Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/34352e37312e33382e302f32342d3234203d3e203237393437.roa
File:                     34352e37312e33382e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          HGJ14TgY4mvjGHzE4IHemmEmV/8V9/vn0zMRtksjVYg=
Subject key identifier:   81:DB:8C:CD:83:36:74:F5:76:70:E4:2D:1A:E0:E8:47:74:FB:1A:92
Certificate issuer:       /CN=DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A
Certificate serial:       0BC5E69013673EBBF46E8F4AAC202C253D831E9B
Authority key identifier: DD:74:39:3A:EC:4E:41:A4:1C:6F:1F:D0:2E:0D:9D:28:06:ED:9D:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/34352e37312e33382e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 06 Jan 2026 19:31:30 +0000
ROA not before:           Tue 06 Jan 2026 19:26:30 +0000
ROA not after:            Tue 05 Jan 2027 19:31:30 +0000
asID:                     27947
IP address blocks:        45.71.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 20:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c5:e6:90:13:67:3e:bb:f4:6e:8f:4a:ac:20:2c:25:3d:83:1e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A
        Validity
            Not Before: Jan  6 19:26:30 2026 GMT
            Not After : Jan  5 19:31:30 2027 GMT
        Subject: CN=81DB8CCD833674F57670E42D1AE0E84774FB1A92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:c9:5b:8c:80:54:3a:c6:8b:d5:5d:60:d6:
                    e4:28:af:cc:d9:ce:76:dd:4e:5b:04:bd:1b:32:93:
                    b2:b9:58:01:e7:20:90:65:85:48:43:f4:50:34:09:
                    ca:5f:c1:c0:6c:ed:ae:59:71:85:c6:d7:cb:26:56:
                    65:43:07:68:cc:5c:b5:c1:c0:5a:4f:06:c3:91:76:
                    c1:e0:85:35:72:3b:f9:ba:d8:e4:c3:bd:d2:7b:53:
                    02:8e:9d:9e:a1:ac:e1:f4:2c:b4:16:78:5e:7d:44:
                    4f:82:b9:0e:a1:c5:85:6d:90:10:8e:bf:08:d7:ea:
                    8e:52:cb:1e:dc:07:70:83:c8:9b:2a:c6:aa:4f:0f:
                    23:df:95:46:73:d3:92:5a:72:fe:68:9b:ca:84:90:
                    63:45:0d:4f:17:18:62:96:3b:e7:9f:6a:ac:37:2a:
                    69:70:12:e3:20:5d:db:a5:58:7e:b6:0e:2a:fa:ab:
                    12:d7:ac:10:96:de:a1:88:31:ea:c3:1b:d2:04:1c:
                    64:16:10:20:70:69:34:db:c2:d2:54:11:d4:3a:6e:
                    4c:24:e0:03:a8:85:3c:6e:0b:32:06:ca:30:16:40:
                    db:23:af:f2:b3:ff:e4:e8:74:1a:4f:bd:11:48:ee:
                    bd:34:73:8b:1d:94:18:86:ed:59:01:8c:db:72:dc:
                    c4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DB:8C:CD:83:36:74:F5:76:70:E4:2D:1A:E0:E8:47:74:FB:1A:92
            X509v3 Authority Key Identifier:
                keyid:DD:74:39:3A:EC:4E:41:A4:1C:6F:1F:D0:2E:0D:9D:28:06:ED:9D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/34352e37312e33382e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:38:9a:19:b4:08:0b:20:91:cf:7e:5d:28:8b:71:89:f5:fb:
         c6:99:2f:26:6b:22:7a:1a:58:10:32:0c:e5:e5:da:b2:28:43:
         f0:f7:e9:7e:18:1b:6a:58:08:ad:08:75:55:59:a4:a8:57:89:
         97:cd:9a:d8:b9:a7:a1:74:08:e2:31:35:10:58:ff:41:18:4d:
         d2:2a:68:cd:e8:c2:c8:de:41:82:5a:d4:74:02:07:df:07:c2:
         60:01:31:40:55:55:07:77:4b:8d:7d:e2:46:d4:0b:3d:a5:8d:
         b0:ae:6f:af:7f:d2:04:94:a8:0e:88:eb:37:56:8f:dd:93:43:
         e4:cf:5e:cf:d0:76:78:7d:75:9e:ff:cd:08:9a:19:f4:97:e2:
         76:7f:5d:12:5e:af:50:35:68:2d:c5:3d:dd:9e:49:1a:d1:fd:
         7b:11:f9:75:69:e0:51:79:b0:e6:49:7f:81:7b:f0:73:a6:3a:
         7c:7c:9c:65:f0:83:73:c9:9b:ea:31:46:d3:48:32:d3:a0:bb:
         40:44:4e:58:0f:6d:43:60:c4:96:10:2c:c1:8d:88:e1:e8:4d:
         60:bc:5a:8b:6d:ec:67:e9:89:a0:47:7e:53:df:8a:cd:2a:74:
         f3:89:c4:1e:b9:55:8c:7e:34:2e:12:95:01:eb:30:5f:5d:63:
         e8:25:04:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:02:48 2026 by rpki-client