Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/34352e3137312e3131302e302f32332d3234203d3e20323637373738.roa
File:                     34352e3137312e3131302e302f32332d3234203d3e20323637373738.roa (raw, json)
Hash identifier:          zU3rmASTICTd8XdIhrfgQEY8VzNK3gIEL/2OqiHHLR4=
Subject key identifier:   00:68:08:14:DC:16:8A:5C:DB:26:45:A9:4C:B8:9E:94:7F:86:E8:08
Certificate issuer:       /CN=6F511F1EFD0D671D1190C938CA5D7F2B6A911071
Certificate serial:       6A7CE04C3C4F0F53F3090F35184E32140D313DEB
Authority key identifier: 6F:51:1F:1E:FD:0D:67:1D:11:90:C9:38:CA:5D:7F:2B:6A:91:10:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/34352e3137312e3131302e302f32332d3234203d3e20323637373738.roa
Signing time:             Fri 10 Apr 2026 23:00:00 +0000
ROA not before:           Fri 10 Apr 2026 22:55:00 +0000
ROA not after:            Fri 09 Apr 2027 23:00:00 +0000
asID:                     267778
IP address blocks:        45.171.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 02:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:7c:e0:4c:3c:4f:0f:53:f3:09:0f:35:18:4e:32:14:0d:31:3d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F511F1EFD0D671D1190C938CA5D7F2B6A911071
        Validity
            Not Before: Apr 10 22:55:00 2026 GMT
            Not After : Apr  9 23:00:00 2027 GMT
        Subject: CN=00680814DC168A5CDB2645A94CB89E947F86E808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9b:23:1d:6a:7c:9a:10:ae:7c:39:f5:b9:05:
                    06:84:86:19:8b:2d:a0:83:c9:d7:d5:17:ab:1b:e9:
                    08:8a:94:6c:90:ed:bb:42:7a:75:0a:b2:8a:87:bd:
                    9e:83:02:ec:3f:fe:d0:41:8a:f8:92:1c:e7:08:1c:
                    83:32:6b:13:a3:2e:68:1b:fb:72:f7:db:f2:5d:47:
                    af:fc:29:87:3f:0b:21:61:f7:58:34:53:92:86:25:
                    b7:ee:0f:bd:94:93:91:1c:e9:06:86:46:b0:39:5b:
                    39:17:cc:dc:29:c4:25:12:8d:6a:56:9a:a6:91:f0:
                    40:33:d0:d1:f9:cf:77:12:76:94:76:d3:de:52:5c:
                    ca:fa:1e:c6:88:5e:05:ba:7b:ca:83:8e:83:01:58:
                    d2:0b:8b:80:ae:1f:79:cd:3d:b5:6a:3b:91:5d:f2:
                    34:a9:83:11:0b:d0:7e:7d:7f:e4:7c:4c:32:36:36:
                    dc:27:e9:13:46:5d:29:3f:fc:5b:62:ab:60:c4:a4:
                    4f:ab:ed:cd:ea:98:8c:e0:10:e4:20:11:69:e7:a3:
                    af:22:1c:2a:4e:0b:1b:e7:0a:df:32:65:60:59:45:
                    dd:95:61:d8:4f:cf:00:3e:6d:39:21:2f:3c:18:ec:
                    1e:d0:5a:ce:b6:44:97:b1:a0:8c:de:98:16:63:8a:
                    72:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:68:08:14:DC:16:8A:5C:DB:26:45:A9:4C:B8:9E:94:7F:86:E8:08
            X509v3 Authority Key Identifier:
                keyid:6F:51:1F:1E:FD:0D:67:1D:11:90:C9:38:CA:5D:7F:2B:6A:91:10:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/34352e3137312e3131302e302f32332d3234203d3e20323637373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:87:e8:84:03:2e:a2:90:3a:a7:6d:6e:a1:73:69:16:ed:d5:
         17:f9:b1:ff:62:5e:fa:4a:47:ba:f2:79:48:87:6d:f1:77:9a:
         76:36:75:7e:a0:7c:73:db:53:7b:91:c2:f3:fa:98:9c:09:00:
         6d:b8:05:37:3d:c8:e3:11:c0:2a:aa:d2:0e:b2:64:7b:fa:23:
         a3:87:76:5b:c7:9f:68:27:0e:7f:f1:85:52:7c:11:45:84:68:
         15:ce:30:18:6e:1c:d8:f5:8c:62:28:41:4c:7b:d2:6d:76:5c:
         a8:b5:ff:b6:f6:88:a8:7e:aa:f7:46:7d:77:2f:e5:88:f4:49:
         98:a0:06:ed:cf:53:b6:8c:1e:43:a6:84:7b:31:24:4c:fc:ba:
         8b:39:24:05:44:4b:ad:c4:77:e0:0b:d7:55:e9:92:15:9b:65:
         0b:4a:79:a1:c6:e8:60:ec:d3:62:1c:90:41:23:75:8a:32:be:
         e7:14:bf:8b:19:e7:1e:01:04:78:aa:29:93:8a:f2:76:89:69:
         55:99:65:53:c1:76:f5:d1:90:1c:9a:20:90:43:0f:1f:05:2e:
         1f:00:05:b9:62:22:6a:eb:7b:36:94:4d:8b:71:6c:2c:48:76:
         75:67:20:79:7e:4e:6a:54:a8:0b:2b:ac:f9:c5:7a:dc:12:f1:
         81:0d:62:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:25:28 2026 by rpki-client