Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/873BD1E0152A7A8D934E21887C7EF733D0B15B007A41B45810215AAE6B663F5B/0/34352e3137382e37322e302f32342d3234203d3e20323635353930.roa
File:                     34352e3137382e37322e302f32342d3234203d3e20323635353930.roa (raw, json)
Hash identifier:          IIn9pX/JZWDVU06VUC0gP7FUiXE42Voe9x4QbShINsI=
Subject key identifier:   81:C7:64:69:D8:EE:AB:CD:83:78:8F:7A:09:9E:A7:D6:7A:3D:DC:71
Certificate issuer:       /CN=44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71
Certificate serial:       7AD2CD5F148C09CB971076F2EA545F25F95DF5CF
Authority key identifier: 44:AF:FE:BA:19:37:C2:A0:8E:23:DE:18:92:F4:C8:3B:CB:C5:0E:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/873BD1E0152A7A8D934E21887C7EF733D0B15B007A41B45810215AAE6B663F5B/0/34352e3137382e37322e302f32342d3234203d3e20323635353930.roa
Signing time:             Wed 21 Oct 2026 06:42:11 +0000
ROA not before:           Wed 21 Oct 2026 06:37:11 +0000
ROA not after:            Wed 20 Oct 2027 06:42:11 +0000
asID:                     265590
IP address blocks:        45.178.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/873BD1E0152A7A8D934E21887C7EF733D0B15B007A41B45810215AAE6B663F5B/0/44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/873BD1E0152A7A8D934E21887C7EF733D0B15B007A41B45810215AAE6B663F5B/0/44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Nov 2026 20:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d2:cd:5f:14:8c:09:cb:97:10:76:f2:ea:54:5f:25:f9:5d:f5:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71
        Validity
            Not Before: Oct 21 06:37:11 2026 GMT
            Not After : Oct 20 06:42:11 2027 GMT
        Subject: CN=81C76469D8EEABCD83788F7A099EA7D67A3DDC71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9f:80:c3:a1:15:2a:38:41:cd:8c:6b:f3:22:
                    ad:37:85:da:c0:f7:36:43:68:94:30:0b:bf:98:ef:
                    60:1e:f1:1a:d2:5e:95:60:5b:c8:db:26:38:7c:e5:
                    72:2a:49:b7:69:b2:47:1e:4f:53:e0:cb:58:30:9d:
                    1d:ef:35:48:57:56:fe:37:9e:95:a5:65:4b:75:d5:
                    0e:17:ef:8d:a2:fd:93:42:59:7e:06:44:c2:1e:11:
                    07:e1:bd:94:c3:b1:9b:6c:80:c6:63:84:1b:4d:af:
                    b8:f5:d0:9d:e3:8e:34:9e:35:08:8b:bd:1f:3c:0f:
                    5d:d4:cc:ab:cf:e7:35:34:1f:b4:de:07:db:cc:f5:
                    a5:79:a9:aa:43:0f:d7:52:12:f0:d7:23:7a:53:44:
                    99:7d:54:75:41:9a:e1:2c:17:57:79:59:b5:8a:50:
                    c7:e8:0c:0a:18:26:dd:dd:f0:71:95:f3:2e:dc:a6:
                    1c:29:3e:0c:1c:14:fe:cb:4f:57:8e:e6:3b:a5:44:
                    8f:5e:dc:4b:40:9d:29:3f:92:d2:0a:89:a3:d6:69:
                    c7:c6:0b:4b:28:c1:93:f3:ba:be:28:cd:06:a9:c7:
                    f8:ec:e4:33:bc:bd:aa:bc:96:db:bd:31:7d:bb:b5:
                    4d:d9:94:09:26:f4:87:ec:91:3e:6a:0c:89:99:9b:
                    56:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C7:64:69:D8:EE:AB:CD:83:78:8F:7A:09:9E:A7:D6:7A:3D:DC:71
            X509v3 Authority Key Identifier:
