Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/34352e3137362e3131382e302f32342d3234203d3e203634313339.roa
File:                     34352e3137362e3131382e302f32342d3234203d3e203634313339.roa (raw, json)
Hash identifier:          I2r2+x4xW0Shk2bjt8gyfabSAXsJn2q8h9HbphzV5Rs=
Subject key identifier:   57:08:CF:41:32:59:92:44:D0:9B:26:A4:15:B4:4D:1A:1E:9D:24:B2
Certificate issuer:       /CN=FF458BCF6CF40DFE3E43BC054BF5206905966427
Certificate serial:       7CA743A7778AA359A607162FA1E2A29701DDA90B
Authority key identifier: FF:45:8B:CF:6C:F4:0D:FE:3E:43:BC:05:4B:F5:20:69:05:96:64:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/34352e3137362e3131382e302f32342d3234203d3e203634313339.roa
Signing time:             Tue 06 Oct 2026 19:15:00 +0000
ROA not before:           Tue 06 Oct 2026 19:10:00 +0000
ROA not after:            Tue 05 Oct 2027 19:15:00 +0000
asID:                     64139
IP address blocks:        45.176.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 02:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a7:43:a7:77:8a:a3:59:a6:07:16:2f:a1:e2:a2:97:01:dd:a9:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF458BCF6CF40DFE3E43BC054BF5206905966427
        Validity
            Not Before: Oct  6 19:10:00 2026 GMT
            Not After : Oct  5 19:15:00 2027 GMT
        Subject: CN=5708CF4132599244D09B26A415B44D1A1E9D24B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:23:40:30:5e:c4:a8:08:52:48:46:5d:f4:21:
                    6e:74:31:6a:b1:a1:58:9b:38:2d:26:5c:d2:8e:3e:
                    b3:21:ba:d8:83:ea:21:9f:a4:39:05:f8:63:4f:6c:
                    3e:44:09:e3:b2:24:7b:3c:9e:cb:9d:83:e4:1f:de:
                    96:cf:fc:36:53:85:97:2b:13:10:ce:3d:4e:dd:b4:
                    7c:49:0b:b8:24:80:a3:00:3d:73:63:0e:8e:36:af:
                    83:96:1f:b0:12:73:ff:ad:13:86:fb:5d:be:3a:03:
                    cf:fc:61:13:20:8d:35:c1:87:08:98:c5:ce:90:61:
                    db:a7:9b:ba:08:12:2b:24:90:81:59:27:74:29:3c:
                    e1:5b:3d:17:ef:bf:64:e5:e3:27:17:bc:06:87:dd:
                    c7:be:2f:bd:38:be:88:64:97:e5:d1:12:d5:9e:31:
                    0d:50:00:2f:8d:11:a6:92:41:f9:35:69:73:d5:d3:
                    73:65:6b:d2:a5:7e:b9:46:4f:c5:86:59:5d:6f:c1:
                    0c:73:1c:57:87:1f:e0:87:08:85:a4:c3:00:32:c6:
                    e6:b5:5c:b1:46:77:aa:da:5c:28:dd:3a:41:22:0c:
                    8c:0c:51:48:5a:21:a2:8d:5f:23:26:98:9d:28:1b:
                    20:b2:66:79:4a:5b:7f:fa:ad:95:8d:5c:8a:72:9d:
                    3a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:08:CF:41:32:59:92:44:D0:9B:26:A4:15:B4:4D:1A:1E:9D:24:B2
            X509v3 Authority Key Identifier:
                keyid:FF:45:8B:CF:6C:F4:0D:FE:3E:43:BC:05:4B:F5:20:69:05:96:64:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/34352e3137362e3131382e302f32342d3234203d3e203634313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:7b:7c:43:1d:a4:16:9c:a9:9c:b8:e6:e9:74:17:23:2e:6a:
