Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/34352e36382e39342e302f32342d3234203d3e20323734303832.roa
File:                     34352e36382e39342e302f32342d3234203d3e20323734303832.roa (raw, json)
Hash identifier:          lh9ADeIu70qQoRyLdMGYkex4IkuCig28vCHCQ69DeV0=
Subject key identifier:   A6:B7:7B:6F:98:84:1F:14:57:9F:3A:F5:0D:81:C2:C4:7E:AE:2B:18
Certificate issuer:       /CN=E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0
Certificate serial:       079A18810F502136D1CBE9B3017EE6BA08239637
Authority key identifier: E9:83:23:C8:F0:C8:DC:F5:1B:94:82:D5:6B:4B:DF:B8:B7:70:FE:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/34352e36382e39342e302f32342d3234203d3e20323734303832.roa
Signing time:             Tue 19 May 2026 11:43:06 +0000
ROA not before:           Tue 19 May 2026 11:38:06 +0000
ROA not after:            Tue 18 May 2027 11:43:06 +0000
asID:                     274082
IP address blocks:        45.68.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9a:18:81:0f:50:21:36:d1:cb:e9:b3:01:7e:e6:ba:08:23:96:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0
        Validity
            Not Before: May 19 11:38:06 2026 GMT
            Not After : May 18 11:43:06 2027 GMT
        Subject: CN=A6B77B6F98841F14579F3AF50D81C2C47EAE2B18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0d:65:4b:2a:36:9f:b0:f8:f5:b6:31:94:dc:
                    9c:cd:93:8e:6f:00:ec:c1:9c:dd:e4:96:aa:0a:81:
                    6e:5e:9a:9e:f6:96:48:4a:6a:54:7c:f4:85:ba:d5:
                    95:45:b3:10:38:04:71:2f:86:e6:d0:96:6f:8a:87:
                    e4:b4:c1:87:56:ba:9c:30:f6:dd:5d:2a:73:32:7e:
                    a6:48:a2:98:b1:d0:96:c8:f7:ce:6b:65:3b:41:41:
                    a9:37:ac:04:8c:70:8b:46:76:17:91:de:63:94:0a:
                    d3:20:de:2d:13:fb:a6:c9:de:5c:ea:ac:c4:15:ba:
                    d5:fe:1c:e0:86:0a:1a:38:c9:6c:2b:46:9f:62:9e:
                    11:08:6c:bf:aa:ed:f7:1a:3e:f0:a8:eb:00:2c:08:
                    d9:b9:9e:eb:c1:12:51:c7:90:e6:a4:4d:68:bb:c2:
                    e8:6a:b5:67:08:dc:3f:a9:64:3f:0f:ca:39:40:76:
                    f0:0b:54:f1:96:57:79:d9:c4:17:63:44:8f:c7:23:
                    39:5c:ff:b8:70:e4:17:3f:72:2d:85:e2:d8:68:ad:
                    96:e0:6c:3d:6b:63:fe:63:0f:ee:01:c9:5f:98:7d:
                    33:db:ed:1e:56:f5:c0:f8:08:89:8b:0a:17:bb:ea:
                    e3:b2:09:d7:da:27:fe:ad:34:5b:1d:da:3c:4d:19:
                    ba:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B7:7B:6F:98:84:1F:14:57:9F:3A:F5:0D:81:C2:C4:7E:AE:2B:18
            X509v3 Authority Key Identifier:
                keyid:E9:83:23:C8:F0:C8:DC:F5:1B:94:82:D5:6B:4B:DF:B8:B7:70:FE:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/34352e36382e39342e302f32342d3234203d3e20323734303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:15:2e:c4:db:bb:54:86:0b:d1:6a:07:7d:17:7c:6a:09:ea:
         79:70:ee:a1:33:ea:51:63:a3:ad:f1:dd:bf:da:0e:63:6b:ee:
         70:81:b8:87:1f:a0:3b:59:5d:34:a2:ad:c3:3c:8b:dd:e0:83:
         25:98:c3:b8:91:dc:01:ad:35:8c:6e:94:3b:d9:bd:78:7e:34:
         2d:4a:64:cd:1a:d0:a0:eb:12:fd:3a:d8:12:4c:96:a2:f3:06:
         8a:39:1e:f4:25:92:15:e2:67:f6:5a:33:c6:83:83:d3:ae:88:
         b4:7a:a8:4a:51:ba:5f:6f:37:33:f9:d6:4c:04:a7:ba:6c:d6:
         ca:af:ab:a5:64:e0:02:8b:75:ac:34:0c:25:11:d8:fb:8f:76:
         e6:ed:7c:cd:43:37:7e:7b:b9:83:c9:84:d5:f6:9d:c2:25:29:
         59:86:5b:0e:f9:4a:02:17:6a:b7:c6:5c:d8:8c:ad:5d:0d:9c:
         46:3c:7d:be:a3:5c:a0:26:d3:5e:33:33:77:47:f8:65:13:07:
         47:71:2b:84:65:ca:a4:98:1e:c2:1b:e7:76:6e:53:cb:25:f1:
         8f:69:1b:0c:9e:67:df:3a:c9:55:78:d5:80:41:20:4e:c8:c7:
         23:31:8e:d4:26:67:5a:d2:97:78:97:9a:34:39:3c:cf:7f:c9:
         7b:de:9f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:39:00 2026 by rpki-client