Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/34352e3233352e39392e302f32342d3332203d3e20323636373737.roa
File:                     34352e3233352e39392e302f32342d3332203d3e20323636373737.roa (raw, json)
Hash identifier:          /oDuNWplK16GeDyFQr1f5GW5TBQjkytUwA/KZalez+k=
Subject key identifier:   8C:6C:56:D1:82:6E:1D:9E:A6:72:CB:E4:17:ED:D4:11:78:07:1A:DA
Certificate issuer:       /CN=E99008F3C333627E9F8C6939370696F7049C22EB
Certificate serial:       574B52457C2C2D040DCFFCC338B239B5E4776896
Authority key identifier: E9:90:08:F3:C3:33:62:7E:9F:8C:69:39:37:06:96:F7:04:9C:22:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/34352e3233352e39392e302f32342d3332203d3e20323636373737.roa
Signing time:             Fri 17 Apr 2026 02:05:01 +0000
ROA not before:           Fri 17 Apr 2026 02:00:01 +0000
ROA not after:            Fri 16 Apr 2027 02:05:01 +0000
asID:                     266777
IP address blocks:        45.235.99.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4b:52:45:7c:2c:2d:04:0d:cf:fc:c3:38:b2:39:b5:e4:77:68:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E99008F3C333627E9F8C6939370696F7049C22EB
        Validity
            Not Before: Apr 17 02:00:01 2026 GMT
            Not After : Apr 16 02:05:01 2027 GMT
        Subject: CN=8C6C56D1826E1D9EA672CBE417EDD41178071ADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a4:0e:9b:ea:1a:be:8f:fb:c4:ff:1a:b8:34:
                    ee:73:78:f8:4b:97:23:1d:e0:20:ec:f5:d8:2c:63:
                    ad:c4:fb:03:71:93:d6:80:97:84:55:9d:3b:7c:62:
                    39:64:42:59:6a:c3:cf:a3:df:cf:3c:55:47:73:05:
                    e8:d9:ac:44:14:fc:96:6b:38:f7:1c:f2:52:53:69:
                    21:00:5c:b8:9f:ef:7c:c0:2a:75:05:3b:9e:20:a4:
                    0e:d4:e1:70:27:80:b0:a7:3a:38:60:87:e9:5c:59:
                    f7:52:70:fb:fd:81:0c:f9:4b:5c:c4:c7:a0:3f:ea:
                    f9:ac:24:dd:46:ee:d5:a7:2c:b5:be:fb:f7:e9:84:
                    d0:47:ab:ac:25:11:d8:18:ce:8e:9f:35:90:4b:fa:
                    6d:d7:7a:22:3c:6f:7d:66:42:1c:39:8b:72:c0:a7:
                    b8:a9:bc:7b:4c:54:04:ef:a2:18:74:92:76:80:64:
                    87:24:b9:ad:02:3d:a2:d6:b5:ce:1a:2f:d5:60:0b:
                    46:ae:fd:23:fe:81:a5:26:8c:70:48:a0:57:97:cb:
                    41:3e:6d:39:79:46:20:bd:17:77:68:63:1a:e8:f3:
                    76:da:22:b9:b3:10:7b:d3:5a:2e:0d:5e:df:43:e1:
                    ed:8b:2a:b2:61:ec:ca:e1:c5:c6:eb:40:b8:b7:a0:
                    ed:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6C:56:D1:82:6E:1D:9E:A6:72:CB:E4:17:ED:D4:11:78:07:1A:DA
            X509v3 Authority Key Identifier:
                keyid:E9:90:08:F3:C3:33:62:7E:9F:8C:69:39:37:06:96:F7:04:9C:22:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/34352e3233352e39392e302f32342d3332203d3e20323636373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:7d:bf:66:77:e3:24:25:3e:d2:00:a2:d7:75:91:e0:0d:88:
         af:5d:ba:b9:70:44:25:88:0e:59:07:20:e4:6f:b6:ea:e7:3f:
         11:bb:e6:2c:e9:19:d1:37:77:6b:f5:d4:42:2c:78:e3:6d:fc:
         ba:8f:ae:92:98:a5:b2:b7:30:f4:4f:af:17:49:f0:d3:5b:1e:
         36:ef:04:a2:fa:01:ba:43:d7:2c:1b:1c:d5:2a:4d:8e:5f:72:
         de:c6:92:cb:ee:bf:c4:ca:ad:13:93:27:2b:e8:e9:fe:d7:26:
         30:82:b9:82:0f:d3:e8:1c:2e:11:18:f7:7a:b1:62:08:fd:6f:
         8d:d8:c0:47:f3:b4:56:74:95:1d:75:10:dd:91:b7:e9:fd:78:
         1d:3c:7f:cd:96:35:a7:7c:ec:f5:b6:6c:da:16:d0:70:5a:b4:
         b7:0b:ba:54:7e:6c:50:c1:5f:5a:f0:af:ae:d7:90:4e:d2:3b:
         19:36:c5:8d:86:f3:4c:e5:91:2f:13:72:9f:7f:55:ac:f2:56:
         a5:d2:ed:a3:3c:6d:df:d0:54:e5:8f:65:e5:64:74:88:d6:d6:
         cc:3a:ed:45:67:ca:e8:a9:5e:6b:3d:85:f6:90:dd:bf:f5:2e:
         23:28:31:9e:0b:fa:e1:c1:de:8e:7f:12:98:57:72:59:46:fb:
         e8:4e:48:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:30:30 2026 by rpki-client