Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D154005DE7821B3936A446296E8BE8C460DADA66676AE615E23745535A096592/0/34352e3232362e3138302e302f32332d3234203d3e20323735383037.roa
File:                     34352e3232362e3138302e302f32332d3234203d3e20323735383037.roa (raw, json)
Hash identifier:          lSsDpRKkP+2iWpYXLCKIolzyWnlr9mmB+L5w82qeh30=
Subject key identifier:   7C:E3:D5:25:64:C5:E6:CF:7F:BC:F1:82:FF:81:51:0E:E2:C2:B8:7B
Certificate issuer:       /CN=FA415EFC42FB522E76AB038FDCC2FA3E428D052C
Certificate serial:       17CDEFCA476574B68DBE51F95DD260442DD6704E
Authority key identifier: FA:41:5E:FC:42:FB:52:2E:76:AB:03:8F:DC:C2:FA:3E:42:8D:05:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA415EFC42FB522E76AB038FDCC2FA3E428D052C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D154005DE7821B3936A446296E8BE8C460DADA66676AE615E23745535A096592/0/34352e3232362e3138302e302f32332d3234203d3e20323735383037.roa
Signing time:             Sat 25 Jul 2026 21:00:00 +0000
ROA not before:           Sat 25 Jul 2026 20:55:00 +0000
ROA not after:            Sat 24 Jul 2027 21:00:00 +0000
asID:                     275807
IP address blocks:        45.226.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D154005DE7821B3936A446296E8BE8C460DADA66676AE615E23745535A096592/0/FA415EFC42FB522E76AB038FDCC2FA3E428D052C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D154005DE7821B3936A446296E8BE8C460DADA66676AE615E23745535A096592/0/FA415EFC42FB522E76AB038FDCC2FA3E428D052C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA415EFC42FB522E76AB038FDCC2FA3E428D052C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Aug 2026 21:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:cd:ef:ca:47:65:74:b6:8d:be:51:f9:5d:d2:60:44:2d:d6:70:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA415EFC42FB522E76AB038FDCC2FA3E428D052C
        Validity
            Not Before: Jul 25 20:55:00 2026 GMT
            Not After : Jul 24 21:00:00 2027 GMT
        Subject: CN=7CE3D52564C5E6CF7FBCF182FF81510EE2C2B87B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c3:9f:79:f1:47:bb:4d:97:e5:cd:79:f6:80:
                    47:4a:26:2f:5d:b4:3b:b3:3e:44:44:ab:f9:28:ab:
                    0e:a5:e5:77:7a:0d:ba:cc:57:96:31:65:34:7e:f4:
                    46:55:a5:08:21:ba:84:93:b6:d9:a0:84:b6:a0:46:
                    84:6c:a7:e4:e3:3d:12:56:cc:cd:31:9b:5b:75:3f:
                    e9:91:af:81:6b:21:71:43:41:6c:cb:94:8a:b6:22:
                    b1:ee:ee:a6:fe:d1:86:f5:59:d2:f8:47:03:50:61:
                    dd:b7:ed:93:1e:80:fe:4f:57:52:b0:bf:74:f4:09:
                    94:65:1a:33:e1:7d:a6:56:8b:b8:94:d2:b1:2a:94:
                    c7:3a:7f:75:ea:0b:f6:9d:84:42:d0:47:a1:64:ec:
                    ef:c0:6b:93:75:8e:02:a6:51:3e:8e:c3:68:b1:54:
                    00:ce:8a:e1:3c:aa:62:73:5d:35:f8:28:8f:4d:89:
                    d2:5b:54:7f:20:eb:23:47:31:66:f0:f2:d4:f4:ee:
                    75:5b:ae:4e:97:93:04:fa:bf:1a:e7:f2:7f:e2:13:
                    f8:b0:5f:55:33:9e:42:2b:db:3b:70:b0:f9:ef:c4:
                    3c:87:79:23:23:00:e8:06:1b:f9:44:96:46:a7:31:
                    10:4e:1a:ab:60:82:ef:fd:a7:ff:99:fd:d6:e4:17:
                    68:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E3:D5:25:64:C5:E6:CF:7F:BC:F1:82:FF:81:51:0E:E2:C2:B8:7B
            X509v3 Authority Key Identifier:
                keyid:FA:41:5E:FC:42:FB:52:2E:76:AB:03:8F:DC:C2:FA:3E:42:8D:05:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D154005DE7821B3936A446296E8BE8C460DADA66676AE615E23745535A096592/0/FA415EFC42FB522E76AB038FDCC2FA3E428D052C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA415EFC42FB522E76AB038FDCC2FA3E428D052C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D154005DE7821B3936A446296E8BE8C460DADA66676AE615E23745535A096592/0/34352e3232362e3138302e302f32332d3234203d3e20323735383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:f2:63:87:b6:54:04:b8:90:9a:8c:9c:8e:58:b9:28:4e:af:
         b8:00:55:1f:f8:03:f9:95:ec:04:4a:08:41:10:c9:83:52:14:
         62:14:69:c8:48:04:3b:a1:11:9e:06:f2:b4:a6:15:0c:79:bb:
         de:2d:a8:08:3b:37:f0:af:07:64:0e:b9:f4:53:1b:cb:e4:f0:
         a0:2e:df:37:88:f8:65:88:37:1a:13:51:a8:2f:c0:3f:a7:81:
         e4:89:62:50:69:ff:67:51:3c:91:4c:6a:a1:a7:65:5c:c6:e4:
         7d:b2:a3:b2:10:28:97:77:d5:12:81:8f:09:06:63:3b:44:59:
         a4:1a:63:e1:8c:5c:57:19:34:19:8f:cd:e4:09:fb:1f:19:26:
         37:66:db:d4:7a:5b:99:c4:0d:f8:d0:37:7b:b3:88:6b:f3:74:
         8d:1d:ca:c8:0e:4c:30:39:20:27:07:b6:63:77:8a:c0:36:df:
         e6:0c:10:54:37:4b:96:30:f2:55:c9:59:02:b4:f4:b0:a3:b3:
         bf:10:f6:f6:6a:af:a6:7d:df:ad:4b:dd:f4:0c:11:38:1f:d2:
         6e:06:28:c2:27:ca:73:5b:bd:3d:3d:c8:58:73:0d:03:68:2b:
         97:7c:2b:86:50:c6:f1:a7:e9:03:a4:0f:fa:53:2f:15:4b:1b:
         5b:5c:96:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:08:02 2026 by rpki-client