Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/34352e3137312e3130382e302f32342d3234203d3e20323637373738.roa
File:                     34352e3137312e3130382e302f32342d3234203d3e20323637373738.roa (raw, json)
Hash identifier:          HhD7OpC+FxhE2kT30A1lPKa5mgt4v8Mq5SMUOBgCX7o=
Subject key identifier:   5C:96:77:74:19:64:28:C1:C3:ED:34:08:96:56:53:4D:29:E4:12:4F
Certificate issuer:       /CN=6F511F1EFD0D671D1190C938CA5D7F2B6A911071
Certificate serial:       3AB52316D0D36201B0873277146B9253B82A7214
Authority key identifier: 6F:51:1F:1E:FD:0D:67:1D:11:90:C9:38:CA:5D:7F:2B:6A:91:10:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/34352e3137312e3130382e302f32342d3234203d3e20323637373738.roa
Signing time:             Fri 10 Apr 2026 23:00:00 +0000
ROA not before:           Fri 10 Apr 2026 22:55:00 +0000
ROA not after:            Fri 09 Apr 2027 23:00:00 +0000
asID:                     267778
IP address blocks:        45.171.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 02:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b5:23:16:d0:d3:62:01:b0:87:32:77:14:6b:92:53:b8:2a:72:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F511F1EFD0D671D1190C938CA5D7F2B6A911071
        Validity
            Not Before: Apr 10 22:55:00 2026 GMT
            Not After : Apr  9 23:00:00 2027 GMT
        Subject: CN=5C967774196428C1C3ED34089656534D29E4124F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:5e:2c:c0:ba:ca:52:3c:ce:57:eb:1f:32:2c:
                    5a:f9:a8:af:4d:03:33:fb:3e:2c:19:45:39:7c:83:
                    e5:1f:b1:69:cb:2b:30:47:d2:69:3d:79:06:f2:6e:
                    4b:36:88:af:c4:d9:01:a5:d0:ff:78:76:87:57:d5:
                    4b:4d:f4:ff:62:e6:8e:95:2f:9d:aa:b4:4d:6a:ee:
                    88:8d:45:2e:99:67:e3:e9:29:ad:95:01:97:7d:ea:
                    44:32:35:53:f4:bd:06:48:31:f6:ad:e3:a6:7b:bd:
                    ac:9c:a3:3e:8f:ac:e0:39:9d:5b:2a:c2:c7:65:d9:
                    30:13:60:45:9a:c3:58:08:01:d4:dd:ca:d7:64:a9:
                    76:0c:f3:2d:b0:3a:4a:b6:9d:21:b1:2e:75:db:46:
                    8a:b1:9e:dd:ee:b6:25:71:bb:dc:be:da:b6:43:73:
                    c2:a0:c2:51:07:ad:14:b1:c5:a2:01:c5:15:13:9f:
                    21:20:63:5d:28:77:ec:c1:57:fd:58:e4:e9:e8:19:
                    76:53:8e:48:a2:6b:6d:95:f5:9f:e4:6d:30:e7:72:
                    ef:5d:3b:63:a9:0e:e5:d9:f2:f9:9e:51:25:4c:d6:
                    63:ec:2c:36:c3:58:b2:2f:12:ed:2d:bf:c0:e7:21:
                    26:2b:5a:69:42:7b:cb:65:ea:a8:19:44:f9:c6:d0:
                    04:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:96:77:74:19:64:28:C1:C3:ED:34:08:96:56:53:4D:29:E4:12:4F
            X509v3 Authority Key Identifier:
                keyid:6F:51:1F:1E:FD:0D:67:1D:11:90:C9:38:CA:5D:7F:2B:6A:91:10:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/34352e3137312e3130382e302f32342d3234203d3e20323637373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:d7:ce:3d:15:f2:d6:7e:c7:c4:08:88:01:09:5e:66:cb:34:
         2c:08:3d:b1:31:48:04:5c:5c:60:67:15:05:9d:e2:79:60:a4:
         cc:b7:1e:4d:c2:32:f2:29:69:7c:f4:4d:94:a1:9c:78:45:2c:
         86:db:fb:a5:1a:ae:18:be:a4:26:41:70:c8:a5:fd:82:ce:df:
         6c:72:65:a5:ea:46:16:c6:78:95:fa:e5:a8:c9:62:0f:85:1e:
         6c:1f:cd:07:df:e6:e5:c0:28:74:44:13:ea:de:12:0b:5c:da:
         48:21:2d:53:cd:37:a6:7e:ca:fa:a9:4b:6f:56:ec:11:ad:73:
         0a:a8:e0:04:e8:0a:05:61:2a:de:9b:23:79:6c:08:d2:b2:03:
         6d:8e:c7:fe:00:92:e1:10:83:df:7a:c6:3a:33:2e:49:e5:0f:
         1c:fc:79:05:10:23:da:75:fc:8b:18:e6:29:4e:2f:b6:a4:ee:
         53:97:64:2f:85:c1:64:50:d0:76:51:50:09:a2:20:3e:27:12:
         be:58:79:5b:d7:6a:a3:d6:4e:60:d5:4a:19:38:7b:0a:2e:f3:
         88:43:1f:da:34:7d:29:2d:f5:29:59:86:64:ac:dd:6a:8b:90:
         39:08:a4:0d:94:6d:d4:6b:ac:da:f7:c1:ec:27:45:9b:c9:62:
         a6:1a:b0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:25:26 2026 by rpki-client