Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/34352e3137372e3139372e302f32342d3234203d3e20323732383934.roa
File:                     34352e3137372e3139372e302f32342d3234203d3e20323732383934.roa (raw, json)
Hash identifier:          DR2zNTIBJN3RfqflWxpNuWIwst1qMfNyvJewONz0Mg4=
Subject key identifier:   02:D5:99:52:1A:DF:4E:DF:6F:9D:D7:B0:24:0A:42:D1:AF:A3:8C:DE
Certificate issuer:       /CN=7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC
Certificate serial:       791793C47ECDE00DA16B44BC9CDAC25A1AE32D9D
Authority key identifier: 78:78:D9:E9:08:D0:50:E8:D9:9E:54:CD:FD:B8:2E:6F:F4:5F:6B:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/34352e3137372e3139372e302f32342d3234203d3e20323732383934.roa
Signing time:             Fri 29 May 2026 20:10:01 +0000
ROA not before:           Fri 29 May 2026 20:05:01 +0000
ROA not after:            Fri 28 May 2027 20:10:01 +0000
asID:                     272894
IP address blocks:        45.177.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:17:93:c4:7e:cd:e0:0d:a1:6b:44:bc:9c:da:c2:5a:1a:e3:2d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC
        Validity
            Not Before: May 29 20:05:01 2026 GMT
            Not After : May 28 20:10:01 2027 GMT
        Subject: CN=02D599521ADF4EDF6F9DD7B0240A42D1AFA38CDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fb:b1:45:d7:71:64:34:d8:ab:42:90:a9:66:
                    1f:eb:28:a1:44:8e:26:91:a3:2b:63:f8:64:8f:db:
                    2e:95:78:fd:fe:28:cc:42:c7:8b:a9:ec:4f:5f:6e:
                    d9:59:20:94:b1:f5:f3:5b:df:f1:69:12:bf:c9:e6:
                    fb:4d:3f:f1:5b:30:99:26:70:47:f1:1a:bb:ea:19:
                    99:68:c6:05:94:d5:1b:b5:47:55:27:a9:8c:0a:94:
                    1d:2f:35:77:5a:41:22:ca:16:e1:95:57:13:47:78:
                    22:98:3e:7c:62:17:84:ef:83:5f:65:1b:73:e6:1f:
                    c4:01:46:49:73:da:4e:2a:43:58:33:70:59:7b:1c:
                    54:3b:fa:5c:d2:3f:e3:2d:43:9a:5d:bf:c9:76:74:
                    46:77:b8:75:2e:ef:c1:d6:87:25:72:b8:d8:04:ce:
                    af:f3:49:a4:e8:ad:b9:bc:69:14:e0:e3:f8:05:e6:
                    b9:13:5f:a7:e6:16:9c:b4:f1:8f:69:49:87:da:0a:
                    4b:b6:5d:05:f2:ec:9a:01:ab:6a:ec:0f:3e:37:22:
                    22:e3:ac:9c:e5:82:eb:8a:c6:53:75:59:ea:94:f4:
                    30:eb:93:20:0e:4a:2b:b1:8f:7a:93:9c:62:9f:47:
                    81:61:fc:a2:0f:23:05:6a:15:57:d7:c6:23:bf:eb:
                    18:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D5:99:52:1A:DF:4E:DF:6F:9D:D7:B0:24:0A:42:D1:AF:A3:8C:DE
            X509v3 Authority Key Identifier:
                keyid:78:78:D9:E9:08:D0:50:E8:D9:9E:54:CD:FD:B8:2E:6F:F4:5F:6B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7878D9E908D050E8D99E54CDFDB82E6FF45F6BBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B91DE8D176CC79E1C7248526469855511DC4E7E73A4A5B40DFF8E4B40F921004/0/34352e3137372e3139372e302f32342d3234203d3e20323732383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:ec:bf:75:b8:25:67:9e:96:d5:f6:39:5b:db:0a:aa:cb:f6:
