Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/34352e3139302e3132372e302f32342d3234203d3e20323639383739.roa
File:                     34352e3139302e3132372e302f32342d3234203d3e20323639383739.roa (raw, json)
Hash identifier:          j1DkIgR1ybXZlO1+koSKvACfwVUEEPDaCDmiOiGlPVo=
Subject key identifier:   76:93:EE:A6:DB:E7:86:EE:C4:88:FC:5D:CD:BD:61:D0:A9:1A:91:D3
Certificate issuer:       /CN=0876357D23A3C9EA0B1482697310BD71CC75DCA7
Certificate serial:       6E9D3F5F5AE9E3B2D8DC6E22F2995098B73002D9
Authority key identifier: 08:76:35:7D:23:A3:C9:EA:0B:14:82:69:73:10:BD:71:CC:75:DC:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/34352e3139302e3132372e302f32342d3234203d3e20323639383739.roa
Signing time:             Wed 07 Oct 2026 02:30:00 +0000
ROA not before:           Wed 07 Oct 2026 02:25:00 +0000
ROA not after:            Wed 06 Oct 2027 02:30:00 +0000
asID:                     269879
IP address blocks:        45.190.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 22:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9d:3f:5f:5a:e9:e3:b2:d8:dc:6e:22:f2:99:50:98:b7:30:02:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0876357D23A3C9EA0B1482697310BD71CC75DCA7
        Validity
            Not Before: Oct  7 02:25:00 2026 GMT
            Not After : Oct  6 02:30:00 2027 GMT
        Subject: CN=7693EEA6DBE786EEC488FC5DCDBD61D0A91A91D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:44:c1:ee:f5:13:5d:28:43:84:21:3c:0a:25:
                    57:9c:6a:e9:7d:34:00:c7:61:d4:98:51:9b:d4:6c:
                    4e:05:2d:0f:7b:a3:55:d5:56:0b:4e:1f:2e:20:0a:
                    9f:c5:34:c6:17:4f:bb:e7:fb:ae:ba:82:49:c0:49:
                    fc:e5:e4:52:a6:53:b2:61:78:44:1b:f4:ea:0f:6c:
                    6b:7d:93:44:89:e0:d8:8c:44:20:7b:d6:40:f0:d5:
                    d0:e4:aa:dc:f5:bc:fd:2c:a9:b8:28:85:3d:00:34:
                    14:68:e6:e2:cd:52:d1:18:69:2e:0f:a8:35:84:29:
                    9a:a1:7f:19:51:70:d8:dd:5e:23:d4:df:33:18:11:
                    df:51:54:0d:cb:2d:61:5a:51:01:31:f9:9e:76:cf:
                    a3:e8:26:32:84:e9:f4:b9:11:1b:54:50:19:ae:32:
                    99:8b:f0:1b:0a:9e:5e:90:87:90:94:23:db:19:5c:
                    7a:63:c9:d4:f2:2a:65:b3:9b:b6:22:3e:a9:ff:b2:
                    64:9d:8c:ea:f6:25:ca:75:8f:96:a4:23:5e:e0:88:
                    34:76:53:d0:83:42:61:dc:ae:31:49:16:51:b8:c5:
                    c8:ae:cc:fc:98:0f:44:5e:dd:52:aa:ce:d4:c5:39:
                    1e:8e:99:a4:ec:51:4e:3a:d0:c0:34:b6:28:6a:d0:
                    33:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:93:EE:A6:DB:E7:86:EE:C4:88:FC:5D:CD:BD:61:D0:A9:1A:91:D3
            X509v3 Authority Key Identifier:
                keyid:08:76:35:7D:23:A3:C9:EA:0B:14:82:69:73:10:BD:71:CC:75:DC:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/34352e3139302e3132372e302f32342d3234203d3e20323639383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:3c:e2:4c:1d:fe:73:ad:36:4d:cb:84:73:ed:41:89:66:8a:
         60:f6:d6:e0:95:4a:6b:0d:fb:d0:06:a4:cf:68:a9:3c:9f:e3:
         ff:a4:5d:85:30:cb:9a:b7:ce:68:1d:76:e5:78:bb:58:d4:07:
         2d:4b:fc:a8:04:d4:69:a2:5a:e2:19:b7:6f:27:26:90:57:9d:
         78:30:e9:c3:f5:b6:52:0e:82:17:71:b5:83:6f:6f:f3:b6:8a:
         61:27:1d:47:1b:42:98:d1:23:fa:68:a2:cd:98:44:5e:ab:fb:
         5b:5c:42:dc:c9:6a:b9:aa:ba:f6:44:cd:1f:83:c8:c9:61:00:
         40:ff:3f:75:e2:84:56:aa:a2:a3:85:ef:7d:03:4e:cd:c5:6a:
         a3:22:68:25:11:95:2d:7a:0f:51:a6:7f:9f:6b:b2:83:01:0a:
         88:a3:44:d3:be:98:47:a8:f1:d2:fc:26:a8:07:59:70:7a:ab:
         60:ab:fd:3d:32:1b:a6:54:99:1c:6d:08:2a:86:81:4f:d7:96:
         9c:21:1a:a1:c3:86:25:26:58:d3:68:f0:4c:60:2a:79:b7:74:
         b7:29:c0:76:c1:e4:aa:d8:67:08:03:68:d1:9e:25:9d:df:11:
         3b:61:cb:fe:2c:29:ac:e1:70:81:63:17:57:f1:af:41:55:0e:
         92:a1:16:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:08:33 2026 by rpki-client