Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7D0ED1A4CB85782782834785BD0E11E85A1631E8015F4ECAABF72A37025157D/0/34352e3137342e3136382e302f32322d3234203d3e20323635353739.roa
File:                     34352e3137342e3136382e302f32322d3234203d3e20323635353739.roa (raw, json)
Hash identifier:          KhZItT4f/buWiGnNGt8r/TqBcIHef1Q3/QlTBreKWlU=
Subject key identifier:   21:B8:BA:CC:F0:B6:B6:CB:08:B9:C1:DF:E8:A9:97:08:5D:08:8C:01
Certificate issuer:       /CN=B7D75EA1B657A15E2404774E73C664657087C7E8
Certificate serial:       536267F5701F2A0B9DD1580060D554A2F3A67D
Authority key identifier: B7:D7:5E:A1:B6:57:A1:5E:24:04:77:4E:73:C6:64:65:70:87:C7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7D75EA1B657A15E2404774E73C664657087C7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7D0ED1A4CB85782782834785BD0E11E85A1631E8015F4ECAABF72A37025157D/0/34352e3137342e3136382e302f32322d3234203d3e20323635353739.roa
Signing time:             Fri 06 Mar 2026 23:33:13 +0000
ROA not before:           Fri 06 Mar 2026 23:28:13 +0000
ROA not after:            Fri 05 Mar 2027 23:33:13 +0000
asID:                     265579
IP address blocks:        45.174.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7D0ED1A4CB85782782834785BD0E11E85A1631E8015F4ECAABF72A37025157D/0/B7D75EA1B657A15E2404774E73C664657087C7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7D0ED1A4CB85782782834785BD0E11E85A1631E8015F4ECAABF72A37025157D/0/B7D75EA1B657A15E2404774E73C664657087C7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7D75EA1B657A15E2404774E73C664657087C7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:62:67:f5:70:1f:2a:0b:9d:d1:58:00:60:d5:54:a2:f3:a6:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7D75EA1B657A15E2404774E73C664657087C7E8
        Validity
            Not Before: Mar  6 23:28:13 2026 GMT
            Not After : Mar  5 23:33:13 2027 GMT
        Subject: CN=21B8BACCF0B6B6CB08B9C1DFE8A997085D088C01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:d9:f6:20:2a:69:95:e2:91:c0:07:84:68:
                    09:ab:d7:e6:54:35:fc:ac:87:eb:71:54:a3:a5:e9:
                    b1:09:8c:a8:ff:53:97:5c:4c:98:c1:25:39:18:38:
                    d8:cc:b6:d0:42:77:d8:19:55:f4:fd:5e:59:cf:ba:
                    45:ee:64:09:ef:a5:c2:d3:f5:0d:a7:3b:62:dd:37:
                    53:99:7e:d6:18:33:0d:84:7c:b1:77:f7:27:dd:af:
                    a8:11:16:88:a4:50:1d:e0:17:7e:33:33:86:5c:4c:
                    a1:2d:02:6d:7f:bb:5e:0b:08:0d:25:dc:83:29:75:
                    a8:26:2a:cc:aa:a7:c1:6f:f6:c5:f8:f9:56:07:9a:
                    4d:f0:18:cd:62:ac:1e:b6:d3:e2:50:09:7f:99:3f:
                    b2:54:98:58:81:c6:97:6e:a6:90:d5:7a:43:e4:ce:
                    bb:d1:f2:49:ba:3b:2b:14:23:b2:07:6a:7f:32:0a:
                    c4:74:97:ab:73:bb:86:89:5a:2d:38:1b:9a:d0:4a:
                    fc:ba:bb:ba:f3:b9:89:d1:60:1d:76:5e:c9:4a:a1:
                    00:d4:6b:f2:56:e9:da:dd:b3:8c:73:d8:ff:c5:e8:
                    c7:44:74:dd:b1:ef:5c:6c:fe:d4:97:55:03:3d:8c:
                    62:ca:7f:33:cc:a3:bb:df:c4:bd:88:e2:b7:1a:52:
                    04:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B8:BA:CC:F0:B6:B6:CB:08:B9:C1:DF:E8:A9:97:08:5D:08:8C:01
            X509v3 Authority Key Identifier:
                keyid:B7:D7:5E:A1:B6:57:A1:5E:24:04:77:4E:73:C6:64:65:70:87:C7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7D0ED1A4CB85782782834785BD0E11E85A1631E8015F4ECAABF72A37025157D/0/B7D75EA1B657A15E2404774E73C664657087C7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7D75EA1B657A15E2404774E73C664657087C7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7D0ED1A4CB85782782834785BD0E11E85A1631E8015F4ECAABF72A37025157D/0/34352e3137342e3136382e302f32322d3234203d3e20323635353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:1e:b4:dc:0e:55:0a:b9:1e:3c:a6:6f:8a:1d:1d:dd:e6:42:
         7f:48:77:fa:64:19:45:f4:df:39:54:0c:28:51:9b:96:23:79:
         e1:26:95:9a:3e:58:0a:82:c5:c8:38:dc:23:d9:34:5b:8d:3d:
         1c:c3:a8:31:47:6d:16:81:2e:ad:d2:fc:9c:75:62:57:d0:f9:
         8e:cb:3f:85:1e:bb:5a:3c:de:59:8d:02:13:8b:77:66:1c:7b:
         d5:9e:32:19:5c:78:f3:5b:df:6f:29:df:ca:e9:fe:e5:f7:1e:
         e7:25:27:e0:4d:5d:ea:c5:01:e7:81:b5:11:f9:61:c2:99:29:
         ef:cb:e5:36:74:b9:8d:9a:cc:43:97:2c:71:27:c0:f9:a7:b2:
         e3:14:0e:2b:29:41:be:ae:59:40:ce:7d:3f:cf:70:78:5a:3e:
         56:23:05:44:74:e4:da:f9:93:dd:b7:2a:00:90:0d:39:09:f9:
         b7:79:fc:da:5b:ac:a9:e2:a2:48:d6:e5:db:96:8a:ec:c6:23:
         7c:8e:df:46:e9:00:a7:45:ee:71:b3:a4:67:a9:46:68:28:8a:
         17:fe:d4:67:9c:b8:74:2c:09:d8:ad:ef:20:3c:60:a6:dd:d7:
         22:9f:a3:ab:2f:10:e2:14:e1:1c:35:e0:24:91:ac:84:e0:0a:
         a5:a8:68:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 03:22:00 2026 by rpki-client