         35:f0:ca:2d:17:71:66:44:bb:84:74:42:94:cf:2a:1b:ca:c6:
         0a:e0:1e:47:5a:7d:41:68:8a:ea:79:98:1e:47:df:74:73:6a:
         aa:d3:f5:24:ec:1b:b9:22:54:ef:ed:3a:8b:03:7a:49:d7:d4:
         74:98:df:3a:be:ff:42:83:61:f0:15:1e:15:e1:45:66:4e:03:
         9f:93:49:c9:dd:75:01:a4:52:aa:ab:03:89:61:d1:b1:0b:03:
         da:81:48:c1:5f:94:62:09:df:88:27:0c:6e:3e:c9:60:eb:19:
         10:91:9c:f0:b6:66:c2:b6:3b:ea:22:04:9b:eb:c5:a5:b2:c4:
         a2:3e:9f:3c:9e:59:3c:35:2d:af:51:d1:2c:34:c3:07:4b:57:
         a6:11:05:cd:84:74:7a:cd:93:40:96:b1:cc:22:70:d6:b6:9b:
         ee:7c:c4:bb:32:a3:13:4e:fd:22:71:6d:23:13:54:59:f9:60:
         c7:7b:71:40:20:0b:b1:fc:62:4f:6a:de:57:65:53:f2:59:13:
         f6:71:cb:ba:fc:88:65:e0:25:fb:8e:4b:29:41:d2:9f:71:c9:
         e1:e4:4e:94:02:4e:ab:13:34:3c:a8:34:22:6a:42:ff:7a:28:
         70:c4:e6:a2
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfKdDp3eKo1mmBxYvoeKilwHdqQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY0NThCQ0Y2Q0Y0MERGRTNFNDNCQzA1NEJGNTIwNjkw
NTk2NjQyNzAeFw0yNjEwMDYxOTEwMDBaFw0yNzEwMDUxOTE1MDBaMDMxMTAvBgNV
BAMTKDU3MDhDRjQxMzI1OTkyNDREMDlCMjZBNDE1QjQ0RDFBMUU5RDI0QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUI0AwXsSoCFJIRl30IW50MWqx
oVibOC0mXNKOPrMhutiD6iGfpDkF+GNPbD5ECeOyJHs8nsudg+Qf3pbP/DZThZcr
ExDOPU7dtHxJC7gkgKMAPXNjDo42r4OWH7ASc/+tE4b7Xb46A8/8YRMgjTXBhwiY
xc6QYdunm7oIEiskkIFZJ3QpPOFbPRfvv2Tl4ycXvAaH3ce+L704vohkl+XREtWe
MQ1QAC+NEaaSQfk1aXPV03Nla9KlfrlGT8WGWV1vwQxzHFeHH+CHCIWkwwAyxua1
XLFGd6raXCjdOkEiDIwMUUhaIaKNXyMmmJ0oGyCyZnlKW3/6rZWNXIpynTphAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUVwjPQTJZkkTQmyakFbRNGh6dJLIwHwYDVR0j
BBgwFoAU/0WLz2z0Df4+Q7wFS/UgaQWWZCcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNzcxNjAzQjI2ODY5QTAwRjY2MTc1NEQxMDM3MjgzQUE4
Qjk2NTI0MUU4RkRFMjlDMUM4NTk0MkExMjNFRkE0LzAvRkY0NThCQ0Y2Q0Y0MERG
RTNFNDNCQzA1NEJGNTIwNjkwNTk2NjQyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRjQ1OEJDRjZDRjQwREZFM0U0
M0JDMDU0QkY1MjA2OTA1OTY2NDI3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzc3MTYwM0IyNjg2OUEwMEY2NjE3NTREMTAzNzI4M0FBOEI5NjUyNDFF
OEZERTI5QzFDODU5NDJBMTIzRUZBNC8wLzM0MzUyZTMxMzczNjJlMzEzMTM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzNDMxMzMzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2wdjAN
BgkqhkiG9w0BAQsFAAOCAQEAgXt8Qx2kFpypnLjm6XQXIy5qNfDKLRdxZkS7hHRC
lM8qG8rGCuAeR1p9QWiK6nmYHkffdHNqqtP1JOwbuSJU7+06iwN6SdfUdJjfOr7/
QoNh8BUeFeFFZk4Dn5NJyd11AaRSqqsDiWHRsQsD2oFIwV+UYgnfiCcMbj7JYOsZ
EJGc8LZmwrY76iIEm+vFpbLEoj6fPJ5ZPDUtr1HRLDTDB0tXphEFzYR0es2TQJax
zCJw1rab7nzEuzKjE079InFtIxNUWflgx3txQCALsfxiT2reV2VT8lkT9nHLuvyI
ZeAl+45LKUHSn3HJ4eROlAJOqxM0PKg0ImpC/3oocMTmog==
-----END CERTIFICATE-----
Generated at Sun Nov 1 09:23:01 2026 by rpki-client