Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/34352e3233342e3132302e302f32342d3234203d3e20323636383030.roa
File:                     34352e3233342e3132302e302f32342d3234203d3e20323636383030.roa (raw, json)
Hash identifier:          O2hlJvo6+vUkOCYxaunJcmCPXoSDERdDoa/Fo1I3AXo=
Subject key identifier:   ED:F1:47:51:11:C6:31:D2:2B:5B:25:AB:23:4C:98:AD:DC:09:87:8B
Certificate issuer:       /CN=E5E5F55E39001EF24D658430EB3A500D80E40348
Certificate serial:       07B1622608F72F954E09A40BCA96A3E5532EAACA
Authority key identifier: E5:E5:F5:5E:39:00:1E:F2:4D:65:84:30:EB:3A:50:0D:80:E4:03:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/34352e3233342e3132302e302f32342d3234203d3e20323636383030.roa
Signing time:             Sat 16 May 2026 17:42:51 +0000
ROA not before:           Sat 16 May 2026 17:37:51 +0000
ROA not after:            Sat 15 May 2027 17:42:51 +0000
asID:                     266800
IP address blocks:        45.234.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 17:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b1:62:26:08:f7:2f:95:4e:09:a4:0b:ca:96:a3:e5:53:2e:aa:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5F55E39001EF24D658430EB3A500D80E40348
        Validity
            Not Before: May 16 17:37:51 2026 GMT
            Not After : May 15 17:42:51 2027 GMT
        Subject: CN=EDF1475111C631D22B5B25AB234C98ADDC09878B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:27:d4:d6:33:60:2b:b9:3c:77:d7:09:02:11:
                    71:b3:32:aa:06:2b:93:df:6a:74:32:20:fd:63:20:
                    4a:d0:48:97:f0:bd:1f:75:24:11:29:af:74:42:33:
                    85:3c:dc:99:bc:24:16:e8:91:af:cb:6e:71:92:d4:
                    0e:c2:f0:03:ea:da:7c:17:5c:60:28:ec:9e:e7:e8:
                    6b:9b:14:86:af:e1:1c:cc:47:f9:0a:6d:46:66:6a:
                    d7:e0:e1:03:2d:b8:cb:98:25:96:93:6b:3c:ef:a2:
                    8d:dc:af:cd:6c:5a:61:85:68:3e:2d:a4:2f:c5:c7:
                    a2:a2:54:a5:0d:05:d6:ae:7b:06:fc:66:f8:c4:ca:
                    2e:1f:22:43:6e:76:d7:b4:6e:8d:60:2e:91:5e:ae:
                    63:30:0b:16:94:d5:f1:83:7f:52:29:58:0b:e1:b1:
                    0e:f5:82:e0:df:3d:d3:6c:9b:9e:cc:92:bf:0f:4d:
                    3d:61:ad:3f:08:8b:d5:0d:fc:02:b4:7d:dc:13:ce:
                    c2:10:6b:3b:39:c2:c0:93:00:d3:0d:8b:ad:6f:f0:
                    4f:25:b2:e2:b8:9a:ad:3b:90:c1:a3:b2:0a:00:98:
                    b4:9d:a6:d3:6d:50:bb:51:9b:0e:45:be:da:ce:3a:
                    50:73:24:8b:0e:8f:d6:be:ea:91:cf:01:b0:cb:1c:
                    4e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F1:47:51:11:C6:31:D2:2B:5B:25:AB:23:4C:98:AD:DC:09:87:8B
            X509v3 Authority Key Identifier:
                keyid:E5:E5:F5:5E:39:00:1E:F2:4D:65:84:30:EB:3A:50:0D:80:E4:03:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/34352e3233342e3132302e302f32342d3234203d3e20323636383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:fc:de:91:d2:b7:fc:da:cc:ff:86:ae:be:52:60:97:e9:20:
         9d:46:79:5b:90:8c:a5:5c:1a:1b:89:00:85:d9:a6:c5:60:4e:
         5a:c0:bb:fc:66:c3:f2:34:c1:fd:89:76:ff:b0:e3:ea:18:50:
         92:29:57:79:15:d5:58:2e:9d:83:a6:ea:e6:59:cc:a9:b8:ed:
         d6:d2:51:86:1c:eb:54:e8:ac:a2:a5:f0:13:81:22:b8:09:cd:
         2d:25:4e:4a:e3:16:fa:36:8d:83:d2:92:f1:60:29:b0:b6:fe:
         c3:1d:49:9e:a8:a1:14:5e:cd:2d:c7:26:bc:09:73:46:ec:8f:
         8c:2a:98:72:a6:4c:c6:07:78:02:d5:94:1a:9d:bb:f4:4a:e3:
         18:b8:5b:4c:69:26:fa:c7:05:b5:00:0e:81:9b:62:cb:5c:6b:
         e5:59:5a:03:8e:86:8a:d0:66:70:63:3c:10:39:19:14:09:0f:
         d9:da:1d:31:15:af:81:3e:42:3d:ff:80:f1:cb:1b:4e:43:73:
         d7:89:2b:5c:77:71:e1:98:66:30:f2:1b:9a:d9:5e:c8:bc:5a:
         ff:37:82:32:5d:74:0d:dc:a2:81:18:6e:b3:53:9d:72:ff:c7:
         c2:ce:14:7f:de:74:c8:da:d0:00:a7:5f:01:f1:65:65:3f:6c:
         1a:ef:c8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:47:26 2026 by rpki-client