Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e3139352e302f32342d3234203d3e20323637373938.roa
File:                     34352e3137332e3139352e302f32342d3234203d3e20323637373938.roa (raw, json)
Hash identifier:          DAINU+ROdaACQr9LgOsKUNf3Ifveyca6nbB4Pg+/Vno=
Subject key identifier:   4D:0B:B1:43:67:AE:26:94:E0:0B:55:6D:F6:9C:2C:60:77:A5:A1:11
Certificate issuer:       /CN=378C4A178BD1442C656AA12825B69BFF74217F32
Certificate serial:       3F0D8EB1E0DC8F87CDD85B51F2DA017B997A238F
Authority key identifier: 37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e3139352e302f32342d3234203d3e20323637373938.roa
Signing time:             Mon 20 Apr 2026 21:25:01 +0000
ROA not before:           Mon 20 Apr 2026 21:20:01 +0000
ROA not after:            Mon 19 Apr 2027 21:25:01 +0000
asID:                     267798
IP address blocks:        45.173.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 May 2026 09:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:0d:8e:b1:e0:dc:8f:87:cd:d8:5b:51:f2:da:01:7b:99:7a:23:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378C4A178BD1442C656AA12825B69BFF74217F32
        Validity
            Not Before: Apr 20 21:20:01 2026 GMT
            Not After : Apr 19 21:25:01 2027 GMT
        Subject: CN=4D0BB14367AE2694E00B556DF69C2C6077A5A111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0a:c1:8b:f7:6c:b2:4f:89:0d:42:ed:81:dc:
                    d9:6a:97:ba:73:82:11:fb:f7:14:f3:96:45:32:d8:
                    de:e0:8f:99:7d:0d:e3:a8:f7:ed:ec:40:0d:85:5e:
                    7e:f1:14:71:7b:c0:5e:79:dc:a0:c7:95:0d:91:90:
                    8e:70:60:df:5c:ff:15:21:06:88:9f:6e:99:d7:31:
                    0e:81:fd:1a:8b:99:fe:83:f1:9a:ec:c0:42:8f:78:
                    ed:3b:eb:e0:a9:a5:ab:cb:48:1c:e3:92:47:a1:1c:
                    a3:a0:01:38:ac:ac:f9:ad:61:9e:21:14:85:e4:a1:
                    da:98:5b:50:84:9b:19:34:3c:a2:26:d8:4a:6d:63:
                    b7:e6:3f:fa:51:b0:3d:be:54:f7:f6:f0:1a:7b:87:
                    87:ba:79:95:11:57:9f:90:23:bc:ee:7e:0f:65:d0:
                    7a:19:85:4b:64:ad:61:6f:9d:5f:fd:44:bd:6e:fc:
                    f8:b8:38:d6:c1:ab:6b:51:bf:f0:7d:04:5f:8f:71:
                    a5:ef:d6:69:bc:86:8b:dd:22:27:f4:e8:c8:c2:d2:
                    06:66:da:6d:ee:08:52:a2:6b:cc:5b:08:f2:14:9b:
                    2b:6d:21:9c:05:bc:2e:8f:1b:6f:a4:27:0f:27:ee:
                    cf:d8:d2:6a:b2:aa:2b:52:a1:39:cc:a2:df:bc:2e:
                    12:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0B:B1:43:67:AE:26:94:E0:0B:55:6D:F6:9C:2C:60:77:A5:A1:11
            X509v3 Authority Key Identifier:
                keyid:37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e3139352e302f32342d3234203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:d8:37:22:46:cb:82:a8:07:43:70:36:de:e2:3d:52:bd:63:
