Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/34352e3138392e3131362e302f32332d3234203d3e20323733313333.roa
File:                     34352e3138392e3131362e302f32332d3234203d3e20323733313333.roa (raw, json)
Hash identifier:          gO2QBuZtvusXkev/I1pHIe86n+yqUZ0bnV0KnrmaS2w=
Subject key identifier:   33:5A:6C:80:D1:80:DD:D7:7C:65:B4:5B:35:76:F8:A8:26:35:F7:2F
Certificate issuer:       /CN=07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC
Certificate serial:       43AA567379B85B00DB837E4240E2B247497E20D9
Authority key identifier: 07:CC:AF:A3:BE:AB:3D:5E:20:F9:9F:25:E8:3A:28:8F:4B:4D:48:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/34352e3138392e3131362e302f32332d3234203d3e20323733313333.roa
Signing time:             Tue 03 Mar 2026 17:32:38 +0000
ROA not before:           Tue 03 Mar 2026 17:27:38 +0000
ROA not after:            Tue 02 Mar 2027 17:32:38 +0000
asID:                     273133
IP address blocks:        45.189.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Mar 2026 04:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:aa:56:73:79:b8:5b:00:db:83:7e:42:40:e2:b2:47:49:7e:20:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC
        Validity
            Not Before: Mar  3 17:27:38 2026 GMT
            Not After : Mar  2 17:32:38 2027 GMT
        Subject: CN=335A6C80D180DDD77C65B45B3576F8A82635F72F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f7:0f:62:73:fb:7c:78:ae:a2:7b:94:41:04:
                    09:31:9d:68:d4:74:13:bb:8e:a0:31:aa:5a:29:17:
                    5d:97:80:55:e8:64:10:d8:fb:90:05:a1:15:c7:5c:
                    c5:85:23:ec:99:0f:4d:56:3e:a3:ee:b0:c2:ff:6d:
                    fe:9c:06:91:f7:66:46:a9:48:94:c6:79:10:c2:50:
                    83:d8:99:5b:f7:29:9c:fa:cd:91:1e:f5:cc:42:f3:
                    92:d3:7f:1b:bf:c7:dd:1e:63:46:cd:cc:da:6c:cd:
                    ee:13:ba:fa:a5:93:6a:0b:aa:70:bb:17:24:f8:c7:
                    d4:a0:15:04:4d:76:0f:7b:db:22:fd:aa:27:03:95:
                    f5:9b:22:cf:01:d3:b3:f6:01:ba:7f:9d:e6:e9:d5:
                    5a:19:88:fa:d3:df:28:98:da:90:7b:d2:11:c3:a4:
                    07:1f:af:9c:a3:93:a5:e2:45:84:7a:ad:34:4b:75:
                    45:a7:55:a1:0c:44:c1:9e:e3:b0:12:2d:92:9c:20:
                    55:e3:f9:78:2a:56:72:d7:56:29:64:5a:6d:73:83:
                    f3:9b:79:8b:7c:29:19:d8:98:6e:47:a3:fa:6a:35:
                    78:3e:8a:1e:a6:55:aa:c9:af:7a:21:c8:a3:da:b3:
                    95:ae:53:99:85:8d:70:87:13:4a:d1:ca:b4:f3:24:
                    f1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5A:6C:80:D1:80:DD:D7:7C:65:B4:5B:35:76:F8:A8:26:35:F7:2F
            X509v3 Authority Key Identifier:
                keyid:07:CC:AF:A3:BE:AB:3D:5E:20:F9:9F:25:E8:3A:28:8F:4B:4D:48:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/34352e3138392e3131362e302f32332d3234203d3e20323733313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:7c:0a:61:b3:b7:63:e9:36:24:8b:13:30:89:8d:1d:c0:d6:
         55:6d:d4:bd:0c:dc:32:65:63:81:00:35:64:ef:40:35:db:be:
         d5:96:92:80:95:4c:c5:58:7b:42:d6:52:58:f9:ca:90:1e:ff:
         2b:38:3d:d6:dd:40:fa:25:8f:85:22:10:9a:81:93:43:d1:6b:
         a8:5f:3a:65:c8:c1:c3:33:65:23:6e:e3:6f:50:60:8f:5e:c8:
         6e:a1:e7:ae:fd:0f:ce:6d:04:2f:2f:20:82:51:1d:f8:48:c2:
         67:14:74:03:9b:24:15:9b:3d:79:db:07:4b:5c:74:59:e7:92:
         86:ed:d2:c5:55:74:7a:b7:d9:68:4a:b5:49:45:89:a8:7a:ec:
         29:33:85:8e:31:f1:8c:d0:cf:de:17:12:b7:87:dc:a5:7c:78:
         c5:0d:95:90:4e:65:00:0a:28:c0:3b:66:07:87:d8:05:b6:ef:
         06:60:b6:13:5a:e8:43:3f:04:76:60:d5:8c:82:97:06:c3:01:
         3d:00:52:8c:41:12:a8:3c:57:69:ae:9c:24:b0:f8:0e:fb:ae:
         fc:77:8d:7e:fd:cb:9e:c7:f3:78:b1:3a:5c:9c:ae:a0:e3:58:
         6e:dd:85:ee:a0:f8:7e:93:bc:5b:ad:46:46:94:88:a3:cc:fc:
         24:35:b6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 05:18:05 2026 by rpki-client