Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235332e302f32342d3234203d3e2037333631.roa
File:                     34352e3137302e3235332e302f32342d3234203d3e2037333631.roa (raw, json)
Hash identifier:          NsWlE56bG0m0AM412U9Vja62heXCqDTuJ1PsUoLvRVw=
Subject key identifier:   0E:51:0E:D7:73:CC:99:5A:D7:BA:02:5D:A6:9D:EE:48:B1:4A:2D:13
Certificate issuer:       /CN=6A86E783E5047079A17A5B8082BB89DADBE252A6
Certificate serial:       5E28182665F957BE5A300E852917E1C5673E1489
Authority key identifier: 6A:86:E7:83:E5:04:70:79:A1:7A:5B:80:82:BB:89:DA:DB:E2:52:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235332e302f32342d3234203d3e2037333631.roa
Signing time:             Wed 20 May 2026 21:55:00 +0000
ROA not before:           Wed 20 May 2026 21:50:00 +0000
ROA not after:            Wed 19 May 2027 21:55:00 +0000
asID:                     7361
IP address blocks:        45.170.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Jun 2026 05:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:28:18:26:65:f9:57:be:5a:30:0e:85:29:17:e1:c5:67:3e:14:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A86E783E5047079A17A5B8082BB89DADBE252A6
        Validity
            Not Before: May 20 21:50:00 2026 GMT
            Not After : May 19 21:55:00 2027 GMT
        Subject: CN=0E510ED773CC995AD7BA025DA69DEE48B14A2D13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5c:fa:0f:e5:f0:23:ea:ed:73:48:8b:89:ae:
                    e1:e7:66:0a:a1:07:9d:88:0c:2a:84:1b:af:b0:11:
                    a1:98:37:95:e0:9e:65:8d:30:61:0c:43:ac:c3:bc:
                    0a:53:30:8c:f9:4e:bf:48:ed:a0:80:f4:14:39:52:
                    54:3e:ea:b0:49:7a:9b:46:a1:29:2e:a9:d9:47:12:
                    50:57:8f:d4:c0:70:a1:97:ae:b5:0d:47:a1:5c:4e:
                    24:57:0f:d8:40:89:56:09:4d:b8:9d:6c:f9:3a:80:
                    b9:27:63:c6:4a:30:ad:18:60:ad:d3:c3:6c:74:31:
                    17:e2:9a:4a:3d:88:b1:10:62:f4:ef:66:a4:64:e1:
                    4f:9b:9b:17:78:2c:50:fa:31:aa:09:17:f2:c4:d7:
                    20:a0:94:f2:99:82:d5:ca:1a:a5:d1:0c:f8:27:f1:
                    db:c9:dd:65:b0:68:84:95:c2:39:6e:e2:ad:a2:e9:
                    96:d3:93:00:be:ed:51:02:6e:cd:e2:0d:ef:2b:f1:
                    3b:2b:23:27:e7:51:5d:ca:5a:ee:75:cb:70:90:08:
                    b7:e3:ca:72:18:95:45:c8:1d:4a:0f:47:49:c7:d8:
                    81:15:98:66:bf:12:b6:81:ef:2f:dc:fc:a5:82:88:
                    01:78:61:85:d8:0b:0a:8e:65:8c:28:72:a6:67:0f:
                    03:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:51:0E:D7:73:CC:99:5A:D7:BA:02:5D:A6:9D:EE:48:B1:4A:2D:13
            X509v3 Authority Key Identifier:
                keyid:6A:86:E7:83:E5:04:70:79:A1:7A:5B:80:82:BB:89:DA:DB:E2:52:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235332e302f32342d3234203d3e2037333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:05:53:f1:5a:21:d1:a1:6d:19:71:b8:71:f3:e6:15:e0:e6:
