Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68DA91592FEB715FD53390124536BFDC796D357976264DCA6D669049A17E8CF4/0/34352e3137342e37322e302f32342d3234203d3e203238343333.roa
File:                     34352e3137342e37322e302f32342d3234203d3e203238343333.roa (raw, json)
Hash identifier:          25d4lNo5eIGnofYBZ+x6xMIkIORDBj+/reFIeP5Szac=
Subject key identifier:   0D:76:63:0B:02:9D:3F:0F:85:F5:0B:E3:20:CF:37:05:01:66:79:EA
Certificate issuer:       /CN=261C8AAF6A1B0707AF99A373EBEBD85E3EF52BBC
Certificate serial:       0B34C8D347BE31ED8579B0857EA7C46DC3FF733C
Authority key identifier: 26:1C:8A:AF:6A:1B:07:07:AF:99:A3:73:EB:EB:D8:5E:3E:F5:2B:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/261C8AAF6A1B0707AF99A373EBEBD85E3EF52BBC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68DA91592FEB715FD53390124536BFDC796D357976264DCA6D669049A17E8CF4/0/34352e3137342e37322e302f32342d3234203d3e203238343333.roa
Signing time:             Fri 17 Apr 2026 19:45:01 +0000
ROA not before:           Fri 17 Apr 2026 19:40:01 +0000
ROA not after:            Fri 16 Apr 2027 19:45:01 +0000
asID:                     28433
IP address blocks:        45.174.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/68DA91592FEB715FD53390124536BFDC796D357976264DCA6D669049A17E8CF4/0/261C8AAF6A1B0707AF99A373EBEBD85E3EF52BBC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/68DA91592FEB715FD53390124536BFDC796D357976264DCA6D669049A17E8CF4/0/261C8AAF6A1B0707AF99A373EBEBD85E3EF52BBC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/261C8AAF6A1B0707AF99A373EBEBD85E3EF52BBC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:34:c8:d3:47:be:31:ed:85:79:b0:85:7e:a7:c4:6d:c3:ff:73:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=261C8AAF6A1B0707AF99A373EBEBD85E3EF52BBC
        Validity
            Not Before: Apr 17 19:40:01 2026 GMT
            Not After : Apr 16 19:45:01 2027 GMT
        Subject: CN=0D76630B029D3F0F85F50BE320CF3705016679EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:3f:73:27:f9:4b:8a:50:d6:e9:34:46:37:
                    b7:08:ca:01:4d:94:46:b8:24:1e:86:f3:fd:a3:1f:
                    bf:29:77:56:e6:17:f0:31:0f:6d:2d:16:24:c5:4f:
                    92:b6:52:bf:9e:91:dd:d1:62:67:6b:3b:32:ce:aa:
                    1c:4d:57:86:a6:f6:55:92:ba:18:73:37:6f:35:ad:
                    43:1f:20:39:e8:b3:29:66:55:d0:26:9e:6b:c5:c1:
                    7f:87:b0:a5:91:76:28:33:4c:44:f5:fd:29:8e:26:
                    2c:a6:9a:bb:0f:50:d3:50:98:75:73:ea:6e:ec:91:
                    f4:65:b3:b5:8f:78:06:11:72:f3:0a:30:11:76:69:
                    fc:7c:56:9f:bb:a6:c3:57:0d:ca:47:df:d2:b6:3f:
                    33:58:6c:fe:2e:ea:5b:79:5f:b9:2c:f8:e4:55:f8:
                    52:a1:3b:bd:8c:28:db:90:83:9a:73:0c:56:2f:25:
                    49:2d:7a:32:3f:ba:93:02:de:84:62:a5:9e:8e:d2:
                    cc:1d:26:7c:d4:eb:84:97:51:bc:a9:0d:d2:e0:1f:
                    ab:63:63:85:51:db:44:17:20:a3:82:57:93:03:e5:
                    63:1c:87:84:53:f5:1d:92:9e:99:20:a3:c5:6d:2c:
                    5b:7d:a0:14:3e:d7:5a:f0:ff:69:38:0e:62:dd:9a:
                    97:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:76:63:0B:02:9D:3F:0F:85:F5:0B:E3:20:CF:37:05:01:66:79:EA
            X509v3 Authority Key Identifier:
                keyid:26:1C:8A:AF:6A:1B:07:07:AF:99:A3:73:EB:EB:D8:5E:3E:F5:2B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68DA91592FEB715FD53390124536BFDC796D357976264DCA6D669049A17E8CF4/0/261C8AAF6A1B0707AF99A373EBEBD85E3EF52BBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/261C8AAF6A1B0707AF99A373EBEBD85E3EF52BBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68DA91592FEB715FD53390124536BFDC796D357976264DCA6D669049A17E8CF4/0/34352e3137342e37322e302f32342d3234203d3e203238343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:fa:1c:4b:74:aa:ed:2a:8a:2c:f5:65:0f:bf:27:be:16:a2:
         40:08:08:b1:59:04:58:3e:6d:2f:e8:6b:c4:8d:6d:57:36:3b:
         6f:3d:7f:f8:7d:c1:15:cf:1f:d7:e9:1a:73:06:21:42:87:98:
         7a:b0:57:00:5e:e1:94:a5:5b:98:15:bd:4a:a5:e4:ee:71:78:
         e9:04:67:33:19:6a:6b:0a:64:e1:5b:05:19:4c:02:2d:48:3b:
         5e:71:3b:ec:10:84:36:b0:50:80:a3:55:68:e2:30:1c:ab:ed:
         75:9e:83:aa:81:16:13:4d:b3:a2:b0:8b:09:84:77:19:06:4f:
         72:a1:01:3b:f7:57:78:79:f6:ec:62:a3:9d:ca:aa:af:95:4c:
         ee:02:9d:db:ad:15:14:ad:cd:c0:08:b3:79:40:03:dd:19:e2:
         64:4b:0c:ef:11:f3:df:8f:46:17:9b:09:b7:f0:bc:b4:6a:27:
         7a:34:3c:b9:43:f3:2c:fa:b5:42:17:46:2f:10:df:47:c4:c5:
         68:0d:59:c6:00:b2:14:a3:67:4e:60:00:1f:f8:45:6c:69:84:
         ab:91:c5:41:05:3f:84:ee:7f:59:f6:d8:d3:df:39:40:01:8d:
         c0:58:f0:8b:16:b0:83:21:7d:08:dd:94:0c:a1:42:c5:d9:d8:
         95:2a:b7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:06:53 2026 by rpki-client