Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/34352e3232342e3132342e302f32342d3234203d3e20323734323839.roa
File:                     34352e3232342e3132342e302f32342d3234203d3e20323734323839.roa (raw, json)
Hash identifier:          805ZKJ4Y3dXoSLOgIPVvlPrnBtg67qRZHj5XDk/WOF4=
Subject key identifier:   9A:61:EC:A8:37:21:9D:66:D2:FB:4B:FC:DD:CC:DC:B6:F1:34:E0:28
Certificate issuer:       /CN=6C43D070D53868DD0F1A352EAB84A7642B5CEF73
Certificate serial:       280F2B63558F3D5A33570466A0E1B3893543702F
Authority key identifier: 6C:43:D0:70:D5:38:68:DD:0F:1A:35:2E:AB:84:A7:64:2B:5C:EF:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/34352e3232342e3132342e302f32342d3234203d3e20323734323839.roa
Signing time:             Mon 09 Mar 2026 21:50:00 +0000
ROA not before:           Mon 09 Mar 2026 21:45:00 +0000
ROA not after:            Mon 08 Mar 2027 21:50:00 +0000
asID:                     274289
IP address blocks:        45.224.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0f:2b:63:55:8f:3d:5a:33:57:04:66:a0:e1:b3:89:35:43:70:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C43D070D53868DD0F1A352EAB84A7642B5CEF73
        Validity
            Not Before: Mar  9 21:45:00 2026 GMT
            Not After : Mar  8 21:50:00 2027 GMT
        Subject: CN=9A61ECA837219D66D2FB4BFCDDCCDCB6F134E028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d6:ab:c5:60:ac:3e:b2:6e:93:19:85:87:27:
                    3b:be:77:c0:ef:12:46:ec:f1:51:5e:5b:e4:47:76:
                    25:00:83:f1:95:54:4e:a7:d9:a7:ea:97:f4:4d:49:
                    60:43:37:e7:56:15:9e:9f:43:2a:48:42:2f:d8:89:
                    c8:89:67:35:cc:29:ee:73:05:c8:bf:89:f4:83:52:
                    1c:ad:9d:22:5d:98:2f:df:4f:bc:05:55:fe:20:0e:
                    60:4e:25:a3:21:b3:7e:84:16:fe:22:99:af:36:6a:
                    3e:ec:fb:9c:b3:e1:80:ed:a4:37:7d:96:a4:dd:c7:
                    ce:17:7f:43:1d:30:08:b2:51:6f:83:3e:65:f5:03:
                    2b:fa:c8:26:72:dd:91:e2:e0:33:47:a3:88:b4:e5:
                    24:46:6a:81:7d:94:35:48:a0:88:be:1a:fe:4f:15:
                    ab:bb:cf:e8:6c:68:54:42:aa:e9:db:9e:65:f9:51:
                    6e:43:6c:2c:d5:bd:52:45:7a:a4:03:79:76:f2:60:
                    db:3e:cf:18:6f:4c:81:e2:33:41:a2:ec:26:3b:56:
                    0f:05:24:d3:19:5d:ea:bc:00:7c:70:2e:61:58:fe:
                    94:d8:e4:7f:8a:9a:4b:f4:35:cd:3f:f9:8e:d2:6d:
                    20:7e:d2:41:61:4a:79:e8:64:b9:1f:ca:4e:ad:c2:
                    f6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:61:EC:A8:37:21:9D:66:D2:FB:4B:FC:DD:CC:DC:B6:F1:34:E0:28
            X509v3 Authority Key Identifier:
                keyid:6C:43:D0:70:D5:38:68:DD:0F:1A:35:2E:AB:84:A7:64:2B:5C:EF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/34352e3232342e3132342e302f32342d3234203d3e20323734323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:17:77:d5:37:0e:ea:40:d5:cf:f9:48:08:e2:aa:94:c1:91:
         eb:39:9c:28:06:be:fe:68:b1:ef:5f:b3:81:51:07:2f:66:ad:
         66:71:c8:8b:f4:50:64:75:e4:93:3e:e5:7a:2a:e8:83:0b:ef:
         89:95:e8:8b:36:9f:e8:10:97:d9:bf:28:ca:64:d5:80:f8:0a:
         f7:31:87:2f:3e:00:36:7f:58:c4:94:92:92:9d:ce:07:4c:6f:
         01:88:d4:7f:d3:0f:43:c1:0e:f1:96:8c:b1:c9:ea:f2:12:4b:
         c2:a7:a2:2e:3a:e6:cc:29:03:87:96:28:a2:35:9f:eb:6a:9c:
         f5:6a:57:dc:a8:dc:d9:42:80:95:db:41:1b:2c:cf:cb:9c:2c:
         e8:59:3f:55:e4:c4:97:14:40:55:e6:8d:7b:7c:70:ef:84:a1:
         5c:5e:b6:8b:df:b9:72:0c:3f:8f:b6:3e:45:28:98:ee:b9:ed:
         60:58:7e:d6:0f:7b:2d:23:71:c5:7c:a1:be:39:be:93:89:f8:
         a7:a7:82:79:d6:65:32:64:43:0a:e7:53:57:74:d0:2d:9a:f8:
         46:3f:f8:8a:30:83:b5:0f:0a:d2:df:d2:e2:8d:42:2b:6c:05:
         b1:04:be:8e:31:33:af:1a:d1:16:4b:74:eb:88:6c:3a:8c:bd:
         2a:3c:dc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:59:35 2026 by rpki-client