Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/34352e3137392e3139362e302f32332d3234203d3e20323734313830.roa
File:                     34352e3137392e3139362e302f32332d3234203d3e20323734313830.roa (raw, json)
Hash identifier:          Md0Zuu4FdyEAYxGGv/LEBJW+p5MwLfBVQuP1dcg5DAc=
Subject key identifier:   C6:92:82:C6:95:23:B6:F3:65:5A:BF:AA:32:73:A8:A5:4E:40:8F:9E
Certificate issuer:       /CN=9F825D61F8FE63A1E801F91110272AA8A180A78F
Certificate serial:       1654F1075371D6DF9CC6C8A813AFC2DEE23396D4
Authority key identifier: 9F:82:5D:61:F8:FE:63:A1:E8:01:F9:11:10:27:2A:A8:A1:80:A7:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/34352e3137392e3139362e302f32332d3234203d3e20323734313830.roa
Signing time:             Fri 04 Sep 2026 18:33:57 +0000
ROA not before:           Fri 04 Sep 2026 18:28:57 +0000
ROA not after:            Fri 03 Sep 2027 18:33:57 +0000
asID:                     274180
IP address blocks:        45.179.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 17:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:54:f1:07:53:71:d6:df:9c:c6:c8:a8:13:af:c2:de:e2:33:96:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F825D61F8FE63A1E801F91110272AA8A180A78F
        Validity
            Not Before: Sep  4 18:28:57 2026 GMT
            Not After : Sep  3 18:33:57 2027 GMT
        Subject: CN=C69282C69523B6F3655ABFAA3273A8A54E408F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a3:08:8d:67:12:9d:59:da:1e:33:6e:02:e3:
                    21:d4:a7:c9:f1:ab:70:ce:67:51:4c:2c:12:f9:f7:
                    43:a2:24:c6:8a:b0:ee:89:59:ff:c1:15:c5:bb:1b:
                    29:80:59:e3:c7:45:ad:19:7c:eb:89:ef:9f:3b:54:
                    03:f3:3a:9c:bd:3e:a1:70:42:86:e5:09:ee:1b:54:
                    14:a6:75:73:b3:05:e3:bd:83:62:ed:08:8b:04:82:
                    d8:3f:8b:3d:f5:d4:03:43:3c:24:01:cf:05:3e:b0:
                    64:b1:0a:6c:9e:51:96:1b:66:49:c8:27:de:10:2d:
                    8c:8a:21:43:62:84:f4:90:05:cb:0c:68:01:6d:f0:
                    37:ef:68:ca:dc:d7:39:ed:5b:6c:37:42:2e:74:51:
                    6b:33:62:6f:31:1d:63:61:15:16:e5:bd:c2:11:77:
                    5f:aa:69:10:b3:31:f2:f5:11:d3:0c:a9:f8:9e:00:
                    5d:53:92:9f:1c:e3:96:15:19:43:5a:37:e4:d3:d3:
                    6d:02:11:51:fc:5b:7b:33:51:0e:d3:cd:cf:0d:f4:
                    6b:b1:a9:c9:64:5d:3f:e7:15:dd:cb:6e:00:78:53:
                    20:d3:e0:df:e1:52:85:e1:47:50:81:f9:45:0a:f1:
                    8e:2b:4d:f7:20:0c:41:fc:ce:ba:6f:a9:c5:7c:5c:
                    f9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:92:82:C6:95:23:B6:F3:65:5A:BF:AA:32:73:A8:A5:4E:40:8F:9E
            X509v3 Authority Key Identifier:
                keyid:9F:82:5D:61:F8:FE:63:A1:E8:01:F9:11:10:27:2A:A8:A1:80:A7:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F825D61F8FE63A1E801F91110272AA8A180A78F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42869866F74F295719444B7C8A604F504F7B2DE2E1543F046AC1543B3037663C/0/34352e3137392e3139362e302f32332d3234203d3e20323734313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:ed:98:c0:41:61:35:b3:a3:c4:74:a5:44:5c:5a:39:ec:62:
         5f:22:23:87:67:38:2e:e6:dd:39:3c:83:29:0a:0d:d9:d9:7a:
         0c:84:cf:62:64:4e:4b:7b:67:d1:cc:2a:b1:5f:cd:ad:2d:b7:
         d4:e4:52:d1:97:8c:fd:53:2b:12:9d:93:25:07:a6:e9:06:5b:
         48:71:81:23:3f:d0:0e:f2:6e:95:e5:39:83:df:86:cc:9f:91:
         a7:08:2c:61:c5:cf:66:14:2e:55:2a:71:b2:2d:03:f6:d4:4a:
         18:b2:45:ad:cc:e5:dc:39:e2:47:6c:49:03:f2:4c:44:b3:55:
         3c:cd:c2:d9:a1:79:3e:b9:4e:94:c3:35:38:6f:6c:b4:53:b2:
         34:5a:84:10:90:f7:eb:eb:8b:53:a1:23:1e:2c:c2:e9:9d:f9:
         fb:4c:17:57:10:1b:bd:c6:cb:56:1e:d2:0b:29:29:25:84:d6:
         47:cf:95:ef:fc:c8:bf:78:8b:5e:49:3b:48:17:11:71:5a:ed:
         84:93:08:a2:ce:0c:47:b4:6d:e9:52:52:56:8c:5b:a2:1a:b0:
         d8:bf:21:43:b2:5d:1e:9c:d1:a8:14:e9:03:ea:ef:89:d1:e3:
         a4:5b:f2:f1:8a:65:94:e6:e1:35:d5:b6:27:5b:0e:25:a9:04:
         73:39:08:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:20:56 2026 by rpki-client