Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/34352e3138382e37392e302f32342d3234203d3e20323635363038.roa
File:                     34352e3138382e37392e302f32342d3234203d3e20323635363038.roa (raw, json)
Hash identifier:          O6v/rBXBHm0gTKjATihBg+qv1FWkicA18D5KqV3lT5Y=
Subject key identifier:   C3:B3:C9:3A:DE:BD:43:95:B9:1D:BD:C2:1B:30:14:0B:97:C0:A1:66
Certificate issuer:       /CN=794E430D43ABFA5039F655E9806296B630AD4189
Certificate serial:       3B8ECF81DEDDB454D2842FBBD695B9391CF0ECF3
Authority key identifier: 79:4E:43:0D:43:AB:FA:50:39:F6:55:E9:80:62:96:B6:30:AD:41:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/794E430D43ABFA5039F655E9806296B630AD4189.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/34352e3138382e37392e302f32342d3234203d3e20323635363038.roa
Signing time:             Wed 30 Sep 2026 18:37:33 +0000
ROA not before:           Wed 30 Sep 2026 18:32:33 +0000
ROA not after:            Wed 29 Sep 2027 18:37:33 +0000
asID:                     265608
IP address blocks:        45.188.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/794E430D43ABFA5039F655E9806296B630AD4189.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/794E430D43ABFA5039F655E9806296B630AD4189.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/794E430D43ABFA5039F655E9806296B630AD4189.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 05:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8e:cf:81:de:dd:b4:54:d2:84:2f:bb:d6:95:b9:39:1c:f0:ec:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794E430D43ABFA5039F655E9806296B630AD4189
        Validity
            Not Before: Sep 30 18:32:33 2026 GMT
            Not After : Sep 29 18:37:33 2027 GMT
        Subject: CN=C3B3C93ADEBD4395B91DBDC21B30140B97C0A166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:29:0a:24:63:e4:2b:1a:e8:23:ab:c9:a9:
                    90:6b:17:a6:ac:9f:80:6f:16:43:d5:86:02:5b:a0:
                    ba:70:98:e8:ce:84:4e:1b:e6:c9:17:a9:6e:2e:0b:
                    f8:8c:27:c5:f1:4e:f6:5a:e6:32:0c:7b:48:19:7d:
                    7b:5d:d0:ef:bd:77:1c:c6:70:21:6f:ba:2c:e1:14:
                    f5:43:a9:f9:0a:40:67:d5:09:a7:69:21:64:49:64:
                    82:b0:40:1b:1c:c9:57:dd:d9:16:54:91:92:53:c7:
                    7f:2d:20:0e:5d:ce:52:bc:e4:ee:7a:9b:68:87:44:
                    aa:f3:52:e3:26:03:ad:14:73:d4:0f:12:7c:7c:13:
                    cb:6b:9b:cf:5f:b7:90:b4:da:40:ec:bf:92:d2:af:
                    57:db:7e:4b:49:a8:1b:c7:98:5e:ab:0f:82:65:14:
                    35:da:30:e2:ff:ac:47:05:be:98:0d:bf:ef:aa:0a:
                    6a:a7:c6:80:91:0c:f1:da:3e:fe:aa:9a:3a:bb:a7:
                    32:25:1e:f3:6d:46:b8:48:4f:27:7f:7a:02:4c:4d:
                    b4:05:4d:d4:60:fb:d0:e9:98:85:ee:b1:f3:1c:33:
                    bd:36:e1:5d:2a:65:23:c2:a4:16:bf:b3:98:b7:af:
                    ea:57:bb:ac:25:e3:b6:c4:c1:8d:9a:27:e5:6e:e1:
                    ec:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B3:C9:3A:DE:BD:43:95:B9:1D:BD:C2:1B:30:14:0B:97:C0:A1:66
            X509v3 Authority Key Identifier:
                keyid:79:4E:43:0D:43:AB:FA:50:39:F6:55:E9:80:62:96:B6:30:AD:41:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/794E430D43ABFA5039F655E9806296B630AD4189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/794E430D43ABFA5039F655E9806296B630AD4189.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AC467A348C29F65ABCF00C3A0FBB817D73370212CD721A016D54C89E3026E82/0/34352e3138382e37392e302f32342d3234203d3e20323635363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:ad:0d:af:ef:e6:a9:d9:9c:c4:ac:78:61:72:35:54:ff:4d:
         3d:6d:27:c3:24:ea:b0:4d:d0:bc:30:c4:fb:c0:76:24:7a:b1:
         38:eb:ec:07:fc:2c:45:00:e7:46:f4:b7:60:51:88:4b:61:77:
         9b:44:23:6d:03:f6:e0:85:83:32:ed:79:18:cb:d8:2b:57:bb:
         2b:36:d5:80:9e:7b:d5:64:3f:13:d8:8f:a2:51:78:9a:b5:bc:
         61:4f:da:81:87:7e:95:39:3c:71:ae:5c:66:c9:41:a4:d8:a7:
         f2:bf:30:12:55:85:e0:a5:6a:41:54:01:e2:0b:fa:35:39:9a:
         e7:73:2a:24:66:c6:a0:58:ba:5c:62:fd:cf:1f:04:f7:37:c2:
         31:8e:49:40:3b:2e:7f:4e:ef:0d:93:7e:a4:ac:b5:13:9a:b4:
         12:4c:4e:b0:38:ad:81:b6:85:8d:98:4e:51:68:ea:d1:a2:6d:
         ea:f6:18:81:2f:f2:43:b9:8a:f2:75:f8:e2:3f:34:2f:e8:27:
         87:10:17:50:68:31:d4:a6:f1:01:cc:35:26:9f:9a:5a:cd:3d:
         c7:99:0d:01:9b:d8:f1:71:eb:c0:14:49:aa:fe:5b:41:9c:22:
         de:0c:e9:24:88:64:b0:d8:6a:76:ef:7d:75:ea:24:b4:cb:23:
         e4:5e:56:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:29:25 2026 by rpki-client