Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/34352e3137322e3130392e302f32342d3234203d3e20323637383034.roa
File:                     34352e3137322e3130392e302f32342d3234203d3e20323637383034.roa (raw, json)
Hash identifier:          3lB9MNWokHmek+bCPCBNGLIhYnWxZme0/jnW7e7m8sc=
Subject key identifier:   66:9A:D2:AA:18:92:2E:B9:89:EA:DB:07:1A:98:D5:9A:61:10:F2:4A
Certificate issuer:       /CN=DB64E4361CC10336A50698A495856E73977BB462
Certificate serial:       17F55D77F26EA85D28989FEE47EE8710ADDCB4C5
Authority key identifier: DB:64:E4:36:1C:C1:03:36:A5:06:98:A4:95:85:6E:73:97:7B:B4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/34352e3137322e3130392e302f32342d3234203d3e20323637383034.roa
Signing time:             Mon 13 Jul 2026 19:52:09 +0000
ROA not before:           Mon 13 Jul 2026 19:47:09 +0000
ROA not after:            Mon 12 Jul 2027 19:52:09 +0000
asID:                     267804
IP address blocks:        45.172.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f5:5d:77:f2:6e:a8:5d:28:98:9f:ee:47:ee:87:10:ad:dc:b4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB64E4361CC10336A50698A495856E73977BB462
        Validity
            Not Before: Jul 13 19:47:09 2026 GMT
            Not After : Jul 12 19:52:09 2027 GMT
        Subject: CN=669AD2AA18922EB989EADB071A98D59A6110F24A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2e:08:2b:02:55:41:d0:e1:8d:86:81:6e:c3:
                    16:20:34:c0:02:54:55:37:9f:fa:82:ff:f4:fc:6e:
                    d8:e9:9a:e2:ed:f5:61:1c:9e:c2:03:fb:c5:e4:39:
                    4c:0c:7b:1f:79:a1:98:89:6e:02:c9:bc:25:98:13:
                    e9:d1:33:6b:63:02:a3:82:30:10:63:3a:63:64:7f:
                    58:0e:2b:ce:db:fa:34:15:f0:01:26:f4:5c:a7:4e:
                    07:be:ce:e6:a3:90:5f:3f:b4:09:0e:29:1a:c7:1f:
                    97:9b:9a:6f:af:b5:24:d6:88:bd:d0:20:96:11:68:
                    95:4e:fb:6b:7f:a4:09:95:2c:60:69:d5:71:72:98:
                    a6:0a:dd:32:f4:d0:6d:61:3f:02:b9:b4:24:01:aa:
                    71:9e:53:e0:56:20:1c:23:3f:b9:59:2f:b9:da:63:
                    10:40:e9:08:78:96:80:3b:de:b5:e4:64:38:63:e0:
                    11:61:d3:c7:3b:ff:91:ce:8e:65:67:33:a7:98:9f:
                    73:cc:73:23:11:f2:68:ff:9f:f8:99:bb:3e:b9:ac:
                    a4:e1:f2:db:0b:8c:2a:bd:f9:bf:9a:c5:87:41:4c:
                    d9:9f:d1:5b:a3:40:e3:a2:d1:29:83:b4:61:6e:69:
                    89:0a:3b:3c:6f:99:70:49:df:31:84:6d:39:44:76:
                    28:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9A:D2:AA:18:92:2E:B9:89:EA:DB:07:1A:98:D5:9A:61:10:F2:4A
            X509v3 Authority Key Identifier:
                keyid:DB:64:E4:36:1C:C1:03:36:A5:06:98:A4:95:85:6E:73:97:7B:B4:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/34352e3137322e3130392e302f32342d3234203d3e20323637383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:f7:59:92:10:b7:19:a1:5d:1a:36:57:43:9a:3f:7c:95:ab:
