Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/34352e3137332e342e302f32342d3234203d3e20323632313931.roa
File:                     34352e3137332e342e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          /GXXy3l3t9HZqVDugA6jNvLZLYtmm2M7YaRhMBnTJog=
Subject key identifier:   B3:3B:03:BC:81:D3:45:7F:A1:74:15:0D:0F:67:58:8E:4F:F3:71:FA
Certificate issuer:       /CN=43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8
Certificate serial:       4DD8748834AB1EFFDAAE5F5E0763F49C06A699A1
Authority key identifier: 43:DD:90:FB:D3:6B:CA:09:CE:09:DC:8B:32:72:A6:9B:0F:97:D5:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/34352e3137332e342e302f32342d3234203d3e20323632313931.roa
Signing time:             Fri 04 Sep 2026 16:55:00 +0000
ROA not before:           Fri 04 Sep 2026 16:50:00 +0000
ROA not after:            Fri 03 Sep 2027 16:55:00 +0000
asID:                     262191
IP address blocks:        45.173.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d8:74:88:34:ab:1e:ff:da:ae:5f:5e:07:63:f4:9c:06:a6:99:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8
        Validity
            Not Before: Sep  4 16:50:00 2026 GMT
            Not After : Sep  3 16:55:00 2027 GMT
        Subject: CN=B33B03BC81D3457FA174150D0F67588E4FF371FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:ab:7a:34:02:0e:0c:23:94:76:9a:3a:b8:
                    50:98:8f:31:ae:54:69:64:44:07:8f:54:fa:95:02:
                    f6:a9:bc:2e:0f:cb:3b:6d:c8:e4:a4:e8:cb:38:66:
                    a4:e2:e4:c3:4d:d0:a7:46:f3:48:e9:23:30:f6:6a:
                    c3:f7:ca:d3:9f:d9:35:99:06:90:f2:8b:3a:dc:94:
                    7a:ee:9b:c2:b9:2e:d5:88:85:18:ea:dc:a0:64:1a:
                    c6:bc:af:09:6f:3c:99:2f:bf:9d:c4:41:9f:05:ee:
                    42:83:34:52:31:6c:68:dc:8b:c9:ff:09:fa:46:a3:
                    05:df:ba:9f:ba:94:5a:0f:3a:18:3d:1f:64:42:2d:
                    d3:e4:c5:58:cc:db:98:2a:0c:25:9b:08:f9:b3:ca:
                    af:00:ca:d2:cd:cd:c3:2e:1d:d3:2f:cb:28:c7:ca:
                    dd:f5:71:9d:2c:5e:35:ac:8b:07:44:96:02:9a:67:
                    be:f9:74:05:77:f4:24:65:f9:02:90:c9:e8:4d:8a:
                    a3:a3:d5:7c:15:d2:7e:38:a7:1f:4a:5b:3a:05:a7:
                    84:b6:f6:fd:ac:70:00:44:8b:1b:5e:ef:c1:87:89:
                    cd:f1:f4:fe:c2:f7:61:c7:7e:e7:b5:56:1b:65:67:
                    19:71:63:95:44:97:22:0e:26:68:00:57:79:be:7f:
                    c3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3B:03:BC:81:D3:45:7F:A1:74:15:0D:0F:67:58:8E:4F:F3:71:FA
            X509v3 Authority Key Identifier:
                keyid:43:DD:90:FB:D3:6B:CA:09:CE:09:DC:8B:32:72:A6:9B:0F:97:D5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/34352e3137332e342e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:e6:3f:4a:46:3a:20:e7:ba:c4:bc:3e:2c:95:aa:3a:90:e9:
         98:63:d7:f1:9e:74:53:34:2c:8f:b8:25:7f:2a:73:c6:a6:91:
         66:a3:92:4d:b9:61:61:34:00:96:34:d8:2f:70:a0:a6:b4:85:
         fe:db:86:27:39:80:95:51:93:22:9e:46:01:25:0b:61:fb:bf:
         9f:98:8a:57:7f:d3:bf:b8:3f:fe:3f:4f:92:23:f9:9b:d6:09:
         47:76:dd:21:33:d7:32:c6:53:ab:e2:4d:61:f8:46:b0:46:a8:
         e9:1c:8a:69:51:40:44:c7:ca:4c:29:f3:86:96:26:90:f3:80:
         80:0b:94:03:91:a6:51:80:fc:ec:05:09:57:e5:06:23:48:a6:
         c0:2d:9b:0c:f3:41:95:ed:11:d3:92:d9:6a:4f:3a:14:c1:5b:
         df:9a:45:fa:89:4d:3b:18:2e:01:47:c3:86:11:da:f8:2e:a8:
         e2:65:31:fe:60:f7:b9:a4:3c:e5:53:1f:b4:37:bd:ad:e2:3f:
         86:95:43:51:81:78:58:24:d8:57:1d:7f:0c:a3:e2:54:34:a5:
         ff:23:d2:ef:d3:91:5e:ae:e1:e2:a7:8a:8c:f7:30:ec:fd:4d:
         65:5d:fe:40:3a:98:a0:b4:9b:a1:b5:4e:1b:b7:c9:fe:17:b2:
         ae:b2:96:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 22:26:20 2026 by rpki-client