Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/34352e3139302e3132362e302f32342d3234203d3e20323639383739.roa
File:                     34352e3139302e3132362e302f32342d3234203d3e20323639383739.roa (raw, json)
Hash identifier:          mnJYisL3jLm+BJaqyauvb6IsxUg6iio4a/RhiKHD960=
Subject key identifier:   11:8A:CE:3B:71:BE:D7:DB:69:9A:9C:E5:8B:72:44:F1:43:59:D3:A3
Certificate issuer:       /CN=0876357D23A3C9EA0B1482697310BD71CC75DCA7
Certificate serial:       66340D7206AA12D8726DA4F4A1289EF7C9EFE6A2
Authority key identifier: 08:76:35:7D:23:A3:C9:EA:0B:14:82:69:73:10:BD:71:CC:75:DC:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/34352e3139302e3132362e302f32342d3234203d3e20323639383739.roa
Signing time:             Wed 07 Oct 2026 02:30:00 +0000
ROA not before:           Wed 07 Oct 2026 02:25:00 +0000
ROA not after:            Wed 06 Oct 2027 02:30:00 +0000
asID:                     269879
IP address blocks:        45.190.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 22:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:34:0d:72:06:aa:12:d8:72:6d:a4:f4:a1:28:9e:f7:c9:ef:e6:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0876357D23A3C9EA0B1482697310BD71CC75DCA7
        Validity
            Not Before: Oct  7 02:25:00 2026 GMT
            Not After : Oct  6 02:30:00 2027 GMT
        Subject: CN=118ACE3B71BED7DB699A9CE58B7244F14359D3A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:13:96:99:5a:5c:45:51:64:4f:b7:85:13:90:
                    67:8f:c4:dc:b2:1d:1c:cc:59:fd:37:c2:df:be:dc:
                    61:38:bf:12:2e:f9:a8:e4:fe:cb:8e:3a:76:6f:42:
                    a0:b1:60:61:7e:f1:d1:96:41:7f:36:5e:ec:7c:aa:
                    a9:bc:0c:b6:ff:53:ee:73:f9:27:e1:b4:db:2f:f5:
                    75:23:af:cf:1e:b7:06:b1:60:82:e5:a3:80:43:fb:
                    13:24:53:6a:eb:3f:48:98:09:65:f0:f8:7d:97:48:
                    48:de:06:26:9e:09:87:23:70:fa:5f:2a:06:ef:50:
                    a9:4b:6b:30:7c:e0:1f:28:e0:92:b2:68:f6:f6:da:
                    81:ec:c5:00:8e:a9:43:9b:c7:90:fc:bb:4d:e1:59:
                    31:1d:31:6f:d2:b1:4c:40:b5:bb:dc:65:2c:aa:44:
                    fc:b5:9d:ab:21:64:b2:52:0b:22:e6:d6:3f:11:d6:
                    5b:fc:ed:19:92:e7:f7:5e:c0:db:18:3f:eb:f1:1a:
                    9c:9f:00:5f:de:99:f1:20:57:78:a5:dc:22:84:65:
                    54:ae:84:27:88:ba:15:b9:6b:d7:4f:a4:36:97:d7:
                    cd:5b:1d:bc:2f:2a:6c:7f:d4:3d:a2:99:98:4d:b6:
                    f0:30:72:eb:3e:ff:6f:9d:20:5c:d8:50:1a:a4:d6:
                    7b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8A:CE:3B:71:BE:D7:DB:69:9A:9C:E5:8B:72:44:F1:43:59:D3:A3
            X509v3 Authority Key Identifier:
                keyid:08:76:35:7D:23:A3:C9:EA:0B:14:82:69:73:10:BD:71:CC:75:DC:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/34352e3139302e3132362e302f32342d3234203d3e20323639383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:77:d6:98:46:0e:a1:e3:bb:c0:dc:f9:e7:1f:c0:b7:f7:f1:
         15:78:28:de:50:53:79:bc:7a:f8:99:bc:60:82:dd:c7:26:cc:
         ca:da:a4:ac:b0:a3:fe:76:2d:6a:1b:8a:9f:53:86:1b:45:4c:
         2b:9a:55:8c:35:1e:34:57:bc:1a:ae:a8:cb:71:cd:76:74:c8:
         ad:2d:fc:3b:8a:9b:5a:83:e1:50:77:44:3e:18:42:e0:69:69:
         cd:e0:20:93:44:f1:9e:dc:70:10:8c:3f:e0:6f:35:9b:48:18:
         ce:2a:e8:32:7d:4f:58:89:36:5b:74:d8:63:59:94:88:17:94:
         75:c3:15:6c:7b:8a:54:bb:fd:b8:bf:04:d0:f9:f6:d8:7e:17:
         1c:1d:39:9d:12:77:ab:bd:f9:91:78:64:96:4a:e4:45:57:1a:
         d0:91:b1:ba:e8:e8:3e:a7:9e:b9:bb:42:9a:c0:bf:2b:9f:4d:
         86:e2:cd:b5:a2:57:fc:1e:65:1d:da:c0:0c:c5:4b:0e:3e:80:
         90:aa:3f:82:c2:3a:52:54:de:1a:3a:1b:9d:2e:b0:fe:f9:54:
         96:c1:e4:ea:ef:e9:0c:b4:fe:ab:70:53:09:ff:41:b7:82:a3:
         a2:35:d4:25:bb:69:3e:84:2c:17:31:49:5d:87:5f:6f:c3:45:
         28:ef:9b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:08:39 2026 by rpki-client