Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C6FBE8CCBB63F91747118DEBAF0E3583DEC309578A1C22F22413425AD164305/0/34352e3137342e37362e302f32322d3232203d3e20323635363237.roa
File:                     34352e3137342e37362e302f32322d3232203d3e20323635363237.roa (raw, json)
Hash identifier:          K3yZS7bER0gAUv9Ai/AKDZq9nHLeaIMwzQjXF9WgkIo=
Subject key identifier:   E9:75:2E:DE:88:7C:5F:D0:E8:88:48:27:7A:42:E8:44:02:42:BC:4D
Certificate issuer:       /CN=0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C
Certificate serial:       5C61F37CFBF94AA7F5FF6FD451D69214D046CF63
Authority key identifier: 0C:AB:CA:4D:4E:DD:FC:E1:85:5F:D6:1D:DC:E6:7F:98:96:09:E7:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C6FBE8CCBB63F91747118DEBAF0E3583DEC309578A1C22F22413425AD164305/0/34352e3137342e37362e302f32322d3232203d3e20323635363237.roa
Signing time:             Sun 19 Apr 2026 19:10:00 +0000
ROA not before:           Sun 19 Apr 2026 19:05:00 +0000
ROA not after:            Sun 18 Apr 2027 19:10:00 +0000
asID:                     265627
IP address blocks:        45.174.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C6FBE8CCBB63F91747118DEBAF0E3583DEC309578A1C22F22413425AD164305/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C6FBE8CCBB63F91747118DEBAF0E3583DEC309578A1C22F22413425AD164305/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 11:11:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:61:f3:7c:fb:f9:4a:a7:f5:ff:6f:d4:51:d6:92:14:d0:46:cf:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C
        Validity
            Not Before: Apr 19 19:05:00 2026 GMT
            Not After : Apr 18 19:10:00 2027 GMT
        Subject: CN=E9752EDE887C5FD0E88848277A42E8440242BC4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3e:3c:2c:5a:03:e4:fb:88:5c:07:9a:cb:6f:
                    96:2f:7d:44:28:c6:11:07:60:a0:c2:04:35:1b:f2:
                    1a:01:69:6e:bc:57:54:0c:34:13:35:86:af:f5:b0:
                    6f:61:00:ae:b6:92:c9:3e:da:bc:0d:16:eb:a7:ac:
                    99:81:6e:95:69:a4:3f:20:ab:75:3a:c8:91:de:97:
                    75:97:4e:dc:21:41:25:a4:7e:f3:26:d2:83:ad:02:
                    e8:ed:df:0a:4b:29:6b:8b:80:8a:08:c6:07:3a:50:
                    3e:3c:83:36:28:34:b2:f1:86:37:4a:84:b1:d2:ae:
                    82:08:82:4d:89:9d:9e:16:40:08:52:20:dd:ec:1b:
                    35:1e:c0:1a:be:04:61:37:39:8a:42:75:be:ad:1d:
                    41:cb:c4:8d:93:c6:cb:a2:ce:e2:56:a9:67:56:f3:
                    8b:7d:47:a8:3f:14:c4:cd:11:1c:5e:df:7c:37:a1:
                    0b:b2:62:0f:66:2d:25:0f:ee:b0:ed:a5:3d:84:cf:
                    e1:6e:bb:6f:c9:75:8e:26:1a:3f:7b:e8:4e:23:1c:
                    7d:e4:78:12:e7:5b:13:d3:c5:97:34:fe:34:65:e3:
                    e3:e3:d3:70:90:62:6f:f2:85:87:b2:97:d8:f5:09:
                    45:9b:7e:10:cc:16:1b:a3:2c:88:ad:a1:ca:69:84:
                    06:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:75:2E:DE:88:7C:5F:D0:E8:88:48:27:7A:42:E8:44:02:42:BC:4D
            X509v3 Authority Key Identifier:
