Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9215283AD502C6CA984EC67CBAA5E80070069BA760A375C42AC4728270A13F56/0/34352e3136372e32362e302f32332d3234203d3e20323637373238.roa
File:                     34352e3136372e32362e302f32332d3234203d3e20323637373238.roa (raw, json)
Hash identifier:          TYE4e/envIQjdkY4TCnr07/v/kjrTzhb9a6/bcf3d6g=
Subject key identifier:   60:1D:03:78:77:EC:51:C6:A7:0B:C1:91:A7:45:50:D6:F6:69:23:4C
Certificate issuer:       /CN=6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE
Certificate serial:       56B0B654EAC25EA8B846F1BF3F8F1E2837CC5514
Authority key identifier: 6D:27:CB:EB:D5:4C:DF:E9:38:A4:1D:20:BF:4B:B8:53:94:04:B0:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9215283AD502C6CA984EC67CBAA5E80070069BA760A375C42AC4728270A13F56/0/34352e3136372e32362e302f32332d3234203d3e20323637373238.roa
Signing time:             Thu 15 May 2025 19:05:00 +0000
ROA not before:           Thu 15 May 2025 19:00:00 +0000
ROA not after:            Thu 14 May 2026 19:05:00 +0000
asID:                     267728
IP address blocks:        45.167.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9215283AD502C6CA984EC67CBAA5E80070069BA760A375C42AC4728270A13F56/0/6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9215283AD502C6CA984EC67CBAA5E80070069BA760A375C42AC4728270A13F56/0/6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 11:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b0:b6:54:ea:c2:5e:a8:b8:46:f1:bf:3f:8f:1e:28:37:cc:55:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE
        Validity
            Not Before: May 15 19:00:00 2025 GMT
            Not After : May 14 19:05:00 2026 GMT
        Subject: CN=601D037877EC51C6A70BC191A74550D6F669234C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:92:ac:82:1d:01:0c:b5:f7:77:c8:f0:a0:17:
                    c4:5f:74:09:b4:8e:e4:9e:f2:02:1a:f3:44:3c:fd:
                    d6:49:9a:be:0a:0d:ea:2f:b3:ed:9c:41:dc:e4:36:
                    a5:6c:59:ef:9b:14:43:bb:e4:6a:44:07:b4:96:7e:
                    15:1e:81:92:f8:05:89:92:7b:dd:e7:b7:bd:ee:5d:
                    47:54:a4:c0:f3:92:17:8d:5b:d1:9d:35:7c:f7:47:
                    7f:2b:58:84:a9:39:96:44:4b:52:61:ec:93:49:d2:
                    9a:17:66:97:58:a4:df:37:b4:16:79:58:fb:0e:99:
                    8f:d7:20:1d:2e:60:25:8c:06:a2:32:19:cf:39:35:
                    44:df:2c:f1:3c:11:32:34:67:2e:62:bf:b9:cc:98:
                    ff:7d:64:7f:82:33:51:2b:e2:8f:a3:02:1b:92:02:
                    6a:ca:ba:84:52:51:3a:19:d9:ba:35:14:e5:eb:83:
                    11:57:52:5e:05:bc:13:21:cf:5e:99:84:72:0b:28:
                    f7:b9:a3:3a:4a:96:c1:31:42:16:2a:dd:f0:d0:95:
                    38:e5:58:c2:e0:5d:19:8d:e6:c5:7b:22:e8:78:bf:
                    cf:99:5d:33:1e:1c:51:3a:c0:54:fb:86:fb:24:f1:
                    c8:dd:0c:fe:a4:07:5c:f0:3d:6e:45:bf:a1:02:45:
                    d0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1D:03:78:77:EC:51:C6:A7:0B:C1:91:A7:45:50:D6:F6:69:23:4C
            X509v3 Authority Key Identifier:
                keyid:6D:27:CB:EB:D5:4C:DF:E9:38:A4:1D:20:BF:4B:B8:53:94:04:B0:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9215283AD502C6CA984EC67CBAA5E80070069BA760A375C42AC4728270A13F56/0/6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9215283AD502C6CA984EC67CBAA5E80070069BA760A375C42AC4728270A13F56/0/34352e3136372e32362e302f32332d3234203d3e20323637373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:f6:1d:a9:de:17:cb:3e:1f:e5:a7:e2:01:5f:5f:40:98:0f:
         e2:4d:ef:17:95:8c:d1:d0:71:a5:d4:ef:85:a8:4e:b9:cb:2f:
         f7:68:e0:51:4e:f1:50:ce:5d:2a:3f:ce:66:61:d0:0c:32:98:
         19:5f:b5:66:b6:2e:4d:3a:cd:31:44:75:d7:a4:e7:fb:be:07:
         44:8c:39:46:73:f4:8d:41:4e:83:18:42:58:b1:42:d5:50:64:
         68:a4:ca:80:d9:d8:1d:97:cc:de:3e:f2:b9:d6:b5:10:10:6c:
         f2:fb:7b:bb:e2:c0:aa:07:95:25:a4:ba:eb:6c:01:b1:1c:ec:
         91:ae:0f:a4:6e:e3:d0:23:9c:7e:8b:79:22:a3:60:80:98:84:
         6a:df:02:cf:f2:89:3b:c2:a1:43:9b:c8:1e:b3:60:db:12:d3:
         46:6f:e6:f6:f1:99:47:e6:32:20:74:e1:f6:e5:8d:e8:af:96:
         9e:a3:6e:a5:a5:f7:d7:69:ae:a9:70:3e:24:ac:bc:95:c4:7e:
         bb:e9:cb:99:c2:f9:71:24:b6:6e:f1:70:7a:43:3d:66:6b:bd:
         bf:2d:82:61:92:f9:57:40:a0:cf:3b:5c:58:ea:4d:ef:8f:0f:
         08:8e:1a:b9:4f:b6:08:2b:ae:6d:10:d6:4b:e9:a5:bf:ce:9b:
         2d:6f:39:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 10:48:39 2025 by rpki-client