Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/B96C4BB34F5CC2F723905B8343F2CDE4A5A7DB350EC2819E7E0EAF8BB51ED5E7/0/34352e3137332e3132382e302f32322d3234203d3e20323637383236.roa
File:                     34352e3137332e3132382e302f32322d3234203d3e20323637383236.roa (raw, json)
Hash identifier:          KJeyje3F5eD5X0uedORslLn0a0Q/jKXsERO+58V+rTs=
Subject key identifier:   DD:E7:53:25:E6:A4:51:4F:95:4B:3A:E0:F7:8B:D9:F4:1E:53:C5:D3
Certificate issuer:       /CN=DC077FE7F6BB5074B5614D8C0409D1A5D5D8BBB4
Certificate serial:       68B92C374BA3CA464425480BFC766255D9823552
Authority key identifier: DC:07:7F:E7:F6:BB:50:74:B5:61:4D:8C:04:09:D1:A5:D5:D8:BB:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC077FE7F6BB5074B5614D8C0409D1A5D5D8BBB4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B96C4BB34F5CC2F723905B8343F2CDE4A5A7DB350EC2819E7E0EAF8BB51ED5E7/0/34352e3137332e3132382e302f32322d3234203d3e20323637383236.roa
Signing time:             Tue 28 Jul 2026 00:51:12 +0000
ROA not before:           Tue 28 Jul 2026 00:46:12 +0000
ROA not after:            Tue 27 Jul 2027 00:51:12 +0000
asID:                     267826
IP address blocks:        45.173.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B96C4BB34F5CC2F723905B8343F2CDE4A5A7DB350EC2819E7E0EAF8BB51ED5E7/0/DC077FE7F6BB5074B5614D8C0409D1A5D5D8BBB4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B96C4BB34F5CC2F723905B8343F2CDE4A5A7DB350EC2819E7E0EAF8BB51ED5E7/0/DC077FE7F6BB5074B5614D8C0409D1A5D5D8BBB4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC077FE7F6BB5074B5614D8C0409D1A5D5D8BBB4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b9:2c:37:4b:a3:ca:46:44:25:48:0b:fc:76:62:55:d9:82:35:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC077FE7F6BB5074B5614D8C0409D1A5D5D8BBB4
        Validity
            Not Before: Jul 28 00:46:12 2026 GMT
            Not After : Jul 27 00:51:12 2027 GMT
        Subject: CN=DDE75325E6A4514F954B3AE0F78BD9F41E53C5D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:29:39:3f:76:dd:a3:dc:37:fc:a4:ae:f5:01:
                    86:6f:5d:e2:12:f3:1e:e0:b7:26:4c:f9:9e:c8:8d:
                    0a:dd:0c:73:40:f2:58:34:a9:cc:8d:3d:73:31:86:
                    59:7e:64:f3:49:fc:51:27:18:94:49:23:a4:c3:81:
                    b0:36:67:9f:ac:77:6a:d5:ea:97:55:1b:d1:70:b7:
                    97:9a:2e:b4:b7:f2:82:53:9f:36:2e:67:35:ad:3b:
                    17:56:07:28:63:5a:49:73:95:db:12:e1:97:5b:5e:
                    bb:3b:ce:d4:bc:04:e4:40:d6:e9:a1:5a:8a:04:33:
                    34:a1:3f:3c:a3:50:a1:39:26:89:f7:85:3e:01:ee:
                    a9:05:0c:51:7b:9e:ae:78:5c:3b:e9:4d:ea:46:92:
                    6f:74:6d:29:5f:c6:98:18:9d:34:f7:5c:09:04:e4:
                    c3:9b:7b:1d:2c:27:b7:25:d1:d5:27:f1:7e:2e:64:
                    63:40:c4:47:24:dc:9a:63:f3:eb:16:7d:9b:62:6d:
                    fe:a5:96:c4:14:ee:71:02:58:8b:c5:9b:96:59:8c:
                    a6:ee:ed:95:03:a9:82:5c:c2:2d:06:9a:5d:1c:4d:
                    0f:6f:d0:ff:d7:47:75:0c:ac:9b:a0:90:b7:e6:c5:
                    4e:01:e2:0f:5b:0f:56:3a:68:20:77:d5:ab:39:49:
                    81:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E7:53:25:E6:A4:51:4F:95:4B:3A:E0:F7:8B:D9:F4:1E:53:C5:D3
            X509v3 Authority Key Identifier:
                keyid:DC:07:7F:E7:F6:BB:50:74:B5:61:4D:8C:04:09:D1:A5:D5:D8:BB:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B96C4BB34F5CC2F723905B8343F2CDE4A5A7DB350EC2819E7E0EAF8BB51ED5E7/0/DC077FE7F6BB5074B5614D8C0409D1A5D5D8BBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC077FE7F6BB5074B5614D8C0409D1A5D5D8BBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B96C4BB34F5CC2F723905B8343F2CDE4A5A7DB350EC2819E7E0EAF8BB51ED5E7/0/34352e3137332e3132382e302f32322d3234203d3e20323637383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:fc:b5:e3:be:b1:43:a6:84:08:c6:1a:e9:18:65:69:30:cb:
         68:82:d7:33:c6:87:58:0e:97:78:e7:2a:6a:77:48:7f:2d:24:
         54:70:af:eb:9c:05:f8:cb:ba:32:ea:49:ef:38:0b:ba:32:8b:
         52:96:d7:20:5d:73:57:b8:6e:60:37:a8:b7:28:69:b4:d2:33:
         f4:50:b9:40:9c:5c:a6:e1:a9:07:3e:df:f8:7e:34:17:2b:75:
         92:e6:e0:81:60:16:d5:d6:4a:0a:73:bb:03:d5:34:53:d9:08:
         b6:73:1a:53:7a:9f:ef:3a:47:bb:68:21:7d:65:fa:d5:74:1f:
         ec:0b:19:96:cc:1c:4b:a7:59:06:b4:df:fa:fa:b7:f1:5f:94:
         0a:6c:4d:bb:87:af:12:92:58:f0:18:f4:6f:68:c1:33:39:16:
         a0:da:5d:89:31:1c:38:99:77:19:03:44:91:0e:5c:f1:3d:b1:
         e1:76:eb:c6:40:f7:bb:8d:71:91:09:9c:e1:12:ff:0d:03:50:
         5c:a2:fd:56:a5:26:97:05:92:8a:02:aa:eb:9e:61:95:40:be:
         cd:f1:03:2b:04:0b:7f:d0:65:b2:b1:c1:c9:c9:4b:6b:12:34:
         69:f5:47:37:55:a0:a9:a0:3c:bc:46:69:56:a8:76:b1:c3:28:
         9a:a4:3c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:32:58 2026 by rpki-client