Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27D8C8490034D3FB51CF2396267B18A2138D1C66075122D4190AB5ED4C01D7EC/0/34352e3136342e3233382e302f32342d3234203d3e20323635353539.roa
File:                     34352e3136342e3233382e302f32342d3234203d3e20323635353539.roa (raw, json)
Hash identifier:          vFzSdI9Io/86Xq39FRwSeMSdKDfaImWNhiWJTkRGdT4=
Subject key identifier:   6D:78:06:A5:DA:2D:94:63:FE:CF:6F:FF:8D:91:7A:D3:BF:B9:30:28
Certificate issuer:       /CN=6CC2F3DAC2B04AE1FD97CA013DE5E8C75855B271
Certificate serial:       5960E037A023D06CA6555AC6298328787C45A08A
Authority key identifier: 6C:C2:F3:DA:C2:B0:4A:E1:FD:97:CA:01:3D:E5:E8:C7:58:55:B2:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CC2F3DAC2B04AE1FD97CA013DE5E8C75855B271.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27D8C8490034D3FB51CF2396267B18A2138D1C66075122D4190AB5ED4C01D7EC/0/34352e3136342e3233382e302f32342d3234203d3e20323635353539.roa
Signing time:             Thu 26 Feb 2026 17:25:00 +0000
ROA not before:           Thu 26 Feb 2026 17:20:00 +0000
ROA not after:            Thu 25 Feb 2027 17:25:00 +0000
asID:                     265559
IP address blocks:        45.164.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27D8C8490034D3FB51CF2396267B18A2138D1C66075122D4190AB5ED4C01D7EC/0/6CC2F3DAC2B04AE1FD97CA013DE5E8C75855B271.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27D8C8490034D3FB51CF2396267B18A2138D1C66075122D4190AB5ED4C01D7EC/0/6CC2F3DAC2B04AE1FD97CA013DE5E8C75855B271.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CC2F3DAC2B04AE1FD97CA013DE5E8C75855B271.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 03:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:60:e0:37:a0:23:d0:6c:a6:55:5a:c6:29:83:28:78:7c:45:a0:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CC2F3DAC2B04AE1FD97CA013DE5E8C75855B271
        Validity
            Not Before: Feb 26 17:20:00 2026 GMT
            Not After : Feb 25 17:25:00 2027 GMT
        Subject: CN=6D7806A5DA2D9463FECF6FFF8D917AD3BFB93028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5d:ef:2e:12:c1:2a:47:29:f5:57:4d:36:7b:
                    fd:6b:93:09:a0:e0:0b:12:07:08:d0:86:e9:fc:5c:
                    3c:a5:ba:3b:a5:ea:16:40:41:cc:be:66:6a:7a:88:
                    c4:90:dc:f0:99:f4:7b:25:7a:98:b5:7c:10:c6:8b:
                    be:34:ac:51:ef:c9:d6:9c:38:8b:66:52:29:b8:92:
                    96:d4:2d:13:ae:cd:81:96:08:eb:ab:c3:a6:1a:a6:
                    42:f3:50:95:7d:62:45:a9:86:3b:37:4c:b0:72:5d:
                    d9:4e:5a:eb:71:da:5f:ee:7a:e9:09:43:f6:ae:b6:
                    8b:49:31:39:9f:80:13:40:48:7a:59:e8:24:0e:06:
                    2b:ac:4d:1e:2a:64:3b:0e:60:1a:3e:a5:e7:17:61:
                    da:4d:a9:64:58:d6:50:02:ad:01:5f:18:22:14:fe:
                    d1:9c:19:46:33:72:97:38:25:74:a3:57:b8:4a:04:
                    52:7d:d1:80:36:26:28:db:bc:06:74:2c:80:10:cf:
                    22:d7:88:e0:aa:66:8c:d8:38:57:de:1a:37:13:5c:
                    ab:53:b5:93:80:90:c6:c1:37:7e:97:a0:02:39:c0:
                    37:62:34:8a:d4:53:88:3f:dc:bf:c6:6c:66:06:ba:
                    39:ba:f4:c5:e0:86:1f:c0:e6:76:8b:db:01:71:61:
                    af:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:78:06:A5:DA:2D:94:63:FE:CF:6F:FF:8D:91:7A:D3:BF:B9:30:28
            X509v3 Authority Key Identifier:
                keyid:6C:C2:F3:DA:C2:B0:4A:E1:FD:97:CA:01:3D:E5:E8:C7:58:55:B2:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27D8C8490034D3FB51CF2396267B18A2138D1C66075122D4190AB5ED4C01D7EC/0/6CC2F3DAC2B04AE1FD97CA013DE5E8C75855B271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CC2F3DAC2B04AE1FD97CA013DE5E8C75855B271.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27D8C8490034D3FB51CF2396267B18A2138D1C66075122D4190AB5ED4C01D7EC/0/34352e3136342e3233382e302f32342d3234203d3e20323635353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:e6:06:42:d0:ad:5b:39:07:b5:6f:28:a2:3f:1f:a8:8d:01:
         78:0e:76:5c:ec:d3:f6:4e:74:81:c5:b8:6e:fd:d7:63:a7:1b:
         0e:0b:16:85:12:10:0c:6e:6d:a0:76:41:ee:21:ce:c8:d3:a7:
         71:48:2c:c8:91:53:85:55:d9:cd:cf:5c:6a:44:6d:d6:c0:8a:
         e0:a6:69:2b:3c:eb:7b:09:60:27:45:fb:f3:5e:71:0f:a1:c2:
         8d:1c:93:cf:8b:ab:d6:5b:cd:05:39:c5:3c:96:6e:89:bc:53:
         3f:46:54:28:bf:14:9c:22:98:ae:ba:18:0e:64:e2:22:df:87:
         b2:cb:d4:d0:6f:71:3d:1c:d4:f1:ef:c0:f2:e1:d8:b7:bd:cb:
         fd:c2:11:1d:e5:ba:ee:27:5e:d6:db:f5:2f:9a:5c:43:6e:b8:
         ce:88:d5:7f:02:c9:b7:a3:5c:c3:b7:19:94:2b:3b:ff:f1:43:
         0f:16:20:dd:88:9e:d5:c4:f4:2e:d1:d4:cf:1e:8f:4b:27:bf:
         af:d6:99:c6:bf:2e:e2:ba:c6:df:76:ff:d7:7e:cb:e7:f4:16:
         f6:ad:2c:0c:04:34:a5:f3:b5:28:f0:fe:7e:53:54:8e:ef:34:
         b9:ce:b7:1c:18:6c:46:e7:9b:80:a3:41:89:5b:12:b9:18:1c:
         b5:58:50:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:10:49 2026 by rpki-client