Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/34352e3137332e34302e302f32322d3234203d3e203232393237.roa
File:                     34352e3137332e34302e302f32322d3234203d3e203232393237.roa (raw, json)
Hash identifier:          WUuNqRZ5GknU0A0KXNNtgmbnyMZnHt1f/cLmtK3W3i4=
Subject key identifier:   1F:19:62:AC:9E:E4:93:D9:11:30:AF:97:27:3E:D1:C0:C9:25:2D:0D
Certificate issuer:       /CN=F759E6E90D87109CB242AF1806550668309A19C8
Certificate serial:       0BF5C9BF48165FB9130CEB483360BE89CF21E29F
Authority key identifier: F7:59:E6:E9:0D:87:10:9C:B2:42:AF:18:06:55:06:68:30:9A:19:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F759E6E90D87109CB242AF1806550668309A19C8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/34352e3137332e34302e302f32322d3234203d3e203232393237.roa
Signing time:             Fri 13 Feb 2026 18:05:01 +0000
ROA not before:           Fri 13 Feb 2026 18:00:01 +0000
ROA not after:            Fri 12 Feb 2027 18:05:01 +0000
asID:                     22927
IP address blocks:        45.173.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/F759E6E90D87109CB242AF1806550668309A19C8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/F759E6E90D87109CB242AF1806550668309A19C8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F759E6E90D87109CB242AF1806550668309A19C8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 16:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f5:c9:bf:48:16:5f:b9:13:0c:eb:48:33:60:be:89:cf:21:e2:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F759E6E90D87109CB242AF1806550668309A19C8
        Validity
            Not Before: Feb 13 18:00:01 2026 GMT
            Not After : Feb 12 18:05:01 2027 GMT
        Subject: CN=1F1962AC9EE493D91130AF97273ED1C0C9252D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2e:57:cc:dd:5e:8a:e9:8a:07:6f:61:8a:79:
                    69:77:c5:09:d8:44:ff:8a:1f:c1:67:61:27:fd:be:
                    b8:a3:69:bd:64:d5:4b:64:74:fc:9d:3e:ac:06:65:
                    5e:34:cc:0d:51:a2:ca:48:71:e2:4d:a1:7e:88:ae:
                    c7:79:27:ac:63:01:40:a4:66:5d:d9:87:8b:68:dc:
                    2a:54:91:cd:51:6a:43:e7:82:bf:55:89:38:86:ac:
                    67:ce:99:90:74:66:9c:47:ad:db:98:dc:52:26:26:
                    d8:62:e0:4c:a5:86:86:ef:77:ae:84:49:e2:5c:96:
                    2e:7d:55:fe:7f:95:b8:17:e9:a1:36:57:83:e9:d3:
                    fc:c7:da:f2:13:76:98:df:d4:5d:ff:fc:0c:c6:87:
                    f7:d9:07:6d:2a:e8:56:b6:ce:59:4f:3f:f5:58:0a:
                    56:5d:c8:a8:94:22:e9:00:6c:ee:d2:2e:e3:48:27:
                    6e:21:b6:9b:f3:8e:f2:59:35:31:03:51:e1:1e:66:
                    f3:9e:80:71:48:e5:cd:42:ff:79:79:5f:ae:d0:78:
                    b6:df:99:e9:6b:cd:21:95:d6:e8:13:6c:76:3f:38:
                    b2:cd:84:e9:7b:49:97:b0:9c:c0:85:9e:be:12:94:
                    70:e8:35:c1:e3:2e:c7:ea:76:31:2b:5f:f8:f6:9a:
                    09:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:19:62:AC:9E:E4:93:D9:11:30:AF:97:27:3E:D1:C0:C9:25:2D:0D
            X509v3 Authority Key Identifier:
                keyid:F7:59:E6:E9:0D:87:10:9C:B2:42:AF:18:06:55:06:68:30:9A:19:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/F759E6E90D87109CB242AF1806550668309A19C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F759E6E90D87109CB242AF1806550668309A19C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/34352e3137332e34302e302f32322d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:0b:60:22:a9:2d:42:bc:a7:19:d2:de:4c:a3:cc:e9:7f:81:
         e6:63:ef:7f:c7:39:42:5e:86:86:e4:0c:9b:e0:90:10:65:fe:
         7e:da:82:1e:bc:09:e4:a2:cb:54:1c:fe:2d:68:25:3f:5a:31:
         07:51:e4:60:cb:0b:80:4a:e4:54:b9:c7:fb:d5:81:9c:89:fa:
         07:e5:b3:f4:c6:b8:d8:f2:81:b9:f7:e1:72:a9:50:33:a1:bb:
         ef:81:6a:05:f5:43:18:cb:cc:be:48:ca:ad:69:fc:58:c7:14:
         75:41:52:f6:09:98:c8:dd:0b:ff:43:5b:83:3a:01:eb:ae:70:
         bb:17:4e:ed:9f:70:96:5b:ac:7e:a1:c6:91:b0:c6:9e:88:51:
         7f:49:7b:27:1d:c3:8a:07:75:f5:9b:ee:33:73:13:0f:b2:3b:
         7a:26:27:7c:ca:05:9c:15:7a:36:48:ff:3b:4c:a8:fb:90:06:
         a7:1a:5e:36:17:c1:83:42:87:a1:07:e1:72:94:e7:84:02:da:
         97:39:45:67:d2:fe:c5:f1:76:fd:27:59:2b:4d:76:5b:81:47:
         c4:80:32:4a:6b:11:ad:33:db:1f:31:21:a8:6b:40:47:ef:27:
         dc:34:a2:29:59:95:28:b8:49:d6:17:7c:92:a2:5b:d5:26:a8:
         2e:ac:de:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:33:36 2026 by rpki-client