         2d:1d:ed:ac:3b:d2:5c:65:53:e3:37:cc:0c:db:78:d9:c1:d0:
         07:74:76:85:02:ff:2a:da:23:5a:7c:ac:a5:12:55:26:b0:0b:
         7e:48:77:47:78:00:c5:e3:07:40:fd:0c:3d:bd:45:9d:6d:0f:
         46:ae:d6:1b:b7:8f:69:a3:35:3a:df:fe:05:02:2f:a5:33:80:
         b4:3f:5c:85:c7:49:b4:4b:25:4e:b4:23:c4:c4:25:9f:fc:21:
         46:e2:b8:17:23:69:cf:5d:96:71:e4:f8:dd:dd:3f:b5:8c:9e:
         86:5e:56:77:fd:f3:e6:a8:05:b5:3a:7f:91:f3:87:d8:53:9d:
         89:e9:a3:55:98:33:3b:ca:3f:0d:2a:a3:9f:60:ab:2e:1f:d9:
         cf:6a:76:03:2d:3d:cc:63:60:64:47:90:62:b4:16:10:dd:56:
         5d:5d:ce:96:8b:43:2d:5a:61:48:24:2a:4d:92:dd:d6:8b:70:
         f1:52:4f:00:95:da:1d:02:92:fe:89:8e:be:ea:a3:1e:34:c0:
         6a:43:2a:30:22:19:b8:45:92:b5:06:11:04:50:43:a1:a3:61:
         b1:a2:e9:c6:7e:ed:65:00:7c:1a:8a:0a:ac:a1:bd:79:8f:f7:
         13:1c:2b:7a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUF/Vdd/JuqF0omJ/uR+6HEK3ctMUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI2NEU0MzYxQ0MxMDMzNkE1MDY5OEE0OTU4NTZFNzM5
NzdCQjQ2MjAeFw0yNjA3MTMxOTQ3MDlaFw0yNzA3MTIxOTUyMDlaMDMxMTAvBgNV
BAMTKDY2OUFEMkFBMTg5MjJFQjk4OUVBREIwNzFBOThENTlBNjExMEYyNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuLggrAlVB0OGNhoFuwxYgNMAC
VFU3n/qC//T8btjpmuLt9WEcnsID+8XkOUwMex95oZiJbgLJvCWYE+nRM2tjAqOC
MBBjOmNkf1gOK87b+jQV8AEm9FynTge+zuajkF8/tAkOKRrHH5ebmm+vtSTWiL3Q
IJYRaJVO+2t/pAmVLGBp1XFymKYK3TL00G1hPwK5tCQBqnGeU+BWIBwjP7lZL7na
YxBA6Qh4loA73rXkZDhj4BFh08c7/5HOjmVnM6eYn3PMcyMR8mj/n/iZuz65rKTh
8tsLjCq9+b+axYdBTNmf0VujQOOi0SmDtGFuaYkKOzxvmXBJ3zGEbTlEdigPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUZprSqhiSLrmJ6tsHGpjVmmEQ8kowHwYDVR0j
BBgwFoAU22TkNhzBAzalBpiklYVuc5d7tGIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QzA3QjdCRkUyMzBERTFCMjE4MzJBMzFBQjU5MUUyQkE1
RDY4RjExOTZBRDk0NTg0ODc5MjREMzRFODI2NjMyLzAvREI2NEU0MzYxQ0MxMDMz
NkE1MDY5OEE0OTU4NTZFNzM5NzdCQjQ2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjY0RTQzNjFDQzEwMzM2QTUw
Njk4QTQ5NTg1NkU3Mzk3N0JCNDYyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0MwN0I3QkZFMjMwREUxQjIxODMyQTMxQUI1OTFFMkJBNUQ2OEYxMTk2
QUQ5NDU4NDg3OTI0RDM0RTgyNjYzMi8wLzM0MzUyZTMxMzczMjJlMzEzMDM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzgzMDM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALaxt
MA0GCSqGSIb3DQEBCwUAA4IBAQC291mSELcZoV0aNldDmj98lastHe2sO9JcZVPj
N8wM23jZwdAHdHaFAv8q2iNafKylElUmsAt+SHdHeADF4wdA/Qw9vUWdbQ9GrtYb
t49pozU63/4FAi+lM4C0P1yFx0m0SyVOtCPExCWf/CFG4rgXI2nPXZZx5Pjd3T+1
jJ6GXlZ3/fPmqAW1On+R84fYU52J6aNVmDM7yj8NKqOfYKsuH9nPanYDLT3MY2Bk
R5BitBYQ3VZdXc6Wi0MtWmFIJCpNkt3Wi3DxUk8AldodApL+iY6+6qMeNMBqQyow
Ihm4RZK1BhEEUEOho2GxounGfu1lAHwaigqsob15j/cTHCt6
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:22:44 2026 by rpki-client