Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/34352e3138392e3131382e302f32342d3234203d3e20323733313333.roa
File:                     34352e3138392e3131382e302f32342d3234203d3e20323733313333.roa (raw, json)
Hash identifier:          JJljYjvAlAPbWtcSh6TweRj6kTAllb206GjosO/zgfE=
Subject key identifier:   7F:F6:CC:AF:76:78:12:4B:AC:F6:D8:68:9F:57:FA:99:69:3B:69:5E
Certificate issuer:       /CN=07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC
Certificate serial:       1E5FEC711EE9068580073BE1034584F8B2E5105C
Authority key identifier: 07:CC:AF:A3:BE:AB:3D:5E:20:F9:9F:25:E8:3A:28:8F:4B:4D:48:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/34352e3138392e3131382e302f32342d3234203d3e20323733313333.roa
Signing time:             Tue 03 Mar 2026 17:32:37 +0000
ROA not before:           Tue 03 Mar 2026 17:27:37 +0000
ROA not after:            Tue 02 Mar 2027 17:32:37 +0000
asID:                     273133
IP address blocks:        45.189.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 00:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5f:ec:71:1e:e9:06:85:80:07:3b:e1:03:45:84:f8:b2:e5:10:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC
        Validity
            Not Before: Mar  3 17:27:37 2026 GMT
            Not After : Mar  2 17:32:37 2027 GMT
        Subject: CN=7FF6CCAF7678124BACF6D8689F57FA99693B695E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ea:41:4b:79:64:d0:96:95:73:10:ae:09:f0:
                    e1:f3:35:84:cd:da:2f:a8:3d:d4:e4:ff:c5:94:b6:
                    ca:f4:cd:a7:18:c7:46:6d:8a:15:3f:58:ee:66:cd:
                    ef:bf:6f:54:2a:5a:db:5d:70:56:15:77:82:78:73:
                    b5:2f:c8:17:23:fd:c0:79:e3:b9:c9:65:f4:37:a1:
                    fd:b3:4f:3e:29:7c:2b:86:3d:c9:57:fc:3a:38:41:
                    62:78:2c:dd:46:5d:83:e2:93:67:ab:23:46:ff:e5:
                    9a:79:5c:71:5e:00:ab:df:ad:15:0a:8c:82:9b:a8:
                    d7:cb:8f:36:70:70:55:84:4e:54:08:0a:4d:6f:52:
                    d2:06:d1:ff:52:e0:e2:94:ef:74:13:ef:f2:ca:ed:
                    e3:21:2e:2d:ed:75:6d:2e:5c:b4:5a:2d:9f:84:d9:
                    07:d3:2d:3d:a7:bb:4c:d7:ea:1f:f6:1f:27:68:73:
                    dc:b5:a8:4b:df:22:90:14:e3:7b:b8:fb:ec:8d:5c:
                    83:44:dd:4d:b2:16:1e:29:bb:09:18:81:26:cb:b0:
                    f5:dc:81:45:c8:4a:2b:48:4a:3b:71:1b:58:af:0d:
                    5d:af:2b:5d:8a:28:90:7a:dd:49:a8:d0:6d:ff:a5:
                    45:79:20:7f:ba:d6:c9:da:ad:fc:eb:66:6a:81:78:
                    c9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F6:CC:AF:76:78:12:4B:AC:F6:D8:68:9F:57:FA:99:69:3B:69:5E
            X509v3 Authority Key Identifier:
                keyid:07:CC:AF:A3:BE:AB:3D:5E:20:F9:9F:25:E8:3A:28:8F:4B:4D:48:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/34352e3138392e3131382e302f32342d3234203d3e20323733313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:34:85:3d:d1:52:a6:b9:8a:b9:fb:d0:27:05:e0:c7:07:57:
         82:c6:a6:bb:d7:3b:d7:b3:c5:11:25:cf:00:dc:df:09:33:59:
         88:a2:2c:78:5d:4f:99:7f:8e:29:11:09:eb:a7:54:00:60:79:
         c1:fd:01:97:88:14:74:99:e3:13:8f:d8:d6:1b:5d:2f:5c:3c:
         c3:0a:99:53:44:a4:ff:d2:e7:35:bd:3b:56:d5:5b:bf:da:c2:
         d6:4b:c6:47:54:f2:de:73:c3:89:33:53:ff:24:aa:1f:fd:da:
         f0:d0:42:a5:10:6b:62:f2:f3:66:09:38:0a:46:a7:11:c6:1b:
         61:4b:74:05:0d:7b:1e:31:94:65:67:20:6e:c0:9e:06:29:69:
         bf:25:4a:d9:63:48:bf:80:08:dd:84:ff:3a:dc:4a:7d:67:d8:
         b8:d3:69:0d:84:bf:21:8f:64:cd:90:c4:96:61:94:87:35:0e:
         53:d1:99:7e:c1:94:cc:1a:93:91:8c:a1:63:e9:1a:5a:57:b0:
         f4:c2:07:48:00:3d:b3:09:98:e6:d9:0b:ab:af:a2:5d:76:c5:
         0f:b1:e8:5f:0f:aa:d0:38:8d:24:23:98:05:9b:66:d3:c8:33:
         30:6f:40:11:cf:5c:5d:96:f7:0e:94:0c:9f:26:ec:9e:79:43:
         90:bd:42:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:44:11 2026 by rpki-client