Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232332e302f32342d3234203d3e20323637383233.roa
File:                     34352e3137322e3232332e302f32342d3234203d3e20323637383233.roa (raw, json)
Hash identifier:          EuTwyuRwxqoE94+WJ7D7PHbX3BAQ6sXkCVdaMMvxTy4=
Subject key identifier:   0B:1D:84:90:D8:4A:2E:8A:D8:B3:0A:17:03:A3:C7:EF:23:CE:AD:38
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       65F57E4FD33FED5FF77404D22C748EED1016C66C
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232332e302f32342d3234203d3e20323637383233.roa
Signing time:             Mon 24 Aug 2026 20:15:00 +0000
ROA not before:           Mon 24 Aug 2026 20:10:00 +0000
ROA not after:            Mon 23 Aug 2027 20:15:00 +0000
asID:                     267823
IP address blocks:        45.172.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f5:7e:4f:d3:3f:ed:5f:f7:74:04:d2:2c:74:8e:ed:10:16:c6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Aug 24 20:10:00 2026 GMT
            Not After : Aug 23 20:15:00 2027 GMT
        Subject: CN=0B1D8490D84A2E8AD8B30A1703A3C7EF23CEAD38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:80:c4:a2:a0:1b:83:41:ea:9e:75:11:cd:27:
                    91:a5:fb:45:1d:81:72:fd:05:9d:f8:8a:bf:d1:ae:
                    a3:3e:b4:ef:45:41:6c:5c:3a:29:d8:29:c0:6e:7c:
                    85:eb:b3:be:f0:cc:15:5a:4d:3d:f0:68:1f:95:c4:
                    4b:26:4d:93:38:9a:8a:06:09:7d:45:68:05:ed:c7:
                    90:17:9c:be:2a:99:35:50:8d:fa:34:e2:ff:b8:a0:
                    73:c7:fe:a7:1d:7b:64:47:56:2d:28:77:66:fc:27:
                    75:9f:83:22:ed:a4:71:10:07:cf:cd:df:6c:66:e2:
                    55:42:76:60:d5:a6:0a:5d:f2:69:33:5a:b4:c7:1a:
                    a1:b8:c8:ef:aa:12:29:58:a4:bf:4f:7a:6e:f9:2f:
                    cd:25:6a:5c:15:92:b4:d6:eb:92:69:a9:8b:5a:6d:
                    16:c9:3b:dd:25:48:9d:ca:3a:da:b9:cc:67:97:8f:
                    e7:c0:00:67:5a:85:70:5b:45:5a:08:17:b7:13:07:
                    97:47:49:fe:56:44:70:33:b4:bf:ec:1b:3e:7b:c1:
                    38:cf:f3:0a:8a:b7:d0:f7:5b:fc:53:56:4e:f4:52:
                    79:c0:11:fb:2d:65:67:1f:da:c9:4f:49:00:27:d4:
                    a0:77:06:80:00:d9:24:7b:9b:0a:7b:dd:c0:ba:c2:
                    1a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1D:84:90:D8:4A:2E:8A:D8:B3:0A:17:03:A3:C7:EF:23:CE:AD:38
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232332e302f32342d3234203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:51:bc:f2:32:b3:1b:c8:5b:60:19:4a:c2:36:8d:49:24:7c:
         be:89:94:d3:8d:7f:d0:08:bb:3a:5b:95:ed:9f:81:74:9a:2f:
         15:83:fd:48:1f:e6:5b:d2:01:82:f2:25:69:0f:0b:0d:c9:93:
         19:f1:b5:38:78:1c:d7:53:f2:ce:f2:fc:4a:54:f9:0c:b8:2a:
         34:58:cc:7d:10:88:22:c3:d1:00:5f:c5:72:df:58:4f:04:83:
         5b:e8:a9:96:cd:36:d0:3a:00:2b:be:63:89:ac:5f:4a:49:18:
         c1:1c:e8:80:36:70:bb:a6:04:48:e7:5e:f8:e4:1f:e9:23:d5:
         8f:27:f2:82:80:ad:03:fb:53:93:80:77:14:38:66:ec:9d:67:
         fc:7b:c0:5e:90:3c:8e:b1:73:18:c2:e1:96:0a:92:ed:31:f8:
         9c:7e:66:74:99:d5:3f:d1:88:d1:9d:70:6e:4c:dc:39:1d:c1:
         64:78:c9:d6:c7:d4:8b:9f:1e:d8:4f:38:e6:1a:8d:2b:8b:4b:
         f4:36:2a:3c:75:29:8f:ee:ea:27:b4:80:d2:91:b9:2d:31:63:
         17:f4:db:82:b6:a2:92:25:2d:c8:94:a7:61:8b:73:31:de:52:
         6e:17:8e:9d:03:bf:b3:fa:50:d2:fa:70:49:4b:76:97:2d:2e:
         6f:9f:21:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:33:25 2026 by rpki-client