                keyid:44:AF:FE:BA:19:37:C2:A0:8E:23:DE:18:92:F4:C8:3B:CB:C5:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/873BD1E0152A7A8D934E21887C7EF733D0B15B007A41B45810215AAE6B663F5B/0/44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/873BD1E0152A7A8D934E21887C7EF733D0B15B007A41B45810215AAE6B663F5B/0/34352e3137382e37322e302f32342d3234203d3e20323635353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:c2:d5:12:a7:42:c0:f5:a5:ec:db:13:bd:e1:bc:79:89:2f:
         25:ca:5e:a2:89:2d:3b:9a:db:9b:72:ce:a7:2c:c4:45:59:13:
         58:94:fc:54:25:3f:ad:ff:1a:44:7f:9a:ed:fa:c5:92:a7:c3:
         40:35:15:48:47:a3:0d:4a:1e:93:be:7a:11:32:c8:54:12:09:
         4c:4f:d2:f0:45:26:33:ab:78:40:28:e0:8c:01:39:2d:82:28:
         8c:5e:51:ac:50:49:be:0e:3d:67:54:ec:71:99:69:75:aa:78:
         80:c2:25:92:6e:9b:d3:3f:b5:c9:f4:65:a4:38:23:e0:86:15:
         fa:d5:c8:cb:21:2c:68:79:24:cd:0b:9b:e5:7d:fa:76:da:a8:
         bc:79:83:06:2b:63:8e:b8:f7:c3:61:28:98:c2:01:74:b7:d2:
         49:94:00:da:80:76:f2:d3:42:ff:8e:d8:20:3b:4f:78:b8:29:
         04:dd:40:0f:6e:ff:b2:31:6c:cc:78:01:0a:90:3c:2e:95:a6:
         04:6a:54:db:e8:9d:43:d4:0e:49:40:2c:1e:9b:a9:8c:ee:88:
         21:16:bf:0a:f5:0a:79:f5:9a:b7:4a:b9:c0:eb:9d:ae:d3:97:
         6e:b4:be:11:29:a9:42:07:a1:4f:51:f1:d7:f5:28:52:69:d5:
         88:0a:93:9f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUetLNXxSMCcuXEHby6lRfJfld9c8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRBRkZFQkExOTM3QzJBMDhFMjNERTE4OTJGNEM4M0JD
QkM1MEU3MTAeFw0yNjEwMjEwNjM3MTFaFw0yNzEwMjAwNjQyMTFaMDMxMTAvBgNV
BAMTKDgxQzc2NDY5RDhFRUFCQ0Q4Mzc4OEY3QTA5OUVBN0Q2N0EzRERDNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkn4DDoRUqOEHNjGvzIq03hdrA
9zZDaJQwC7+Y72Ae8RrSXpVgW8jbJjh85XIqSbdpskceT1Pgy1gwnR3vNUhXVv43
npWlZUt11Q4X742i/ZNCWX4GRMIeEQfhvZTDsZtsgMZjhBtNr7j10J3jjjSeNQiL
vR88D13UzKvP5zU0H7TeB9vM9aV5qapDD9dSEvDXI3pTRJl9VHVBmuEsF1d5WbWK
UMfoDAoYJt3d8HGV8y7cphwpPgwcFP7LT1eO5julRI9e3EtAnSk/ktIKiaPWacfG
C0sowZPzur4ozQapx/js5DO8vaq8ltu9MX27tU3ZlAkm9IfskT5qDImZm1YHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUgcdkadjuq82DeI96CZ6n1no93HEwHwYDVR0j
BBgwFoAURK/+uhk3wqCOI94YkvTIO8vFDnEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NzNCRDFFMDE1MkE3QThEOTM0RTIxODg3QzdFRjczM0Qw
QjE1QjAwN0E0MUI0NTgxMDIxNUFBRTZCNjYzRjVCLzAvNDRBRkZFQkExOTM3QzJB
MDhFMjNERTE4OTJGNEM4M0JDQkM1MEU3MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NEFGRkVCQTE5MzdDMkEwOEUy
M0RFMTg5MkY0QzgzQkNCQzUwRTcxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODczQkQxRTAxNTJBN0E4RDkzNEUyMTg4N0M3RUY3MzNEMEIxNUIwMDdB
NDFCNDU4MTAyMTVBQUU2QjY2M0Y1Qi8wLzM0MzUyZTMxMzczODJlMzczMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNTM1MzkzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2ySDAN
BgkqhkiG9w0BAQsFAAOCAQEAH8LVEqdCwPWl7NsTveG8eYkvJcpeooktO5rbm3LO
pyzERVkTWJT8VCU/rf8aRH+a7frFkqfDQDUVSEejDUoek756ETLIVBIJTE/S8EUm
M6t4QCjgjAE5LYIojF5RrFBJvg49Z1TscZlpdap4gMIlkm6b0z+1yfRlpDgj4IYV
+tXIyyEsaHkkzQub5X36dtqovHmDBitjjrj3w2EomMIBdLfSSZQA2oB28tNC/47Y
IDtPeLgpBN1AD27/sjFszHgBCpA8LpWmBGpU2+idQ9QOSUAsHpupjO6IIRa/CvUK
efWat0q5wOudrtOXbrS+ESmpQgehT1Hx1/UoUmnViAqTnw==
-----END CERTIFICATE-----
Generated at Wed Nov 4 00:50:57 2026 by rpki-client