Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6A1B01C5657F4244802DC7E5C56BE95679E6F08C62B1D013C13B2B2DB6606126/0/34352e3137352e36382e302f32322d3234203d3e20323637383338.roa
File:                     34352e3137352e36382e302f32322d3234203d3e20323637383338.roa (raw, json)
Hash identifier:          akpI3m6a55Lju/PYrVX65RRGXnlBAETPeYlFW8oKfnY=
Subject key identifier:   2D:2D:9B:FC:C6:3B:C2:8F:81:39:72:3D:9F:E5:97:6C:AC:4D:EC:9A
Certificate issuer:       /CN=58E54A3CA2F4B14501DE7D1E8CAD32125069A1EE
Certificate serial:       7703E1928BE00AF51DBEEF14AEBE88D6AB6CB490
Authority key identifier: 58:E5:4A:3C:A2:F4:B1:45:01:DE:7D:1E:8C:AD:32:12:50:69:A1:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/58E54A3CA2F4B14501DE7D1E8CAD32125069A1EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6A1B01C5657F4244802DC7E5C56BE95679E6F08C62B1D013C13B2B2DB6606126/0/34352e3137352e36382e302f32322d3234203d3e20323637383338.roa
Signing time:             Wed 15 Apr 2026 18:55:00 +0000
ROA not before:           Wed 15 Apr 2026 18:50:00 +0000
ROA not after:            Wed 14 Apr 2027 18:55:00 +0000
asID:                     267838
IP address blocks:        45.175.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6A1B01C5657F4244802DC7E5C56BE95679E6F08C62B1D013C13B2B2DB6606126/0/58E54A3CA2F4B14501DE7D1E8CAD32125069A1EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6A1B01C5657F4244802DC7E5C56BE95679E6F08C62B1D013C13B2B2DB6606126/0/58E54A3CA2F4B14501DE7D1E8CAD32125069A1EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/58E54A3CA2F4B14501DE7D1E8CAD32125069A1EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 20:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:03:e1:92:8b:e0:0a:f5:1d:be:ef:14:ae:be:88:d6:ab:6c:b4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58E54A3CA2F4B14501DE7D1E8CAD32125069A1EE
        Validity
            Not Before: Apr 15 18:50:00 2026 GMT
            Not After : Apr 14 18:55:00 2027 GMT
        Subject: CN=2D2D9BFCC63BC28F8139723D9FE5976CAC4DEC9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dd:08:72:b8:d2:15:f3:da:05:3c:1a:83:3a:
                    bd:ec:58:b7:80:58:e5:d1:1a:a1:83:b9:02:12:8f:
                    cc:a2:c8:ec:a5:ca:f3:7d:73:0d:1f:ad:d8:63:d4:
                    20:69:20:1c:18:56:45:a1:09:ce:5b:31:14:96:32:
                    29:ba:4d:5b:1d:7a:0e:cf:28:f4:a0:e9:b2:3d:3c:
                    7b:b4:9f:17:35:73:45:90:29:86:96:c9:7e:03:30:
                    99:af:ec:d1:54:b4:15:78:c0:b0:3b:e7:90:9f:ee:
                    93:a9:20:18:25:14:8d:39:dd:22:89:b5:50:ec:96:
                    6c:ea:5d:ce:66:41:7f:1a:88:94:fb:2c:02:84:45:
                    13:64:0d:a4:05:3b:bf:5f:30:f9:de:de:bc:45:69:
                    f8:6c:90:2b:86:ac:fe:de:dc:b6:be:b3:f1:a8:4b:
                    a8:7f:7e:55:34:9d:b7:b7:5e:24:1a:3f:d3:05:f7:
                    a7:ef:e8:c5:ac:51:ed:61:8f:04:1e:08:54:76:7b:
                    d4:1e:36:26:49:70:7c:f4:f5:2a:63:ef:ca:05:58:
                    bf:c8:f8:f9:02:6c:c0:53:9f:00:5d:62:47:37:2d:
                    d5:ad:03:0b:34:d8:b8:5d:70:4e:1f:14:9e:53:22:
                    34:89:41:a8:17:43:fb:bf:ea:5b:bd:d4:91:25:ef:
                    19:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2D:9B:FC:C6:3B:C2:8F:81:39:72:3D:9F:E5:97:6C:AC:4D:EC:9A
            X509v3 Authority Key Identifier:
                keyid:58:E5:4A:3C:A2:F4:B1:45:01:DE:7D:1E:8C:AD:32:12:50:69:A1:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6A1B01C5657F4244802DC7E5C56BE95679E6F08C62B1D013C13B2B2DB6606126/0/58E54A3CA2F4B14501DE7D1E8CAD32125069A1EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/58E54A3CA2F4B14501DE7D1E8CAD32125069A1EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6A1B01C5657F4244802DC7E5C56BE95679E6F08C62B1D013C13B2B2DB6606126/0/34352e3137352e36382e302f32322d3234203d3e20323637383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:5c:ea:4b:7e:2c:ac:c9:02:56:9f:1e:6d:60:31:e8:a2:e1:
         99:4c:af:43:f6:f3:2f:47:6c:64:22:b6:b8:05:10:29:f4:94:
         4a:1e:27:7b:c0:78:8b:83:25:dd:a8:1c:14:f7:73:a2:ad:95:
         a8:c6:c2:bb:d5:10:82:8f:b7:88:51:65:3e:1e:58:56:7e:ef:
         5f:70:2c:9e:00:30:42:91:85:1c:5d:b6:87:56:76:2c:59:92:
         75:28:9e:87:af:d8:7e:0c:a8:d6:c6:01:11:02:ef:89:95:7f:
         89:64:32:64:ef:1e:53:bf:9f:4b:b1:2d:96:8f:ba:15:cf:e5:
         ab:ae:32:44:21:25:e1:7c:2b:5e:f9:46:2b:bf:29:35:7b:80:
         de:f8:91:35:14:65:2a:76:df:95:58:48:b4:ff:22:5a:7d:1a:
         d8:4a:f4:95:58:21:7d:31:77:b7:d0:2c:c9:67:4e:c6:cf:bd:
         a0:28:c3:a8:93:cf:17:6f:b2:5d:8b:b4:de:98:92:6d:44:9b:
         30:c1:b3:75:ae:1c:7b:5f:9e:e3:5c:93:f2:ae:40:e4:a1:15:
         e2:51:6e:4e:1f:7a:53:0c:83:a5:df:c5:64:67:ef:76:00:fe:
         f5:c7:e1:1c:f7:28:f5:fd:df:72:9a:b4:79:58:4c:5d:6f:7e:
         df:c8:c8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:30:45 2026 by rpki-client