Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/34352e3232342e3132372e302f32342d3234203d3e20323734323839.roa
File:                     34352e3232342e3132372e302f32342d3234203d3e20323734323839.roa (raw, json)
Hash identifier:          kZOiN58J7godTDvRJhJky7KB8kH4V/oGxu2ewoEjSDU=
Subject key identifier:   2B:9A:30:4E:23:B2:22:80:2C:E0:86:01:17:3C:52:E6:AC:F9:3E:08
Certificate issuer:       /CN=6C43D070D53868DD0F1A352EAB84A7642B5CEF73
Certificate serial:       0C9122049E7ADC5C4736D510979F39AFD06D8305
Authority key identifier: 6C:43:D0:70:D5:38:68:DD:0F:1A:35:2E:AB:84:A7:64:2B:5C:EF:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/34352e3232342e3132372e302f32342d3234203d3e20323734323839.roa
Signing time:             Thu 12 Mar 2026 06:35:00 +0000
ROA not before:           Thu 12 Mar 2026 06:30:00 +0000
ROA not after:            Thu 11 Mar 2027 06:35:00 +0000
asID:                     274289
IP address blocks:        45.224.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:91:22:04:9e:7a:dc:5c:47:36:d5:10:97:9f:39:af:d0:6d:83:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C43D070D53868DD0F1A352EAB84A7642B5CEF73
        Validity
            Not Before: Mar 12 06:30:00 2026 GMT
            Not After : Mar 11 06:35:00 2027 GMT
        Subject: CN=2B9A304E23B222802CE08601173C52E6ACF93E08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2e:47:65:d2:69:78:72:d2:68:15:7d:86:54:
                    fe:d6:0e:3a:f2:5e:f5:6a:51:6b:a1:c5:a4:18:bd:
                    ae:bb:96:45:64:62:10:77:bb:0a:dc:25:fb:29:89:
                    53:7e:54:4c:7a:46:b5:99:f3:dd:db:2a:67:c5:22:
                    1b:87:e6:76:92:df:1c:36:49:54:47:e6:bd:6a:ae:
                    ae:e0:45:02:9c:96:e3:6e:c4:91:e4:67:b5:cd:20:
                    17:1b:b5:2c:46:07:84:69:65:a0:bb:0f:fc:b7:6f:
                    c5:37:9e:b7:66:b8:3a:bd:ec:55:29:20:a8:14:1a:
                    b2:a3:d7:a4:e1:46:bf:44:f7:19:9c:31:dd:d1:27:
                    54:68:55:fa:9c:78:a8:4b:87:27:97:41:af:1b:7b:
                    2a:dd:28:2f:20:17:8e:55:9a:25:c5:af:2b:6d:c3:
                    4b:7e:4f:d3:dd:e2:ef:bd:44:fd:a2:94:a4:a6:0f:
                    53:ba:91:a6:87:81:dd:37:fc:fc:98:70:95:b0:ca:
                    49:1e:39:7e:17:7a:55:03:f2:ec:a4:e4:bc:2f:40:
                    18:b8:31:e4:b7:2f:55:0f:08:95:7b:d5:27:3a:12:
                    40:8a:75:73:5b:c3:65:d0:e0:7a:a2:ea:db:bc:3c:
                    88:4e:e2:ac:b8:1b:2c:4c:53:d8:d4:e3:0e:c9:ed:
                    68:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9A:30:4E:23:B2:22:80:2C:E0:86:01:17:3C:52:E6:AC:F9:3E:08
            X509v3 Authority Key Identifier:
                keyid:6C:43:D0:70:D5:38:68:DD:0F:1A:35:2E:AB:84:A7:64:2B:5C:EF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/34352e3232342e3132372e302f32342d3234203d3e20323734323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:d1:0d:3a:8e:54:37:05:46:4c:2e:07:3a:38:2f:60:03:8c:
         d6:e1:51:be:62:b5:12:8d:c0:ac:40:32:b8:13:57:89:8d:c2:
         3a:cb:a1:7c:ef:34:ce:98:19:7f:f1:9c:5f:d9:c3:24:d4:72:
         d9:6d:c4:60:d4:26:12:bb:73:40:57:75:c9:eb:08:8c:0a:0c:
         4c:24:76:26:d8:09:52:bd:4d:05:9e:b6:88:72:3b:c4:69:ed:
         fe:8b:d4:98:e5:ae:e7:d5:0b:27:fd:01:04:d2:3a:c3:1e:71:
         9b:54:61:92:f7:ad:8f:ce:4e:df:f6:f2:a5:34:e7:63:8f:2a:
         be:41:5e:b8:4b:37:5a:b1:d7:21:df:e2:98:25:b0:94:80:c9:
         d9:be:14:e1:68:a7:7b:c9:c4:ca:bc:7a:62:0d:7b:1d:90:3f:
         34:0a:d6:a4:ff:03:18:bd:32:ad:83:f5:4e:e5:b4:73:7f:dd:
         f8:e7:f8:07:32:cd:ae:e5:c8:fa:c7:eb:f3:8e:42:6e:54:d8:
         8d:7e:67:1b:e8:63:88:85:9c:9a:09:f8:bb:88:0f:bf:86:03:
         f8:10:94:98:93:0f:8a:be:f1:2f:73:1b:c1:48:95:07:11:b7:
         4c:6d:62:82:ae:61:15:5a:50:e8:44:11:c1:76:db:bb:3d:d5:
         52:f8:05:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:59:28 2026 by rpki-client