Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CE6E20C116E5A9F92FBE3E25065E299302A1B43902DE463F5886132211AB173/0/34352e3136392e3131322e302f32322d3234203d3e203631353132.roa
File:                     34352e3136392e3131322e302f32322d3234203d3e203631353132.roa (raw, json)
Hash identifier:          LLG1FmHWfmV++72xIFyzIBmIbgunen4rk9guu/xvI1o=
Subject key identifier:   DD:68:BF:6A:A3:8B:A1:34:4B:C3:98:65:A2:4D:87:17:9F:8A:86:AF
Certificate issuer:       /CN=779FD79B3FB43C63E9163A966DC931D9CEE17BC0
Certificate serial:       469080DC947C11DA494947A99FED2823B00C9E12
Authority key identifier: 77:9F:D7:9B:3F:B4:3C:63:E9:16:3A:96:6D:C9:31:D9:CE:E1:7B:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/779FD79B3FB43C63E9163A966DC931D9CEE17BC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CE6E20C116E5A9F92FBE3E25065E299302A1B43902DE463F5886132211AB173/0/34352e3136392e3131322e302f32322d3234203d3e203631353132.roa
Signing time:             Thu 05 Mar 2026 17:32:54 +0000
ROA not before:           Thu 05 Mar 2026 17:27:54 +0000
ROA not after:            Thu 04 Mar 2027 17:32:54 +0000
asID:                     61512
IP address blocks:        45.169.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CE6E20C116E5A9F92FBE3E25065E299302A1B43902DE463F5886132211AB173/0/779FD79B3FB43C63E9163A966DC931D9CEE17BC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CE6E20C116E5A9F92FBE3E25065E299302A1B43902DE463F5886132211AB173/0/779FD79B3FB43C63E9163A966DC931D9CEE17BC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/779FD79B3FB43C63E9163A966DC931D9CEE17BC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:90:80:dc:94:7c:11:da:49:49:47:a9:9f:ed:28:23:b0:0c:9e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=779FD79B3FB43C63E9163A966DC931D9CEE17BC0
        Validity
            Not Before: Mar  5 17:27:54 2026 GMT
            Not After : Mar  4 17:32:54 2027 GMT
        Subject: CN=DD68BF6AA38BA1344BC39865A24D87179F8A86AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:39:67:10:39:99:fd:53:fa:4b:74:4d:e0:ed:
                    ff:a8:ba:9e:1d:5f:c5:56:0e:b9:60:c0:ab:fb:ec:
                    1d:4f:82:d5:f5:fe:c4:48:f2:94:d4:8a:80:ff:5b:
                    bc:ad:eb:ac:4b:f7:4e:9c:b5:4b:24:14:0b:09:77:
                    17:25:6c:b3:50:0a:ae:74:ab:69:c1:0c:02:6d:bb:
                    1b:b5:2e:38:07:1a:9d:6e:bc:69:44:d5:d1:b2:dc:
                    d9:2e:fe:db:4c:63:77:61:dc:e1:08:30:cf:b3:21:
                    0d:c0:e2:21:36:3a:32:fe:23:96:df:ab:db:ec:6b:
                    a1:bc:07:a8:a5:d6:07:50:20:e1:3a:c2:40:71:43:
                    14:47:dd:5d:a3:25:99:75:cc:89:86:e4:37:d3:f6:
                    9e:59:ed:a0:0e:e8:e7:eb:a0:48:57:40:df:1a:61:
                    53:b8:6c:e0:64:f6:02:40:43:18:ce:56:4f:48:a3:
                    a9:6f:ab:68:c4:54:d7:27:4e:6e:72:be:75:4f:8e:
                    f3:83:7a:64:29:cc:2f:aa:ff:8b:e3:20:d5:19:4c:
                    1b:34:99:a5:e7:38:28:2d:53:4b:36:d4:6b:d0:d1:
                    d1:85:54:d5:b6:60:3c:99:85:e4:3f:31:ef:b1:c9:
                    8c:b3:a3:67:65:c8:f5:44:06:6e:e3:9a:1e:cd:9c:
                    a2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:68:BF:6A:A3:8B:A1:34:4B:C3:98:65:A2:4D:87:17:9F:8A:86:AF
            X509v3 Authority Key Identifier:
                keyid:77:9F:D7:9B:3F:B4:3C:63:E9:16:3A:96:6D:C9:31:D9:CE:E1:7B:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CE6E20C116E5A9F92FBE3E25065E299302A1B43902DE463F5886132211AB173/0/779FD79B3FB43C63E9163A966DC931D9CEE17BC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/779FD79B3FB43C63E9163A966DC931D9CEE17BC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CE6E20C116E5A9F92FBE3E25065E299302A1B43902DE463F5886132211AB173/0/34352e3136392e3131322e302f32322d3234203d3e203631353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:c3:ae:2d:58:f5:63:bc:fe:23:8e:5e:f8:2e:80:70:43:f7:
         40:72:cc:47:5d:02:c7:af:0c:98:af:b4:ee:a5:82:07:6a:08:
         77:b4:bb:fb:4b:58:c2:14:d5:d0:da:24:91:ef:81:59:3d:05:
         e1:cd:57:9c:83:71:e4:92:d1:02:b1:a4:68:6e:e4:85:ee:f8:
         6f:15:92:73:5d:bd:28:0d:eb:0f:b2:19:7e:d2:86:fc:b7:b1:
         7d:3d:7b:aa:8a:0f:a0:04:61:a3:be:25:92:d4:e5:7e:29:ac:
         34:2e:76:2f:6d:15:29:c6:6f:f1:ec:cf:26:26:5f:3b:b5:6f:
         b6:14:ba:fd:00:32:dd:ed:0d:58:60:f2:ab:d7:f9:39:b0:5e:
         e2:42:c0:93:56:18:2c:a7:fc:42:21:6d:0d:19:0b:04:2c:5a:
         32:51:60:22:1d:45:b4:40:9c:ff:f2:cc:5c:b2:91:1f:8e:73:
         8b:ec:54:06:fc:89:ac:05:25:74:b8:43:e6:24:db:1b:c6:1c:
         21:2f:a4:a0:a0:fb:3b:0d:7d:a9:25:01:58:4c:ca:82:c1:1f:
         c7:69:da:74:6b:a5:be:7c:ab:db:16:4a:81:f6:07:f3:dc:17:
         7f:b9:78:af:2b:b2:16:db:b6:10:34:99:e9:05:65:1c:ab:7d:
         86:58:ab:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:13:33 2026 by rpki-client