Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1227DC410C56FE5097BE75D34431BD8997CAEE058A16371B5760734CBCA5C5C2/0/34352e36382e39362e302f32322d3234203d3e20323734313036.roa
File:                     34352e36382e39362e302f32322d3234203d3e20323734313036.roa (raw, json)
Hash identifier:          Ar8xyallE6WITv/9OZOHzEcjL5+Is+9fiw+d4R3i9f0=
Subject key identifier:   32:8D:92:42:08:16:44:97:51:DA:40:AA:58:FE:4E:C7:BC:DC:DC:9E
Certificate issuer:       /CN=8612029153DBFCAA43F5B4FA40AA77D90C9D98F5
Certificate serial:       49B404E74A00081A97D5AF369AD0806B1475D276
Authority key identifier: 86:12:02:91:53:DB:FC:AA:43:F5:B4:FA:40:AA:77:D9:0C:9D:98:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8612029153DBFCAA43F5B4FA40AA77D90C9D98F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1227DC410C56FE5097BE75D34431BD8997CAEE058A16371B5760734CBCA5C5C2/0/34352e36382e39362e302f32322d3234203d3e20323734313036.roa
Signing time:             Wed 22 Jul 2026 00:40:00 +0000
ROA not before:           Wed 22 Jul 2026 00:35:00 +0000
ROA not after:            Wed 21 Jul 2027 00:40:00 +0000
asID:                     274106
IP address blocks:        45.68.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1227DC410C56FE5097BE75D34431BD8997CAEE058A16371B5760734CBCA5C5C2/0/8612029153DBFCAA43F5B4FA40AA77D90C9D98F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1227DC410C56FE5097BE75D34431BD8997CAEE058A16371B5760734CBCA5C5C2/0/8612029153DBFCAA43F5B4FA40AA77D90C9D98F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8612029153DBFCAA43F5B4FA40AA77D90C9D98F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 00:04:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b4:04:e7:4a:00:08:1a:97:d5:af:36:9a:d0:80:6b:14:75:d2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8612029153DBFCAA43F5B4FA40AA77D90C9D98F5
        Validity
            Not Before: Jul 22 00:35:00 2026 GMT
            Not After : Jul 21 00:40:00 2027 GMT
        Subject: CN=328D92420816449751DA40AA58FE4EC7BCDCDC9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:99:28:b1:03:85:28:db:8f:6c:0e:33:e7:de:
                    4c:0a:c7:da:a9:24:ba:43:19:b6:bd:94:41:78:fa:
                    3c:42:97:2a:e5:cd:ec:ed:3f:63:0a:59:41:d9:81:
                    16:c5:84:35:59:02:46:e9:79:9f:b2:f1:d3:0d:11:
                    25:4b:31:91:cf:9f:b1:3f:ef:24:9b:d8:6a:b4:a0:
                    99:4f:82:ca:ad:00:0c:ce:ca:70:64:e7:53:eb:f7:
                    f9:b4:0e:11:d8:11:33:0d:a0:03:ea:a3:dd:c7:01:
                    fa:c6:62:21:b4:a5:45:8d:b6:97:2d:b3:10:cd:75:
                    55:52:67:97:50:a6:de:b2:9d:f8:20:fe:30:19:32:
                    2c:f7:b2:aa:91:b4:26:27:d2:9b:e9:12:08:16:5c:
                    a5:c8:5b:32:31:fd:25:32:c2:40:88:f7:d4:90:e8:
                    d3:02:eb:0c:86:d9:23:70:f9:a8:b3:89:c7:d3:21:
                    f3:ff:db:ec:58:27:4a:a8:e6:88:65:4c:6e:aa:85:
                    8c:e5:b8:70:d8:d4:95:68:c9:59:89:f7:f3:ef:eb:
                    fd:3d:c9:97:36:d3:f9:21:8a:b0:80:c1:1b:8e:97:
                    e4:21:c4:ea:fd:f9:51:0e:32:77:cf:74:64:06:ea:
                    13:e4:70:7f:c1:8e:0e:c1:59:e8:8c:ac:30:03:84:
                    73:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8D:92:42:08:16:44:97:51:DA:40:AA:58:FE:4E:C7:BC:DC:DC:9E
            X509v3 Authority Key Identifier:
                keyid:86:12:02:91:53:DB:FC:AA:43:F5:B4:FA:40:AA:77:D9:0C:9D:98:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1227DC410C56FE5097BE75D34431BD8997CAEE058A16371B5760734CBCA5C5C2/0/8612029153DBFCAA43F5B4FA40AA77D90C9D98F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8612029153DBFCAA43F5B4FA40AA77D90C9D98F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1227DC410C56FE5097BE75D34431BD8997CAEE058A16371B5760734CBCA5C5C2/0/34352e36382e39362e302f32322d3234203d3e20323734313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:a6:21:0d:f2:f6:1a:99:8c:7f:99:de:39:3b:22:7f:4b:0c:
         2b:cd:8b:e9:e7:1d:72:29:9d:86:16:2c:e0:3c:54:27:09:97:
         cd:2c:6a:aa:2a:30:eb:a0:d6:53:b1:35:c1:6b:a4:ba:c4:5b:
         2a:f4:1c:bd:79:8a:2a:3c:99:53:8a:78:7f:29:66:2d:de:d3:
         8a:46:8a:de:10:82:29:da:46:d2:71:34:1b:91:01:40:e4:55:
         31:75:1f:d4:5b:42:94:af:be:38:c7:94:ac:c3:19:15:a2:bd:
         69:c1:e3:d7:15:4c:c8:bc:87:10:ff:0e:42:54:34:8b:25:71:
         16:30:68:8e:73:fc:e2:9c:33:b0:ee:c6:2b:41:cc:7b:07:de:
         86:03:43:0b:01:12:63:bf:35:e8:a5:e0:eb:a1:c3:86:73:45:
         6b:51:b8:bc:a5:4f:53:9e:05:7d:c0:e4:07:28:c7:28:e3:3f:
         39:fc:c4:ff:cd:d4:1f:84:dc:00:e1:4e:b5:82:a4:60:1d:90:
         4c:5a:bb:c1:f7:27:af:05:13:63:e3:95:9b:68:a0:c6:28:cd:
         f9:7e:e9:18:ef:be:c8:24:9e:33:75:e5:70:9a:2b:17:c6:cd:
         e8:7f:6b:15:05:83:e5:26:19:0e:55:12:fa:a6:7f:99:f2:26:
         9f:76:fb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:50:17 2026 by rpki-client