Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/34352e3139312e3233342e302f32342d3239203d3e20323639383935.roa
File:                     34352e3139312e3233342e302f32342d3239203d3e20323639383935.roa (raw, json)
Hash identifier:          pC1b/tV/VA83kLGlsT92ooz1/nDxdNc8fJtKnw7tZ3g=
Subject key identifier:   78:15:97:B2:67:AB:BC:6B:63:E7:F7:B3:5D:43:C0:66:D3:23:EE:39
Certificate issuer:       /CN=680773B2A8DBC05A0245D6CD9E175BD7B10995DB
Certificate serial:       2F2A6F8B436D552169C0A91DF7A1C12A16863449
Authority key identifier: 68:07:73:B2:A8:DB:C0:5A:02:45:D6:CD:9E:17:5B:D7:B1:09:95:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/34352e3139312e3233342e302f32342d3239203d3e20323639383935.roa
Signing time:             Wed 05 Aug 2026 02:30:00 +0000
ROA not before:           Wed 05 Aug 2026 02:25:00 +0000
ROA not after:            Wed 04 Aug 2027 02:30:00 +0000
asID:                     269895
IP address blocks:        45.191.234.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Sep 2026 13:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:2a:6f:8b:43:6d:55:21:69:c0:a9:1d:f7:a1:c1:2a:16:86:34:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=680773B2A8DBC05A0245D6CD9E175BD7B10995DB
        Validity
            Not Before: Aug  5 02:25:00 2026 GMT
            Not After : Aug  4 02:30:00 2027 GMT
        Subject: CN=781597B267ABBC6B63E7F7B35D43C066D323EE39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0e:81:21:33:18:3d:0d:ee:82:3b:ad:2d:d9:
                    56:a0:29:ed:10:ce:41:4a:15:7b:f7:ee:a3:53:ae:
                    3e:b5:06:e7:66:cc:f4:23:e0:d3:41:88:31:b6:be:
                    06:19:8b:02:c8:10:04:80:bb:79:c7:64:a9:a5:f7:
                    83:2a:a1:b9:3f:95:ac:d1:bf:be:2e:cf:ba:e3:cf:
                    fa:c7:58:d0:c2:71:40:f2:4e:66:18:e6:35:db:8c:
                    a4:a5:ef:16:e5:16:44:a5:96:a4:32:22:b3:33:7e:
                    29:72:d0:3f:a6:50:10:07:a8:d8:70:e0:f3:f3:4d:
                    69:52:42:68:28:be:68:19:50:a0:f8:f7:c1:46:ad:
                    29:0c:58:9f:62:0d:29:3e:ac:27:ee:9e:28:62:a8:
                    42:20:01:00:2f:f5:97:cc:be:95:55:d2:06:24:58:
                    70:83:21:7e:62:a0:79:14:c6:be:dd:82:4c:e9:e6:
                    31:1e:77:0f:a6:e6:76:79:a4:ac:1f:b1:d1:70:79:
                    7a:69:77:af:f4:c4:38:a7:b7:2c:2e:43:9d:5d:ec:
                    82:69:e3:c3:13:84:db:3d:e8:00:ae:a2:d3:0a:a1:
                    c9:7a:6e:2c:2e:70:8f:ec:f2:3d:0e:ca:74:0d:b6:
                    f3:5e:51:48:46:cb:73:cb:f3:6d:3a:56:82:0a:08:
                    78:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:15:97:B2:67:AB:BC:6B:63:E7:F7:B3:5D:43:C0:66:D3:23:EE:39
            X509v3 Authority Key Identifier:
                keyid:68:07:73:B2:A8:DB:C0:5A:02:45:D6:CD:9E:17:5B:D7:B1:09:95:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/34352e3139312e3233342e302f32342d3239203d3e20323639383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:6e:aa:90:bd:bb:98:a6:5d:7e:94:fd:be:a1:0c:53:0c:06:
         b9:b3:de:88:c9:a4:ae:c0:2f:08:0c:aa:e9:6b:96:0e:dd:49:
         78:cd:b1:85:2f:43:8f:51:18:79:c9:23:00:80:53:95:df:5e:
         4b:68:d8:6d:95:d8:2f:3f:5f:81:9f:a8:8f:18:b0:0a:cb:38:
         d6:95:ce:e4:8f:f0:17:21:ae:ef:a0:ff:74:5d:64:70:d2:e9:
         81:98:46:4d:1d:6f:5a:30:20:b1:96:01:7d:8e:a3:6f:f6:ce:
         bf:e5:ea:c7:65:d0:f9:4b:94:7d:e7:fb:86:4a:94:11:15:3f:
         e5:f5:3d:07:22:15:24:59:42:91:7e:61:37:c5:58:f0:ac:6d:
         3a:4d:b7:fd:f8:49:20:f2:a5:51:dc:95:26:a3:62:bd:1b:7f:
         a4:02:43:9a:ef:99:63:fd:6c:f0:76:da:1b:dc:df:20:f3:5e:
         9c:50:a9:88:13:f7:a3:4d:13:4f:e1:d0:8f:25:54:20:39:35:
         6c:4f:8d:67:40:d2:33:fa:89:45:da:51:22:7f:12:6f:69:0d:
         18:19:7e:fa:8e:1b:86:9f:d0:05:d6:fe:df:0a:c8:2e:95:2d:
         59:86:d1:a6:31:6b:75:cd:d3:4f:f0:90:0b:3b:cf:8c:d0:8a:
         73:56:df:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 16:10:55 2026 by rpki-client