         de:32:f5:23:0c:5d:81:b3:0c:2f:0a:34:b9:90:f6:09:28:fc:
         74:6d:e7:3e:a5:b6:33:ed:ac:cb:83:79:fe:31:98:1e:e0:55:
         e0:65:2d:34:ef:70:34:6e:d8:bf:2a:c8:24:ad:37:b0:13:f8:
         a8:2e:dc:5f:a7:10:97:8e:34:b2:a9:78:e7:79:ae:6c:a5:d8:
         7b:6e:02:e8:7f:e1:d2:1f:8b:d2:79:ac:d1:3b:83:47:f3:d4:
         82:e6:11:ba:9a:ca:4f:6c:77:40:88:22:56:82:a5:3d:e7:ea:
         1a:15:79:b3:dc:cc:45:3f:0d:17:80:0a:c8:8e:df:46:aa:88:
         18:7a:ef:4f:5e:12:86:d0:39:e5:79:ee:43:4e:41:f3:54:72:
         c9:91:a7:8d:29:10:35:c5:4b:fb:83:ff:85:83:eb:36:48:fc:
         e7:c5:e2:75:d0:46:e5:ef:31:c2:2e:8c:99:e9:c7:9f:c1:5c:
         8a:90:67:c0:b6:74:71:48:1c:60:90:e0:42:3a:6a:01:fc:0d:
         53:c3:a6:25:4b:60:48:a4:58:43:ca:24:76:e1:66:e9:46:c2:
         b6:52:1a:41:9b:89:b5:2b:01:49:f9:7b:7f:28:0f:ce:8d:51:
         2c:f3:cd:71
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUeReTxH7N4A2ha0S8nNrCWhrjLZ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg3OEQ5RTkwOEQwNTBFOEQ5OUU1NENERkRCODJFNkZG
NDVGNkJCQzAeFw0yNjA1MjkyMDA1MDFaFw0yNzA1MjgyMDEwMDFaMDMxMTAvBgNV
BAMTKDAyRDU5OTUyMUFERjRFREY2RjlERDdCMDI0MEE0MkQxQUZBMzhDREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn+7FF13FkNNirQpCpZh/rKKFE
jiaRoytj+GSP2y6VeP3+KMxCx4up7E9fbtlZIJSx9fNb3/FpEr/J5vtNP/FbMJkm
cEfxGrvqGZloxgWU1Ru1R1UnqYwKlB0vNXdaQSLKFuGVVxNHeCKYPnxiF4Tvg19l
G3PmH8QBRklz2k4qQ1gzcFl7HFQ7+lzSP+MtQ5pdv8l2dEZ3uHUu78HWhyVyuNgE
zq/zSaTorbm8aRTg4/gF5rkTX6fmFpy08Y9pSYfaCku2XQXy7JoBq2rsDz43IiLj
rJzlguuKxlN1WeqU9DDrkyAOSiuxj3qTnGKfR4Fh/KIPIwVqFVfXxiO/6xiTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUAtWZUhrfTt9vndewJApC0a+jjN4wHwYDVR0j
BBgwFoAUeHjZ6QjQUOjZnlTN/bgub/Rfa7wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9COTFERThEMTc2Q0M3OUUxQzcyNDg1MjY0Njk4NTU1MTFE
QzRFN0U3M0E0QTVCNDBERkY4RTRCNDBGOTIxMDA0LzAvNzg3OEQ5RTkwOEQwNTBF
OEQ5OUU1NENERkRCODJFNkZGNDVGNkJCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83ODc4RDlFOTA4RDA1MEU4RDk5
RTU0Q0RGREI4MkU2RkY0NUY2QkJDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjkxREU4RDE3NkNDNzlFMUM3MjQ4NTI2NDY5ODU1NTExREM0RTdFNzNB
NEE1QjQwREZGOEU0QjQwRjkyMTAwNC8wLzM0MzUyZTMxMzczNzJlMzEzOTM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzgzOTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALbHF
MA0GCSqGSIb3DQEBCwUAA4IBAQBz7L91uCVnnpbV9jlb2wqqy/beMvUjDF2Bswwv
CjS5kPYJKPx0bec+pbYz7azLg3n+MZge4FXgZS0073A0bti/KsgkrTewE/ioLtxf
pxCXjjSyqXjnea5spdh7bgLof+HSH4vSeazRO4NH89SC5hG6mspPbHdAiCJWgqU9
5+oaFXmz3MxFPw0XgArIjt9GqogYeu9PXhKG0Dnlee5DTkHzVHLJkaeNKRA1xUv7
g/+Fg+s2SPznxeJ10Ebl7zHCLoyZ6cefwVyKkGfAtnRxSBxgkOBCOmoB/A1Tw6Yl
S2BIpFhDyiR24WbpRsK2UhpBm4m1KwFJ+Xt/KA/OjVEs881x
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:13:02 2026 by rpki-client