Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/0B7BB5C8963C2B6230FEEB8DE9F4A614C00E08EBF254B41A8E98EB267AC6B706/0/34352e3137362e3131302e302f32332d3234203d3e20323733393132.roa
File:                     34352e3137362e3131302e302f32332d3234203d3e20323733393132.roa (raw, json)
Hash identifier:          k+IVFGghr7CHgI6KUy05JJ09fy2dsZqLC9pNjgj/WDU=
Subject key identifier:   9F:8F:0A:11:89:EB:C9:5F:2E:87:E0:B7:88:54:22:0A:0D:96:70:38
Certificate issuer:       /CN=E4DD02F783A1562385FCD20BEA3443AA69EBE6AD
Certificate serial:       775F58C33A9EE0A54BFFD5BCA589B5A66B84B0F8
Authority key identifier: E4:DD:02:F7:83:A1:56:23:85:FC:D2:0B:EA:34:43:AA:69:EB:E6:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4DD02F783A1562385FCD20BEA3443AA69EBE6AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B7BB5C8963C2B6230FEEB8DE9F4A614C00E08EBF254B41A8E98EB267AC6B706/0/34352e3137362e3131302e302f32332d3234203d3e20323733393132.roa
Signing time:             Thu 01 Oct 2026 15:00:00 +0000
ROA not before:           Thu 01 Oct 2026 14:55:00 +0000
ROA not after:            Thu 30 Sep 2027 15:00:00 +0000
asID:                     273912
IP address blocks:        45.176.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B7BB5C8963C2B6230FEEB8DE9F4A614C00E08EBF254B41A8E98EB267AC6B706/0/E4DD02F783A1562385FCD20BEA3443AA69EBE6AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B7BB5C8963C2B6230FEEB8DE9F4A614C00E08EBF254B41A8E98EB267AC6B706/0/E4DD02F783A1562385FCD20BEA3443AA69EBE6AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4DD02F783A1562385FCD20BEA3443AA69EBE6AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 18:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5f:58:c3:3a:9e:e0:a5:4b:ff:d5:bc:a5:89:b5:a6:6b:84:b0:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4DD02F783A1562385FCD20BEA3443AA69EBE6AD
        Validity
            Not Before: Oct  1 14:55:00 2026 GMT
            Not After : Sep 30 15:00:00 2027 GMT
        Subject: CN=9F8F0A1189EBC95F2E87E0B78854220A0D967038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:67:71:35:b2:4e:c5:b6:6a:43:82:6a:ad:de:
                    0a:d4:78:3d:fe:51:55:e3:e7:71:53:90:b2:3f:9e:
                    74:3a:d9:6a:3f:b5:71:e5:f1:ad:41:b5:cf:fe:96:
                    55:c2:87:e3:b9:5e:b2:7c:a4:72:62:5d:9a:8c:da:
                    5c:9a:ad:2e:43:91:7d:f2:d1:46:02:f4:ff:29:6b:
                    5a:65:41:04:f9:0f:08:54:b9:55:f3:9f:f5:85:18:
                    56:3a:c2:a3:67:4e:88:32:17:3a:78:82:a4:cb:54:
                    9b:c7:b6:e0:56:88:c3:46:0a:05:b4:eb:27:6a:e4:
                    dc:2f:c9:0f:6c:ca:7e:67:79:1f:59:dc:02:fa:57:
                    88:5f:1c:35:b2:27:ef:12:19:fb:3a:02:20:2d:89:
                    31:4a:30:8e:90:2d:db:9a:28:8c:32:85:5b:ce:2c:
                    5f:4f:36:be:32:e1:93:bf:c9:94:ac:65:29:cf:fe:
                    28:74:39:4a:72:36:bf:55:03:10:c3:ab:9f:66:aa:
                    95:a9:d4:4d:d7:67:fb:f0:ab:3c:e9:33:b7:15:3f:
                    23:b1:ca:a3:74:6e:d0:6e:e8:d0:e8:a3:59:c6:e7:
                    b5:80:79:ff:27:64:c2:b3:9c:f9:a6:c5:e4:52:03:
                    38:c6:30:20:05:4f:07:6a:92:7c:14:b1:7f:b4:78:
                    ca:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8F:0A:11:89:EB:C9:5F:2E:87:E0:B7:88:54:22:0A:0D:96:70:38
            X509v3 Authority Key Identifier:
                keyid:E4:DD:02:F7:83:A1:56:23:85:FC:D2:0B:EA:34:43:AA:69:EB:E6:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B7BB5C8963C2B6230FEEB8DE9F4A614C00E08EBF254B41A8E98EB267AC6B706/0/E4DD02F783A1562385FCD20BEA3443AA69EBE6AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4DD02F783A1562385FCD20BEA3443AA69EBE6AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B7BB5C8963C2B6230FEEB8DE9F4A614C00E08EBF254B41A8E98EB267AC6B706/0/34352e3137362e3131302e302f32332d3234203d3e20323733393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:65:10:12:70:8e:e2:8b:a1:af:6d:c1:dd:d6:ff:98:0d:4e:
         5f:1a:d7:f4:9f:09:30:cc:ca:e6:6c:b3:a0:3d:02:c3:ef:91:
         bb:b3:10:15:80:27:59:6c:71:c8:80:28:60:f1:33:69:22:98:
         7d:c6:5d:e1:88:44:5e:fa:d8:25:c2:76:ca:c2:62:e9:64:6e:
         75:aa:6f:e7:f1:5b:f5:ae:f3:ee:af:19:6d:f7:28:e6:ff:d4:
         df:c4:cc:cb:e7:fa:10:4e:4a:df:b3:7d:f3:6d:a8:2e:df:9f:
         21:c3:15:cf:0f:4a:69:bb:61:8c:3d:d5:68:be:01:b7:b4:2a:
         3c:52:1f:6e:41:8e:79:57:c1:33:e9:a4:f5:a0:93:cd:70:b2:
         e1:83:9f:b8:4d:50:41:0a:99:b4:a3:7b:2e:ad:84:6b:65:45:
         a2:41:81:e4:50:58:8f:53:ef:73:46:ee:d4:fd:2c:95:bd:2b:
         47:23:ce:14:34:17:3f:fe:58:77:88:f2:70:d9:97:6f:e5:0a:
         7e:5f:de:8d:5b:f4:db:68:9e:bf:b2:08:85:f4:5f:01:a4:a1:
         8d:22:d9:ba:e3:85:9c:35:52:fa:9b:1a:a3:eb:a8:15:f8:a2:
         5c:2d:b9:02:96:cb:d3:a8:68:d5:89:a2:dd:07:ba:91:56:01:
         b7:4e:74:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:36:40 2026 by rpki-client