Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9215283AD502C6CA984EC67CBAA5E80070069BA760A375C42AC4728270A13F56/0/34352e3136372e32342e302f32332d3234203d3e20323637373238.roa
File:                     34352e3136372e32342e302f32332d3234203d3e20323637373238.roa (raw, json)
Hash identifier:          ctJiNFIF8+1KcCilrmz64Fm95lTxnWYaNkNZKnnCF+s=
Subject key identifier:   A8:C1:29:34:C9:E4:D7:CD:04:2E:94:3C:45:21:39:9D:AF:74:C1:C2
Certificate issuer:       /CN=6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE
Certificate serial:       7F9E621376D442363D33D233DE026C553FD49C11
Authority key identifier: 6D:27:CB:EB:D5:4C:DF:E9:38:A4:1D:20:BF:4B:B8:53:94:04:B0:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9215283AD502C6CA984EC67CBAA5E80070069BA760A375C42AC4728270A13F56/0/34352e3136372e32342e302f32332d3234203d3e20323637373238.roa
Signing time:             Thu 16 Apr 2026 19:39:10 +0000
ROA not before:           Thu 16 Apr 2026 19:34:10 +0000
ROA not after:            Thu 15 Apr 2027 19:39:10 +0000
asID:                     267728
IP address blocks:        45.167.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9215283AD502C6CA984EC67CBAA5E80070069BA760A375C42AC4728270A13F56/0/6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9215283AD502C6CA984EC67CBAA5E80070069BA760A375C42AC4728270A13F56/0/6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 05:37:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:9e:62:13:76:d4:42:36:3d:33:d2:33:de:02:6c:55:3f:d4:9c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE
        Validity
            Not Before: Apr 16 19:34:10 2026 GMT
            Not After : Apr 15 19:39:10 2027 GMT
        Subject: CN=A8C12934C9E4D7CD042E943C4521399DAF74C1C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:46:69:a5:de:79:07:92:d6:e2:47:45:8e:c5:
                    bb:98:cb:27:b9:fa:2b:9d:b8:06:43:b3:36:aa:c2:
                    99:2d:53:2c:4e:fe:ac:4d:a7:ec:eb:fa:16:35:cb:
                    44:07:58:18:65:bf:64:b1:7b:8d:71:cc:42:6b:ed:
                    3a:88:89:69:50:d3:60:cc:a5:c6:b7:85:35:2a:00:
                    c8:60:32:0a:a6:a1:29:71:05:f3:b3:fa:51:99:69:
                    a4:1e:bb:a3:cb:20:cd:83:20:29:a7:72:2a:cb:6c:
                    3e:a3:62:89:c0:17:fc:f9:d8:c8:1b:b0:19:78:d8:
                    40:9c:70:27:2a:28:24:47:f7:10:3c:71:e1:db:15:
                    9e:7c:f6:13:a3:37:f4:8b:da:33:91:f3:b9:d2:30:
                    15:c6:cd:08:3c:f8:c6:ab:76:0d:1d:ca:f7:3d:90:
                    de:94:f4:b1:f2:b5:d8:96:e3:ba:1e:ad:b9:7a:b4:
                    50:a9:fa:5d:44:60:04:d7:fb:e9:c8:d9:97:93:04:
                    c1:20:3f:3d:b0:ce:59:e2:cc:3e:5f:d7:98:3b:02:
                    fd:e8:d8:0c:c8:31:d4:8e:7f:4f:8c:88:6f:db:ec:
                    1d:af:b5:72:b2:8d:87:40:d1:1b:07:30:f7:9c:d1:
                    6e:0f:9f:90:d6:ef:3c:01:b0:b9:00:a8:a0:f5:cd:
                    48:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C1:29:34:C9:E4:D7:CD:04:2E:94:3C:45:21:39:9D:AF:74:C1:C2
            X509v3 Authority Key Identifier:
                keyid:6D:27:CB:EB:D5:4C:DF:E9:38:A4:1D:20:BF:4B:B8:53:94:04:B0:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9215283AD502C6CA984EC67CBAA5E80070069BA760A375C42AC4728270A13F56/0/6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9215283AD502C6CA984EC67CBAA5E80070069BA760A375C42AC4728270A13F56/0/34352e3136372e32342e302f32332d3234203d3e20323637373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:3f:c7:b4:c5:c4:ab:20:ef:74:f4:01:20:37:f6:6e:5a:f4:
         45:59:7c:7f:77:34:2b:78:cb:20:f4:9e:e4:16:97:6e:51:5f:
         59:7e:dd:78:16:ef:b0:8b:f9:c8:5a:6d:2f:4e:e3:cc:d3:55:
         80:97:99:24:e5:5b:4c:ac:18:c1:80:a0:3e:30:3e:aa:c0:9a:
         22:6e:e7:e3:e7:10:48:82:b9:ea:d8:a3:a8:09:ab:46:8f:1f:
         c0:32:90:56:6d:66:bd:a3:8c:04:da:d6:69:bf:6f:e8:dd:45:
         70:3a:9c:4f:c5:73:01:2e:27:be:98:0d:80:dc:bf:84:51:2a:
         ef:f4:64:e1:e5:80:6d:ac:94:1a:6b:0d:86:5c:9c:89:ad:8b:
         76:5b:67:bd:34:a3:b7:1f:dc:f4:2b:a0:6e:51:fe:ce:00:4c:
         5f:b0:e6:ff:51:73:d6:e8:cb:3f:9c:41:99:4e:07:14:59:12:
         2c:b3:f8:3f:85:51:42:fe:4a:cc:b7:7f:3a:5d:cf:83:28:72:
         e9:fc:24:54:52:55:fa:3e:54:8b:01:ca:7e:14:c5:6f:a5:22:
         dc:dc:1e:f8:0b:62:c1:2e:0d:d0:89:a1:6c:24:bd:be:8d:c8:
         51:28:d9:ac:ea:72:04:13:93:7f:3a:06:9c:4f:12:1d:7e:cf:
         54:21:eb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:44:11 2026 by rpki-client