Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68DA91592FEB715FD53390124536BFDC796D357976264DCA6D669049A17E8CF4/0/34352e3137342e37342e302f32342d3234203d3e203238343333.roa
File:                     34352e3137342e37342e302f32342d3234203d3e203238343333.roa (raw, json)
Hash identifier:          L5L9z8f/xGxUkKcqa6ENA0FOMpIN5N3OkaefEqy7o+w=
Subject key identifier:   92:70:77:7E:F7:EC:2E:59:D5:45:D8:4B:C8:26:D8:15:4E:91:D5:90
Certificate issuer:       /CN=261C8AAF6A1B0707AF99A373EBEBD85E3EF52BBC
Certificate serial:       167480250CFAA0C403EED7E8467A763EFDDD9518
Authority key identifier: 26:1C:8A:AF:6A:1B:07:07:AF:99:A3:73:EB:EB:D8:5E:3E:F5:2B:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/261C8AAF6A1B0707AF99A373EBEBD85E3EF52BBC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68DA91592FEB715FD53390124536BFDC796D357976264DCA6D669049A17E8CF4/0/34352e3137342e37342e302f32342d3234203d3e203238343333.roa
Signing time:             Fri 17 Apr 2026 19:45:00 +0000
ROA not before:           Fri 17 Apr 2026 19:40:00 +0000
ROA not after:            Fri 16 Apr 2027 19:45:00 +0000
asID:                     28433
IP address blocks:        45.174.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/68DA91592FEB715FD53390124536BFDC796D357976264DCA6D669049A17E8CF4/0/261C8AAF6A1B0707AF99A373EBEBD85E3EF52BBC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/68DA91592FEB715FD53390124536BFDC796D357976264DCA6D669049A17E8CF4/0/261C8AAF6A1B0707AF99A373EBEBD85E3EF52BBC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/261C8AAF6A1B0707AF99A373EBEBD85E3EF52BBC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:74:80:25:0c:fa:a0:c4:03:ee:d7:e8:46:7a:76:3e:fd:dd:95:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=261C8AAF6A1B0707AF99A373EBEBD85E3EF52BBC
        Validity
            Not Before: Apr 17 19:40:00 2026 GMT
            Not After : Apr 16 19:45:00 2027 GMT
        Subject: CN=9270777EF7EC2E59D545D84BC826D8154E91D590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a4:5d:ca:2d:f2:17:7c:43:3b:13:09:8f:a5:
                    bc:48:76:2c:3c:81:e8:6f:1f:ae:81:b4:11:75:06:
                    d2:a5:6c:ab:85:87:6b:c0:41:48:62:61:a3:85:f6:
                    07:47:65:44:61:0a:c6:53:37:d5:c9:04:03:96:5b:
                    93:6a:98:b4:1d:01:ae:4d:00:73:95:54:47:64:3e:
                    0d:22:cc:94:bd:d0:7c:83:2e:e3:6b:70:a2:72:99:
                    3c:2b:9f:49:2b:1d:37:7a:25:86:6e:87:37:c8:57:
                    e3:01:b6:af:41:1d:62:76:7c:c6:2d:83:b7:52:26:
                    91:c2:81:db:8d:85:aa:fc:7e:10:6f:cc:53:db:14:
                    65:0d:51:17:c8:0e:1a:27:dd:f5:ee:8b:21:a7:9d:
                    85:b2:1c:54:90:de:b6:f1:f2:f3:d6:0b:2b:17:43:
                    99:2f:a3:9f:e8:30:ad:a2:87:da:69:6b:5d:5d:4e:
                    cb:4d:c6:c7:ae:4f:6c:f3:21:10:62:c8:2f:3c:ad:
                    21:fc:49:68:dc:b1:7e:51:ca:b7:fd:12:12:dd:bc:
                    29:8f:ae:a4:81:77:fe:39:6a:49:03:5d:2b:18:5b:
                    44:71:47:df:df:12:98:c7:aa:6f:f7:b3:25:27:bd:
                    05:90:80:bf:35:d4:c8:78:e1:ec:97:85:72:5e:4e:
                    ce:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:70:77:7E:F7:EC:2E:59:D5:45:D8:4B:C8:26:D8:15:4E:91:D5:90
            X509v3 Authority Key Identifier:
                keyid:26:1C:8A:AF:6A:1B:07:07:AF:99:A3:73:EB:EB:D8:5E:3E:F5:2B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68DA91592FEB715FD53390124536BFDC796D357976264DCA6D669049A17E8CF4/0/261C8AAF6A1B0707AF99A373EBEBD85E3EF52BBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/261C8AAF6A1B0707AF99A373EBEBD85E3EF52BBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68DA91592FEB715FD53390124536BFDC796D357976264DCA6D669049A17E8CF4/0/34352e3137342e37342e302f32342d3234203d3e203238343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:85:d9:02:d2:9e:26:32:25:8b:91:c0:21:22:a0:14:1e:b7:
         35:ad:ee:c7:51:4e:fc:78:90:e9:cb:82:18:e9:26:eb:9f:ec:
         84:05:3e:db:2f:e9:8e:5a:3b:51:05:ed:1d:82:e1:63:be:c5:
         2e:3e:00:5f:84:21:f0:12:dd:7f:0a:4a:1c:42:20:8b:03:b0:
         bf:b2:c5:49:08:30:3f:fb:d5:e1:9a:ee:57:9a:66:d7:a5:3f:
         e9:e4:b6:87:9f:cb:e0:d3:e4:76:0e:b9:54:53:d3:6f:66:c9:
         2d:b3:af:07:59:cb:d9:8e:02:9a:24:10:5f:7d:bf:32:1e:3e:
         5a:fe:76:82:c1:32:9f:23:02:5f:6e:61:58:68:02:66:1b:07:
         83:a0:c2:86:9e:0c:d2:a8:e2:9b:07:b9:33:71:cc:c4:3c:33:
         9e:9d:79:03:8f:ed:29:20:e6:11:bd:e4:69:a3:44:29:1b:ee:
         6b:15:20:6c:ce:8d:db:93:3f:d3:b4:da:2f:06:a4:8c:a1:be:
         c2:79:8c:6c:aa:7b:d3:10:7f:f4:53:04:f0:d0:6b:74:8d:7c:
         3c:ee:02:08:8a:9a:0a:83:75:c4:ba:dc:7a:46:06:a5:68:6f:
         41:05:b5:07:4b:74:c6:95:9d:a0:d9:2a:a9:ce:a3:1a:08:d5:
         57:1c:0c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:06:57 2026 by rpki-client