Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/34352e3137302e33312e302f32342d3234203d3e20323637373532.roa
File:                     34352e3137302e33312e302f32342d3234203d3e20323637373532.roa (raw, json)
Hash identifier:          XD+U9zoF9dJbM0piQIC+QDcJTtE4AfREsuZsKQ/gsm4=
Subject key identifier:   FD:CB:91:35:3D:DE:BF:00:26:A6:2C:22:63:BA:11:86:9B:31:AB:9A
Certificate issuer:       /CN=FD07AFBCC3FFB625EEA674F938508F1BC3309E00
Certificate serial:       4120DA149111F73C53EB3C7659102B73BB1053DD
Authority key identifier: FD:07:AF:BC:C3:FF:B6:25:EE:A6:74:F9:38:50:8F:1B:C3:30:9E:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/34352e3137302e33312e302f32342d3234203d3e20323637373532.roa
Signing time:             Thu 01 Oct 2026 23:37:44 +0000
ROA not before:           Thu 01 Oct 2026 23:32:44 +0000
ROA not after:            Thu 30 Sep 2027 23:37:44 +0000
asID:                     267752
IP address blocks:        45.170.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 09:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:20:da:14:91:11:f7:3c:53:eb:3c:76:59:10:2b:73:bb:10:53:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD07AFBCC3FFB625EEA674F938508F1BC3309E00
        Validity
            Not Before: Oct  1 23:32:44 2026 GMT
            Not After : Sep 30 23:37:44 2027 GMT
        Subject: CN=FDCB91353DDEBF0026A62C2263BA11869B31AB9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8c:f1:2f:c7:3a:e3:f9:82:b3:82:c0:0e:55:
                    61:72:d1:8b:e5:d9:60:ab:66:00:bd:c8:ac:46:c2:
                    5d:68:7a:43:d9:21:70:99:fa:e3:e5:dd:71:47:f0:
                    47:31:83:7d:df:7a:36:3f:21:5f:bd:8a:36:1d:fa:
                    7f:9f:aa:d0:64:ab:21:28:bb:85:01:61:b7:a3:50:
                    21:72:68:69:1a:c0:14:14:a2:6e:44:ab:1c:9b:83:
                    cf:06:ff:11:d4:7d:78:91:58:68:cd:48:be:e8:d8:
                    ba:ee:0d:75:f7:2b:db:c8:be:28:2f:fd:20:37:cd:
                    39:cc:49:7f:16:1d:20:02:67:5a:11:36:b5:0f:05:
                    38:7a:12:df:3d:b0:bf:27:82:7b:04:eb:37:5f:2a:
                    3b:4d:2a:0c:4e:fc:72:85:c6:59:87:06:3f:00:13:
                    e7:39:52:68:71:ad:11:2b:b1:a8:47:b7:1b:eb:f6:
                    0b:89:0d:79:01:be:16:82:9d:2c:cc:e7:a0:56:27:
                    41:1e:1a:31:a2:fb:ff:23:c6:96:2d:21:8d:be:be:
                    d5:ba:ac:70:81:64:21:0e:ff:1b:1e:06:ca:94:6c:
                    f9:15:09:fc:0b:21:ee:d4:af:ce:05:a6:15:4c:43:
                    d9:a9:63:7e:6c:dc:a9:d5:37:7d:e1:60:bf:e6:70:
                    25:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CB:91:35:3D:DE:BF:00:26:A6:2C:22:63:BA:11:86:9B:31:AB:9A
            X509v3 Authority Key Identifier:
                keyid:FD:07:AF:BC:C3:FF:B6:25:EE:A6:74:F9:38:50:8F:1B:C3:30:9E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/34352e3137302e33312e302f32342d3234203d3e20323637373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:5c:24:bf:d3:05:33:a1:9f:70:35:68:7b:35:5f:7a:42:fd:
