Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/34352e3137302e3130372e302f32342d3234203d3e20323633373530.roa
File:                     34352e3137302e3130372e302f32342d3234203d3e20323633373530.roa (raw, json)
Hash identifier:          nkVeuFLmrwvo5L4ztNWjZ4mb10bcB4jBFmWkmpZOgu4=
Subject key identifier:   FE:AD:6B:F9:81:C9:CA:CE:ED:69:AD:C2:3F:96:FE:9B:8F:03:E0:0E
Certificate issuer:       /CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
Certificate serial:       4B8C66D0A9762F7E5889CF49AFDC873AB3EFF7A3
Authority key identifier: 1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/34352e3137302e3130372e302f32342d3234203d3e20323633373530.roa
Signing time:             Fri 01 May 2026 20:40:44 +0000
ROA not before:           Fri 01 May 2026 20:35:44 +0000
ROA not after:            Fri 30 Apr 2027 20:40:44 +0000
asID:                     263750
IP address blocks:        45.170.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl
                          rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 10:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8c:66:d0:a9:76:2f:7e:58:89:cf:49:af:dc:87:3a:b3:ef:f7:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
        Validity
            Not Before: May  1 20:35:44 2026 GMT
            Not After : Apr 30 20:40:44 2027 GMT
        Subject: CN=FEAD6BF981C9CACEED69ADC23F96FE9B8F03E00E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8d:e0:4c:dc:48:b5:7a:eb:d8:30:c2:49:6f:
                    48:01:0b:3a:24:fd:14:ea:9c:29:ac:75:fd:4a:5a:
                    ad:5d:15:64:f9:8f:ba:7a:65:4d:7f:64:45:e0:fc:
                    1c:a2:a1:f6:f8:d3:79:49:b0:37:ed:87:1c:c3:d5:
                    3e:29:76:2e:2a:e0:ad:3e:11:01:6e:65:c1:bb:ad:
                    a2:d0:4a:f8:b9:9a:1a:75:ab:70:5f:f6:3b:dc:1c:
                    54:43:e0:e9:1b:b5:f9:b3:bc:41:9c:7a:5d:50:9b:
                    cc:ff:a7:c8:74:a6:b3:22:dd:90:1f:1f:06:ad:73:
                    85:d6:21:08:ff:9d:66:3d:f9:18:57:e0:2b:e7:5e:
                    07:91:e4:3f:bf:be:24:57:73:b2:68:94:b7:2f:1f:
                    cc:d2:24:c6:d2:c0:f8:76:1e:cc:cc:35:66:4c:1a:
                    b0:95:7a:0a:bd:a0:19:d4:4d:83:77:f7:0d:a0:d5:
                    dc:78:d2:12:04:f5:a4:fb:45:83:d6:64:85:f1:43:
                    9b:03:71:97:1f:f3:85:de:26:7a:b7:b6:20:8f:86:
                    99:f5:8f:17:80:ca:44:c7:4d:dd:85:e5:57:3b:a8:
                    89:5d:d9:f4:09:9d:30:3e:5c:4d:93:a5:e7:a7:87:
                    8e:71:be:85:52:1d:d3:f1:94:95:ea:ba:76:5f:33:
                    df:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AD:6B:F9:81:C9:CA:CE:ED:69:AD:C2:3F:96:FE:9B:8F:03:E0:0E
            X509v3 Authority Key Identifier:
                keyid:1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/34352e3137302e3130372e302f32342d3234203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:e2:9a:b1:c9:72:ff:ef:c3:ed:1e:4f:ed:3c:35:9f:cb:12:
         52:48:70:10:65:68:70:5e:bc:6e:b8:e0:a2:ec:cc:f9:96:9b:
         91:60:65:87:af:ed:eb:e2:7d:0b:1d:42:26:42:b5:d7:4f:d8:
         0b:23:e4:42:e1:50:d7:79:fd:12:e5:22:d0:c6:b1:be:f3:a0:
         26:4b:ea:5a:4b:72:28:57:59:d4:04:27:a5:8e:f0:6a:3e:6f:
         3b:0d:a9:2c:7d:ba:f1:1d:45:30:80:0d:53:a1:08:25:b2:21:
         67:d5:da:89:d1:69:b8:17:04:7e:66:97:96:ba:e8:05:3c:6c:
         e3:10:ed:15:f6:c3:e1:bb:9f:f3:ae:00:71:c9:ae:0b:a6:a6:
         b2:6d:b2:10:a9:a5:b3:06:b6:45:03:ef:7e:63:46:9f:7e:dc:
         5c:11:eb:8e:81:0c:55:a4:49:c6:b5:b4:2c:68:23:74:a9:3f:
         4d:2a:26:ff:09:0a:5c:bf:bc:f3:27:e9:1c:9c:27:7e:f4:96:
         c6:8f:75:63:b5:1f:df:a6:31:b0:c9:d0:66:47:6b:0a:84:4e:
         0a:9b:07:17:89:26:f8:76:63:e7:b1:e3:82:de:3e:e9:d7:55:
         cc:b7:a4:22:b4:c8:59:1d:35:cc:e2:7f:6f:8a:5d:23:ab:cf:
         b1:c2:83:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:30:39 2026 by rpki-client