Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e312e302f32342d3234203d3e203139353531.roa
File:                     34352e3136322e312e302f32342d3234203d3e203139353531.roa (raw, json)
Hash identifier:          7kH6TX9T5SHFo5fEL1weJ0/n2iW+IM/SjrItBEhQXX8=
Subject key identifier:   6D:80:EC:3B:33:0F:CF:EE:B6:D9:EC:A4:E0:9C:EC:DC:90:40:F2:37
Certificate issuer:       /CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
Certificate serial:       703A693CE83B8D57C12B109D16704B78409546EA
Authority key identifier: E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e312e302f32342d3234203d3e203139353531.roa
Signing time:             Mon 20 Apr 2026 20:39:27 +0000
ROA not before:           Mon 20 Apr 2026 20:34:27 +0000
ROA not after:            Mon 19 Apr 2027 20:39:27 +0000
asID:                     19551
IP address blocks:        45.162.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:3a:69:3c:e8:3b:8d:57:c1:2b:10:9d:16:70:4b:78:40:95:46:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
        Validity
            Not Before: Apr 20 20:34:27 2026 GMT
            Not After : Apr 19 20:39:27 2027 GMT
        Subject: CN=6D80EC3B330FCFEEB6D9ECA4E09CECDC9040F237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:0c:9c:a5:dd:8b:24:c6:d7:8d:f2:97:db:
                    58:33:72:32:a2:2b:d7:80:b6:96:73:5b:dd:ca:6b:
                    c1:c4:db:54:ae:1f:ae:3e:d3:33:e8:52:40:d2:f0:
                    99:60:c2:72:90:55:0e:ca:78:9c:ce:6f:93:cc:76:
                    fd:48:46:e0:17:b7:e7:06:68:df:00:27:f2:23:5b:
                    98:0a:57:fb:26:fe:bb:38:d6:e9:60:cc:a2:9e:cb:
                    c8:fd:be:73:1f:b9:34:16:af:61:7c:b3:c2:57:d8:
                    7c:c9:71:ce:c0:75:3f:d7:40:9c:77:92:21:e1:ba:
                    22:db:85:55:b1:77:8f:99:35:8c:03:1d:69:b0:e9:
                    bb:10:0e:e1:8a:2c:21:c0:ed:17:8a:18:24:73:48:
                    af:88:b1:54:f8:0a:da:9c:5c:26:22:cf:ea:93:0a:
                    9b:c8:85:5a:35:27:6a:cb:ce:4a:71:f0:08:88:38:
                    39:f9:b0:8d:ac:9c:89:6e:a9:67:95:55:f8:c6:69:
                    57:0f:1f:bf:62:6d:21:cd:13:d9:86:1b:c3:0f:76:
                    e7:ea:7a:2c:d6:8b:01:3f:5e:ec:0d:3e:ba:88:88:
                    08:bb:17:f5:9b:05:cf:57:2e:b5:de:6d:21:21:77:
                    40:80:b7:d7:7f:9a:7d:38:12:7c:b1:04:c7:22:52:
                    c2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:80:EC:3B:33:0F:CF:EE:B6:D9:EC:A4:E0:9C:EC:DC:90:40:F2:37
            X509v3 Authority Key Identifier:
                keyid:E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e312e302f32342d3234203d3e203139353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:d7:7a:f5:6e:27:3c:fe:f5:46:45:66:29:e6:75:b3:c2:7c:
         6a:fb:8f:62:3b:76:c6:fc:60:08:c5:50:62:a6:65:4b:20:c9:
         8f:d1:91:51:b1:49:c2:f7:99:02:ec:23:bb:43:e4:f8:27:a2:
         7d:0a:4a:15:2d:6a:73:74:4b:d3:86:ec:6e:b0:25:2e:6b:9a:
         6d:d2:79:73:f3:da:3c:5c:eb:c6:d7:e1:72:66:4a:50:e2:cf:
         c2:39:64:8d:49:41:d5:35:c8:bd:b0:80:dd:c2:53:6c:41:dc:
         22:7d:85:b5:a3:a4:c8:98:fd:30:50:54:44:f6:a9:12:49:f8:
         00:70:99:0e:92:a7:90:98:50:dd:29:2a:a5:a0:96:7d:ad:7e:
         46:f1:06:67:dd:54:48:d9:35:6b:71:b1:8a:6b:c7:14:ff:24:
         3e:40:f9:80:32:61:c3:d9:fa:59:43:2c:46:cd:9b:5b:09:61:
         8e:31:ca:1b:ca:fc:4a:73:9f:d3:5d:93:c9:ce:8d:43:1b:5f:
         17:34:35:ff:c6:bf:2c:7a:13:25:95:f1:79:59:da:5a:83:96:
         2d:91:2d:cc:7c:86:59:b8:20:a5:47:62:62:4e:7a:b8:5d:a1:
         45:89:8a:b5:0a:8c:9a:f1:47:26:e3:6a:68:4b:f6:a6:73:e5:
         15:bf:d1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:08:40 2026 by rpki-client