Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e3139342e302f32342d3234203d3e20323637373938.roa
File:                     34352e3137332e3139342e302f32342d3234203d3e20323637373938.roa (raw, json)
Hash identifier:          oN6FGGxS7CT5ZenfTm3do4+7Dfcbs/grK3cqM9IJ+ns=
Subject key identifier:   ED:35:C1:83:89:FC:3B:A0:0F:44:97:66:82:B6:CC:90:F5:B0:74:B6
Certificate issuer:       /CN=378C4A178BD1442C656AA12825B69BFF74217F32
Certificate serial:       0717DEE3D239621DD1C3F4EE9AA0F2C388363BB8
Authority key identifier: 37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e3139342e302f32342d3234203d3e20323637373938.roa
Signing time:             Mon 20 Apr 2026 21:25:00 +0000
ROA not before:           Mon 20 Apr 2026 21:20:00 +0000
ROA not after:            Mon 19 Apr 2027 21:25:00 +0000
asID:                     267798
IP address blocks:        45.173.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 May 2026 09:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:17:de:e3:d2:39:62:1d:d1:c3:f4:ee:9a:a0:f2:c3:88:36:3b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378C4A178BD1442C656AA12825B69BFF74217F32
        Validity
            Not Before: Apr 20 21:20:00 2026 GMT
            Not After : Apr 19 21:25:00 2027 GMT
        Subject: CN=ED35C18389FC3BA00F44976682B6CC90F5B074B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8d:45:8b:cf:84:47:b0:5f:ee:f0:db:8c:41:
                    33:9c:f7:26:93:7b:6c:d7:7c:d8:68:e7:ce:13:e4:
                    5e:39:86:27:9e:8f:10:87:9d:12:c1:55:28:c3:d5:
                    9c:3d:3a:7e:6f:17:ad:c7:7c:8d:31:f6:90:b1:ce:
                    75:bc:13:55:1a:2a:7c:19:03:0b:14:80:47:9e:16:
                    1a:0f:b5:8a:b6:82:02:90:36:40:6e:f2:00:e7:b0:
                    f1:96:41:f2:55:a2:cf:56:8e:ab:51:7e:98:36:a5:
                    44:4b:f0:5a:c5:d5:a9:62:d9:30:dc:cd:99:93:b1:
                    28:91:2b:19:23:fb:87:99:c5:18:e3:ef:e1:32:85:
                    82:f8:dd:2b:59:27:e2:f6:3c:7d:ff:85:56:4a:56:
                    a8:a7:75:79:ae:a5:bf:ca:17:c4:23:07:11:66:48:
                    86:17:b3:23:6b:a1:cd:b9:c0:00:8e:c2:f4:c4:c7:
                    77:b5:c2:97:92:c5:c8:6a:01:25:b3:74:2c:f1:df:
                    c0:2e:dd:10:a1:5a:10:49:19:6a:51:fa:07:05:f9:
                    0c:0a:f9:6a:a9:5c:ee:a5:95:a4:13:6f:61:7e:8a:
                    71:f2:c1:fe:1d:d3:2d:fa:d8:1b:c8:6a:ac:e0:be:
                    c9:36:18:53:67:9a:03:d2:7b:90:aa:92:85:6b:eb:
                    99:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:35:C1:83:89:FC:3B:A0:0F:44:97:66:82:B6:CC:90:F5:B0:74:B6
            X509v3 Authority Key Identifier:
                keyid:37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e3139342e302f32342d3234203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:1e:9b:9b:79:7b:ab:09:77:8a:db:32:9b:0d:4e:0b:0f:c3:
         14:04:d2:2e:1b:ed:55:2c:15:f1:fc:74:09:94:10:c0:c8:52:
         51:85:e5:70:90:e5:47:37:76:f8:8a:13:c0:d7:6f:02:2e:a3:
         23:84:db:f3:de:30:75:33:d4:ad:19:a7:6e:74:3c:ab:50:66:
         a5:58:cf:58:c3:e5:df:18:f8:67:d0:73:45:34:36:f5:19:7b:
         ea:91:bc:f7:2a:11:e5:f0:e6:6d:71:f1:40:52:4e:a1:43:0d:
         7c:6c:00:79:e4:cd:bc:60:1c:b9:10:1d:c2:93:4e:12:8b:e6:
         3d:e1:4a:e3:c3:bf:77:30:d5:be:a0:85:ba:62:f5:e3:52:57:
         3f:3f:82:02:ff:c2:b8:6c:7b:3d:48:3f:cf:00:11:62:6a:5b:
         ff:fd:4c:0c:17:35:91:83:22:75:f1:57:29:96:73:a1:6a:94:
         ac:09:ca:ef:11:37:d0:dc:7c:7b:50:5e:00:c1:d7:92:a7:95:
         88:15:9d:91:f8:53:02:42:9c:d4:98:74:ea:2a:c2:08:41:8a:
         4d:2c:df:08:dd:8c:b3:e5:8d:c5:ac:0b:cf:2e:86:c7:a9:1f:
         f8:ae:86:31:33:8a:e5:2f:29:5b:89:79:99:c2:4a:6a:d6:95:
         ee:7c:c1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:43:42 2026 by rpki-client