Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/34352e3138392e3137332e302f32342d3234203d3e20323639383630.roa
File:                     34352e3138392e3137332e302f32342d3234203d3e20323639383630.roa (raw, json)
Hash identifier:          8XmtHKRStZxQFJnGeIoj2X+oPYPE+CUpgIZUIz87wX4=
Subject key identifier:   65:79:A4:F9:CE:4D:7D:C5:11:42:C4:E0:0A:AB:22:12:71:FF:DE:F9
Certificate issuer:       /CN=2A7D6F434E1C14422868C8C6E751B64D72719220
Certificate serial:       7E394059C8C25F4338CAB17E9043FDF08AA6DA63
Authority key identifier: 2A:7D:6F:43:4E:1C:14:42:28:68:C8:C6:E7:51:B6:4D:72:71:92:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A7D6F434E1C14422868C8C6E751B64D72719220.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/34352e3138392e3137332e302f32342d3234203d3e20323639383630.roa
Signing time:             Sat 15 Aug 2026 21:25:01 +0000
ROA not before:           Sat 15 Aug 2026 21:20:01 +0000
ROA not after:            Sat 14 Aug 2027 21:25:01 +0000
asID:                     269860
IP address blocks:        45.189.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/2A7D6F434E1C14422868C8C6E751B64D72719220.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/2A7D6F434E1C14422868C8C6E751B64D72719220.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A7D6F434E1C14422868C8C6E751B64D72719220.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:39:40:59:c8:c2:5f:43:38:ca:b1:7e:90:43:fd:f0:8a:a6:da:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A7D6F434E1C14422868C8C6E751B64D72719220
        Validity
            Not Before: Aug 15 21:20:01 2026 GMT
            Not After : Aug 14 21:25:01 2027 GMT
        Subject: CN=6579A4F9CE4D7DC51142C4E00AAB221271FFDEF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a6:65:0c:60:d7:7a:97:76:2d:c0:de:93:30:
                    dd:49:94:87:83:3d:d8:42:19:02:81:ea:85:97:8a:
                    0c:da:21:ac:39:95:c4:6b:94:68:59:ea:aa:72:e6:
                    41:95:41:64:a8:ad:8e:af:cb:5f:34:1a:1e:bc:8d:
                    ab:17:19:77:e7:f1:84:3b:71:08:a7:a1:39:7c:0d:
                    30:8d:88:f4:35:ee:0a:e3:55:b8:e3:ff:58:bd:2d:
                    73:95:19:1d:31:3b:a3:96:5e:4f:0a:44:05:33:81:
                    5f:ad:44:23:5d:1c:13:8c:34:b4:19:43:a5:12:57:
                    1d:02:44:6f:3d:55:57:f5:d4:18:35:ec:e1:c9:1c:
                    a0:25:5c:31:b5:f8:ff:23:83:9c:76:e1:87:bf:3d:
                    95:0e:b0:10:a2:b7:31:85:79:87:1b:91:f8:e7:9c:
                    ea:f5:c6:fa:fd:6a:9a:e9:81:a2:17:0d:83:0e:16:
                    e9:00:f0:48:b1:c6:00:32:b7:bd:6f:71:cc:5b:14:
                    50:61:4f:b9:7c:38:84:e3:fc:7d:e6:5d:d5:c7:4f:
                    e0:28:31:e8:6e:e5:fa:c7:00:e0:76:c1:e6:f6:86:
                    41:7f:f8:31:65:68:7d:16:c1:b5:05:5a:b8:3a:fc:
                    19:cb:5f:f8:52:6b:e2:61:8b:f8:a4:aa:10:f7:b5:
                    fc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:79:A4:F9:CE:4D:7D:C5:11:42:C4:E0:0A:AB:22:12:71:FF:DE:F9
            X509v3 Authority Key Identifier:
                keyid:2A:7D:6F:43:4E:1C:14:42:28:68:C8:C6:E7:51:B6:4D:72:71:92:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/2A7D6F434E1C14422868C8C6E751B64D72719220.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A7D6F434E1C14422868C8C6E751B64D72719220.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/34352e3138392e3137332e302f32342d3234203d3e20323639383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:f2:67:24:73:2e:09:44:45:dd:db:78:8d:84:04:1f:99:eb:
         c8:4f:b6:8f:7f:08:26:f4:45:ed:d7:2e:fe:c3:15:9f:1d:ae:
         17:d2:26:76:dd:b7:55:f5:e1:fa:7a:f9:76:4d:58:22:c9:02:
         17:87:66:91:43:1c:de:74:93:a7:a1:41:ac:2f:87:6c:0f:07:
         08:ee:59:49:f0:fb:e6:3c:e9:f0:f6:85:d1:77:e6:64:b6:b3:
         70:23:f5:76:0b:59:b4:cb:26:71:ad:d9:f3:a6:87:09:4e:19:
         ca:01:dc:03:27:72:a4:d6:05:dc:b5:95:5b:a2:28:a7:33:6f:
         2b:17:0f:7c:39:e6:5f:1c:32:20:07:73:b9:02:d5:d5:9d:75:
         80:fa:cc:a3:92:74:c8:23:29:1f:5c:fb:ff:d4:be:26:cd:77:
         d4:2a:7f:94:1e:38:17:ba:10:d0:7f:a7:6d:7d:5e:a3:9c:22:
         2b:95:66:4d:ca:38:06:6f:59:04:20:25:15:66:97:8c:5d:93:
         0a:fd:f0:3e:75:8e:c8:bb:f5:11:d4:ed:37:47:66:f3:db:db:
         93:55:03:d7:4e:3b:8c:a0:76:8b:96:f6:2d:72:6f:19:36:5f:
         d6:84:be:5a:97:45:ff:e2:8a:bf:a7:6a:82:70:e5:6d:8f:c2:
         5c:e5:c2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:23:32 2026 by rpki-client