                keyid:0C:AB:CA:4D:4E:DD:FC:E1:85:5F:D6:1D:DC:E6:7F:98:96:09:E7:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C6FBE8CCBB63F91747118DEBAF0E3583DEC309578A1C22F22413425AD164305/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C6FBE8CCBB63F91747118DEBAF0E3583DEC309578A1C22F22413425AD164305/0/34352e3137342e37362e302f32322d3232203d3e20323635363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:14:ce:46:f7:13:03:ed:9a:c2:7d:06:a3:b5:4c:82:e2:30:
         f1:58:32:35:ad:76:24:c4:b9:bc:f0:f8:9c:4d:26:11:c8:d6:
         76:fe:6f:4c:ce:e5:d7:1a:5f:39:4e:6a:b3:86:a6:88:9f:67:
         f7:ea:d8:34:a6:7c:b4:92:a9:b1:b9:69:fc:4c:6d:d6:b7:c8:
         b8:63:38:c8:a8:7d:6d:98:f8:21:09:46:42:32:1b:35:01:81:
         a4:9e:6d:97:9d:6c:86:c8:eb:41:9e:2c:4d:34:c1:59:90:86:
         15:9e:30:a8:59:60:e0:92:6c:14:b3:80:b1:13:88:af:da:68:
         b8:51:19:1e:e2:dc:ca:ed:06:5f:cd:3a:dd:6c:86:79:92:62:
         2a:d1:44:c4:5d:b7:85:91:0a:a7:ac:0f:0a:17:56:b6:82:ad:
         70:c6:38:cc:29:91:96:c9:cf:ba:42:7e:c8:03:fa:ee:25:a8:
         43:76:af:44:1a:7c:3b:95:29:90:f0:12:f8:d3:72:c2:12:63:
         80:01:d0:44:5d:5e:f0:d0:24:70:d7:e7:1d:93:04:1c:c3:dd:
         3c:05:4f:fb:c4:bc:d7:f0:d5:5f:e5:d0:e8:35:a4:f9:62:6d:
         b8:a0:c2:b6:be:63:db:53:0e:7b:3a:d9:35:47:be:2d:b6:e8:
         e0:77:f0:cc
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXGHzfPv5Sqf1/2/UUdaSFNBGz2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENBQkNBNEQ0RURERkNFMTg1NUZENjFERENFNjdGOTg5
NjA5RTcyQzAeFw0yNjA0MTkxOTA1MDBaFw0yNzA0MTgxOTEwMDBaMDMxMTAvBgNV
BAMTKEU5NzUyRURFODg3QzVGRDBFODg4NDgyNzdBNDJFODQ0MDI0MkJDNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPPjwsWgPk+4hcB5rLb5YvfUQo
xhEHYKDCBDUb8hoBaW68V1QMNBM1hq/1sG9hAK62ksk+2rwNFuunrJmBbpVppD8g
q3U6yJHel3WXTtwhQSWkfvMm0oOtAujt3wpLKWuLgIoIxgc6UD48gzYoNLLxhjdK
hLHSroIIgk2JnZ4WQAhSIN3sGzUewBq+BGE3OYpCdb6tHUHLxI2TxsuizuJWqWdW
84t9R6g/FMTNERxe33w3oQuyYg9mLSUP7rDtpT2Ez+Fuu2/JdY4mGj976E4jHH3k
eBLnWxPTxZc0/jRl4+Pj03CQYm/yhYeyl9j1CUWbfhDMFhujLIitocpphAaXAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU6XUu3oh8X9DoiEgnekLoRAJCvE0wHwYDVR0j
BBgwFoAUDKvKTU7d/OGFX9Yd3OZ/mJYJ5ywwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85QzZGQkU4Q0NCQjYzRjkxNzQ3MTE4REVCQUYwRTM1ODNE
RUMzMDk1NzhBMUMyMkYyMjQxMzQyNUFEMTY0MzA1LzAvMENBQkNBNEQ0RURERkNF
MTg1NUZENjFERENFNjdGOTg5NjA5RTcyQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQ0FCQ0E0RDRFRERGQ0UxODU1
RkQ2MUREQ0U2N0Y5ODk2MDlFNzJDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUM2RkJFOENDQkI2M0Y5MTc0NzExOERFQkFGMEUzNTgzREVDMzA5NTc4
QTFDMjJGMjI0MTM0MjVBRDE2NDMwNS8wLzM0MzUyZTMxMzczNDJlMzczNjJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNTM2MzIzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2uTDAN
BgkqhkiG9w0BAQsFAAOCAQEAeBTORvcTA+2awn0Go7VMguIw8VgyNa12JMS5vPD4
nE0mEcjWdv5vTM7l1xpfOU5qs4amiJ9n9+rYNKZ8tJKpsblp/Ext1rfIuGM4yKh9
bZj4IQlGQjIbNQGBpJ5tl51shsjrQZ4sTTTBWZCGFZ4wqFlg4JJsFLOAsROIr9po
uFEZHuLcyu0GX8063WyGeZJiKtFExF23hZEKp6wPChdWtoKtcMY4zCmRlsnPukJ+
yAP67iWoQ3avRBp8O5UpkPAS+NNywhJjgAHQRF1e8NAkcNfnHZMEHMPdPAVP+8S8
1/DVX+XQ6DWk+WJtuKDCtr5j21MOezrZNUe+Lbbo4HfwzA==
-----END CERTIFICATE-----
Generated at Wed May 13 16:20:18 2026 by rpki-client