Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/34352e3138392e3137322e302f32332d3233203d3e20323639383630.roa
File:                     34352e3138392e3137322e302f32332d3233203d3e20323639383630.roa (raw, json)
Hash identifier:          AxElB5aediS4hPUqCo4ojm4dBrlYLXGQuMr4Zc/RjWI=
Subject key identifier:   2F:24:D8:68:E2:87:64:BE:FB:F4:3F:52:9A:3E:38:7C:50:3E:6B:53
Certificate issuer:       /CN=2A7D6F434E1C14422868C8C6E751B64D72719220
Certificate serial:       6B37D79B1CEE815550C198D99B4F9A19E76053E1
Authority key identifier: 2A:7D:6F:43:4E:1C:14:42:28:68:C8:C6:E7:51:B6:4D:72:71:92:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A7D6F434E1C14422868C8C6E751B64D72719220.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/34352e3138392e3137322e302f32332d3233203d3e20323639383630.roa
Signing time:             Sat 15 Aug 2026 21:25:00 +0000
ROA not before:           Sat 15 Aug 2026 21:20:00 +0000
ROA not after:            Sat 14 Aug 2027 21:25:00 +0000
asID:                     269860
IP address blocks:        45.189.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/2A7D6F434E1C14422868C8C6E751B64D72719220.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/2A7D6F434E1C14422868C8C6E751B64D72719220.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A7D6F434E1C14422868C8C6E751B64D72719220.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:37:d7:9b:1c:ee:81:55:50:c1:98:d9:9b:4f:9a:19:e7:60:53:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A7D6F434E1C14422868C8C6E751B64D72719220
        Validity
            Not Before: Aug 15 21:20:00 2026 GMT
            Not After : Aug 14 21:25:00 2027 GMT
        Subject: CN=2F24D868E28764BEFBF43F529A3E387C503E6B53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d4:86:6b:44:6f:e9:ad:23:04:6e:3e:c0:fb:
                    0d:0b:26:13:be:e8:a9:9f:f3:a4:79:d5:99:36:0f:
                    88:d5:a4:9d:6d:55:d8:04:88:e8:16:b8:98:27:92:
                    98:71:38:88:82:fc:2b:2f:f6:ae:67:c5:e1:68:14:
                    23:e6:db:58:4e:75:63:37:51:d3:c7:54:a7:49:80:
                    10:e4:a2:5d:df:57:6d:85:f6:2e:0d:df:06:3d:7f:
                    ec:26:7f:49:ef:a1:47:9e:01:0d:91:22:ba:56:46:
                    d4:2e:d3:d6:b0:2b:da:84:3c:1c:ea:97:e6:04:18:
                    33:a0:f2:cf:77:62:0b:ef:13:63:c0:f7:a2:f5:0f:
                    57:fd:2d:3b:85:b1:a3:6e:bc:b6:ee:7a:5e:56:f5:
                    b8:11:ad:98:c6:bb:53:12:9b:ea:71:65:f8:04:67:
                    71:78:c9:45:ee:a6:11:e3:e5:73:98:28:62:2a:b9:
                    10:a7:f2:a5:e3:fa:85:2a:c4:10:15:82:ee:67:d4:
                    fd:1f:1e:b7:c5:3f:18:99:a9:e4:61:67:af:a5:e6:
                    ee:70:25:81:71:ba:83:a6:9f:de:a1:76:26:c8:15:
                    ea:2c:9f:7a:05:be:cf:a8:a6:3b:69:8a:fb:f6:15:
                    42:3a:f3:a7:42:10:b4:b2:ca:a6:4f:15:8d:63:79:
                    66:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:24:D8:68:E2:87:64:BE:FB:F4:3F:52:9A:3E:38:7C:50:3E:6B:53
            X509v3 Authority Key Identifier:
                keyid:2A:7D:6F:43:4E:1C:14:42:28:68:C8:C6:E7:51:B6:4D:72:71:92:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/2A7D6F434E1C14422868C8C6E751B64D72719220.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A7D6F434E1C14422868C8C6E751B64D72719220.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/34352e3138392e3137322e302f32332d3233203d3e20323639383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:e1:1c:53:6e:c6:81:48:01:ce:52:8b:12:b1:97:c4:51:ca:
         fe:56:d9:40:a2:af:d6:2b:0c:c5:df:41:b6:5d:11:ca:4a:93:
         da:24:5e:3b:94:99:a4:fa:11:e5:7b:92:63:c4:85:2b:b3:b6:
         d1:de:d0:d4:ad:7c:8e:79:3d:f2:b1:f2:89:f9:19:bd:f5:f5:
         a6:7b:3a:05:ef:e2:44:47:2f:1d:0a:b8:8e:83:c0:53:8f:a7:
         08:35:c0:7f:ee:48:98:cf:2f:18:e8:b2:d9:eb:ed:28:cb:9b:
         8c:17:e0:8b:78:29:42:f0:a6:ae:77:44:eb:53:ad:70:0b:30:
         99:97:4a:d1:49:88:3a:88:60:33:6c:4c:c8:83:6d:99:63:ac:
         09:b3:8f:1b:0b:64:20:ab:a9:17:e5:0f:3c:7c:fe:f9:1e:be:
         e5:3a:3f:e5:26:4b:4b:68:75:ce:9d:45:ee:66:7e:91:e6:a9:
         57:5a:87:f5:fb:e1:6e:bc:29:2b:a6:d5:1a:d4:9b:28:cb:0e:
         8c:5d:f2:40:27:36:b4:34:45:88:c2:fd:55:97:05:c2:3f:56:
         70:a5:ec:dc:5a:dd:e9:ec:27:44:ba:62:e0:3f:92:07:9b:10:
         06:d4:05:ef:b3:79:75:c1:54:53:aa:53:d0:11:76:20:a0:35:
         03:a3:92:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:23:29 2026 by rpki-client