Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/34352e3137392e3139362e302f32332d3233203d3e20323734313830.roa
File:                     34352e3137392e3139362e302f32332d3233203d3e20323734313830.roa (raw, json)
Hash identifier:          ZCKkmon1pLMEd4/PJ27bXeYE91HKxrWumBJfs+C3zyU=
Subject key identifier:   C6:46:A4:18:D2:B9:A4:1F:E4:8B:67:7A:B3:11:B2:F7:8C:7E:0A:02
Certificate issuer:       /CN=9F825D61F8FE63A1E801F91110272AA8A180A78F
Certificate serial:       1FE521D3EAF1B35AA9128F39FD2002E0AEA1A0F7
Authority key identifier: 9F:82:5D:61:F8:FE:63:A1:E8:01:F9:11:10:27:2A:A8:A1:80:A7:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/34352e3137392e3139362e302f32332d3233203d3e20323734313830.roa
Signing time:             Tue 25 Aug 2026 20:26:29 +0000
ROA not before:           Tue 25 Aug 2026 20:21:29 +0000
ROA not after:            Tue 24 Aug 2027 20:26:29 +0000
asID:                     274180
IP address blocks:        45.179.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e5:21:d3:ea:f1:b3:5a:a9:12:8f:39:fd:20:02:e0:ae:a1:a0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F825D61F8FE63A1E801F91110272AA8A180A78F
        Validity
            Not Before: Aug 25 20:21:29 2026 GMT
            Not After : Aug 24 20:26:29 2027 GMT
        Subject: CN=C646A418D2B9A41FE48B677AB311B2F78C7E0A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c1:83:44:ce:f1:10:ee:c2:b3:13:3e:af:5c:
                    2c:1e:96:11:a2:8d:fd:70:59:f5:9d:3f:1c:51:f8:
                    44:a8:96:ff:71:f9:84:9e:cc:69:b0:24:c5:11:ea:
                    ea:03:44:3c:31:7a:2b:e8:ee:2a:73:e1:0f:01:82:
                    58:f9:04:81:e1:66:5a:f4:00:19:dd:df:32:17:d7:
                    79:57:ed:d7:90:29:f0:ff:48:c5:8e:f0:d0:ec:37:
                    96:4c:2a:f3:90:23:87:30:81:5c:f0:fb:39:1d:9b:
                    e8:f6:ca:77:6c:2c:c5:93:e9:b8:a3:f7:0c:fb:0b:
                    44:31:d5:b4:3e:4a:c2:3e:68:cb:0e:e0:77:91:25:
                    68:94:ce:df:70:b4:79:e0:9f:97:2c:3f:4d:25:91:
                    94:f5:6f:84:22:3b:cf:2e:df:f4:4c:51:42:60:c2:
                    8c:80:06:0d:3f:81:b4:6b:80:2a:a2:d6:ee:44:3a:
                    0b:c1:47:30:bb:06:ce:23:6b:bf:86:52:93:30:74:
                    83:96:50:8d:89:b1:b4:06:49:e3:f0:af:ae:84:46:
                    6c:0f:5d:15:26:db:e6:12:d6:16:54:7b:6f:19:b5:
                    56:98:31:fc:68:c4:f1:de:31:36:04:1b:f1:14:de:
                    b1:9a:7e:4f:2e:19:40:7e:d0:3f:31:a7:ac:1a:65:
                    b1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:46:A4:18:D2:B9:A4:1F:E4:8B:67:7A:B3:11:B2:F7:8C:7E:0A:02
            X509v3 Authority Key Identifier:
                keyid:9F:82:5D:61:F8:FE:63:A1:E8:01:F9:11:10:27:2A:A8:A1:80:A7:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/34352e3137392e3139362e302f32332d3233203d3e20323734313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:7f:f8:c5:dd:0a:69:6b:cb:96:7f:4e:ad:db:59:c5:cf:5f:
         e7:cc:26:ac:84:98:65:49:70:86:49:7b:9f:24:30:54:86:63:
         ec:7f:b3:ae:c0:a5:f8:08:f0:17:16:7e:70:58:5c:fe:c5:eb:
         07:01:fd:ba:7d:95:df:11:1e:10:28:80:2b:a3:4c:98:92:2e:
         79:2d:fa:8b:67:61:a4:c5:25:63:88:ea:4f:43:94:33:08:2a:
         52:11:10:0e:ce:4a:5a:b5:7c:c1:fa:88:55:e7:5f:d7:fe:20:
         52:b5:9a:7f:84:fa:15:ea:73:50:2d:0a:bd:39:a5:d7:08:e8:
         15:99:ff:0b:2b:0e:e7:28:27:02:6d:52:ab:62:7e:36:5d:d5:
         84:66:d9:91:46:f1:68:ce:24:ac:56:5d:ea:ea:24:8e:a5:2d:
         d9:65:ad:74:be:af:cb:aa:0b:59:66:55:59:d7:1a:35:9d:04:
         5a:4f:b0:4f:83:16:3e:83:39:f1:88:aa:84:2c:b4:e8:4c:2b:
         8e:06:67:c6:c8:41:16:41:41:d5:1a:23:ce:11:b2:3a:10:aa:
         12:b8:b8:b0:da:16:73:0c:5b:34:ef:29:20:0a:05:ab:8b:21:
         b5:c1:fc:57:b1:c6:2d:3c:9a:9b:85:0e:33:a6:ee:74:b7:dc:
         08:f8:72:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:20:19 2026 by rpki-client