Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2654899E3AEBC24ECCCB616D423DFC72FCA36F3D085B62709A16ECB0749B8362/0/34352e3138312e3132342e302f32322d3234203d3e20323639373332.roa
File:                     34352e3138312e3132342e302f32322d3234203d3e20323639373332.roa (raw, json)
Hash identifier:          Lt9DkeJtdnowBpI6UBKShcPxGRM5PyYdWID+fqYwEjU=
Subject key identifier:   73:C2:F5:2E:24:5A:3F:69:8B:7F:1E:40:26:07:C9:57:88:2F:39:CF
Certificate issuer:       /CN=7A76D5FEAA7561D126D8C20EB9D065AA9852B696
Certificate serial:       3FAFBC5285C39393C734CF202113BD407B735DB2
Authority key identifier: 7A:76:D5:FE:AA:75:61:D1:26:D8:C2:0E:B9:D0:65:AA:98:52:B6:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A76D5FEAA7561D126D8C20EB9D065AA9852B696.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2654899E3AEBC24ECCCB616D423DFC72FCA36F3D085B62709A16ECB0749B8362/0/34352e3138312e3132342e302f32322d3234203d3e20323639373332.roa
Signing time:             Fri 17 Apr 2026 07:39:15 +0000
ROA not before:           Fri 17 Apr 2026 07:34:15 +0000
ROA not after:            Fri 16 Apr 2027 07:39:15 +0000
asID:                     269732
IP address blocks:        45.181.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2654899E3AEBC24ECCCB616D423DFC72FCA36F3D085B62709A16ECB0749B8362/0/7A76D5FEAA7561D126D8C20EB9D065AA9852B696.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2654899E3AEBC24ECCCB616D423DFC72FCA36F3D085B62709A16ECB0749B8362/0/7A76D5FEAA7561D126D8C20EB9D065AA9852B696.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A76D5FEAA7561D126D8C20EB9D065AA9852B696.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:af:bc:52:85:c3:93:93:c7:34:cf:20:21:13:bd:40:7b:73:5d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A76D5FEAA7561D126D8C20EB9D065AA9852B696
        Validity
            Not Before: Apr 17 07:34:15 2026 GMT
            Not After : Apr 16 07:39:15 2027 GMT
        Subject: CN=73C2F52E245A3F698B7F1E402607C957882F39CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:74:b5:4c:d0:ba:8d:55:d3:57:78:2a:2c:6b:
                    78:48:45:fe:fd:ac:5a:39:9b:68:73:7f:2c:10:59:
                    62:c1:8b:cd:ff:c0:73:41:a5:43:7a:fe:7b:0d:fd:
                    ed:0e:6a:5d:90:de:84:34:85:a3:49:c0:f4:9f:43:
                    4d:ad:01:a5:39:1b:7c:6f:c0:9d:57:30:2e:c5:58:
                    53:c0:22:ae:86:8d:95:84:d4:b3:f1:5e:c9:9d:89:
                    7e:40:16:cf:f0:56:82:b0:0d:00:d3:22:64:e8:5c:
                    6f:85:43:07:f7:d2:77:09:b9:8b:ad:29:3b:31:ec:
                    0c:71:97:1d:e1:55:d6:1c:46:5a:20:7b:ae:b1:b7:
                    32:d5:66:59:99:2f:66:fe:28:a2:94:8c:f1:2d:8d:
                    85:fb:b4:ff:d3:64:4a:2d:20:c1:f2:53:44:00:68:
                    5c:c1:68:aa:96:fd:de:bc:63:f4:f5:42:45:75:2d:
                    e4:b6:b8:62:dd:21:a2:cc:07:5b:94:4b:2a:57:e8:
                    b0:4e:c5:53:22:63:8f:ee:44:da:c8:75:e2:36:42:
                    b3:6a:71:fb:86:e7:e4:df:c6:b6:23:dc:78:b6:51:
                    e6:c8:16:4c:5d:6a:3e:10:30:88:ae:9a:15:8c:4d:
                    c3:25:3f:c6:fb:f7:44:08:ba:88:41:15:7d:92:5e:
                    b5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C2:F5:2E:24:5A:3F:69:8B:7F:1E:40:26:07:C9:57:88:2F:39:CF
            X509v3 Authority Key Identifier:
                keyid:7A:76:D5:FE:AA:75:61:D1:26:D8:C2:0E:B9:D0:65:AA:98:52:B6:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2654899E3AEBC24ECCCB616D423DFC72FCA36F3D085B62709A16ECB0749B8362/0/7A76D5FEAA7561D126D8C20EB9D065AA9852B696.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A76D5FEAA7561D126D8C20EB9D065AA9852B696.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2654899E3AEBC24ECCCB616D423DFC72FCA36F3D085B62709A16ECB0749B8362/0/34352e3138312e3132342e302f32322d3234203d3e20323639373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:4b:33:bd:4b:74:87:bb:90:64:7a:fa:cf:fd:8b:79:0e:24:
         16:08:3b:f0:be:37:00:fe:75:d6:ad:b1:88:5c:06:a9:a2:eb:
         18:b5:21:d6:a2:1c:88:4d:e2:92:8a:6a:0b:1d:a3:7c:6c:64:
         ca:ef:e2:8b:e7:d1:7d:23:dc:af:ab:8c:ae:b3:83:ad:10:72:
         8e:08:51:58:38:75:07:33:ce:f7:f5:6b:44:33:1d:50:80:58:
         bc:b0:41:4b:53:12:52:b4:9f:7a:48:e3:28:ab:77:32:6b:64:
         10:67:4c:1d:38:4c:fd:97:cf:75:27:65:c7:b0:6a:fb:82:8c:
         2f:d1:ef:07:6b:37:bf:7c:44:91:62:2e:91:9b:86:e1:36:1a:
         55:cf:56:83:f4:d4:86:94:8d:ec:50:26:97:a9:dc:dc:ec:52:
         bb:06:6b:e5:be:6b:58:fc:bc:53:31:c5:28:c9:b8:5d:5c:ea:
         a3:be:e7:b6:1d:b1:df:a0:b1:d9:38:86:c1:55:8d:53:2a:d2:
         d0:14:50:5a:bd:dc:10:8f:42:05:7b:1d:f3:30:1b:c7:4c:9c:
         e7:2e:a9:e6:d3:1c:65:d2:0a:4d:f9:36:ae:22:0e:01:ec:07:
         55:7b:ac:a3:34:a1:9d:0e:bf:6d:dc:41:be:da:13:10:43:89:
         de:3c:c2:8d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUP6+8UoXDk5PHNM8gIRO9QHtzXbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0E3NkQ1RkVBQTc1NjFEMTI2RDhDMjBFQjlEMDY1QUE5
ODUyQjY5NjAeFw0yNjA0MTcwNzM0MTVaFw0yNzA0MTYwNzM5MTVaMDMxMTAvBgNV
BAMTKDczQzJGNTJFMjQ1QTNGNjk4QjdGMUU0MDI2MDdDOTU3ODgyRjM5Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2dLVM0LqNVdNXeCosa3hIRf79
rFo5m2hzfywQWWLBi83/wHNBpUN6/nsN/e0Oal2Q3oQ0haNJwPSfQ02tAaU5G3xv
wJ1XMC7FWFPAIq6GjZWE1LPxXsmdiX5AFs/wVoKwDQDTImToXG+FQwf30ncJuYut
KTsx7Axxlx3hVdYcRloge66xtzLVZlmZL2b+KKKUjPEtjYX7tP/TZEotIMHyU0QA
aFzBaKqW/d68Y/T1QkV1LeS2uGLdIaLMB1uUSypX6LBOxVMiY4/uRNrIdeI2QrNq
cfuG5+TfxrYj3Hi2UebIFkxdaj4QMIiumhWMTcMlP8b790QIuohBFX2SXrU3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUc8L1LiRaP2mLfx5AJgfJV4gvOc8wHwYDVR0j
BBgwFoAUenbV/qp1YdEm2MIOudBlqphStpYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNjU0ODk5RTNBRUJDMjRFQ0NDQjYxNkQ0MjNERkM3MkZD
QTM2RjNEMDg1QjYyNzA5QTE2RUNCMDc0OUI4MzYyLzAvN0E3NkQ1RkVBQTc1NjFE
MTI2RDhDMjBFQjlEMDY1QUE5ODUyQjY5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83QTc2RDVGRUFBNzU2MUQxMjZE
OEMyMEVCOUQwNjVBQTk4NTJCNjk2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjY1NDg5OUUzQUVCQzI0RUNDQ0I2MTZENDIzREZDNzJGQ0EzNkYzRDA4
NUI2MjcwOUExNkVDQjA3NDlCODM2Mi8wLzM0MzUyZTMxMzgzMTJlMzEzMjM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5MzczMzMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLbV8
MA0GCSqGSIb3DQEBCwUAA4IBAQDQSzO9S3SHu5BkevrP/Yt5DiQWCDvwvjcA/nXW
rbGIXAapousYtSHWohyITeKSimoLHaN8bGTK7+KL59F9I9yvq4yus4OtEHKOCFFY
OHUHM8739WtEMx1QgFi8sEFLUxJStJ96SOMoq3cya2QQZ0wdOEz9l891J2XHsGr7
gowv0e8Haze/fESRYi6Rm4bhNhpVz1aD9NSGlI3sUCaXqdzc7FK7BmvlvmtY/LxT
McUoybhdXOqjvue2HbHfoLHZOIbBVY1TKtLQFFBavdwQj0IFex3zMBvHTJznLqnm
0xxl0gpN+TauIg4B7AdVe6yjNKGdDr9t3EG+2hMQQ4nePMKN
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:45:09 2026 by rpki-client