Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/34352e3138322e3131382e302f32342d3234203d3e203631343638.roa
File:                     34352e3138322e3131382e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          I0yRzk0ycqOn+fGOxgdzKeHDzM6T7JZ/krULlnQPt04=
Subject key identifier:   9E:00:4B:72:1C:24:C6:41:FA:CD:32:97:C0:91:64:CB:07:2A:D6:4F
Certificate issuer:       /CN=41231346CAA3119B16D3EBB340022A400612414D
Certificate serial:       0B657288DE5E817D5BFBCFF205603078FDD64B60
Authority key identifier: 41:23:13:46:CA:A3:11:9B:16:D3:EB:B3:40:02:2A:40:06:12:41:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41231346CAA3119B16D3EBB340022A400612414D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/34352e3138322e3131382e302f32342d3234203d3e203631343638.roa
Signing time:             Mon 15 Jun 2026 16:47:55 +0000
ROA not before:           Mon 15 Jun 2026 16:42:55 +0000
ROA not after:            Mon 14 Jun 2027 16:47:55 +0000
asID:                     61468
IP address blocks:        45.182.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/41231346CAA3119B16D3EBB340022A400612414D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/41231346CAA3119B16D3EBB340022A400612414D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41231346CAA3119B16D3EBB340022A400612414D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 21:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:65:72:88:de:5e:81:7d:5b:fb:cf:f2:05:60:30:78:fd:d6:4b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41231346CAA3119B16D3EBB340022A400612414D
        Validity
            Not Before: Jun 15 16:42:55 2026 GMT
            Not After : Jun 14 16:47:55 2027 GMT
        Subject: CN=9E004B721C24C641FACD3297C09164CB072AD64F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b2:b8:c5:dc:05:5c:ba:f4:7e:34:1f:c2:99:
                    c1:ed:3e:4a:0f:6b:9c:2c:67:95:dc:03:fa:5e:fa:
                    9c:1a:66:ae:fd:3c:e6:47:45:e7:2f:af:3d:16:44:
                    22:44:cd:37:c1:a6:bd:db:d1:69:a9:58:ce:27:f4:
                    2a:92:41:37:d4:e9:5b:df:c3:0d:db:cd:d7:2c:f6:
                    7b:01:cd:a8:be:19:86:e9:fb:10:23:6b:5d:cf:6c:
                    2c:8e:9e:e1:db:8e:bf:37:0e:38:15:21:ca:3d:f0:
                    73:5b:ea:bd:dd:b0:33:f5:91:5e:da:7a:f9:76:ed:
                    16:b5:a4:1c:0e:2e:75:3c:6d:a1:ab:22:db:df:a6:
                    aa:0e:8a:2d:fd:e1:72:ce:df:08:f0:92:6c:00:13:
                    8b:86:36:22:90:f2:70:ba:0c:b5:a7:1f:a5:55:04:
                    98:34:e6:be:33:29:59:5d:40:97:97:f7:09:40:2b:
                    cc:be:90:9d:30:4d:47:46:03:a5:08:55:52:a9:58:
                    d0:25:64:95:5a:c3:b5:17:e5:37:61:d4:60:86:4f:
                    0c:60:78:2b:1a:fa:15:8b:1c:02:3f:15:d8:53:f9:
                    2c:28:4e:7b:3f:94:aa:12:ff:3a:9c:c6:7d:64:0f:
                    1b:53:de:ea:d8:57:72:0c:5f:76:e8:d1:93:db:67:
                    a1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:00:4B:72:1C:24:C6:41:FA:CD:32:97:C0:91:64:CB:07:2A:D6:4F
            X509v3 Authority Key Identifier:
                keyid:41:23:13:46:CA:A3:11:9B:16:D3:EB:B3:40:02:2A:40:06:12:41:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/41231346CAA3119B16D3EBB340022A400612414D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41231346CAA3119B16D3EBB340022A400612414D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/34352e3138322e3131382e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:5c:48:3c:35:ac:33:44:12:23:d3:9f:e4:aa:74:2d:61:4a:
         ac:94:fd:b6:49:9e:8d:ee:61:50:e8:c5:35:6b:87:f4:8e:c3:
         ba:7d:10:08:b8:f5:8e:83:bd:6f:4e:d0:a7:71:3d:9b:9f:cd:
         e5:69:c6:b4:88:ba:cd:9f:bb:1b:60:7f:ad:dd:37:ad:44:c4:
         a9:9b:2f:d6:75:84:2b:4d:d8:75:7b:af:2c:8a:c7:00:e9:cf:
         b9:41:e9:d2:3e:6e:5f:97:45:30:3d:59:a1:8e:5e:c6:ba:4f:
         4a:c7:3c:5a:0b:b9:33:5f:06:38:ff:f3:18:ac:82:5e:c5:94:
         be:1b:4d:d9:04:c2:a4:93:5b:ca:29:bc:0d:c4:49:1a:5f:06:
         7d:b1:3b:67:41:5f:bf:e8:8e:2f:2b:e8:90:96:ad:c9:f3:7d:
         c9:50:15:0f:5d:72:ce:b0:52:32:49:80:22:e5:70:2a:76:b9:
         1b:ab:71:85:66:47:ae:91:ef:a0:ef:9b:c1:5d:74:c3:c0:4d:
         a4:95:e6:7b:90:0b:73:e8:a9:16:45:6b:23:98:b8:9f:5f:35:
         d7:0e:66:09:6f:08:4c:5f:c4:fa:b2:7a:d2:9c:41:eb:a1:f7:
         2c:b8:1f:34:c6:be:42:97:3f:0a:5f:5a:61:ab:d2:8a:29:c3:
         34:10:e7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 12:04:37 2026 by rpki-client