Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/34352e3137322e3130382e302f32342d3234203d3e20323637383034.roa
File:                     34352e3137322e3130382e302f32342d3234203d3e20323637383034.roa (raw, json)
Hash identifier:          Pr6t5rPbe4ZpH+Go6qjHfx2nJUVvQsxZMO8bcZyJOC0=
Subject key identifier:   93:1E:09:31:A6:F4:E2:57:B0:04:92:06:AA:4E:45:63:A2:B8:72:C6
Certificate issuer:       /CN=DB64E4361CC10336A50698A495856E73977BB462
Certificate serial:       5C85BE2C386CE83ADEDD23E3CA4B6505A58C47FF
Authority key identifier: DB:64:E4:36:1C:C1:03:36:A5:06:98:A4:95:85:6E:73:97:7B:B4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/34352e3137322e3130382e302f32342d3234203d3e20323637383034.roa
Signing time:             Mon 13 Jul 2026 19:52:11 +0000
ROA not before:           Mon 13 Jul 2026 19:47:11 +0000
ROA not after:            Mon 12 Jul 2027 19:52:11 +0000
asID:                     267804
IP address blocks:        45.172.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:85:be:2c:38:6c:e8:3a:de:dd:23:e3:ca:4b:65:05:a5:8c:47:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB64E4361CC10336A50698A495856E73977BB462
        Validity
            Not Before: Jul 13 19:47:11 2026 GMT
            Not After : Jul 12 19:52:11 2027 GMT
        Subject: CN=931E0931A6F4E257B0049206AA4E4563A2B872C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f9:ba:7d:5a:22:6f:61:f9:d5:08:14:12:15:
                    6d:57:1e:34:3b:2c:8a:ba:80:32:d1:4f:a2:96:52:
                    e5:3a:ef:ac:92:86:54:3b:83:49:ad:34:13:62:5c:
                    d5:d5:e8:9c:19:87:67:92:aa:c1:55:54:14:d6:0e:
                    55:2c:71:bf:ad:f4:35:b4:8e:ec:df:2d:13:11:73:
                    fb:55:a0:fb:1b:15:7f:92:91:4e:46:b9:1c:12:ad:
                    b5:81:e6:3e:ef:37:d0:f1:e7:4b:6c:01:08:12:0f:
                    3a:e6:91:46:43:18:0f:d6:93:b9:7d:ae:e8:3a:8d:
                    8f:ca:b8:9a:ea:6e:6d:35:b1:4e:21:30:9b:28:2c:
                    5a:e1:a5:b3:9d:95:c3:21:01:49:c5:d6:1d:77:14:
                    73:44:38:c3:56:7e:8c:2c:7a:18:54:32:0b:05:02:
                    3c:40:6c:e6:41:30:fc:71:02:d6:0f:b5:16:19:00:
                    81:e0:17:8e:c2:14:77:a3:c5:2f:a9:4b:7f:a6:b1:
                    80:04:c6:29:c6:70:28:89:fb:a8:e5:aa:69:e8:a1:
                    62:ab:d0:e2:d9:fe:38:63:34:e5:b7:49:1d:60:55:
                    eb:65:a1:15:50:20:7f:dc:96:f1:65:5d:92:f7:4f:
                    fe:2c:57:41:6e:8b:50:d9:f8:77:03:ea:8b:86:43:
                    bf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1E:09:31:A6:F4:E2:57:B0:04:92:06:AA:4E:45:63:A2:B8:72:C6
            X509v3 Authority Key Identifier:
                keyid:DB:64:E4:36:1C:C1:03:36:A5:06:98:A4:95:85:6E:73:97:7B:B4:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/34352e3137322e3130382e302f32342d3234203d3e20323637383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:33:a2:5c:3c:55:35:1b:95:cb:73:b8:4e:bb:21:9b:d7:a2:
         2a:3c:1a:03:ea:22:76:7e:e8:77:08:81:4d:2b:a4:4c:58:6b:
         0d:bb:ac:26:5b:f1:f1:3a:13:09:9d:da:ac:19:c5:97:78:ad:
         de:85:af:cd:1d:ac:a3:23:17:ae:fb:64:5c:45:1b:0c:fa:14:
         bf:d8:f6:52:be:4c:1c:b7:65:9a:3c:50:d5:9e:0b:e8:e3:8f:
         84:61:e4:08:fe:51:81:85:14:4d:fa:46:80:7b:f1:d1:e7:18:
         86:b4:2a:a3:db:bf:39:2e:9b:cf:60:11:29:89:39:d2:7d:2a:
         a5:e0:ef:e7:9c:54:28:21:08:0b:57:43:db:9e:49:ce:7e:ea:
         45:a0:a4:3d:61:ae:cb:18:17:97:91:48:66:af:27:19:39:30:
         f5:b2:bf:9c:bc:fb:ad:9f:35:ba:57:0f:f2:9f:15:83:16:d1:
         5d:34:d9:9f:37:be:0c:60:4c:06:4d:16:a1:e1:bd:3b:f3:4c:
         df:53:e5:b5:66:61:23:be:af:eb:40:01:aa:31:34:1c:ea:c1:
         45:e9:fd:72:c7:ae:34:10:a8:07:a5:5f:fe:aa:a3:1e:e4:f9:
         92:cb:36:c3:71:9b:38:a7:1d:ca:12:44:7a:f0:27:b2:62:e4:
         1b:e5:d7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:20:36 2026 by rpki-client