Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3138382e302f32342d3234203d3e20313339323335.roa
File:                     34352e3137362e3138382e302f32342d3234203d3e20313339323335.roa (raw, json)
Hash identifier:          AFSjKVDElbg9ojNXMZhGFZoCfalvvmo5StsjRMdbK4I=
Subject key identifier:   5C:17:B8:B4:D3:DB:46:77:A6:11:6B:0E:17:96:7A:04:8A:34:91:E0
Certificate issuer:       /CN=94E9005D15C15058534566156E00BB03244C911D
Certificate serial:       0F1DE282F7752A71C951F35DA2D3E0D3355DA123
Authority key identifier: 94:E9:00:5D:15:C1:50:58:53:45:66:15:6E:00:BB:03:24:4C:91:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3138382e302f32342d3234203d3e20313339323335.roa
Signing time:             Thu 28 May 2026 01:20:00 +0000
ROA not before:           Thu 28 May 2026 01:15:00 +0000
ROA not after:            Thu 27 May 2027 01:20:00 +0000
asID:                     139235
IP address blocks:        45.176.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 02:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1d:e2:82:f7:75:2a:71:c9:51:f3:5d:a2:d3:e0:d3:35:5d:a1:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94E9005D15C15058534566156E00BB03244C911D
        Validity
            Not Before: May 28 01:15:00 2026 GMT
            Not After : May 27 01:20:00 2027 GMT
        Subject: CN=5C17B8B4D3DB4677A6116B0E17967A048A3491E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6d:b9:74:02:22:9a:e4:e4:30:29:20:94:f7:
                    7a:05:99:84:e1:35:23:32:d6:74:6e:f9:05:ec:a9:
                    e5:e7:26:a2:56:d2:65:3d:4c:fb:e5:2d:ff:de:81:
                    ef:e5:33:b3:b4:0c:47:88:ee:28:7e:4e:3e:1b:1f:
                    75:a1:8f:8c:d2:ae:5a:ae:3f:c0:5b:90:af:c8:da:
                    b9:45:24:f0:2d:c9:46:31:d0:a0:12:d0:e6:aa:91:
                    7a:8f:a8:f5:e4:65:6a:ee:b3:ec:98:6a:5a:49:cb:
                    b0:fe:f5:f6:f3:b8:c5:dc:70:41:a6:ad:b4:b6:41:
                    dd:b3:72:2c:99:2e:97:b6:88:67:07:01:c7:13:42:
                    23:19:d3:14:e5:c7:15:e6:3c:67:a7:a4:af:c1:fd:
                    d1:0a:dc:5b:de:ec:a8:a0:3e:a9:c4:62:47:d7:a9:
                    c8:96:c6:fb:79:34:bf:c3:c9:e7:81:67:93:3c:ce:
                    10:3f:19:b8:82:93:eb:0b:9b:6d:dc:54:8e:e8:ef:
                    a3:89:de:f5:3b:5e:5f:b8:d3:19:2e:ba:fd:79:e0:
                    a0:05:65:c6:ec:58:c6:43:91:c9:5f:c6:a8:7a:5b:
                    a2:d8:dd:25:a7:30:74:be:83:36:d3:15:5c:b9:3e:
                    6c:cf:22:14:2a:d0:23:f9:b7:6f:e1:08:83:1b:30:
                    c1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:17:B8:B4:D3:DB:46:77:A6:11:6B:0E:17:96:7A:04:8A:34:91:E0
            X509v3 Authority Key Identifier:
                keyid:94:E9:00:5D:15:C1:50:58:53:45:66:15:6E:00:BB:03:24:4C:91:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3138382e302f32342d3234203d3e20313339323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:f8:e6:3e:cf:2a:d3:dd:01:a4:ae:e6:64:7b:9b:33:b6:54:
         b5:2c:54:59:71:96:d6:78:a3:1f:0f:26:81:29:aa:ab:da:62:
         99:a1:37:80:14:4a:8f:c7:e6:4b:6b:fd:c3:7a:69:da:c4:54:
         c4:23:eb:b7:50:ba:32:48:3a:50:16:90:80:88:93:4d:e5:a0:
         a5:06:0e:f9:42:90:6c:35:a6:bf:ec:d0:cc:07:a2:e4:14:05:
         b2:9c:1d:63:dc:01:aa:49:cf:ae:3e:b6:80:2c:c3:de:06:42:
         6e:72:6d:57:e2:76:60:38:17:e4:04:71:34:73:7b:9e:5d:40:
         0d:4b:0d:95:81:6f:5f:ae:85:8f:ea:a4:b0:76:2c:79:34:3f:
         ae:b5:45:55:0b:68:f0:bc:f7:87:3e:bc:c2:ec:fb:bd:3b:8f:
         8d:cb:9e:ba:7b:86:88:6a:79:4b:45:9c:09:9d:9e:8b:71:1c:
         35:9e:29:b9:54:b6:ce:3a:b7:84:94:d1:a3:4c:3b:49:45:8a:
         38:31:8e:96:cb:1a:40:23:69:a4:af:c6:6b:90:93:92:2f:0b:
         0c:c4:8b:b0:75:bb:6d:45:1c:77:15:f4:41:fc:00:42:7b:ff:
         7f:08:bc:c8:c6:6a:26:4f:69:94:9c:de:26:fd:46:15:6a:0d:
         0a:c1:df:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:50:16 2026 by rpki-client