Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/34352e372e3233372e302f32342d3234203d3e203237383834.roa
File:                     34352e372e3233372e302f32342d3234203d3e203237383834.roa (raw, json)
Hash identifier:          /HZUkUBXQaUImdnbS53yLJwVJavv329Uki0YAlJvjvA=
Subject key identifier:   6B:44:02:D6:5B:0A:7A:12:17:4C:BA:BF:0C:6F:E9:8B:A4:D9:EC:D3
Certificate issuer:       /CN=FEF6C9FB84C09AE8D6288A94909900981E3BB95B
Certificate serial:       0B82164FBF60F5E0825598F99F83D79BFFB44153
Authority key identifier: FE:F6:C9:FB:84:C0:9A:E8:D6:28:8A:94:90:99:00:98:1E:3B:B9:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/34352e372e3233372e302f32342d3234203d3e203237383834.roa
Signing time:             Wed 17 Jun 2026 01:48:11 +0000
ROA not before:           Wed 17 Jun 2026 01:43:11 +0000
ROA not after:            Wed 16 Jun 2027 01:48:11 +0000
asID:                     27884
IP address blocks:        45.7.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:82:16:4f:bf:60:f5:e0:82:55:98:f9:9f:83:d7:9b:ff:b4:41:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF6C9FB84C09AE8D6288A94909900981E3BB95B
        Validity
            Not Before: Jun 17 01:43:11 2026 GMT
            Not After : Jun 16 01:48:11 2027 GMT
        Subject: CN=6B4402D65B0A7A12174CBABF0C6FE98BA4D9ECD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:53:a6:b9:17:48:a2:66:72:d4:1e:87:68:45:
                    1f:c9:95:38:6b:90:1f:87:1b:05:26:e0:7e:b3:62:
                    ba:e5:08:68:63:d8:78:92:c8:96:7e:98:c7:f7:07:
                    e6:ea:4d:d1:26:e2:6f:a6:87:9c:ac:91:23:d5:f6:
                    7a:3b:19:0c:e6:67:95:a2:a4:34:44:e0:cf:6f:c8:
                    a0:aa:1d:c3:83:0d:f3:9b:4d:cb:a7:84:da:96:95:
                    d6:2a:f2:e0:2c:b1:e6:ad:e1:d6:5a:10:cf:1f:ed:
                    ab:a4:1c:d9:27:c1:5c:28:ea:5f:48:98:40:5d:c5:
                    40:6a:57:52:e3:ef:af:bd:65:b8:7d:a3:8f:44:a3:
                    52:49:44:dd:9a:65:b3:0d:4d:dd:73:c7:68:12:67:
                    25:ec:e8:54:cd:d8:bc:12:12:10:60:2e:de:eb:71:
                    87:3d:38:72:95:a3:4b:64:97:9f:d8:de:4e:f4:9d:
                    e5:81:5b:cf:81:b0:7e:81:a5:0b:3c:a0:f3:8a:7a:
                    8a:6a:dd:86:f0:1b:3f:4b:83:b9:da:e2:55:67:da:
                    9e:a2:92:8d:d3:0f:1c:ee:71:ba:e2:f7:61:e3:69:
                    33:93:a1:34:3a:ac:66:27:6f:42:02:d2:0c:fc:f2:
                    60:37:d2:51:13:42:36:d8:9f:d7:b6:a6:18:d2:6f:
                    07:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:44:02:D6:5B:0A:7A:12:17:4C:BA:BF:0C:6F:E9:8B:A4:D9:EC:D3
            X509v3 Authority Key Identifier:
                keyid:FE:F6:C9:FB:84:C0:9A:E8:D6:28:8A:94:90:99:00:98:1E:3B:B9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/34352e372e3233372e302f32342d3234203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:54:81:08:65:76:04:0e:c0:a3:0f:ae:38:42:c7:35:2c:79:
         0c:80:44:37:b2:d2:c3:7a:31:f6:09:81:58:3f:bb:da:46:8d:
         a4:2d:b3:a6:4c:1f:fb:ed:a8:ce:aa:c6:d9:54:d2:fe:f4:12:
         2e:72:a9:3c:b8:13:dc:0f:17:6a:f5:82:1c:fa:d6:dd:a0:f7:
         d8:2d:4c:da:61:a4:1e:00:de:a9:37:4c:3d:62:d7:f6:d7:a1:
         a9:b0:08:9f:3a:86:4d:68:19:69:4c:ab:f4:a8:0f:99:68:b7:
         00:2e:15:1a:7f:95:ae:9c:e1:d7:33:61:e6:d3:7f:fc:a2:f7:
         f9:41:d0:96:32:06:be:33:7c:75:00:60:62:80:a3:e4:54:30:
         5d:9a:cf:ee:e2:d5:da:57:02:85:f0:b7:0a:fb:2e:d8:c3:09:
         b5:cd:90:86:61:89:1a:91:5d:31:36:1e:e4:ab:be:55:8c:5c:
         bb:d1:25:d2:5f:eb:df:41:9c:5a:7a:35:36:eb:be:59:da:0e:
         55:3c:cc:c3:a2:ec:44:72:0d:01:9e:01:8d:7e:15:e9:60:de:
         87:e6:14:4c:8a:7a:ea:47:75:62:0c:3e:a5:59:e8:93:b2:e3:
         a3:ad:13:59:3b:28:d3:12:b9:f5:5e:66:09:4a:0f:04:0b:17:
         a4:8c:a0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:11:15 2026 by rpki-client