Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/34352e3139312e3233332e302f32342d3239203d3e20323639383935.roa
File:                     34352e3139312e3233332e302f32342d3239203d3e20323639383935.roa (raw, json)
Hash identifier:          87rv7APHz/yujIwvhwwfQ9GLesLcGH5xgIVrYTs7cgI=
Subject key identifier:   17:B0:D6:E1:AE:AF:B4:E0:9E:BB:BF:A4:24:B6:17:94:65:C0:9B:B2
Certificate issuer:       /CN=680773B2A8DBC05A0245D6CD9E175BD7B10995DB
Certificate serial:       2C04801A154279379D5A7DFFF382CAC0A76EB79B
Authority key identifier: 68:07:73:B2:A8:DB:C0:5A:02:45:D6:CD:9E:17:5B:D7:B1:09:95:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/34352e3139312e3233332e302f32342d3239203d3e20323639383935.roa
Signing time:             Wed 05 Aug 2026 02:30:00 +0000
ROA not before:           Wed 05 Aug 2026 02:25:00 +0000
ROA not after:            Wed 04 Aug 2027 02:30:00 +0000
asID:                     269895
IP address blocks:        45.191.233.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Sep 2026 13:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:04:80:1a:15:42:79:37:9d:5a:7d:ff:f3:82:ca:c0:a7:6e:b7:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=680773B2A8DBC05A0245D6CD9E175BD7B10995DB
        Validity
            Not Before: Aug  5 02:25:00 2026 GMT
            Not After : Aug  4 02:30:00 2027 GMT
        Subject: CN=17B0D6E1AEAFB4E09EBBBFA424B6179465C09BB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:41:ff:02:44:18:91:a0:2a:ce:f0:8b:e0:0b:
                    f6:43:a4:e8:26:42:23:7d:c7:2f:71:86:8a:f8:13:
                    bd:2a:82:eb:f3:14:66:3b:96:b1:69:7c:37:5b:91:
                    28:45:9f:6e:ac:ed:92:6f:4a:46:5f:ee:8d:de:b8:
                    63:29:ab:d9:ec:b6:31:09:35:d0:58:94:60:76:0d:
                    ae:8b:b7:bd:7c:b3:0f:f8:da:48:65:1f:4b:86:4d:
                    6d:fc:52:39:df:6a:dd:55:7c:5c:ad:24:5b:3d:46:
                    71:21:76:00:f3:b0:0d:25:14:70:c3:85:61:78:aa:
                    ef:b6:ca:e0:40:ca:15:a8:57:f1:d3:61:2f:05:50:
                    8d:24:67:71:65:f4:a5:33:16:2e:f9:ce:ee:1f:87:
                    06:7a:b9:a5:80:b5:d8:bc:cc:6e:73:03:58:d9:a3:
                    e8:06:6f:a6:1b:2b:1c:c8:a6:3f:be:ae:80:7c:d4:
                    2c:d1:a3:f4:b0:09:c0:b7:30:bb:86:62:dd:74:f0:
                    e1:cd:3b:e8:6c:d9:5b:7b:c9:4c:0d:98:25:df:d3:
                    8c:e9:61:e2:61:b3:a2:1b:5d:5f:94:12:ed:fd:dc:
                    2e:e3:0c:d2:50:85:b1:97:79:66:2a:39:a6:31:5a:
                    35:49:06:e0:6f:0b:6f:13:94:c6:58:15:5d:16:cc:
                    a8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B0:D6:E1:AE:AF:B4:E0:9E:BB:BF:A4:24:B6:17:94:65:C0:9B:B2
            X509v3 Authority Key Identifier:
                keyid:68:07:73:B2:A8:DB:C0:5A:02:45:D6:CD:9E:17:5B:D7:B1:09:95:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/34352e3139312e3233332e302f32342d3239203d3e20323639383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:e9:9f:f3:1b:85:55:4a:ee:a2:11:d3:a9:f9:93:71:5f:5a:
         42:7c:bb:6d:cc:16:48:a0:6d:6c:4f:b8:80:67:56:e6:f1:f9:
         ac:d3:1c:aa:3d:8f:94:99:1b:b5:8c:a3:ee:79:ab:eb:52:b4:
         bd:ae:56:8c:ec:7c:67:00:9d:ff:d6:98:c9:e7:d1:99:0d:fb:
         3a:ab:34:da:92:95:2d:3a:24:6f:fa:17:27:cf:35:a4:44:c6:
         96:76:75:08:6b:b1:07:d6:a0:80:0b:74:e0:4b:fe:b4:56:37:
         e2:49:f0:61:1c:c8:02:e7:5c:62:18:d7:4a:7d:4a:64:cf:0e:
         3c:ba:76:f5:4a:02:da:3a:43:7a:1a:e2:ee:d3:54:99:8a:aa:
         37:89:6a:c0:be:ec:15:5c:c6:c5:ee:a1:10:62:a5:1e:f2:76:
         54:d2:65:84:be:0e:17:b6:62:36:eb:11:89:4e:34:b6:0c:77:
         19:9e:38:f2:10:6d:15:15:60:6a:62:0a:63:a3:ef:9a:3c:7f:
         18:bf:18:af:6b:05:28:a9:12:10:13:d7:48:aa:ad:6e:fa:99:
         af:94:8f:ba:3d:5c:29:eb:80:b5:a1:33:cc:1a:88:d3:72:72:
         09:50:90:82:c5:27:24:32:8f:93:82:af:8a:f6:93:b2:64:40:
         3f:08:5b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 16:10:57 2026 by rpki-client