Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/34352e3137322e3130382e302f32322d3232203d3e20323637383034.roa
File:                     34352e3137322e3130382e302f32322d3232203d3e20323637383034.roa (raw, json)
Hash identifier:          wy6UEJ1IghpHDy6TbY+Nsd9Dcwon1fBgYy1Tu4zVD2Q=
Subject key identifier:   EB:BB:E8:94:74:C8:EB:99:22:0B:1F:52:02:6B:80:1C:23:52:E7:F0
Certificate issuer:       /CN=DB64E4361CC10336A50698A495856E73977BB462
Certificate serial:       20383B29B06006B63E736177A742B9B9D4AD6A88
Authority key identifier: DB:64:E4:36:1C:C1:03:36:A5:06:98:A4:95:85:6E:73:97:7B:B4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/34352e3137322e3130382e302f32322d3232203d3e20323637383034.roa
Signing time:             Mon 13 Jul 2026 19:52:10 +0000
ROA not before:           Mon 13 Jul 2026 19:47:10 +0000
ROA not after:            Mon 12 Jul 2027 19:52:10 +0000
asID:                     267804
IP address blocks:        45.172.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:38:3b:29:b0:60:06:b6:3e:73:61:77:a7:42:b9:b9:d4:ad:6a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB64E4361CC10336A50698A495856E73977BB462
        Validity
            Not Before: Jul 13 19:47:10 2026 GMT
            Not After : Jul 12 19:52:10 2027 GMT
        Subject: CN=EBBBE89474C8EB99220B1F52026B801C2352E7F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f2:b1:b5:7e:98:36:e5:fa:d4:37:ed:d1:05:
                    35:e2:ab:9a:6f:df:65:59:27:ef:dd:5e:33:cd:31:
                    80:47:61:dc:2f:d2:dd:92:48:cd:b5:89:8f:13:68:
                    89:7b:f2:7a:8b:85:4e:b9:04:25:3b:f2:86:a9:2a:
                    db:13:ed:4e:cc:57:0d:fc:b8:7d:11:9a:bd:19:2f:
                    4f:13:c2:91:0e:2b:0b:09:c8:fd:29:2a:29:63:86:
                    58:89:49:76:5d:06:c2:76:cd:6f:38:04:bb:41:63:
                    d9:81:fd:9d:ea:12:65:24:67:d8:f2:3b:c7:e7:a9:
                    17:e1:51:e3:f8:46:81:8a:21:c7:02:fa:62:e9:2b:
                    21:44:0a:29:75:a6:80:6c:73:dd:23:69:85:4b:fd:
                    0b:46:f2:3d:41:a0:97:fb:03:d6:07:88:a6:1a:d4:
                    81:db:e8:f4:16:7f:16:73:c4:fc:b7:b4:c6:17:ef:
                    94:6f:e6:a1:99:57:6e:d7:70:e0:93:67:88:c8:29:
                    7a:4e:7d:8a:94:be:d9:a4:de:38:a3:14:12:c3:79:
                    be:31:a2:2a:4d:fd:09:16:58:ea:f2:76:3d:bc:19:
                    00:94:f0:dd:61:3b:a0:43:82:bc:5f:de:50:34:e7:
                    bd:82:24:7a:2a:fc:a5:1f:c9:c9:ac:47:c1:99:8e:
                    e0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BB:E8:94:74:C8:EB:99:22:0B:1F:52:02:6B:80:1C:23:52:E7:F0
            X509v3 Authority Key Identifier:
                keyid:DB:64:E4:36:1C:C1:03:36:A5:06:98:A4:95:85:6E:73:97:7B:B4:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/34352e3137322e3130382e302f32322d3232203d3e20323637383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:1c:54:2b:b0:a9:4c:1d:dc:de:a5:d7:94:34:18:52:bc:95:
         8f:21:21:4c:2a:4a:f0:e7:b8:40:8a:2b:76:cd:16:ba:28:b3:
         33:cd:25:f3:1c:65:6e:fa:4a:75:eb:b7:00:93:b4:3a:33:ea:
         6c:d5:29:5f:23:f0:29:cb:34:7a:72:9c:7f:bd:f9:66:2e:7b:
         2b:bb:6c:cf:f6:2e:1f:d7:e7:8f:62:0c:41:c0:b4:b9:81:e8:
         3d:b9:be:5d:58:61:c9:0c:b3:1c:8a:b2:5b:f8:1a:f5:15:61:
         73:b5:b2:8c:af:9c:d9:38:e3:87:96:78:39:80:b3:9d:9f:14:
         c6:ae:2a:c4:1d:66:ed:9a:57:9a:64:2f:fd:d6:76:af:50:85:
         14:13:6a:f6:15:33:52:37:de:af:e9:f9:36:8a:c8:ba:70:98:
         c4:e7:20:85:9e:15:83:fe:6b:d7:59:8c:d1:39:c6:05:70:9b:
         01:49:7f:4a:31:cc:73:b7:e4:fb:07:2a:a3:e0:7b:f8:fc:39:
         f0:aa:9d:1d:40:be:41:c1:62:4c:fe:16:6b:36:9c:5f:c7:98:
         b3:34:b2:18:ed:ef:62:b6:b4:09:00:00:18:82:30:10:78:04:
         ac:7b:6c:40:e2:9b:13:13:69:5f:5f:8a:0b:77:40:78:04:06:
         bc:62:cc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:18:54 2026 by rpki-client