Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/0986CEC2B1CCEAB152A36C0B57AE7283D4E82035B7D620C3CEF2CE5C08C9CCD6/0/34352e3137342e39322e302f32322d3234203d3e203238343239.roa
File:                     34352e3137342e39322e302f32322d3234203d3e203238343239.roa (raw, json)
Hash identifier:          L2WCj1dKR1gQBXeKbUM0J4LcXF7UxLKW1A0A+wvKzrM=
Subject key identifier:   BB:89:82:9B:79:D9:F7:53:C5:FC:CF:70:76:25:3C:C6:5E:EB:48:1B
Certificate issuer:       /CN=A7A1A24942D1B9C74257F44CCBB5CADAEC799568
Certificate serial:       09624F991DD2C78CC15D0B7CE81607DEABB7D03E
Authority key identifier: A7:A1:A2:49:42:D1:B9:C7:42:57:F4:4C:CB:B5:CA:DA:EC:79:95:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7A1A24942D1B9C74257F44CCBB5CADAEC799568.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0986CEC2B1CCEAB152A36C0B57AE7283D4E82035B7D620C3CEF2CE5C08C9CCD6/0/34352e3137342e39322e302f32322d3234203d3e203238343239.roa
Signing time:             Fri 07 Aug 2026 20:20:15 +0000
ROA not before:           Fri 07 Aug 2026 20:15:15 +0000
ROA not after:            Fri 06 Aug 2027 20:20:15 +0000
asID:                     28429
IP address blocks:        45.174.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0986CEC2B1CCEAB152A36C0B57AE7283D4E82035B7D620C3CEF2CE5C08C9CCD6/0/A7A1A24942D1B9C74257F44CCBB5CADAEC799568.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0986CEC2B1CCEAB152A36C0B57AE7283D4E82035B7D620C3CEF2CE5C08C9CCD6/0/A7A1A24942D1B9C74257F44CCBB5CADAEC799568.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7A1A24942D1B9C74257F44CCBB5CADAEC799568.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:62:4f:99:1d:d2:c7:8c:c1:5d:0b:7c:e8:16:07:de:ab:b7:d0:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7A1A24942D1B9C74257F44CCBB5CADAEC799568
        Validity
            Not Before: Aug  7 20:15:15 2026 GMT
            Not After : Aug  6 20:20:15 2027 GMT
        Subject: CN=BB89829B79D9F753C5FCCF7076253CC65EEB481B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:fe:12:80:1b:4d:e8:ed:21:39:af:bb:5a:59:
                    27:b9:39:95:79:29:8e:b0:14:07:2d:96:a7:c5:4d:
                    48:d9:93:9f:7d:6c:73:89:c6:17:ac:59:88:9a:eb:
                    6a:74:09:22:bf:d7:71:c5:4a:76:83:d3:4c:36:ea:
                    00:25:bf:88:65:8a:91:52:21:73:94:23:54:77:89:
                    4e:01:87:5a:ef:70:7a:25:07:c2:fa:f8:f4:b2:d6:
                    57:f6:7f:a6:0e:90:6a:31:2c:35:17:5d:b0:6c:05:
                    5b:81:64:3b:0c:a7:86:7c:19:e8:c9:35:3d:d4:02:
                    fb:f0:6c:a2:27:cc:87:91:57:6f:23:b0:3a:da:7d:
                    d0:d0:58:54:a7:62:d1:f5:a7:4b:97:d3:6b:bc:ee:
                    b6:16:54:7e:cc:52:46:b5:83:69:95:3c:eb:e9:36:
                    54:04:f9:cd:f5:c6:7e:62:e8:27:cd:5d:43:dc:52:
                    a3:4c:37:2c:25:b3:18:ee:86:7e:d7:2c:c6:ab:df:
                    ae:99:e9:b7:01:6d:9b:b9:95:d0:17:80:b7:31:80:
                    a0:24:8e:53:ee:48:67:a6:7d:81:19:d0:88:57:7c:
                    b7:ea:79:fb:cf:a7:01:f2:88:87:66:64:9c:7b:16:
                    2b:2a:4d:08:59:c7:e4:f8:5c:ab:1e:b6:17:9f:a1:
                    1e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:89:82:9B:79:D9:F7:53:C5:FC:CF:70:76:25:3C:C6:5E:EB:48:1B
            X509v3 Authority Key Identifier:
                keyid:A7:A1:A2:49:42:D1:B9:C7:42:57:F4:4C:CB:B5:CA:DA:EC:79:95:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0986CEC2B1CCEAB152A36C0B57AE7283D4E82035B7D620C3CEF2CE5C08C9CCD6/0/A7A1A24942D1B9C74257F44CCBB5CADAEC799568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7A1A24942D1B9C74257F44CCBB5CADAEC799568.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0986CEC2B1CCEAB152A36C0B57AE7283D4E82035B7D620C3CEF2CE5C08C9CCD6/0/34352e3137342e39322e302f32322d3234203d3e203238343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:86:39:b0:95:0e:33:8c:89:7b:3d:e7:b5:cd:76:73:a0:2e:
         f1:74:8d:0b:a2:8f:5e:a7:cf:57:80:c0:94:af:63:97:31:c5:
         bb:a2:90:85:91:54:b3:fe:fc:de:fb:23:88:34:02:03:a5:ca:
         05:2b:68:e7:96:e2:74:5e:2e:85:20:10:1c:10:b8:02:43:d6:
         d7:47:9e:1f:4c:42:a4:91:7f:56:73:13:55:4e:f7:74:a6:29:
         42:e9:2b:60:6b:26:67:26:14:fa:61:43:17:ae:5f:5f:7d:9b:
         b4:57:45:96:5f:19:4e:8a:71:3b:b5:84:20:01:41:cb:99:4b:
         ae:1d:fd:71:34:ad:bb:07:6f:aa:28:49:13:f1:c4:04:09:11:
         aa:59:96:06:a7:4c:43:fd:5b:d9:3f:01:a0:9c:1a:a5:ca:25:
         d5:73:75:90:45:0c:c8:16:cb:eb:b0:7a:c5:2d:e8:a3:7b:b4:
         02:dd:a3:b2:27:b5:09:08:6a:42:f1:50:e8:39:e9:a3:1b:9a:
         cc:a6:a7:67:ad:75:35:3a:95:04:f0:34:da:59:21:98:33:60:
         f5:ab:c5:af:8a:0d:5b:0c:c6:9e:38:04:ed:d5:88:1c:ce:98:
         1c:af:7b:da:7c:81:db:fb:8d:d1:be:7b:f1:3f:c9:fc:f0:3a:
         af:ea:7d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:38:55 2026 by rpki-client