         62:3f:4c:5a:a5:eb:b8:69:63:19:48:ea:dd:20:a2:b6:ce:0b:
         40:a6:ea:19:89:ad:32:0e:99:2d:e7:93:43:1e:bb:6d:5e:fe:
         90:0f:6a:ff:61:37:a1:0e:d9:a2:89:ce:01:65:3f:85:80:c0:
         e9:52:54:0c:39:59:dc:bd:29:20:22:86:cf:41:d2:cd:7d:3b:
         d5:0e:cf:66:1a:f8:ae:80:85:c5:17:1d:d9:e1:2a:b9:0d:65:
         d7:75:d3:24:43:6b:86:db:f9:10:6f:de:9d:bc:44:de:ac:d6:
         f5:4b:e9:4c:e3:78:e5:44:d4:80:5d:d0:b0:81:11:94:1c:e8:
         25:ab:a1:cc:d8:99:6e:b9:d8:bc:f1:c2:c7:f9:d7:7b:45:e4:
         19:4e:02:a7:69:c4:47:eb:1d:7b:f2:b0:0d:17:76:98:71:0c:
         5a:53:5a:0c:d5:a9:19:f5:72:d0:c1:3d:d6:85:61:9a:4f:65:
         6a:c9:22:f6:2c:bc:2c:ee:ed:72:52:fe:68:94:be:7e:3a:0b:
         5e:f2:7f:6e:ba:b3:00:fe:47:7f:9f:8f:5d:46:3d:29:8b:7f:
         6e:19:e3:cb:46:5e:f9:c8:95:2d:f1:f7:d4:f4:56:33:48:76:
         3a:9d:19:2e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUPw2OseDcj4fN2FtR8toBe5l6I48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc4QzRBMTc4QkQxNDQyQzY1NkFBMTI4MjVCNjlCRkY3
NDIxN0YzMjAeFw0yNjA0MjAyMTIwMDFaFw0yNzA0MTkyMTI1MDFaMDMxMTAvBgNV
BAMTKDREMEJCMTQzNjdBRTI2OTRFMDBCNTU2REY2OUMyQzYwNzdBNUExMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChCsGL92yyT4kNQu2B3Nlql7pz
ghH79xTzlkUy2N7gj5l9DeOo9+3sQA2FXn7xFHF7wF553KDHlQ2RkI5wYN9c/xUh
BoifbpnXMQ6B/RqLmf6D8ZrswEKPeO076+CppavLSBzjkkehHKOgATisrPmtYZ4h
FIXkodqYW1CEmxk0PKIm2EptY7fmP/pRsD2+VPf28Bp7h4e6eZURV5+QI7zufg9l
0HoZhUtkrWFvnV/9RL1u/Pi4ONbBq2tRv/B9BF+PcaXv1mm8hovdIif06MjC0gZm
2m3uCFKia8xbCPIUmyttIZwFvC6PG2+kJw8n7s/Y0mqyqitSoTnMot+8LhKRAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUTQuxQ2euJpTgC1Vt9pwsYHeloREwHwYDVR0j
BBgwFoAUN4xKF4vRRCxlaqEoJbab/3QhfzIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNzg1MEZEODI3MjMzOEFFQzg3QTg1MkE2QjlFRjg2QzlE
RTJGQUY3ODgzRTE1NTU2MDEwRjcwRTU1RTQ3REQ2LzAvMzc4QzRBMTc4QkQxNDQy
QzY1NkFBMTI4MjVCNjlCRkY3NDIxN0YzMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNzhDNEExNzhCRDE0NDJDNjU2
QUExMjgyNUI2OUJGRjc0MjE3RjMyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTc4NTBGRDgyNzIzMzhBRUM4N0E4NTJBNkI5RUY4NkM5REUyRkFGNzg4
M0UxNTU1NjAxMEY3MEU1NUU0N0RENi8wLzM0MzUyZTMxMzczMzJlMzEzOTM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzczOTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALa3D
MA0GCSqGSIb3DQEBCwUAA4IBAQBS2DciRsuCqAdDcDbe4j1SvWNiP0xapeu4aWMZ
SOrdIKK2zgtApuoZia0yDpkt55NDHrttXv6QD2r/YTehDtmiic4BZT+FgMDpUlQM
OVncvSkgIobPQdLNfTvVDs9mGviugIXFFx3Z4Sq5DWXXddMkQ2uG2/kQb96dvETe
rNb1S+lM43jlRNSAXdCwgRGUHOglq6HM2Jluudi88cLH+dd7ReQZTgKnacRH6x17
8rANF3aYcQxaU1oM1akZ9XLQwT3WhWGaT2VqySL2LLws7u1yUv5olL5+Ogte8n9u
urMA/kd/n49dRj0pi39uGePLRl75yJUt8ffU9FYzSHY6nRku
-----END CERTIFICATE-----
Generated at Thu Apr 30 06:43:42 2026 by rpki-client