Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/34352e37312e372e302f32342d3234203d3e203237393531.roa
File:                     34352e37312e372e302f32342d3234203d3e203237393531.roa (raw, json)
Hash identifier:          BJjG575KRV9gSLjMAGkDl6XrXnnuSWWz44WC2Y546+0=
Subject key identifier:   22:1E:1D:F2:4F:4F:A4:8D:05:4F:3C:C6:D6:DF:87:69:F8:D9:06:D3
Certificate issuer:       /CN=8829B72F41DDDC406EF086511DC7C0AF26D8C3E9
Certificate serial:       4C65EEE88A88F668087FBAEDFEEE4861B6A98F58
Authority key identifier: 88:29:B7:2F:41:DD:DC:40:6E:F0:86:51:1D:C7:C0:AF:26:D8:C3:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/34352e37312e372e302f32342d3234203d3e203237393531.roa
Signing time:             Mon 03 Aug 2026 14:19:37 +0000
ROA not before:           Mon 03 Aug 2026 14:14:37 +0000
ROA not after:            Mon 02 Aug 2027 14:19:37 +0000
asID:                     27951
IP address blocks:        45.71.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Sep 2026 03:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:65:ee:e8:8a:88:f6:68:08:7f:ba:ed:fe:ee:48:61:b6:a9:8f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8829B72F41DDDC406EF086511DC7C0AF26D8C3E9
        Validity
            Not Before: Aug  3 14:14:37 2026 GMT
            Not After : Aug  2 14:19:37 2027 GMT
        Subject: CN=221E1DF24F4FA48D054F3CC6D6DF8769F8D906D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b8:54:71:e6:d0:ce:00:f4:5e:93:e4:1d:f4:
                    d6:ee:82:e1:ca:51:77:9c:4c:f5:61:c3:59:b8:98:
                    f1:41:cb:2a:b7:80:90:06:23:66:e5:66:1d:1b:3b:
                    39:7b:f6:de:65:34:ff:cc:f2:7f:e9:b4:d5:e1:03:
                    6d:97:29:dd:81:dd:03:d1:84:db:11:92:4c:6a:8f:
                    7f:8d:53:4c:7c:9b:96:47:14:d1:f8:d0:05:54:52:
                    21:6d:e4:7f:00:76:8e:16:30:d8:15:b2:6c:bd:ce:
                    92:4b:b9:ba:68:1f:76:1e:b2:d5:ba:f2:78:3f:df:
                    22:20:29:b6:13:6c:f7:a6:04:b9:0c:f4:88:a4:8e:
                    99:51:53:e4:ad:49:b2:00:d4:10:f3:4f:77:12:56:
                    5d:39:0b:ee:f9:87:f9:c0:92:3c:10:24:17:af:59:
                    92:5d:24:ed:5c:55:51:9b:89:d5:e4:09:e8:12:6d:
                    d0:84:07:ec:f8:2f:92:0c:26:33:ca:4a:26:c7:9f:
                    21:56:25:89:46:81:6d:53:dd:51:e0:f7:66:d6:f8:
                    64:c5:16:0a:d3:1e:2d:f6:20:43:62:1a:84:8e:27:
                    52:5e:43:ca:24:8d:eb:4a:36:86:ef:a9:d7:34:16:
                    4b:01:b0:55:99:a1:6b:e0:ad:35:16:d4:69:c4:6d:
                    c1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1E:1D:F2:4F:4F:A4:8D:05:4F:3C:C6:D6:DF:87:69:F8:D9:06:D3
            X509v3 Authority Key Identifier:
                keyid:88:29:B7:2F:41:DD:DC:40:6E:F0:86:51:1D:C7:C0:AF:26:D8:C3:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/34352e37312e372e302f32342d3234203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:c4:50:6c:c6:ad:b8:52:ba:8c:d6:ea:ce:38:71:13:ef:4d:
         1d:84:3a:2c:81:db:d4:fc:16:e5:df:71:0a:f0:2a:c7:0d:cf:
         3c:33:f5:a6:7a:e6:78:31:87:f7:66:ff:72:a0:c4:0f:e4:24:
         9f:1e:f2:3c:04:e1:a5:45:ac:c8:6e:86:a3:bf:8b:9a:de:20:
         95:33:76:ca:98:53:0a:f5:77:80:3e:57:55:a3:8c:a9:2f:f6:
         92:0c:f7:58:73:03:be:83:18:65:e4:b8:0b:05:4f:53:36:b2:
         8e:13:fa:2a:1b:8f:13:d1:ad:a0:87:44:06:88:a3:7a:d7:ce:
         e9:ef:b2:28:9d:b2:df:09:63:d3:66:28:ed:68:5b:52:de:79:
         d4:e6:3d:21:07:f5:85:50:8b:26:a4:e4:e4:c3:b8:a6:c9:98:
         5f:56:16:8d:1c:5a:f2:8e:1e:9c:50:ca:bd:a1:0f:8f:48:5d:
         82:49:29:70:9b:10:78:d2:d4:0f:97:51:a1:50:02:94:55:f9:
         bb:13:e4:a9:aa:e5:17:30:5f:98:e3:e8:bb:ab:51:c5:21:1b:
         cd:f2:40:dd:16:c3:51:03:73:8d:46:07:ae:c5:20:f0:06:70:
         bb:ff:47:cf:a3:a8:c9:5b:ca:c9:62:c2:83:b8:bb:11:43:93:
         7a:59:5d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 13:29:51 2026 by rpki-client