Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/34352e3137342e35362e302f32342d3234203d3e20323730313837.roa
File:                     34352e3137342e35362e302f32342d3234203d3e20323730313837.roa (raw, json)
Hash identifier:          0d0cKsxU+MtYjhzwwqlUk9vex67RyoHTTHjY03O3i2c=
Subject key identifier:   36:C2:2F:8E:14:C6:8B:BE:A5:6E:DB:B5:F9:70:A8:8C:FF:EF:C9:D3
Certificate issuer:       /CN=BE4BDD707451C3727A95702AC4ECF246570ADB04
Certificate serial:       65446333EF10EF4CF7AA9EA950FD8091F00AB215
Authority key identifier: BE:4B:DD:70:74:51:C3:72:7A:95:70:2A:C4:EC:F2:46:57:0A:DB:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/34352e3137342e35362e302f32342d3234203d3e20323730313837.roa
Signing time:             Fri 04 Sep 2026 16:33:54 +0000
ROA not before:           Fri 04 Sep 2026 16:28:54 +0000
ROA not after:            Fri 03 Sep 2027 16:33:54 +0000
asID:                     270187
IP address blocks:        45.174.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:44:63:33:ef:10:ef:4c:f7:aa:9e:a9:50:fd:80:91:f0:0a:b2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE4BDD707451C3727A95702AC4ECF246570ADB04
        Validity
            Not Before: Sep  4 16:28:54 2026 GMT
            Not After : Sep  3 16:33:54 2027 GMT
        Subject: CN=36C22F8E14C68BBEA56EDBB5F970A88CFFEFC9D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:94:47:7d:b6:1f:6b:f8:5e:3c:75:53:f8:
                    00:a2:8e:94:cb:1f:81:d6:00:63:93:8d:33:60:0c:
                    ec:6b:8c:d0:2b:db:5b:31:b9:d8:ba:cb:41:57:e5:
                    be:8c:1a:98:47:aa:c8:9f:0f:72:aa:81:34:67:8c:
                    08:83:4a:9c:30:e2:a0:3b:af:68:2e:33:8b:1c:22:
                    b5:18:60:33:9c:6a:db:cc:19:9b:db:f9:cf:bc:37:
                    7c:74:55:6d:d4:14:56:0e:bc:2c:74:0e:f8:e2:be:
                    12:0f:9f:71:2c:f0:48:10:b1:68:53:1b:11:8c:36:
                    a3:d0:df:1d:cf:bb:05:67:dc:6a:74:78:be:c7:78:
                    ff:ca:bd:51:d2:56:ea:55:ec:1e:51:34:a9:8b:1c:
                    f0:4f:b1:38:cd:74:93:b6:86:21:79:4f:af:d3:81:
                    25:eb:c2:cb:fa:77:07:ef:e8:53:a1:09:e0:10:2e:
                    68:1d:0b:0f:e7:f9:89:35:e5:f1:03:8e:d7:48:02:
                    be:ce:72:03:22:44:d3:a6:eb:e1:0a:bb:db:67:e8:
                    7c:38:3a:24:0b:f4:46:98:49:ab:df:33:a6:2d:17:
                    a8:10:85:57:e1:70:53:a5:8d:6c:a7:93:c2:96:e2:
                    e9:93:bb:ff:0a:ea:02:25:d0:88:3a:bd:ee:78:b2:
                    e8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C2:2F:8E:14:C6:8B:BE:A5:6E:DB:B5:F9:70:A8:8C:FF:EF:C9:D3
            X509v3 Authority Key Identifier:
                keyid:BE:4B:DD:70:74:51:C3:72:7A:95:70:2A:C4:EC:F2:46:57:0A:DB:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/34352e3137342e35362e302f32342d3234203d3e20323730313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:c3:32:38:66:08:3f:16:10:1f:e2:e4:3b:6b:cb:e7:77:18:
         45:15:b6:3e:ca:a5:aa:fd:8b:6c:4e:e4:e1:cf:34:ba:3d:a6:
         ae:91:4f:1b:7d:fc:bd:3c:28:5d:a9:e2:00:00:e9:1d:04:91:
         4f:db:b1:49:e9:fa:47:ab:6a:66:30:48:ac:ee:58:a4:db:69:
         b5:23:b1:27:43:00:33:9a:6d:ea:0e:40:03:3c:7d:2d:65:be:
         d2:16:1c:f7:80:03:72:43:71:03:3a:83:f3:23:b2:3a:58:08:
         2b:80:cb:f5:f5:b1:8e:32:aa:db:e9:4b:de:71:55:f9:13:b5:
         51:81:ac:ea:90:e1:b0:13:cb:0c:24:73:13:2a:fe:18:57:86:
         3b:59:f8:10:5c:bd:c0:b8:8d:18:bd:bb:5b:e2:5c:cc:93:da:
         d6:ea:a6:5a:76:76:b8:77:ce:8c:fc:35:9e:aa:19:ad:76:e9:
         68:f3:5d:04:58:b7:e8:4d:22:3a:1c:4d:5e:d8:f5:e4:61:b0:
         bc:38:52:be:1c:a4:72:eb:fc:a0:88:df:f8:52:2b:d0:04:08:
         d8:a9:de:cc:e8:da:55:c9:cc:55:f8:99:2c:1b:07:3b:5b:4f:
         aa:4f:49:84:94:bb:c5:a9:b8:31:22:29:cb:65:b4:ca:60:45:
         66:44:50:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:42:43 2026 by rpki-client