Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/34352e3137302e3130352e302f32342d3234203d3e20323633373530.roa
File:                     34352e3137302e3130352e302f32342d3234203d3e20323633373530.roa (raw, json)
Hash identifier:          7O8yWaJAH4jbWRJeKRbpFez/mo6OTr7mJ2fg8uq4U2k=
Subject key identifier:   BA:84:94:47:72:B9:E6:71:7B:9B:55:30:2F:A3:E8:28:28:AA:F2:59
Certificate issuer:       /CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
Certificate serial:       48947C80D9A6C50665E39F7FD196C5C2EDFF571D
Authority key identifier: 1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/34352e3137302e3130352e302f32342d3234203d3e20323633373530.roa
Signing time:             Fri 01 May 2026 20:40:44 +0000
ROA not before:           Fri 01 May 2026 20:35:44 +0000
ROA not after:            Fri 30 Apr 2027 20:40:44 +0000
asID:                     263750
IP address blocks:        45.170.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl
                          rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 10:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:94:7c:80:d9:a6:c5:06:65:e3:9f:7f:d1:96:c5:c2:ed:ff:57:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
        Validity
            Not Before: May  1 20:35:44 2026 GMT
            Not After : Apr 30 20:40:44 2027 GMT
        Subject: CN=BA84944772B9E6717B9B55302FA3E82828AAF259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:21:37:b5:a1:9e:c2:81:6c:e2:24:e1:72:27:
                    ef:80:bc:61:fd:d8:69:bb:60:d7:9a:e3:e4:66:42:
                    de:32:ed:9e:59:32:64:b4:1d:3e:04:a5:36:86:cd:
                    97:2b:ab:63:6f:7e:0b:d9:f5:cf:c0:a6:46:eb:53:
                    e5:8d:8d:ff:cb:16:5e:6c:92:0a:a5:75:dc:6a:b9:
                    fa:3d:23:c9:3e:0a:6b:c3:81:94:0b:ef:c8:7b:cf:
                    14:09:cb:31:49:9c:f3:98:b8:f8:5c:fa:0a:11:53:
                    ed:d6:d8:79:ed:bf:c4:1f:91:1a:9d:db:1c:0d:3c:
                    49:27:7a:18:05:25:15:30:70:85:6d:12:0f:a4:5e:
                    5c:52:87:e8:6e:12:f2:ad:2a:bf:77:32:26:99:4b:
                    63:83:a2:16:df:db:84:29:f6:62:9c:c3:f2:0f:92:
                    98:12:f5:c8:94:d9:cc:5e:d3:ca:ec:55:d2:a5:a1:
                    d5:f4:ef:c2:af:88:65:f4:a5:70:ac:31:cd:d5:0e:
                    9e:45:87:43:85:29:2d:61:18:b9:23:09:d8:23:43:
                    47:55:81:b9:d5:d2:5f:22:d7:b8:b0:95:d5:49:79:
                    56:a3:50:7d:59:14:48:9e:13:ab:7d:b0:3f:2a:38:
                    05:f0:f9:b2:05:de:b9:66:a9:3c:46:21:0f:4e:47:
                    21:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:84:94:47:72:B9:E6:71:7B:9B:55:30:2F:A3:E8:28:28:AA:F2:59
            X509v3 Authority Key Identifier:
                keyid:1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/34352e3137302e3130352e302f32342d3234203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:ef:c8:45:80:75:db:db:ae:b6:8d:ea:7d:f2:e2:6d:f3:5a:
         26:a0:56:30:70:a8:dc:82:11:5c:58:fd:4b:ff:cc:52:2d:de:
         b1:26:73:2c:29:12:99:da:bd:5f:c1:01:64:34:6f:ef:b7:87:
         c0:d6:09:51:39:31:d6:f7:db:9e:78:95:85:08:9f:39:ab:ed:
         14:ba:03:40:19:9c:13:de:89:53:a5:a5:cb:5e:7f:7b:be:d2:
         a9:08:3e:8e:cf:1f:42:57:90:29:80:7f:50:e5:86:24:3b:13:
         01:01:cf:62:13:6d:f9:61:b4:85:f2:2e:22:3b:85:24:03:c3:
         49:4b:f7:88:5e:d8:36:e6:4e:90:39:aa:96:39:8e:60:41:0e:
         25:22:4c:86:05:8c:b9:3f:c5:5c:60:6f:75:c1:b0:e8:9c:eb:
         6c:ad:bf:0b:27:15:a9:79:13:d8:18:00:61:bf:6f:ec:ea:74:
         c0:e0:bc:ce:cd:f1:a2:15:4e:40:b5:62:f6:5a:0c:7b:de:1f:
         4e:08:2b:ef:bf:41:0f:67:41:81:b4:8b:8f:9b:b1:af:08:19:
         1a:73:b6:ff:fe:81:e7:45:fe:ea:51:cd:02:2c:34:54:53:3d:
         71:1f:39:db:78:f4:38:f7:15:78:77:45:10:7f:3d:13:87:fb:
         84:c3:09:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:30:35 2026 by rpki-client