         87:19:ba:d8:f6:0e:c0:6f:67:6a:90:db:cc:32:06:fc:e5:84:
         f8:90:38:6f:8c:1a:e4:9e:6d:be:65:6b:cc:cf:6b:47:8e:79:
         9e:1d:b5:3d:7f:9c:b6:51:41:2f:1e:04:14:40:f2:6f:aa:78:
         d7:a1:1c:f2:bd:44:14:29:98:14:ac:0e:40:bd:91:ee:a2:a3:
         06:47:70:9d:96:83:99:52:d4:39:5e:9b:08:5c:e4:37:da:02:
         3f:85:26:12:56:a3:04:d4:a7:26:12:f3:12:44:d3:58:4a:f5:
         7e:9e:0d:97:68:bc:aa:4a:a2:c9:57:ef:30:f3:46:2f:ac:f9:
         55:8f:24:f8:bd:bf:ed:53:ab:49:8a:d1:25:c1:88:7d:d4:2d:
         58:da:ea:fb:61:1e:61:0f:c1:42:79:9f:d1:30:54:31:17:04:
         fd:b1:e8:2e:33:0e:e2:dc:a2:b2:ec:c5:03:fa:d0:f6:8f:fc:
         bf:38:14:69:7f:db:0c:98:72:ff:65:3a:3b:9d:a5:10:44:e7:
         9a:98:01:6e:7c:5f:60:fa:92:8d:02:09:69:c0:e9:27:1a:59:
         0a:bc:3a:b1:3e:a7:06:a8:2a:52:3d:9c:0c:0b:38:94:68:5f:
         4e:8a:bf:67
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQSDaFJER9zxT6zx2WRArc7sQU90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQwN0FGQkNDM0ZGQjYyNUVFQTY3NEY5Mzg1MDhGMUJD
MzMwOUUwMDAeFw0yNjEwMDEyMzMyNDRaFw0yNzA5MzAyMzM3NDRaMDMxMTAvBgNV
BAMTKEZEQ0I5MTM1M0RERUJGMDAyNkE2MkMyMjYzQkExMTg2OUIzMUFCOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDojPEvxzrj+YKzgsAOVWFy0Yvl
2WCrZgC9yKxGwl1oekPZIXCZ+uPl3XFH8Ecxg33fejY/IV+9ijYd+n+fqtBkqyEo
u4UBYbejUCFyaGkawBQUom5Eqxybg88G/xHUfXiRWGjNSL7o2LruDXX3K9vIvigv
/SA3zTnMSX8WHSACZ1oRNrUPBTh6Et89sL8ngnsE6zdfKjtNKgxO/HKFxlmHBj8A
E+c5UmhxrRErsahHtxvr9guJDXkBvhaCnSzM56BWJ0EeGjGi+/8jxpYtIY2+vtW6
rHCBZCEO/xseBsqUbPkVCfwLIe7Ur84FphVMQ9mpY35s3KnVN33hYL/mcCUHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU/cuRNT3evwAmpiwiY7oRhpsxq5owHwYDVR0j
BBgwFoAU/QevvMP/tiXupnT5OFCPG8MwngAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GREMwNEUxODU3MDJEM0MwQTVCODc3NjE4NDg3QzBCQzJC
QzJGREU0MTMxQzU3ODA2QTJCQjM0MzlDN0RFNTVFLzAvRkQwN0FGQkNDM0ZGQjYy
NUVFQTY3NEY5Mzg1MDhGMUJDMzMwOUUwMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRDA3QUZCQ0MzRkZCNjI1RUVB
Njc0RjkzODUwOEYxQkMzMzA5RTAwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkRDMDRFMTg1NzAyRDNDMEE1Qjg3NzYxODQ4N0MwQkMyQkMyRkRFNDEz
MUM1NzgwNkEyQkIzNDM5QzdERTU1RS8wLzM0MzUyZTMxMzczMDJlMzMzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM3MzUzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2qHzAN
BgkqhkiG9w0BAQsFAAOCAQEAtFwkv9MFM6GfcDVoezVfekL9hxm62PYOwG9napDb
zDIG/OWE+JA4b4wa5J5tvmVrzM9rR455nh21PX+ctlFBLx4EFEDyb6p416Ec8r1E
FCmYFKwOQL2R7qKjBkdwnZaDmVLUOV6bCFzkN9oCP4UmElajBNSnJhLzEkTTWEr1
fp4Nl2i8qkqiyVfvMPNGL6z5VY8k+L2/7VOrSYrRJcGIfdQtWNrq+2EeYQ/BQnmf
0TBUMRcE/bHoLjMO4tyisuzFA/rQ9o/8vzgUaX/bDJhy/2U6O52lEETnmpgBbnxf
YPqSjQIJacDpJxpZCrw6sT6nBqgqUj2cDAs4lGhfToq/Zw==
-----END CERTIFICATE-----
Generated at Mon Nov 2 08:23:28 2026 by rpki-client