Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/34352e3137352e3133362e302f32342d3234203d3e20323733323233.roa
File:                     34352e3137352e3133362e302f32342d3234203d3e20323733323233.roa (raw, json)
Hash identifier:          hTI5OpqgWbc0E5n4ZCCsaPuYFTh1XJ4HAXhtyHR/8h8=
Subject key identifier:   E0:C0:A7:AB:A3:EB:66:3A:00:BF:D9:CD:C7:78:83:99:2A:E1:FE:DA
Certificate issuer:       /CN=24CD02F5861A290CB8722F495D087C5FC34EB3A8
Certificate serial:       72572BBC01A7D716D37D21F71B93793A713F2835
Authority key identifier: 24:CD:02:F5:86:1A:29:0C:B8:72:2F:49:5D:08:7C:5F:C3:4E:B3:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/34352e3137352e3133362e302f32342d3234203d3e20323733323233.roa
Signing time:             Mon 27 Jul 2026 03:25:00 +0000
ROA not before:           Mon 27 Jul 2026 03:20:00 +0000
ROA not after:            Mon 26 Jul 2027 03:25:00 +0000
asID:                     273223
IP address blocks:        45.175.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Aug 2026 13:13:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:57:2b:bc:01:a7:d7:16:d3:7d:21:f7:1b:93:79:3a:71:3f:28:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CD02F5861A290CB8722F495D087C5FC34EB3A8
        Validity
            Not Before: Jul 27 03:20:00 2026 GMT
            Not After : Jul 26 03:25:00 2027 GMT
        Subject: CN=E0C0A7ABA3EB663A00BFD9CDC77883992AE1FEDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:80:07:c9:44:87:75:8e:13:8f:34:c9:61:
                    66:8e:4d:64:c4:fc:e5:04:7f:f8:f0:dd:9b:03:03:
                    1d:76:c8:ca:fc:aa:51:43:86:7d:05:e6:34:86:99:
                    a9:3e:ad:dc:8b:9a:c7:b5:8f:af:03:9d:33:56:1e:
                    cc:58:6c:c7:02:27:7a:c7:5c:b2:69:0f:5c:15:d6:
                    4e:af:0f:3c:1c:89:be:2a:1d:52:e7:06:02:d4:88:
                    23:b5:5c:b5:f2:2c:92:b4:e4:44:74:aa:1b:b9:6f:
                    93:75:5d:62:fc:ae:d5:34:ef:89:5f:64:6f:a2:e5:
                    e3:d0:9a:48:3a:5c:14:ef:99:46:9c:d8:0f:15:95:
                    03:5f:75:1c:80:06:0b:07:d7:0a:b4:20:ea:44:3e:
                    79:09:e8:28:ec:72:5e:06:22:28:f0:41:62:24:a8:
                    d1:80:5c:f1:24:f0:79:44:63:fa:ba:8b:7b:e6:e0:
                    f1:fb:23:f7:c4:4c:da:10:08:be:46:ee:aa:4a:ee:
                    26:f0:10:6f:06:f8:67:94:bb:8b:91:e0:de:0b:62:
                    9b:1e:6e:3a:a0:2d:89:99:25:3f:bf:b3:35:db:f8:
                    42:b1:fc:6c:08:f3:b1:a1:b1:43:25:b3:b8:5c:6a:
                    39:50:c5:43:88:b9:d9:2b:85:fd:c1:04:52:f3:6a:
                    4e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C0:A7:AB:A3:EB:66:3A:00:BF:D9:CD:C7:78:83:99:2A:E1:FE:DA
            X509v3 Authority Key Identifier:
                keyid:24:CD:02:F5:86:1A:29:0C:B8:72:2F:49:5D:08:7C:5F:C3:4E:B3:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/34352e3137352e3133362e302f32342d3234203d3e20323733323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:f5:eb:c4:0f:1f:5a:f5:90:2a:ef:4b:d4:5d:c4:e1:a6:e0:
