Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e3139322e302f32332d3233203d3e20323637373938.roa
File:                     34352e3137332e3139322e302f32332d3233203d3e20323637373938.roa (raw, json)
Hash identifier:          vyta9CpIEIOvcIcqSUnHNkDPPm36J/7hf2WSnD4/CvE=
Subject key identifier:   98:F3:AF:50:1B:18:FA:C0:8D:F4:07:D2:99:75:45:5B:42:B7:2B:40
Certificate issuer:       /CN=378C4A178BD1442C656AA12825B69BFF74217F32
Certificate serial:       52B5D0DD7D5AC9BBA720FF0B0D103BC0FB80C358
Authority key identifier: 37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e3139322e302f32332d3233203d3e20323637373938.roa
Signing time:             Mon 20 Apr 2026 21:25:00 +0000
ROA not before:           Mon 20 Apr 2026 21:20:00 +0000
ROA not after:            Mon 19 Apr 2027 21:25:00 +0000
asID:                     267798
IP address blocks:        45.173.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 May 2026 09:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b5:d0:dd:7d:5a:c9:bb:a7:20:ff:0b:0d:10:3b:c0:fb:80:c3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378C4A178BD1442C656AA12825B69BFF74217F32
        Validity
            Not Before: Apr 20 21:20:00 2026 GMT
            Not After : Apr 19 21:25:00 2027 GMT
        Subject: CN=98F3AF501B18FAC08DF407D29975455B42B72B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:38:2f:f8:d5:fd:6a:8f:89:c9:77:3a:e0:d9:
                    e7:84:b7:9d:34:ef:db:66:43:f1:9a:ba:57:12:22:
                    d2:12:9e:81:7d:2d:58:2e:74:ae:3b:d7:12:50:f3:
                    c1:b5:c5:06:52:ca:7d:01:62:f9:2e:f9:e1:37:a2:
                    fd:32:bb:d7:ad:ff:32:62:2c:ef:0f:3e:de:99:d2:
                    dc:8a:35:b2:20:81:7a:16:18:3d:b7:45:86:2d:66:
                    ad:ff:22:0f:13:d2:39:55:31:44:a0:37:df:68:06:
                    be:9c:41:e1:51:74:a8:ef:b9:0c:41:0f:31:a8:29:
                    30:80:a7:87:69:f7:1a:73:77:30:f6:a0:9e:ff:d7:
                    42:14:9c:40:90:26:8d:72:30:c1:56:80:5e:b7:e6:
                    29:1f:53:93:f9:7d:28:72:40:be:c5:4a:32:16:da:
                    6d:ea:4a:5a:84:96:d4:07:bf:87:3b:8b:35:4b:57:
                    45:e7:cd:d7:e7:15:55:0a:aa:dd:46:12:92:8d:c2:
                    cc:70:13:11:d3:4c:a3:b5:02:43:a9:d8:cb:09:34:
                    fa:9c:eb:9f:55:a8:43:be:f6:ea:03:c1:dc:a5:30:
                    31:6a:fd:43:6f:90:9d:15:41:95:ee:01:2d:43:d4:
                    5b:98:a0:d3:b1:69:71:00:be:40:48:40:7f:a8:fa:
                    8c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F3:AF:50:1B:18:FA:C0:8D:F4:07:D2:99:75:45:5B:42:B7:2B:40
            X509v3 Authority Key Identifier:
                keyid:37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e3139322e302f32332d3233203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:30:3a:2a:ad:1d:67:52:6a:09:c3:8a:98:de:d1:38:08:01:
         c9:53:c2:7b:17:2a:f9:cc:0e:f4:ef:65:5f:c2:96:57:31:cb:
         95:3a:64:43:48:0a:c5:56:cb:1b:b2:33:8e:77:0b:4c:41:7c:
         72:f7:a1:ba:e0:8c:97:b5:73:14:6f:7f:47:45:7a:3d:f6:b2:
         90:ed:0b:9b:71:eb:c5:d2:0a:6c:0e:d6:21:af:0e:2f:8d:18:
         94:7a:53:b3:3e:b1:1b:db:25:ff:ea:bb:fe:72:85:05:cb:ff:
         d6:45:f5:11:e7:71:f6:b2:f9:3f:26:87:f2:27:43:d2:54:a3:
         1d:12:f4:63:1c:97:53:91:0e:41:1f:4a:67:2f:76:0b:77:57:
         a1:74:18:e7:f0:a9:ff:1b:c8:16:9f:6b:5f:6d:94:b1:8a:82:
         c4:91:11:8c:f6:6d:3a:f3:47:30:a1:fc:f5:09:bd:b3:6f:5b:
         5c:48:01:7f:c7:90:db:a8:4d:c4:52:bd:1f:bb:59:ef:90:98:
         9a:91:57:f8:c2:58:d2:a3:81:4b:7b:80:4f:99:f1:22:a5:64:
         fe:72:e9:a1:e5:77:60:43:0c:c5:fe:62:cd:15:7b:be:3b:e2:
         2e:5a:6d:94:6a:f0:87:0a:66:16:b6:77:a4:94:81:89:5f:fc:
         c1:64:41:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:43:43 2026 by rpki-client