Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CE6E20C116E5A9F92FBE3E25065E299302A1B43902DE463F5886132211AB173/0/34352e3136392e3131322e302f32322d3234203d3e20323637373637.roa
File:                     34352e3136392e3131322e302f32322d3234203d3e20323637373637.roa (raw, json)
Hash identifier:          jo18CUtaI1weoQ5e8HUXcQEzI6QlnCdE64SEcqc3KkE=
Subject key identifier:   13:46:1B:EB:85:67:27:F6:E6:61:A9:FA:33:AC:32:5C:1C:1A:7C:30
Certificate issuer:       /CN=779FD79B3FB43C63E9163A966DC931D9CEE17BC0
Certificate serial:       1DF28665618649B2D419E054CD87430430AB2B72
Authority key identifier: 77:9F:D7:9B:3F:B4:3C:63:E9:16:3A:96:6D:C9:31:D9:CE:E1:7B:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/779FD79B3FB43C63E9163A966DC931D9CEE17BC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CE6E20C116E5A9F92FBE3E25065E299302A1B43902DE463F5886132211AB173/0/34352e3136392e3131322e302f32322d3234203d3e20323637373637.roa
Signing time:             Thu 05 Mar 2026 19:33:04 +0000
ROA not before:           Thu 05 Mar 2026 19:28:04 +0000
ROA not after:            Thu 04 Mar 2027 19:33:04 +0000
asID:                     267767
IP address blocks:        45.169.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CE6E20C116E5A9F92FBE3E25065E299302A1B43902DE463F5886132211AB173/0/779FD79B3FB43C63E9163A966DC931D9CEE17BC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CE6E20C116E5A9F92FBE3E25065E299302A1B43902DE463F5886132211AB173/0/779FD79B3FB43C63E9163A966DC931D9CEE17BC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/779FD79B3FB43C63E9163A966DC931D9CEE17BC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Mar 2026 10:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f2:86:65:61:86:49:b2:d4:19:e0:54:cd:87:43:04:30:ab:2b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=779FD79B3FB43C63E9163A966DC931D9CEE17BC0
        Validity
            Not Before: Mar  5 19:28:04 2026 GMT
            Not After : Mar  4 19:33:04 2027 GMT
        Subject: CN=13461BEB856727F6E661A9FA33AC325C1C1A7C30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fc:9b:9c:97:8f:4c:a5:c9:60:49:fe:d1:61:
                    28:e4:9b:b1:64:02:ae:9a:ff:a3:d6:42:c6:48:78:
                    b1:1e:60:3e:ba:4e:c8:ca:50:7f:55:f8:1c:75:a4:
                    2a:67:d9:72:4f:11:4c:0f:13:db:e9:62:5b:72:95:
                    1c:62:be:62:49:b7:94:81:90:f9:68:d7:bc:c4:cb:
                    25:92:58:10:f2:b9:af:60:b4:20:d6:83:b7:c1:34:
                    60:47:5b:c7:e3:d6:39:54:0f:dc:66:7e:4e:c5:af:
                    c2:10:78:69:7e:bf:83:7d:09:42:30:91:1a:c7:94:
                    b5:7e:fe:08:d0:3e:2c:0c:58:b1:63:21:db:34:8f:
                    f2:49:69:c6:51:f5:2b:67:30:e4:8c:f5:ec:24:32:
                    b6:eb:8c:fa:03:dc:9e:e5:d7:60:b6:96:73:4d:a7:
                    f8:2b:2e:c6:47:17:45:ab:fe:d2:70:e8:59:b3:50:
                    74:46:54:ab:99:13:99:63:31:00:5d:e9:34:6a:2c:
                    cf:30:98:20:15:34:71:39:92:2e:5b:37:b1:5f:f5:
                    17:84:6a:53:70:0d:e7:75:fd:fa:1c:84:5a:18:b3:
                    4d:7f:0b:c5:16:e3:2c:ab:d0:3b:96:0b:77:0a:94:
                    54:3f:48:c5:ae:88:45:e8:96:6b:ae:a3:b2:58:fb:
                    5f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:46:1B:EB:85:67:27:F6:E6:61:A9:FA:33:AC:32:5C:1C:1A:7C:30
            X509v3 Authority Key Identifier:
