Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/34352e3137302e3138342e302f32322d3234203d3e20323637373636.roa
File:                     34352e3137302e3138342e302f32322d3234203d3e20323637373636.roa (raw, json)
Hash identifier:          rGx8AxzVR8vtEmDx+0r46qjEE4AQO/g1HdTKL4n81no=
Subject key identifier:   B4:0F:DC:86:6E:94:99:40:CC:F1:DC:6E:38:CE:D7:4F:63:B6:06:BF
Certificate issuer:       /CN=42EE9B624E098B952E8E073D8C62609958DB7CC3
Certificate serial:       2FA3C970AE13245E9C11BDBE69474087016CA094
Authority key identifier: 42:EE:9B:62:4E:09:8B:95:2E:8E:07:3D:8C:62:60:99:58:DB:7C:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/34352e3137302e3138342e302f32322d3234203d3e20323637373636.roa
Signing time:             Tue 23 Jun 2026 14:49:04 +0000
ROA not before:           Tue 23 Jun 2026 14:44:04 +0000
ROA not after:            Tue 22 Jun 2027 14:49:04 +0000
asID:                     267766
IP address blocks:        45.170.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a3:c9:70:ae:13:24:5e:9c:11:bd:be:69:47:40:87:01:6c:a0:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42EE9B624E098B952E8E073D8C62609958DB7CC3
        Validity
            Not Before: Jun 23 14:44:04 2026 GMT
            Not After : Jun 22 14:49:04 2027 GMT
        Subject: CN=B40FDC866E949940CCF1DC6E38CED74F63B606BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e8:9b:97:84:99:e5:f9:9e:1e:d9:c5:54:4b:
                    3b:a0:29:24:4a:dc:8a:14:e7:fe:1e:c0:1c:52:48:
                    24:3b:17:4b:97:a2:f4:0a:d2:6c:75:04:ee:87:2d:
                    ab:74:80:8b:65:dd:2c:87:1f:06:d4:6a:c9:d5:e1:
                    3d:f6:b3:33:ea:3e:1d:cc:9e:b6:c9:92:80:26:a2:
                    65:1e:70:3e:8f:1f:6e:c9:0a:f9:d5:cf:73:17:34:
                    4a:45:88:33:c7:be:5d:f4:0e:55:52:39:8c:5a:83:
                    5b:38:f8:d2:08:80:3a:52:5b:75:bf:e6:08:19:17:
                    73:6e:c7:bc:7e:c0:31:f1:bb:6f:9f:4f:05:c5:02:
                    ec:9e:b9:04:6e:64:21:cc:6b:32:5a:46:33:81:f8:
                    80:f9:5f:28:18:50:3c:f1:43:73:8a:44:05:bc:65:
                    40:7a:85:ad:0e:51:09:7a:b0:a9:c2:27:5e:b8:0c:
                    c3:b9:c0:75:64:60:47:96:bc:0d:89:bd:5f:25:1b:
                    01:77:79:06:1d:29:da:8e:b2:af:80:22:8f:91:a3:
                    5c:94:66:37:7e:ee:ba:3d:25:b3:13:d1:48:72:cf:
                    a1:77:bf:9b:d0:03:aa:fa:65:f0:f6:af:af:8e:ce:
                    11:21:17:f4:e6:60:83:a9:c7:60:c8:2b:b2:de:9d:
                    2d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0F:DC:86:6E:94:99:40:CC:F1:DC:6E:38:CE:D7:4F:63:B6:06:BF
            X509v3 Authority Key Identifier:
                keyid:42:EE:9B:62:4E:09:8B:95:2E:8E:07:3D:8C:62:60:99:58:DB:7C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/34352e3137302e3138342e302f32322d3234203d3e20323637373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:0a:36:89:e9:7b:94:01:51:f6:96:ea:ab:7d:36:f5:cd:4e:
         20:da:94:4a:34:70:3b:5a:78:bf:21:53:6e:87:e2:ea:89:1d:
         08:1e:58:ea:fd:b8:c8:b3:54:e0:30:20:04:96:24:a4:17:2c:
         ac:b0:19:71:8d:c7:0d:7b:d8:86:4b:cd:7f:45:bf:bf:fc:dd:
         a7:6c:49:6d:9e:5a:42:db:59:9b:3d:fa:47:ae:a3:1c:29:bf:
         7f:40:9b:60:ea:4b:82:7f:3a:76:03:37:21:c0:c7:3d:46:7b:
         03:52:c1:cd:91:46:f5:6a:50:cd:fa:7d:cc:71:b1:a0:b7:49:
         61:cb:52:ff:7b:7a:49:30:dc:34:4c:39:6b:f6:df:82:55:ee:
         87:2b:fb:da:1f:b5:8a:0b:ab:8b:cb:05:d5:28:f3:24:40:38:
         68:0f:cf:1e:d0:b6:b2:2f:33:f9:cb:b7:ee:01:56:09:dc:65:
         67:8a:3d:54:5f:24:6c:d3:c6:c1:a0:2a:37:e9:15:82:52:42:
         16:b5:e4:e6:ba:5f:c7:37:4a:f6:09:22:42:f9:d7:c5:ac:3c:
         e4:ed:74:bc:58:ee:54:cc:a3:1f:bd:78:bf:b0:d6:25:31:c7:
         6c:84:1b:9d:29:6c:e1:d8:ba:d4:53:4a:4f:5c:ab:7f:9d:62:
         ca:c6:3f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:16:08 2026 by rpki-client