         c3:64:b8:a1:ce:69:e2:f3:47:0f:16:6e:b7:df:1d:78:b2:4b:
         98:52:b9:ff:dc:19:5c:71:3b:93:15:66:f8:d7:6a:a0:c6:16:
         52:6c:1c:1e:b7:da:9d:04:b4:e4:de:25:61:5d:6d:05:5c:6f:
         3f:45:ee:59:1a:83:46:91:58:22:5b:57:a1:67:bd:31:39:6c:
         bd:60:81:be:78:41:51:74:0b:e5:5f:22:6e:16:7a:28:e6:4e:
         a5:ba:0d:7d:38:27:68:fb:d1:58:0b:70:cd:ef:83:6c:5d:0e:
         75:78:13:92:48:30:e7:c1:9d:34:95:fd:35:41:b4:ab:27:54:
         5b:99:d1:d8:29:1b:af:6a:45:75:9f:40:4d:c9:79:5c:d5:03:
         6b:8a:c1:77:26:4f:75:34:6a:3e:c9:c7:f4:62:72:b0:c9:de:
         b9:aa:34:5f:a1:42:e5:c6:40:c3:2c:00:d6:d4:fb:66:8a:53:
         be:26:f7:45:1e:0b:56:ea:79:36:a6:eb:b0:70:39:93:c1:a1:
         78:13:84:71:79:87:4d:df:75:88:12:ea:0c:31:ad:f5:18:92:
         46:2e:a4:0b:31:4c:07:be:bb:45:83:65:b9:7c:22:4c:75:9b:
         7c:31:c3:09
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUXigYJmX5V75aMA6FKRfhxWc+FIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE4NkU3ODNFNTA0NzA3OUExN0E1QjgwODJCQjg5REFE
QkUyNTJBNjAeFw0yNjA1MjAyMTUwMDBaFw0yNzA1MTkyMTU1MDBaMDMxMTAvBgNV
BAMTKDBFNTEwRUQ3NzNDQzk5NUFEN0JBMDI1REE2OURFRTQ4QjE0QTJEMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQXPoP5fAj6u1zSIuJruHnZgqh
B52IDCqEG6+wEaGYN5XgnmWNMGEMQ6zDvApTMIz5Tr9I7aCA9BQ5UlQ+6rBJeptG
oSkuqdlHElBXj9TAcKGXrrUNR6FcTiRXD9hAiVYJTbidbPk6gLknY8ZKMK0YYK3T
w2x0MRfimko9iLEQYvTvZqRk4U+bmxd4LFD6MaoJF/LE1yCglPKZgtXKGqXRDPgn
8dvJ3WWwaISVwjlu4q2i6ZbTkwC+7VECbs3iDe8r8TsrIyfnUV3KWu51y3CQCLfj
ynIYlUXIHUoPR0nH2IEVmGa/EraB7y/c/KWCiAF4YYXYCwqOZYwocqZnDwOtAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUDlEO13PMmVrXugJdpp3uSLFKLRMwHwYDVR0j
BBgwFoAUaobng+UEcHmheluAgruJ2tviUqYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTdFMzFCMTFFOUUxQzc3ODBCMzg2MzhCMjM2MzAwQkEw
RDI0QzBGNzQ5RThEODE5QkMxNEQ1REQ2ODZFQzJBLzAvNkE4NkU3ODNFNTA0NzA3
OUExN0E1QjgwODJCQjg5REFEQkUyNTJBNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QTg2RTc4M0U1MDQ3MDc5QTE3
QTVCODA4MkJCODlEQURCRTI1MkE2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTE3RTMxQjExRTlFMUM3NzgwQjM4NjM4QjIzNjMwMEJBMEQyNEMwRjc0
OUU4RDgxOUJDMTRENURENjg2RUMyQS8wLzM0MzUyZTMxMzczMDJlMzIzNTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczMzM2MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtqv0wDQYJ
KoZIhvcNAQELBQADggEBAHQFU/FaIdGhbRlxuHHz5hXg5sNkuKHOaeLzRw8Wbrff
HXiyS5hSuf/cGVxxO5MVZvjXaqDGFlJsHB632p0EtOTeJWFdbQVcbz9F7lkag0aR
WCJbV6FnvTE5bL1ggb54QVF0C+VfIm4WeijmTqW6DX04J2j70VgLcM3vg2xdDnV4
E5JIMOfBnTSV/TVBtKsnVFuZ0dgpG69qRXWfQE3JeVzVA2uKwXcmT3U0aj7Jx/Ri
crDJ3rmqNF+hQuXGQMMsANbU+2aKU74m90UeC1bqeTam67BwOZPBoXgThHF5h03f
dYgS6gwxrfUYkkYupAsxTAe+u0WDZbl8Ikx1m3wxwwk=
-----END CERTIFICATE-----
Generated at Thu May 28 15:24:16 2026 by rpki-client