Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e3139322e302f32342d3234203d3e20323637373938.roa
File:                     34352e3137332e3139322e302f32342d3234203d3e20323637373938.roa (raw, json)
Hash identifier:          gPPZwYSBkHHYPRj4OwpkHc5bjUSc2/jRp36I8fg7cUQ=
Subject key identifier:   08:E0:4D:6E:DA:0C:C0:35:64:16:CE:BE:92:01:09:21:B1:8D:9F:F0
Certificate issuer:       /CN=378C4A178BD1442C656AA12825B69BFF74217F32
Certificate serial:       694C7C7BF4C3B9AC09C04BF0DA5B86F3465CBDE8
Authority key identifier: 37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e3139322e302f32342d3234203d3e20323637373938.roa
Signing time:             Mon 20 Apr 2026 21:25:01 +0000
ROA not before:           Mon 20 Apr 2026 21:20:01 +0000
ROA not after:            Mon 19 Apr 2027 21:25:01 +0000
asID:                     267798
IP address blocks:        45.173.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 May 2026 09:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:4c:7c:7b:f4:c3:b9:ac:09:c0:4b:f0:da:5b:86:f3:46:5c:bd:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378C4A178BD1442C656AA12825B69BFF74217F32
        Validity
            Not Before: Apr 20 21:20:01 2026 GMT
            Not After : Apr 19 21:25:01 2027 GMT
        Subject: CN=08E04D6EDA0CC0356416CEBE92010921B18D9FF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:f4:6d:b9:7a:6d:e4:a7:a9:ba:8f:64:5d:
                    a5:5f:0d:9b:da:17:ec:d8:fc:bf:49:41:9f:f7:c3:
                    18:56:5a:05:d8:6e:ca:ac:36:f8:15:8c:5c:36:5d:
                    a7:04:8f:22:9e:ad:0e:5a:ca:c1:e0:85:77:66:7d:
                    17:bf:02:3f:c3:0c:55:53:fa:49:22:58:63:eb:29:
                    47:9c:5f:55:a5:fb:43:19:55:7d:bf:b4:49:fc:38:
                    1d:5d:de:76:1e:8f:a8:ef:ba:5f:82:fe:09:8e:f5:
                    5a:72:a6:5b:12:f7:40:9a:ff:ef:5f:be:67:9a:1f:
                    33:63:45:d7:f0:2c:c4:96:bb:88:7a:2e:23:09:8c:
                    72:7b:26:76:18:52:81:c3:02:4f:aa:eb:7c:b6:9c:
                    1f:16:8f:67:af:57:1b:ed:ff:55:71:9b:8f:0d:79:
                    06:3b:28:c6:32:47:f0:91:f0:0c:dd:5e:a9:68:b6:
                    8f:2b:c2:bb:62:b1:f5:8e:94:72:bc:d8:cc:bf:80:
                    56:89:7e:2f:c3:84:1d:5b:f4:7a:03:06:f1:4b:d7:
                    ee:62:5a:47:45:06:9a:77:3e:03:e5:83:e8:5d:95:
                    ac:2b:a8:79:8d:10:1a:60:4f:34:09:26:74:b9:f0:
                    a5:78:52:f2:18:3b:08:f3:3b:01:f1:0d:cd:44:28:
                    df:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E0:4D:6E:DA:0C:C0:35:64:16:CE:BE:92:01:09:21:B1:8D:9F:F0
            X509v3 Authority Key Identifier:
                keyid:37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e3139322e302f32342d3234203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:d4:2d:67:a0:6a:e5:ca:27:ed:93:e1:ec:2c:d6:67:c9:a5:
         99:8e:23:53:e6:51:50:90:c3:cc:6e:d7:29:57:f0:80:a2:82:
         69:f6:12:a5:36:37:fd:e6:52:15:93:d3:a1:57:1d:cd:69:bc:
         4e:3b:b8:23:42:cf:13:6f:ac:9a:db:e2:83:c1:cd:93:5f:c6:
         5d:70:80:d9:1e:d8:24:1e:08:3c:25:95:7a:1b:ec:5f:70:6c:
         16:c0:bd:5d:5d:41:3c:64:49:32:0c:6b:db:9e:8e:14:d5:9a:
         ec:99:b2:e7:12:5d:80:6d:6a:62:06:c7:aa:45:9f:5a:c7:29:
         22:04:5c:30:1f:78:d5:db:0a:bd:c2:af:f6:b5:2a:5d:88:be:
         22:b8:d0:44:f2:51:01:db:e6:67:b8:12:8c:66:49:c3:0c:6c:
         7f:28:24:3d:02:49:00:d8:c7:93:89:76:7c:07:cc:2f:bf:41:
         76:fe:2c:a1:30:60:96:40:d0:0c:6b:18:20:73:36:02:94:f5:
         9c:e2:2a:54:cc:e2:92:2f:9f:ad:59:79:dc:87:c9:42:ae:e5:
         88:00:28:d0:0b:52:10:7b:30:4b:bc:e4:08:ae:3b:96:15:97:
         2a:58:4c:70:42:38:f5:b0:63:03:cb:84:a3:db:f1:75:2d:bb:
         89:b2:65:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:43:42 2026 by rpki-client