Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/34352e3138382e37372e302f32342d3234203d3e20323635363038.roa
File:                     34352e3138382e37372e302f32342d3234203d3e20323635363038.roa (raw, json)
Hash identifier:          ndAo7vtjKtzvktpot7QHhmbek1/kNvX8OpTuiIo+WzY=
Subject key identifier:   0E:38:BD:39:1D:1F:6E:6C:D3:3D:77:FD:EA:59:07:A1:F2:FE:4C:04
Certificate issuer:       /CN=794E430D43ABFA5039F655E9806296B630AD4189
Certificate serial:       1BD04F369D6D5865902F05C8C7B7A1DB062E56F2
Authority key identifier: 79:4E:43:0D:43:AB:FA:50:39:F6:55:E9:80:62:96:B6:30:AD:41:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/794E430D43ABFA5039F655E9806296B630AD4189.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/34352e3138382e37372e302f32342d3234203d3e20323635363038.roa
Signing time:             Wed 30 Sep 2026 18:37:32 +0000
ROA not before:           Wed 30 Sep 2026 18:32:32 +0000
ROA not after:            Wed 29 Sep 2027 18:37:32 +0000
asID:                     265608
IP address blocks:        45.188.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/794E430D43ABFA5039F655E9806296B630AD4189.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/794E430D43ABFA5039F655E9806296B630AD4189.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/794E430D43ABFA5039F655E9806296B630AD4189.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 18:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d0:4f:36:9d:6d:58:65:90:2f:05:c8:c7:b7:a1:db:06:2e:56:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794E430D43ABFA5039F655E9806296B630AD4189
        Validity
            Not Before: Sep 30 18:32:32 2026 GMT
            Not After : Sep 29 18:37:32 2027 GMT
        Subject: CN=0E38BD391D1F6E6CD33D77FDEA5907A1F2FE4C04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:28:47:ea:c4:d8:7a:e9:ae:14:6c:21:43:43:
                    08:f4:b1:ee:2f:4d:d8:35:52:94:9b:10:35:19:0b:
                    2e:d8:83:d0:42:8f:05:be:52:ef:52:d6:26:02:f0:
                    ce:da:48:9c:ad:4f:db:5d:58:ef:e2:cc:7b:98:e5:
                    72:41:10:27:29:49:c9:4b:9b:15:c8:41:0c:c7:d9:
                    db:c6:0a:fb:70:2f:07:df:18:45:14:37:ea:da:e6:
                    33:b2:d3:df:0c:8e:ea:c6:24:9a:b7:d4:eb:0c:bb:
                    b8:62:ac:81:d2:5f:32:0b:4c:a0:36:0d:18:ea:8d:
                    52:50:f5:8f:01:be:34:d9:5a:0a:9c:23:2e:da:84:
                    19:aa:58:99:bc:cf:b2:8a:8c:3a:b1:49:95:ab:4b:
                    32:b0:7d:a2:af:38:05:cf:fe:8c:cb:fc:b0:7e:96:
                    47:d9:e2:6f:04:4c:a7:6f:f0:2b:df:8d:41:f1:1c:
                    14:d6:fb:cc:20:44:f9:ae:f8:4f:df:98:b9:a3:96:
                    2b:fe:65:32:c4:d7:00:d4:e7:87:4d:b2:3e:3b:57:
                    eb:a0:14:7a:c7:6d:82:bf:81:3e:72:38:7d:cb:c2:
                    81:e7:a6:9f:88:1d:c3:f4:d3:6d:4e:75:8e:0f:4a:
                    6f:e6:9a:89:48:0f:75:53:6c:38:82:3b:a8:84:6c:
                    0c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:38:BD:39:1D:1F:6E:6C:D3:3D:77:FD:EA:59:07:A1:F2:FE:4C:04
            X509v3 Authority Key Identifier:
                keyid:79:4E:43:0D:43:AB:FA:50:39:F6:55:E9:80:62:96:B6:30:AD:41:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/794E430D43ABFA5039F655E9806296B630AD4189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/794E430D43ABFA5039F655E9806296B630AD4189.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/34352e3138382e37372e302f32342d3234203d3e20323635363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:19:61:a1:8f:cf:a1:9f:9b:ea:00:20:ce:2e:df:7f:71:9a:
         b6:25:45:79:61:11:ef:e7:10:cd:fc:aa:3b:20:e9:ca:f4:22:
         4d:83:a8:d2:8f:f7:e6:f5:c4:0a:7d:47:af:7d:09:81:ea:a2:
         dc:f1:fd:64:41:e1:7f:4d:ab:80:a3:e8:5f:eb:25:5b:59:20:
         0f:ac:c3:8b:e6:66:c1:28:23:4e:05:ac:e9:f1:02:5f:47:26:
         27:5a:df:10:19:7b:cd:6a:ef:54:64:79:82:93:68:b4:41:e7:
         f4:68:5b:46:f0:4f:39:fb:d8:4d:cb:fb:64:01:06:64:80:05:
         20:1f:66:33:67:48:dd:36:f2:30:89:26:6e:ae:1a:96:d1:45:
         4e:0f:50:8c:11:44:c2:77:b3:50:e8:a0:ab:ed:68:5e:b6:2b:
         b4:b6:f5:30:6f:ab:f6:bd:62:3d:3d:18:53:df:9a:8d:80:de:
         f8:cd:f5:7f:52:5f:20:34:5e:fc:4a:2a:04:e3:83:00:38:b0:
         c9:94:a3:41:1f:79:a4:15:65:21:60:ca:e6:b4:da:75:61:d2:
         4b:8a:1e:05:05:8d:44:a6:5c:68:20:81:02:ef:a1:53:ba:cc:
         bb:ec:7b:80:dc:f5:c0:88:29:eb:ce:34:85:45:7e:26:6b:97:
         5f:6f:62:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:37:24 2026 by rpki-client