Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/34352e372e3233392e302f32342d3234203d3e203237383834.roa
File:                     34352e372e3233392e302f32342d3234203d3e203237383834.roa (raw, json)
Hash identifier:          HPm5x+t7tdk5bF0cOa6lIPKrwL19QDNzpbYQMqWOF14=
Subject key identifier:   37:FF:64:92:68:A5:59:7C:31:A2:16:9C:5E:4C:51:BD:B8:BA:E9:AF
Certificate issuer:       /CN=FEF6C9FB84C09AE8D6288A94909900981E3BB95B
Certificate serial:       286B575CD1647D738A1C902363D98B6FE7EFEAD5
Authority key identifier: FE:F6:C9:FB:84:C0:9A:E8:D6:28:8A:94:90:99:00:98:1E:3B:B9:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/34352e372e3233392e302f32342d3234203d3e203237383834.roa
Signing time:             Wed 17 Jun 2026 01:48:11 +0000
ROA not before:           Wed 17 Jun 2026 01:43:11 +0000
ROA not after:            Wed 16 Jun 2027 01:48:11 +0000
asID:                     27884
IP address blocks:        45.7.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:6b:57:5c:d1:64:7d:73:8a:1c:90:23:63:d9:8b:6f:e7:ef:ea:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF6C9FB84C09AE8D6288A94909900981E3BB95B
        Validity
            Not Before: Jun 17 01:43:11 2026 GMT
            Not After : Jun 16 01:48:11 2027 GMT
        Subject: CN=37FF649268A5597C31A2169C5E4C51BDB8BAE9AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cc:92:83:39:dd:3d:d8:88:40:c3:23:4d:76:
                    6d:fe:ec:c5:e5:1a:4f:b1:8c:af:d8:7e:e8:fd:d5:
                    d1:3e:ec:cd:2b:0f:61:1d:25:50:b0:19:98:93:c3:
                    25:46:42:14:45:c9:87:56:34:34:fa:fa:f3:b2:f5:
                    ef:bf:7d:4c:b7:f8:de:b9:0b:29:e7:54:57:74:54:
                    32:3c:91:78:fe:2d:d8:56:3e:4f:d6:ce:bb:93:43:
                    f1:a3:fb:d6:02:8d:f1:f0:11:4c:a2:fa:cd:a6:23:
                    05:49:08:3d:5f:a0:ee:ea:37:32:ce:8b:13:34:27:
                    69:fa:e9:e6:59:07:85:fe:cd:53:2b:3f:dc:95:46:
                    1e:7e:62:61:78:d3:e2:58:d8:5c:51:91:ff:a8:78:
                    f6:1d:da:b5:4a:a0:88:2f:e1:33:83:2c:98:1a:a4:
                    29:f4:25:4d:15:45:56:c6:ad:8e:fc:f6:cf:38:ae:
                    4f:69:fd:b0:4a:b8:0b:02:47:4c:dd:a1:37:69:ce:
                    ea:50:9b:be:de:20:f2:22:74:27:19:15:6a:56:19:
                    64:bc:fd:35:31:a0:1b:de:0c:c9:07:44:c4:2d:7f:
                    d7:78:75:22:90:f6:b6:a3:3f:c6:fc:22:52:39:24:
                    d2:87:9c:55:9f:cd:bd:fc:4d:c0:0c:cd:f2:ef:50:
                    89:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FF:64:92:68:A5:59:7C:31:A2:16:9C:5E:4C:51:BD:B8:BA:E9:AF
            X509v3 Authority Key Identifier:
                keyid:FE:F6:C9:FB:84:C0:9A:E8:D6:28:8A:94:90:99:00:98:1E:3B:B9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/34352e372e3233392e302f32342d3234203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:6b:af:ed:79:83:a3:20:60:de:3c:56:48:69:cf:c1:5b:93:
         38:e8:de:0f:72:8c:cb:1c:36:f3:98:dd:21:44:7b:32:00:50:
         33:de:47:7d:b2:97:0a:ea:8f:b0:2e:8c:a7:10:07:e9:a4:44:
         9b:ea:c0:9b:4b:f8:48:5e:2e:f0:ca:db:f9:81:0a:8e:39:b3:
         20:93:73:33:af:f9:05:34:bb:49:58:47:aa:ec:18:8b:43:9d:
         74:22:03:aa:b6:c5:83:8e:ca:53:1a:65:77:7c:36:71:98:36:
         32:de:92:fd:94:49:ea:1b:51:d5:5e:5e:70:c1:71:f4:94:66:
         ec:97:70:20:f3:5a:66:64:5e:77:b7:63:72:f5:3b:6c:74:0b:
         eb:8f:ae:68:b4:3d:84:47:81:f5:8a:73:75:38:42:29:57:c1:
         e8:2e:c2:5b:70:e0:c6:17:5e:2c:3d:5a:75:8c:6d:6e:a2:76:
         0a:25:5b:14:65:c9:a4:58:fb:55:69:aa:9a:3a:cc:8f:78:e6:
         55:81:70:bf:3b:15:af:d8:85:e5:d6:38:e9:18:65:c4:ef:aa:
         73:f6:76:4f:36:fa:ad:c7:10:62:cc:44:d4:e3:4a:70:81:f2:
         7d:2b:f9:3a:25:b4:5f:6b:3d:c2:6e:13:53:85:35:9b:f1:92:
         50:84:41:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:11:25 2026 by rpki-client