Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DF316B29967CD5FBE9A263BDD6A1BE09D9B10E733A7472C91A2341782EE6429/0/34352e3137302e3234322e302f32332d3234203d3e20323734393435.roa
File:                     34352e3137302e3234322e302f32332d3234203d3e20323734393435.roa (raw, json)
Hash identifier:          vkLOhaP8TNJEiYIhGTr+9sbKujhRUg1DlDAGTk71k9Y=
Subject key identifier:   AF:A6:20:03:28:28:9C:EB:F0:B8:60:C1:0F:04:55:FD:EF:B8:65:23
Certificate issuer:       /CN=8DB2360DDD94D6B7DC81C9C4040F2FFF54BD1B65
Certificate serial:       2B375D65E3536A6406832D0D84091DB7FD26E079
Authority key identifier: 8D:B2:36:0D:DD:94:D6:B7:DC:81:C9:C4:04:0F:2F:FF:54:BD:1B:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB2360DDD94D6B7DC81C9C4040F2FFF54BD1B65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DF316B29967CD5FBE9A263BDD6A1BE09D9B10E733A7472C91A2341782EE6429/0/34352e3137302e3234322e302f32332d3234203d3e20323734393435.roa
Signing time:             Mon 29 Jun 2026 17:55:00 +0000
ROA not before:           Mon 29 Jun 2026 17:50:00 +0000
ROA not after:            Mon 28 Jun 2027 17:55:00 +0000
asID:                     274945
IP address blocks:        45.170.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DF316B29967CD5FBE9A263BDD6A1BE09D9B10E733A7472C91A2341782EE6429/0/8DB2360DDD94D6B7DC81C9C4040F2FFF54BD1B65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DF316B29967CD5FBE9A263BDD6A1BE09D9B10E733A7472C91A2341782EE6429/0/8DB2360DDD94D6B7DC81C9C4040F2FFF54BD1B65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB2360DDD94D6B7DC81C9C4040F2FFF54BD1B65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:37:5d:65:e3:53:6a:64:06:83:2d:0d:84:09:1d:b7:fd:26:e0:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DB2360DDD94D6B7DC81C9C4040F2FFF54BD1B65
        Validity
            Not Before: Jun 29 17:50:00 2026 GMT
            Not After : Jun 28 17:55:00 2027 GMT
        Subject: CN=AFA6200328289CEBF0B860C10F0455FDEFB86523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:69:71:7b:ef:2a:a4:ae:f6:46:58:bf:d2:45:
                    4e:a9:14:bf:0e:4a:4c:a0:a1:6a:2d:1f:21:85:2e:
                    1d:89:ee:6a:00:91:7f:53:0a:a9:2d:85:da:1e:92:
                    27:24:5d:3f:60:4a:5a:1b:6e:e5:e0:5f:8b:54:93:
                    3f:ef:d7:67:3b:dc:1c:7e:b2:48:db:20:7f:c7:57:
                    f1:59:db:68:21:bb:7e:26:9e:60:ba:f5:3c:2d:7f:
                    0c:3b:39:7f:32:9e:0b:d2:54:54:df:2b:04:e0:40:
                    37:69:7d:bf:3c:dd:6e:55:7b:c5:44:e1:61:3b:b6:
                    c7:f3:4f:7a:cd:d5:ca:34:8c:8d:8b:c5:21:65:6c:
                    69:2f:9e:ba:c7:66:7d:45:b1:35:43:7d:49:f9:83:
                    11:a4:f8:2d:fc:fe:57:c6:b0:cc:fb:b9:b9:c6:1a:
                    3e:48:7c:1c:68:6a:19:1d:f7:8c:30:f0:d3:60:2a:
                    c7:8b:9b:e4:a2:f2:8d:58:80:66:d9:99:a7:c5:20:
                    04:3d:b1:24:5b:59:c5:fe:88:c1:4b:ad:6b:51:e1:
                    68:2b:7b:a5:1f:8d:66:06:67:25:d9:25:35:8a:b5:
                    32:55:c5:ee:d4:29:a7:6d:2a:15:a2:64:0b:e3:ad:
                    f3:17:e2:fd:30:ad:96:60:a5:fe:ec:16:11:ac:c4:
                    ed:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A6:20:03:28:28:9C:EB:F0:B8:60:C1:0F:04:55:FD:EF:B8:65:23
            X509v3 Authority Key Identifier:
                keyid:8D:B2:36:0D:DD:94:D6:B7:DC:81:C9:C4:04:0F:2F:FF:54:BD:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DF316B29967CD5FBE9A263BDD6A1BE09D9B10E733A7472C91A2341782EE6429/0/8DB2360DDD94D6B7DC81C9C4040F2FFF54BD1B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB2360DDD94D6B7DC81C9C4040F2FFF54BD1B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DF316B29967CD5FBE9A263BDD6A1BE09D9B10E733A7472C91A2341782EE6429/0/34352e3137302e3234322e302f32332d3234203d3e20323734393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:fa:6b:cc:21:80:90:1b:01:53:c9:33:d2:31:ea:3a:73:80:
         96:4e:50:5e:c9:8e:9c:80:50:e1:ed:65:a3:e0:e1:e6:bf:59:
         17:41:3b:0b:0c:67:ad:4d:5c:44:fe:43:9c:f1:60:47:2c:e3:
         8f:8f:56:ba:1f:8f:a4:2e:93:d3:ed:63:58:22:bc:7d:ff:7a:
         36:bf:f9:dd:4e:47:07:0e:a8:5f:f7:83:b9:c8:6f:03:f4:35:
         ca:b7:d3:a3:64:63:89:4b:f2:53:70:2f:60:40:fc:f0:6a:51:
         46:11:c7:af:e8:8c:a8:9b:58:5c:83:2b:9f:f0:33:9c:fd:43:
         5b:a3:a0:a9:03:ca:b0:65:e9:70:6e:62:ad:4d:30:1b:8f:b0:
         64:ab:57:2f:0a:1b:d4:1d:3b:1b:fa:ea:8e:95:f1:c0:bf:fd:
         7f:bc:2b:06:d6:bc:c8:62:80:2c:ef:89:5d:d7:43:70:63:0d:
         6d:1a:af:70:2d:ad:89:86:0c:35:27:ef:c9:63:fa:fe:6d:96:
         68:f7:d9:ac:d6:b2:2c:92:68:ec:b9:7a:d9:df:6e:75:3e:f7:
         f8:f6:c9:03:e7:30:41:73:39:0d:fc:1e:12:5a:b2:57:c7:f2:
         5d:11:f5:8c:5e:02:ac:f3:ff:0f:ac:b4:03:04:97:58:f1:83:
         3a:64:0f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:45:05 2026 by rpki-client