Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/34352e3137342e3137342e302f32332d3234203d3e203238343335.roa
File:                     34352e3137342e3137342e302f32332d3234203d3e203238343335.roa (raw, json)
Hash identifier:          +RcfrfcaeikVb611JA51x12pk6uBVkFRKp20GXdIK6o=
Subject key identifier:   AB:88:81:34:F6:C8:DA:9C:EE:71:C7:23:1D:CC:E1:DA:AD:B3:F2:9F
Certificate issuer:       /CN=FA40F4074261959953C6B11359AE13D2C4B837D3
Certificate serial:       23FCD0A7C5597FEABBD105B4EB8B9FB3DE78A188
Authority key identifier: FA:40:F4:07:42:61:95:99:53:C6:B1:13:59:AE:13:D2:C4:B8:37:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA40F4074261959953C6B11359AE13D2C4B837D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/34352e3137342e3137342e302f32332d3234203d3e203238343335.roa
Signing time:             Mon 05 Oct 2026 18:38:47 +0000
ROA not before:           Mon 05 Oct 2026 18:33:47 +0000
ROA not after:            Mon 04 Oct 2027 18:38:47 +0000
asID:                     28435
IP address blocks:        45.174.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA40F4074261959953C6B11359AE13D2C4B837D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:fc:d0:a7:c5:59:7f:ea:bb:d1:05:b4:eb:8b:9f:b3:de:78:a1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA40F4074261959953C6B11359AE13D2C4B837D3
        Validity
            Not Before: Oct  5 18:33:47 2026 GMT
            Not After : Oct  4 18:38:47 2027 GMT
        Subject: CN=AB888134F6C8DA9CEE71C7231DCCE1DAADB3F29F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:02:1e:c6:76:d7:7f:b0:59:72:f4:33:76:f2:
                    79:a6:84:10:03:ec:c4:2b:78:a9:07:b4:43:06:6e:
                    c5:8d:69:02:40:23:6c:5b:49:75:59:ac:cd:25:6c:
                    44:a4:ca:52:1f:00:a6:93:28:29:54:ed:84:e4:a5:
                    00:62:94:41:47:4f:90:f4:03:18:90:12:02:cd:aa:
                    d8:09:8f:61:6a:fe:20:42:40:bd:c9:82:17:88:65:
                    ca:21:b0:c0:75:be:c0:e6:64:66:1f:13:6c:42:3f:
                    e0:80:19:00:2d:ec:a8:60:ec:67:55:20:7c:1c:5c:
                    ab:9b:1b:ca:50:1c:b5:4d:ae:b2:22:0f:eb:2c:0d:
                    2e:7b:47:17:72:50:66:cb:96:c5:f7:b3:ad:37:ee:
                    58:07:fb:38:5e:1e:e9:e8:86:ec:4d:cd:0f:48:66:
                    f5:9f:f3:d9:a4:97:b1:66:85:e3:21:44:00:11:18:
                    91:03:b1:b5:a4:75:c6:2e:ba:7e:8d:ac:c1:32:5d:
                    1b:ce:a7:e1:13:d7:e5:ff:97:1b:74:93:ba:d9:7d:
                    da:74:c5:9a:a6:04:25:c1:d2:87:7a:79:a3:d1:0a:
                    7d:42:03:99:b8:2b:aa:c2:6e:74:b2:bb:d3:ff:39:
                    49:7e:03:9f:a8:39:02:43:76:50:4c:fe:3f:22:6a:
                    29:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:88:81:34:F6:C8:DA:9C:EE:71:C7:23:1D:CC:E1:DA:AD:B3:F2:9F
            X509v3 Authority Key Identifier:
                keyid:FA:40:F4:07:42:61:95:99:53:C6:B1:13:59:AE:13:D2:C4:B8:37:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA40F4074261959953C6B11359AE13D2C4B837D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/34352e3137342e3137342e302f32332d3234203d3e203238343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:14:a2:47:7d:b0:23:2d:6a:e1:4e:ef:b1:4f:02:df:0e:f1:
         68:9b:e7:d4:e8:ad:eb:de:d7:20:6c:c2:ab:82:0d:40:b0:5f:
         fc:75:c8:49:e5:aa:32:91:25:1a:11:b8:94:dd:8e:ba:ec:ac:
         50:49:35:8f:33:10:12:72:6c:35:2c:52:e8:61:27:ba:a1:6e:
         0c:9a:61:69:77:25:7b:cc:a3:dd:fe:cc:d1:59:0e:0f:3e:37:
         ee:93:38:b6:49:81:76:6a:ba:bb:80:fc:fb:a7:dd:35:97:06:
         bf:a8:dd:b5:c0:ca:3c:91:ef:8a:0e:2c:01:60:a8:5f:67:7a:
         9e:dd:ac:fa:2f:b7:0a:9c:b1:f1:69:8e:33:ca:ee:7d:61:b6:
         52:fa:39:23:c5:15:6a:b2:f6:f2:16:09:eb:37:fe:c7:f6:94:
         9e:e9:8c:91:35:ce:f8:b4:fa:74:9b:e7:b7:9e:23:a4:9a:2f:
         a1:d3:b2:86:c0:9a:d5:1e:9f:6d:74:3b:ce:93:6a:87:16:e5:
         b6:17:c5:f1:b8:3e:d8:bc:66:37:2d:49:d5:d0:c8:a8:01:96:
         95:7a:93:a1:43:4e:72:e2:45:86:04:89:62:78:6f:30:02:df:
         18:79:7c:ab:4f:c5:fd:68:17:1f:d1:4a:c3:6c:f4:f1:10:53:
         f1:49:81:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:45:09 2026 by rpki-client