Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/34352e3137372e3137392e302f32342d3234203d3e20323732333538.roa
File:                     34352e3137372e3137392e302f32342d3234203d3e20323732333538.roa (raw, json)
Hash identifier:          AKOsiHRrFj6+fP0ZATZqWIvp4pE61XmJa0OsGwrgzK4=
Subject key identifier:   CB:94:26:AD:C3:CA:55:18:5B:56:07:CD:C3:32:9F:A0:B9:39:A2:C7
Certificate issuer:       /CN=1253F5565479B7C7B04A2795544458932EC06F6C
Certificate serial:       544C3F7E250E7BF0936CE31C3238F57242848DD1
Authority key identifier: 12:53:F5:56:54:79:B7:C7:B0:4A:27:95:54:44:58:93:2E:C0:6F:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1253F5565479B7C7B04A2795544458932EC06F6C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/34352e3137372e3137392e302f32342d3234203d3e20323732333538.roa
Signing time:             Sun 25 Oct 2026 04:00:00 +0000
ROA not before:           Sun 25 Oct 2026 03:55:00 +0000
ROA not after:            Sun 24 Oct 2027 04:00:00 +0000
asID:                     272358
IP address blocks:        45.177.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/1253F5565479B7C7B04A2795544458932EC06F6C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/1253F5565479B7C7B04A2795544458932EC06F6C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1253F5565479B7C7B04A2795544458932EC06F6C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 02:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:4c:3f:7e:25:0e:7b:f0:93:6c:e3:1c:32:38:f5:72:42:84:8d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1253F5565479B7C7B04A2795544458932EC06F6C
        Validity
            Not Before: Oct 25 03:55:00 2026 GMT
            Not After : Oct 24 04:00:00 2027 GMT
        Subject: CN=CB9426ADC3CA55185B5607CDC3329FA0B939A2C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:68:ad:4e:5a:d6:e7:ae:94:61:df:2f:d6:a9:
                    bf:8f:56:7c:af:da:56:09:73:1a:f8:01:6d:a4:b0:
                    47:fb:ce:5e:4b:37:4a:c1:e2:bb:24:94:9b:fd:d4:
                    aa:89:ac:bb:01:67:ae:9b:9e:ee:66:4a:83:a0:1c:
                    80:cd:15:16:75:c7:71:95:86:ed:35:82:ce:f2:73:
                    d9:2c:dd:17:15:b4:23:54:11:f9:78:c6:36:ff:a4:
                    b4:72:48:99:4c:9c:0f:8c:73:52:c6:cb:8b:99:0a:
                    c0:b8:4d:a1:ad:eb:bc:c2:8b:0b:ad:6d:b5:3c:e6:
                    3f:3a:0a:7b:46:fa:b1:c4:3b:02:41:f6:56:60:41:
                    a1:4c:3f:b3:19:e5:78:6d:4f:0c:41:c5:ba:85:db:
                    29:63:ed:57:44:d5:e5:4f:03:19:52:8e:e2:a3:05:
                    d9:42:ee:f4:32:75:59:a3:fb:0a:41:dc:c9:49:e8:
                    06:70:9b:01:6b:36:3e:0d:a3:bf:22:d6:1f:59:b8:
                    54:01:15:de:c9:fc:2c:fe:2d:6d:c0:88:f4:85:a5:
                    94:58:69:e1:b2:cb:e9:b7:be:69:ba:6b:18:5b:9f:
                    de:b2:cf:1b:96:6a:b8:31:43:09:bf:cd:ea:16:78:
                    b0:ca:cb:bb:e7:76:92:aa:b4:15:9a:2e:1e:35:9b:
                    2a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:94:26:AD:C3:CA:55:18:5B:56:07:CD:C3:32:9F:A0:B9:39:A2:C7
            X509v3 Authority Key Identifier:
                keyid:12:53:F5:56:54:79:B7:C7:B0:4A:27:95:54:44:58:93:2E:C0:6F:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/1253F5565479B7C7B04A2795544458932EC06F6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1253F5565479B7C7B04A2795544458932EC06F6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/34352e3137372e3137392e302f32342d3234203d3e20323732333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:a9:3e:57:a9:f1:0a:5c:ed:8d:ee:e3:03:be:90:64:c6:e7:
         52:0f:83:4d:98:3d:1f:53:2e:ab:9c:2c:3a:ee:4b:8c:5f:72:
         45:08:a6:90:dd:14:9d:e8:b6:07:29:78:6b:eb:e8:47:a9:aa:
         89:ef:84:43:62:4c:f5:72:41:e4:59:0b:5d:7f:c7:ce:12:f4:
         f6:26:29:de:7d:cf:46:a5:3b:0d:cf:77:c9:1b:dd:f6:14:d3:
         82:f1:4f:dc:17:46:9d:c0:2f:40:5d:f6:b7:3a:d1:b1:4b:29:
         f4:6f:d0:b3:6f:03:95:e4:ff:98:4e:85:bd:37:fc:72:08:9c:
         6b:be:46:56:19:fd:44:ab:0f:bf:6f:f6:25:27:83:45:40:9b:
         fe:c6:fe:8d:cd:26:5a:49:5b:7f:13:ee:c2:60:6b:7f:7f:41:
         94:83:d4:63:83:43:d2:ca:72:87:f2:3e:67:fc:0a:60:5f:cf:
         6e:b0:10:4e:3a:19:f9:62:21:f0:16:a7:e9:24:48:65:eb:59:
         ca:92:c7:01:01:e7:21:ad:c6:f0:45:d7:75:5f:d1:e6:0c:0c:
         60:ec:ef:0e:d9:c4:a4:12:ac:4a:02:37:7e:da:0c:17:4f:18:
         26:97:53:56:9e:32:df:84:1e:b0:87:2c:eb:01:04:c9:39:c3:
         67:59:53:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 09:18:22 2026 by rpki-client