Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/34352e3138392e3131372e302f32342d3234203d3e20323733313333.roa
File:                     34352e3138392e3131372e302f32342d3234203d3e20323733313333.roa (raw, json)
Hash identifier:          LE0ZUol/hvCFBCjUPS0b4Di4M/OWHUNVPPbyLudZxtw=
Subject key identifier:   3D:93:45:D9:70:B9:89:CE:E7:48:19:15:E3:FB:7E:23:EA:0C:E1:B2
Certificate issuer:       /CN=07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC
Certificate serial:       1D7E430C5FB5AAE06F42D72DE8334C9B34F0DBC1
Authority key identifier: 07:CC:AF:A3:BE:AB:3D:5E:20:F9:9F:25:E8:3A:28:8F:4B:4D:48:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/34352e3138392e3131372e302f32342d3234203d3e20323733313333.roa
Signing time:             Sat 11 Apr 2026 16:38:28 +0000
ROA not before:           Sat 11 Apr 2026 16:33:28 +0000
ROA not after:            Sat 10 Apr 2027 16:38:28 +0000
asID:                     273133
IP address blocks:        45.189.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7e:43:0c:5f:b5:aa:e0:6f:42:d7:2d:e8:33:4c:9b:34:f0:db:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC
        Validity
            Not Before: Apr 11 16:33:28 2026 GMT
            Not After : Apr 10 16:38:28 2027 GMT
        Subject: CN=3D9345D970B989CEE7481915E3FB7E23EA0CE1B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:58:a9:65:7b:c5:b7:65:75:aa:82:42:22:9a:
                    3f:53:17:68:27:8d:87:f9:65:ac:a4:88:be:f3:8e:
                    cf:c0:8b:ee:93:02:92:98:bd:61:93:f3:a9:90:e0:
                    ff:bc:c2:24:e0:2a:06:8a:8c:8a:0a:5f:65:86:0e:
                    61:45:1a:ff:0d:84:74:a8:a3:99:23:38:c2:a7:e4:
                    41:9b:83:b6:99:02:4c:88:46:56:ef:b6:6c:45:35:
                    0a:5e:5f:4e:43:b3:b0:9f:a1:da:c2:ce:96:08:be:
                    9b:ab:25:02:ba:e2:03:c7:64:dc:b4:43:0a:3d:d2:
                    14:69:1f:f9:01:50:bf:90:9b:7e:f0:20:ae:91:57:
                    84:3d:3d:f2:b0:e1:7b:d3:32:ce:e9:92:01:bc:c7:
                    ac:d9:88:db:e8:dd:3a:fa:dd:54:a2:81:f9:9f:1d:
                    7b:ba:7b:ee:b5:17:c1:02:6e:cf:92:8b:2d:25:97:
                    9c:59:37:76:52:c8:a6:87:8f:91:3c:5f:46:e1:e0:
                    3d:aa:14:1e:bb:f8:8e:e7:58:ef:d5:fe:61:c5:3b:
                    46:ff:77:42:39:ff:3d:e2:d8:d0:6f:c0:f1:06:59:
                    f3:85:e4:0c:b5:67:bf:39:16:6e:f2:6a:43:7a:6f:
                    81:1d:dc:ca:97:33:88:1d:cf:33:8f:25:a4:3d:bf:
                    ae:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:93:45:D9:70:B9:89:CE:E7:48:19:15:E3:FB:7E:23:EA:0C:E1:B2
            X509v3 Authority Key Identifier:
                keyid:07:CC:AF:A3:BE:AB:3D:5E:20:F9:9F:25:E8:3A:28:8F:4B:4D:48:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/34352e3138392e3131372e302f32342d3234203d3e20323733313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:85:40:51:bb:18:27:94:3b:1f:80:b4:ec:24:e8:8a:24:9e:
