20:c8:74:c2:2c:60:f3:
                    38:6d:0e:a5:6d:86:39:86:9d:30:b3:2d:d5:aa:52:
                    01:55:b0:09:da:b6:9e:42:ba:68:d6:fe:99:3b:28:
                    f6:77:2c:ba:31:ea:de:da:74:21:6c:d8:7b:f0:74:
                    02:f5:e8:82:14:52:56:8b:fb:c0:fe:80:3f:54:50:
                    cd:d5:69:85:ae:de:aa:86:a0:8d:0d:ee:bc:36:f2:
                    34:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0D:03:95:47:CB:10:7C:11:95:E9:65:77:9A:5B:FF:36:14:4C:19
            X509v3 Authority Key Identifier:
                keyid:68:07:73:B2:A8:DB:C0:5A:02:45:D6:CD:9E:17:5B:D7:B1:09:95:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/34352e3139312e3233322e302f32342d3239203d3e20323639383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:76:11:d7:a4:00:1a:80:61:30:4d:05:23:61:08:59:30:09:
         2d:47:7c:d8:13:78:2e:e4:aa:a2:ba:94:15:89:33:e6:d1:6b:
         57:89:af:6b:87:d2:43:40:5c:b1:62:14:7a:15:5f:ff:87:6a:
         47:17:9b:55:7f:50:63:d9:7a:30:1d:81:d6:5b:f1:8a:55:38:
         f9:3b:df:28:a6:e8:d6:c0:ef:3f:d9:cf:35:14:ba:ad:3c:61:
         d1:a2:c4:53:44:b7:cc:85:87:5a:3f:70:50:09:6a:5a:b0:b4:
         5f:9e:62:18:3c:1e:f9:8b:9b:f3:cf:ae:3a:0d:10:4b:88:a9:
         f8:f8:c1:d3:c9:21:84:3c:b4:ce:9d:e5:2a:24:c5:01:4c:26:
         f0:d4:a0:dc:55:5b:2c:fb:56:a5:ca:9c:fd:cd:fe:06:86:dd:
         78:3c:98:d1:2e:45:99:21:0c:17:de:0e:72:d0:08:bb:75:dd:
         17:85:01:97:a5:a0:19:a5:26:9b:f6:b5:0b:5e:c0:7c:80:a6:
         1e:e3:f6:ed:02:1d:c7:68:19:7e:6f:55:52:49:dd:28:c4:f2:
         e0:c7:ca:ef:6a:7f:bb:26:19:c5:7e:de:98:9c:8a:43:cc:6b:
         88:45:f7:ff:31:87:b6:12:68:73:00:ea:22:8f:30:b6:e2:6c:
         1a:d7:96:bd
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdSqkrdcCJ6OF4RT2U4aWbOUTuUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjgwNzczQjJBOERCQzA1QTAyNDVENkNEOUUxNzVCRDdC
MTA5OTVEQjAeFw0yNjA4MDUwMjI1MDBaFw0yNzA4MDQwMjMwMDBaMDMxMTAvBgNV
BAMTKDlDMEQwMzk1NDdDQjEwN0MxMTk1RTk2NTc3OUE1QkZGMzYxNDRDMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb1wRzt5qDxb+FpAWM6EmDdAM7
KB2E5/oHjjh7BjbfWsLhJ4tqRqmz4nQy3mO9uB7MDZX8JVdLn9ZipzaBHtOgnch1
aF+gKcfRQKp2wJALvcZiFyQlcb8eLzL0ivoEaXDNXzkVGSnE8oqKU3uaIPzq2UCI
8/4zA8qziMJqV/nn/ldnJjnv9mgVW3Jrf9T62Wg4ZpJ/r9+6Z3ljDN+MYBGwg0UJ
aIEsJWOLSHqLIMh0wixg8zhtDqVthjmGnTCzLdWqUgFVsAnatp5CumjW/pk7KPZ3
LLox6t7adCFs2HvwdAL16IIUUlaL+8D+gD9UUM3VaYWu3qqGoI0N7rw28jT3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUnA0DlUfLEHwRlelld5pb/zYUTBkwHwYDVR0j
BBgwFoAUaAdzsqjbwFoCRdbNnhdb17EJldswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQUJCN0E2NkQ1RkIwNzUzMzE3QzRERjI5MkFBRjI5MEMz
MzdDMzQ2M0JGQjJBQzlENkE3QkQzOTFBODlCRDRDLzAvNjgwNzczQjJBOERCQzA1
QTAyNDVENkNEOUUxNzVCRDdCMTA5OTVEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82ODA3NzNCMkE4REJDMDVBMDI0
NUQ2Q0Q5RTE3NUJEN0IxMDk5NURCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREFCQjdBNjZENUZCMDc1MzMxN0M0REYyOTJBQUYyOTBDMzM3QzM0NjNC
RkIyQUM5RDZBN0JEMzkxQTg5QkQ0Qy8wLzM0MzUyZTMxMzkzMTJlMzIzMzMyMmUz
MDJmMzIzNDJkMzIzOTIwM2QzZTIwMzIzNjM5MzgzOTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALb/o
MA0GCSqGSIb3DQEBCwUAA4IBAQCGdhHXpAAagGEwTQUjYQhZMAktR3zYE3gu5Kqi
upQViTPm0WtXia9rh9JDQFyxYhR6FV//h2pHF5tVf1Bj2XowHYHWW/GKVTj5O98o
pujWwO8/2c81FLqtPGHRosRTRLfMhYdaP3BQCWpasLRfnmIYPB75i5vzz646DRBL
iKn4+MHTySGEPLTOneUqJMUBTCbw1KDcVVss+1alypz9zf4Ght14PJjRLkWZIQwX
3g5y0Ai7dd0XhQGXpaAZpSab9rULXsB8gKYe4/btAh3HaBl+b1VSSd0oxPLgx8rv
an+7JhnFft6YnIpDzGuIRff/MYe2EmhzAOoijzC24mwa15a9
-----END CERTIFICATE-----
Generated at Sat Sep 5 16:10:56 2026 by rpki-client