         03:67:ab:45:17:43:3d:df:04:27:7c:f9:20:12:e3:a4:5d:bb:
         2a:bd:da:66:01:5f:2d:80:84:5f:f1:0f:ec:1c:67:c1:1e:5d:
         8b:b6:c4:ee:79:6e:f6:56:2e:5d:c7:60:99:4c:da:fe:15:8e:
         2a:b4:12:98:e4:99:b8:7d:61:f0:be:c3:f1:34:26:00:37:0b:
         ce:e9:cc:1a:d2:0b:dc:fe:71:c1:47:8d:70:a9:6d:e1:ec:2d:
         47:5d:c5:b9:50:8c:9e:9c:8e:3d:57:a3:7e:12:48:5a:31:48:
         bb:1d:ea:1e:f6:37:cd:ab:1f:31:49:2a:65:89:49:76:cd:e6:
         4b:e2:fd:94:ef:9d:07:32:e6:a0:e5:58:0b:6a:50:ff:2c:05:
         bc:fc:cf:78:bb:e8:3a:04:31:40:e6:79:25:69:46:10:10:8b:
         57:f8:6f:13:f2:74:d7:bb:d1:a9:4e:c1:c9:6a:57:0f:ee:88:
         fa:2a:4e:e5:d0:a7:8d:87:3f:57:1a:55:76:ca:24:9d:02:a8:
         72:9c:aa:91:d7:9d:5e:b2:53:09:66:b2:2c:63:96:6e:0e:b6:
         64:0c:11:c8:45:5d:3f:fe:7a:9f:64:65:d4:1f:db:80:42:c2:
         4b:e7:89:80
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUclcrvAGn1xbTfSH3G5N5OnE/KDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRDRDAyRjU4NjFBMjkwQ0I4NzIyRjQ5NUQwODdDNUZD
MzRFQjNBODAeFw0yNjA3MjcwMzIwMDBaFw0yNzA3MjYwMzI1MDBaMDMxMTAvBgNV
BAMTKEUwQzBBN0FCQTNFQjY2M0EwMEJGRDlDREM3Nzg4Mzk5MkFFMUZFREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Q4AHyUSHdY4TjzTJYWaOTWTE
/OUEf/jw3ZsDAx12yMr8qlFDhn0F5jSGmak+rdyLmse1j68DnTNWHsxYbMcCJ3rH
XLJpD1wV1k6vDzwcib4qHVLnBgLUiCO1XLXyLJK05ER0qhu5b5N1XWL8rtU074lf
ZG+i5ePQmkg6XBTvmUac2A8VlQNfdRyABgsH1wq0IOpEPnkJ6Cjscl4GIijwQWIk
qNGAXPEk8HlEY/q6i3vm4PH7I/fETNoQCL5G7qpK7ibwEG8G+GeUu4uR4N4LYpse
bjqgLYmZJT+/szXb+EKx/GwI87GhsUMls7hcajlQxUOIudkrhf3BBFLzak79AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU4MCnq6PrZjoAv9nNx3iDmSrh/towHwYDVR0j
BBgwFoAUJM0C9YYaKQy4ci9JXQh8X8NOs6gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQ0UwMjhGM0ZEMkUyQTY4RkU0QTk4RjRFQkM3QzE4MDYw
MDlFNkYwOTY0Qjk0QkExQUYwQjU2NjU1RjVGMjJCLzAvMjRDRDAyRjU4NjFBMjkw
Q0I4NzIyRjQ5NUQwODdDNUZDMzRFQjNBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNENEMDJGNTg2MUEyOTBDQjg3
MjJGNDk1RDA4N0M1RkMzNEVCM0E4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRENFMDI4RjNGRDJFMkE2OEZFNEE5OEY0RUJDN0MxODA2MDA5RTZGMDk2
NEI5NEJBMUFGMEI1NjY1NUY1RjIyQi8wLzM0MzUyZTMxMzczNTJlMzEzMzM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzIzMjMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALa+I
MA0GCSqGSIb3DQEBCwUAA4IBAQCT9evEDx9a9ZAq70vUXcThpuADZ6tFF0M93wQn
fPkgEuOkXbsqvdpmAV8tgIRf8Q/sHGfBHl2LtsTueW72Vi5dx2CZTNr+FY4qtBKY
5Jm4fWHwvsPxNCYANwvO6cwa0gvc/nHBR41wqW3h7C1HXcW5UIyenI49V6N+Ekha
MUi7Heoe9jfNqx8xSSpliUl2zeZL4v2U750HMuag5VgLalD/LAW8/M94u+g6BDFA
5nklaUYQEItX+G8T8nTXu9GpTsHJalcP7oj6Kk7l0KeNhz9XGlV2yiSdAqhynKqR
151eslMJZrIsY5ZuDrZkDBHIRV0//nqfZGXUH9uAQsJL54mA
-----END CERTIFICATE-----
Generated at Wed Jul 29 22:57:39 2026 by rpki-client