         51:fb:6b:58:6d:49:93:a2:8c:95:63:dd:43:e4:89:17:10:bf:
         62:6b:7c:d1:e1:7f:cd:33:c5:8e:b0:0a:ec:1b:62:83:1a:1d:
         19:b2:17:3a:b2:30:90:5d:80:d3:66:06:0a:60:32:99:17:e4:
         bc:19:82:e3:44:34:98:84:e2:99:da:a9:12:f5:21:4a:09:6c:
         64:d9:81:b2:58:de:29:a2:d5:bb:1f:c6:38:c9:45:f9:b0:eb:
         4a:b4:aa:24:18:c5:41:eb:06:e0:3c:75:a4:75:6e:66:d5:93:
         20:ab:71:04:fb:02:bc:ac:6a:01:44:8d:9f:c1:de:77:e8:b1:
         2a:2d:a8:4a:5f:2d:a5:a3:21:28:d5:0e:c0:81:ee:a5:f8:c8:
         9b:6f:58:c5:9c:f3:72:1f:c9:6d:7d:05:2e:4c:48:cc:f7:ce:
         8c:21:f6:32:9f:43:0a:5b:4a:0e:d1:3f:14:b6:95:1d:71:e7:
         6e:2d:d8:1f:34:3a:21:33:ac:d9:72:eb:f9:86:a4:4c:9f:07:
         71:01:f0:50:70:39:92:66:80:f3:fc:24:be:f2:d2:e9:98:2f:
         ed:ce:2f:1f:73:a6:9c:24:55:ef:04:f0:3d:cd:82:3b:bc:fd:
         7d:e7:2b:b0
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHX5DDF+1quBvQtct6DNMmzTw28EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdDQ0FGQTNCRUFCM0Q1RTIwRjk5RjI1RTgzQTI4OEY0
QjRENDhGQzAeFw0yNjA0MTExNjMzMjhaFw0yNzA0MTAxNjM4MjhaMDMxMTAvBgNV
BAMTKDNEOTM0NUQ5NzBCOTg5Q0VFNzQ4MTkxNUUzRkI3RTIzRUEwQ0UxQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmWKlle8W3ZXWqgkIimj9TF2gn
jYf5ZaykiL7zjs/Ai+6TApKYvWGT86mQ4P+8wiTgKgaKjIoKX2WGDmFFGv8NhHSo
o5kjOMKn5EGbg7aZAkyIRlbvtmxFNQpeX05Ds7CfodrCzpYIvpurJQK64gPHZNy0
Qwo90hRpH/kBUL+Qm37wIK6RV4Q9PfKw4XvTMs7pkgG8x6zZiNvo3Tr63VSigfmf
HXu6e+61F8ECbs+Siy0ll5xZN3ZSyKaHj5E8X0bh4D2qFB67+I7nWO/V/mHFO0b/
d0I5/z3i2NBvwPEGWfOF5Ay1Z785Fm7yakN6b4Ed3MqXM4gdzzOPJaQ9v64/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUPZNF2XC5ic7nSBkV4/t+I+oM4bIwHwYDVR0j
BBgwFoAUB8yvo76rPV4g+Z8l6Dooj0tNSPwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RUNFRTFFMTE1MkZBMDY3Q0FFODhCM0M1NTJENkQzMEY2
QUNDRDBFRkM3NjM2MTBFNkFBNzlFRkNGNDRCNkY3LzAvMDdDQ0FGQTNCRUFCM0Q1
RTIwRjk5RjI1RTgzQTI4OEY0QjRENDhGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wN0NDQUZBM0JFQUIzRDVFMjBG
OTlGMjVFODNBMjg4RjRCNEQ0OEZDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0VDRUUxRTExNTJGQTA2N0NBRTg4QjNDNTUyRDZEMzBGNkFDQ0QwRUZD
NzYzNjEwRTZBQTc5RUZDRjQ0QjZGNy8wLzM0MzUyZTMxMzgzOTJlMzEzMTM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzEzMzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALb11
MA0GCSqGSIb3DQEBCwUAA4IBAQAhhUBRuxgnlDsfgLTsJOiKJJ5R+2tYbUmTooyV
Y91D5IkXEL9ia3zR4X/NM8WOsArsG2KDGh0Zshc6sjCQXYDTZgYKYDKZF+S8GYLj
RDSYhOKZ2qkS9SFKCWxk2YGyWN4potW7H8Y4yUX5sOtKtKokGMVB6wbgPHWkdW5m
1ZMgq3EE+wK8rGoBRI2fwd536LEqLahKXy2loyEo1Q7Age6l+Mibb1jFnPNyH8lt
fQUuTEjM986MIfYyn0MKW0oO0T8UtpUdceduLdgfNDohM6zZcuv5hqRMnwdxAfBQ
cDmSZoDz/CS+8tLpmC/tzi8fc6acJFXvBPA9zYI7vP195yuw
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:12:34 2026 by rpki-client