Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138322e302f32342d3234203d3e20323636373634.roa
File:                     34352e3233342e3138322e302f32342d3234203d3e20323636373634.roa (raw, json)
Hash identifier:          /RDop6HZQpdik2ZiM6w/dS9+oXgmIxeyMd8cwiiR9uc=
Subject key identifier:   63:BA:57:B2:AD:CE:0A:3A:CA:3F:1F:0F:B9:6F:0A:F3:56:05:0D:E3
Certificate issuer:       /CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
Certificate serial:       530373C91DC7FBFB00834074AE459B97F5B18380
Authority key identifier: CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138322e302f32342d3234203d3e20323636373634.roa
Signing time:             Tue 08 Sep 2026 16:34:34 +0000
ROA not before:           Tue 08 Sep 2026 16:29:34 +0000
ROA not after:            Tue 07 Sep 2027 16:34:34 +0000
asID:                     266764
IP address blocks:        45.234.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:03:73:c9:1d:c7:fb:fb:00:83:40:74:ae:45:9b:97:f5:b1:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
        Validity
            Not Before: Sep  8 16:29:34 2026 GMT
            Not After : Sep  7 16:34:34 2027 GMT
        Subject: CN=63BA57B2ADCE0A3ACA3F1F0FB96F0AF356050DE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b2:92:9c:b1:4f:16:17:54:21:c8:15:94:e6:
                    54:69:7c:35:bf:56:16:a4:ff:68:a0:f5:22:e1:7c:
                    4b:99:0e:c0:9f:05:a0:80:6a:70:ca:ff:f6:be:b2:
                    7d:f5:8f:b6:84:a9:b4:34:95:7e:a8:bc:b8:bf:79:
                    c3:db:e1:0a:79:99:f3:52:bd:5c:68:f1:81:6c:02:
                    c3:10:d0:72:bc:c7:a1:ee:36:c1:fa:3b:72:7d:f0:
                    5d:51:73:83:31:b5:ba:91:76:c9:2d:a7:2f:e9:05:
                    48:66:16:49:1d:cd:af:53:e4:11:0b:6a:a8:da:98:
                    0c:f9:39:53:8b:46:f4:e2:47:e9:14:e2:06:ed:8d:
                    73:fd:01:49:43:66:83:8d:2e:30:63:f9:01:1c:84:
                    b6:07:7f:fb:92:d9:18:95:2f:98:e2:3a:29:24:4d:
                    77:f1:62:d2:c3:de:f5:75:8d:4e:fa:a2:16:a0:64:
                    67:ae:3e:9a:a2:de:74:86:26:51:f4:ed:b8:b7:33:
                    b1:c2:d1:6c:10:29:d6:74:7d:bc:bb:74:07:47:21:
                    36:3c:31:e1:b8:64:5c:01:94:a2:26:44:db:2a:13:
                    8f:84:2d:9a:b2:80:20:39:81:04:52:77:ba:db:89:
                    ea:68:b8:85:a4:36:eb:bd:49:10:8b:e4:15:7f:d5:
                    f7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BA:57:B2:AD:CE:0A:3A:CA:3F:1F:0F:B9:6F:0A:F3:56:05:0D:E3
            X509v3 Authority Key Identifier:
                keyid:CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138322e302f32342d3234203d3e20323636373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:a8:07:38:5e:b5:a7:01:e0:39:8e:c6:4c:95:af:24:2a:21:
         38:c4:f3:ee:5f:ed:6f:43:05:09:05:88:de:9d:65:15:48:b6:
         a3:9c:ee:7d:f6:aa:b7:d7:cd:cb:93:72:e3:ad:32:9e:9d:8b:
         65:28:34:31:5b:f2:3b:00:53:f9:1a:40:70:70:eb:02:ce:92:
         6f:4d:d5:39:e3:b3:27:1c:b4:78:4f:e0:cd:18:f2:70:a7:a8:
         44:13:3f:ad:57:02:b3:c0:bf:38:2a:f9:ec:0f:3f:b2:4c:63:
         6a:7f:86:6e:8a:15:dc:7e:b0:26:bf:99:59:7f:2a:26:cf:56:
         49:31:7e:76:7c:07:70:ce:eb:5a:89:cb:4f:36:97:1f:bf:ce:
         8a:62:e1:2f:1a:46:b2:ef:27:b4:33:28:6c:60:46:17:41:04:
         f9:e4:ae:e6:6f:4e:05:9b:e8:f4:75:54:d8:ad:3e:29:2a:be:
         44:31:81:29:f0:0f:62:ea:23:8f:16:49:51:aa:d2:86:d8:4b:
         e0:73:10:34:3b:34:20:1a:73:bf:b0:c8:1b:1c:1d:89:b1:79:
         89:16:18:69:53:62:f6:15:1e:4e:15:94:d7:4c:04:bd:8c:18:
         67:ff:fa:5b:a5:6f:84:25:9c:bd:8d:05:be:ed:4e:7a:6b:af:
         04:2d:71:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:49:11 2026 by rpki-client