Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/34352e3137352e3133372e302f32342d3234203d3e20323733323233.roa
File:                     34352e3137352e3133372e302f32342d3234203d3e20323733323233.roa (raw, json)
Hash identifier:          20pt3d18Nu+m0yM8zXTog2WzrUkxqipC/P4D6Qo2ZE0=
Subject key identifier:   A0:94:B1:53:23:BA:36:7D:75:2A:15:C1:77:54:7D:82:B9:06:7A:08
Certificate issuer:       /CN=24CD02F5861A290CB8722F495D087C5FC34EB3A8
Certificate serial:       05886650B6E852D57D52B683E6C862D428CCB216
Authority key identifier: 24:CD:02:F5:86:1A:29:0C:B8:72:2F:49:5D:08:7C:5F:C3:4E:B3:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/34352e3137352e3133372e302f32342d3234203d3e20323733323233.roa
Signing time:             Thu 02 Apr 2026 15:37:15 +0000
ROA not before:           Thu 02 Apr 2026 15:32:15 +0000
ROA not after:            Thu 01 Apr 2027 15:37:15 +0000
asID:                     273223
IP address blocks:        45.175.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 11 Apr 2026 02:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:88:66:50:b6:e8:52:d5:7d:52:b6:83:e6:c8:62:d4:28:cc:b2:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CD02F5861A290CB8722F495D087C5FC34EB3A8
        Validity
            Not Before: Apr  2 15:32:15 2026 GMT
            Not After : Apr  1 15:37:15 2027 GMT
        Subject: CN=A094B15323BA367D752A15C177547D82B9067A08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:56:64:7c:99:82:5a:89:38:c2:fa:a9:cb:
                    00:49:70:e3:90:c3:39:07:51:ec:69:f3:b7:02:f9:
                    16:3b:48:50:51:5f:2e:08:68:5a:53:aa:e5:23:3f:
                    c2:66:ed:d9:8f:5d:64:f4:d5:75:a1:db:01:9a:b3:
                    9e:4a:f7:c2:e6:2a:80:84:4b:25:a1:0e:4f:ad:e6:
                    bf:be:5c:e0:02:2c:8c:a5:3c:70:6f:10:11:87:ed:
                    e2:54:7b:8d:23:f3:4a:83:24:b0:a9:ef:c1:6d:c0:
                    9f:42:30:20:43:71:47:64:42:a8:92:61:df:e3:58:
                    6b:d5:ee:2d:36:ed:e8:51:7a:fe:10:ae:b6:3f:1e:
                    ba:90:41:d8:08:de:bc:2a:08:67:60:61:76:89:fc:
                    4a:b1:19:ad:27:f2:58:37:21:bc:12:e3:04:28:40:
                    eb:02:98:14:08:09:4d:4d:48:4a:1e:7d:95:76:f6:
                    bc:99:53:ad:67:ad:47:12:46:cc:bc:5e:85:c1:c6:
                    d3:9f:83:3a:58:d9:a2:79:35:99:14:f3:7c:92:a2:
                    38:b8:bf:22:81:73:7b:e9:74:0c:95:f9:48:a9:f5:
                    db:dd:b8:6c:9c:54:09:5f:e3:77:c8:02:19:0c:78:
                    57:f7:d0:8a:25:db:86:14:af:6f:45:73:6d:93:35:
                    e8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:94:B1:53:23:BA:36:7D:75:2A:15:C1:77:54:7D:82:B9:06:7A:08
            X509v3 Authority Key Identifier:
                keyid:24:CD:02:F5:86:1A:29:0C:B8:72:2F:49:5D:08:7C:5F:C3:4E:B3:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/34352e3137352e3133372e302f32342d3234203d3e20323733323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:57:57:11:26:0d:19:c1:d8:67:6b:8d:f9:9d:5c:51:73:63:
         bf:3c:fa:97:b0:23:21:14:33:43:b2:f6:f3:78:c9:fa:f3:b2:
         c0:fd:58:e2:04:35:20:a4:7f:29:31:2a:3c:2d:61:38:4f:eb:
         3a:6f:59:05:14:15:55:c6:68:1f:f4:8b:bb:fa:90:a1:1d:b3:
         0a:f1:c4:9b:68:57:af:fa:b2:52:51:dd:b8:95:87:5f:8d:23:
         3d:60:eb:b1:a5:bd:6c:77:25:dc:59:ff:65:1d:1c:ac:3a:c6:
         d7:b5:34:b7:c3:12:3c:e6:a1:ac:a7:eb:2e:0e:21:70:60:08:
         a3:b9:ea:d6:b3:10:64:f6:b1:31:ef:b0:43:09:57:34:f3:63:
         1f:0a:65:2c:69:e4:ff:87:8d:f5:8f:4f:02:fb:d9:ff:7e:07:
         ba:0a:bd:05:a8:bf:02:df:ea:b6:b9:76:37:0e:ac:26:c4:ba:
         71:97:fa:51:7f:34:24:f2:25:25:43:e9:49:8c:19:fb:39:30:
         7c:b9:d1:de:c3:a3:f7:3c:10:55:f6:15:59:23:0e:fb:3f:2b:
         55:25:5d:10:da:10:b1:a1:9e:62:f5:da:9c:b9:5f:8e:58:54:
         af:77:f2:ca:9d:61:f5:c5:ca:43:89:11:31:61:76:23:81:54:
         df:c1:3d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:03:46 2026 by rpki-client