                keyid:77:9F:D7:9B:3F:B4:3C:63:E9:16:3A:96:6D:C9:31:D9:CE:E1:7B:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CE6E20C116E5A9F92FBE3E25065E299302A1B43902DE463F5886132211AB173/0/779FD79B3FB43C63E9163A966DC931D9CEE17BC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/779FD79B3FB43C63E9163A966DC931D9CEE17BC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CE6E20C116E5A9F92FBE3E25065E299302A1B43902DE463F5886132211AB173/0/34352e3136392e3131322e302f32322d3234203d3e20323637373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:aa:26:82:b0:3c:62:4d:d2:16:09:c3:8f:05:14:16:e7:f6:
         73:e0:2d:54:8a:a0:8d:89:7e:ba:3b:dd:6f:f3:a2:f6:d6:e9:
         a6:ee:3f:11:14:3d:cc:8a:0f:75:d8:11:b9:78:ac:16:2b:82:
         34:d1:49:45:22:5a:49:71:a6:53:0f:99:13:57:6a:b7:3d:8d:
         49:1b:c8:de:e4:31:52:c9:ac:88:d9:3c:1b:61:4f:8f:e4:12:
         59:e4:c8:02:c2:65:70:85:11:3d:b9:c7:9b:2f:b6:9d:00:c7:
         d4:3e:4d:97:e2:75:4d:8b:6f:bc:23:e7:6f:e6:38:49:36:13:
         42:b1:8c:ca:ff:a4:27:21:7c:d0:7d:dd:e9:cb:4b:99:53:07:
         10:d0:c0:98:e3:e1:49:f5:8a:51:fa:ee:36:a9:b5:8b:d4:9b:
         45:8a:c0:3f:33:fe:db:67:ac:69:52:c0:41:3e:b9:eb:cc:7f:
         7d:10:b3:3a:e0:45:3b:a3:9c:23:54:11:8d:47:ef:f3:96:9f:
         04:b9:f8:a7:02:4d:19:2f:b6:1e:6c:2e:82:bd:ca:cb:65:34:
         30:22:b2:ee:83:14:dd:cd:67:fc:65:86:6e:bf:86:4d:6d:19:
         7e:d2:f2:5e:1d:c4:dd:db:b6:9a:3a:2f:72:26:cb:52:a7:14:
         b5:ef:57:cf
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHfKGZWGGSbLUGeBUzYdDBDCrK3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc5RkQ3OUIzRkI0M0M2M0U5MTYzQTk2NkRDOTMxRDlD
RUUxN0JDMDAeFw0yNjAzMDUxOTI4MDRaFw0yNzAzMDQxOTMzMDRaMDMxMTAvBgNV
BAMTKDEzNDYxQkVCODU2NzI3RjZFNjYxQTlGQTMzQUMzMjVDMUMxQTdDMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/Jucl49MpclgSf7RYSjkm7Fk
Aq6a/6PWQsZIeLEeYD66TsjKUH9V+Bx1pCpn2XJPEUwPE9vpYltylRxivmJJt5SB
kPlo17zEyyWSWBDyua9gtCDWg7fBNGBHW8fj1jlUD9xmfk7Fr8IQeGl+v4N9CUIw
kRrHlLV+/gjQPiwMWLFjIds0j/JJacZR9StnMOSM9ewkMrbrjPoD3J7l12C2lnNN
p/grLsZHF0Wr/tJw6FmzUHRGVKuZE5ljMQBd6TRqLM8wmCAVNHE5ki5bN7Ff9ReE
alNwDed1/fochFoYs01/C8UW4yyr0DuWC3cKlFQ/SMWuiEXolmuuo7JY+1+TAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUE0Yb64VnJ/bmYan6M6wyXBwafDAwHwYDVR0j
BBgwFoAUd5/Xmz+0PGPpFjqWbckx2c7he8AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81Q0U2RTIwQzExNkU1QTlGOTJGQkUzRTI1MDY1RTI5OTMw
MkExQjQzOTAyREU0NjNGNTg4NjEzMjIxMUFCMTczLzAvNzc5RkQ3OUIzRkI0M0M2
M0U5MTYzQTk2NkRDOTMxRDlDRUUxN0JDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NzlGRDc5QjNGQjQzQzYzRTkx
NjNBOTY2REM5MzFEOUNFRTE3QkMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUNFNkUyMEMxMTZFNUE5RjkyRkJFM0UyNTA2NUUyOTkzMDJBMUI0Mzkw
MkRFNDYzRjU4ODYxMzIyMTFBQjE3My8wLzM0MzUyZTMxMzYzOTJlMzEzMTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3MzczNjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLalw
MA0GCSqGSIb3DQEBCwUAA4IBAQBGqiaCsDxiTdIWCcOPBRQW5/Zz4C1UiqCNiX66
O91v86L21umm7j8RFD3Mig912BG5eKwWK4I00UlFIlpJcaZTD5kTV2q3PY1JG8je
5DFSyayI2TwbYU+P5BJZ5MgCwmVwhRE9ucebL7adAMfUPk2X4nVNi2+8I+dv5jhJ
NhNCsYzK/6QnIXzQfd3py0uZUwcQ0MCY4+FJ9YpR+u42qbWL1JtFisA/M/7bZ6xp
UsBBPrnrzH99ELM64EU7o5wjVBGNR+/zlp8EufinAk0ZL7YebC6CvcrLZTQwIrLu
gxTdzWf8ZYZuv4ZNbRl+0vJeHcTd27aaOi9yJstSpxS171fP
-----END CERTIFICATE-----
Generated at Fri Mar 20 20:16:05 2026 by rpki-client