Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/34352e3137302e3138362e302f32342d3234203d3e20323637373636.roa
File:                     34352e3137302e3138362e302f32342d3234203d3e20323637373636.roa (raw, json)
Hash identifier:          QvsbaqlLfF0dU/H2RojttE1qWDWwvABTjbxNIrV6KgU=
Subject key identifier:   07:59:A0:BC:E9:D9:04:1F:FA:C6:C4:A8:20:F2:97:42:37:AF:4A:52
Certificate issuer:       /CN=42EE9B624E098B952E8E073D8C62609958DB7CC3
Certificate serial:       19BA094DE526E43EB3DA883771496CAF956B1B79
Authority key identifier: 42:EE:9B:62:4E:09:8B:95:2E:8E:07:3D:8C:62:60:99:58:DB:7C:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/34352e3137302e3138362e302f32342d3234203d3e20323637373636.roa
Signing time:             Tue 23 Jun 2026 02:48:59 +0000
ROA not before:           Tue 23 Jun 2026 02:43:59 +0000
ROA not after:            Tue 22 Jun 2027 02:48:59 +0000
asID:                     267766
IP address blocks:        45.170.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ba:09:4d:e5:26:e4:3e:b3:da:88:37:71:49:6c:af:95:6b:1b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42EE9B624E098B952E8E073D8C62609958DB7CC3
        Validity
            Not Before: Jun 23 02:43:59 2026 GMT
            Not After : Jun 22 02:48:59 2027 GMT
        Subject: CN=0759A0BCE9D9041FFAC6C4A820F2974237AF4A52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5a:1a:e6:79:fe:b4:0a:21:85:62:a0:07:eb:
                    a1:bc:53:eb:bd:19:b3:e4:11:13:ff:03:b6:63:00:
                    e4:72:7f:b0:fd:ec:0f:12:bc:74:49:09:2b:fb:8b:
                    55:1f:73:af:94:93:8f:0c:87:b4:fb:50:37:cd:e1:
                    a7:c9:63:3e:ef:3f:0b:8e:a0:b7:cf:4b:9a:bf:25:
                    87:21:0f:af:6b:f7:b5:5a:01:46:a2:20:fe:ef:40:
                    a3:48:60:14:7e:64:56:b5:82:88:71:b0:16:a5:90:
                    0b:98:70:7e:d8:be:88:17:be:fd:1e:22:52:46:ed:
                    2a:a5:0a:45:ae:5b:94:97:5a:6e:61:60:e7:19:2c:
                    15:65:50:c6:76:aa:d3:dc:7e:5d:8c:76:5b:1b:4e:
                    7b:0c:02:8f:66:96:08:18:26:b8:78:55:71:16:f9:
                    75:da:09:c8:4e:5c:0a:32:27:11:41:98:3c:67:ec:
                    02:92:84:92:cf:82:89:d2:82:0f:e4:0e:07:a6:d1:
                    e7:8a:de:4d:57:f6:63:22:95:a6:79:ec:2e:b2:e4:
                    c1:4a:c8:c3:8f:15:0e:a5:00:7f:91:9e:0c:46:f6:
                    db:b7:d0:89:83:79:a8:3b:60:2c:bc:51:59:7d:dc:
                    55:b8:65:a1:84:20:b1:07:f2:1e:fe:0f:90:ea:08:
                    e6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:59:A0:BC:E9:D9:04:1F:FA:C6:C4:A8:20:F2:97:42:37:AF:4A:52
            X509v3 Authority Key Identifier:
                keyid:42:EE:9B:62:4E:09:8B:95:2E:8E:07:3D:8C:62:60:99:58:DB:7C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/34352e3137302e3138362e302f32342d3234203d3e20323637373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:4d:89:22:1c:b0:64:d3:d9:1b:4a:51:3b:1e:03:1a:5b:89:
         0e:12:67:b2:4a:b6:c3:8b:b5:b2:15:61:18:bc:df:a1:65:3c:
         f7:5d:da:f0:52:66:26:56:b6:af:86:0b:69:07:8d:cb:d7:bf:
         d5:1a:57:a8:a0:8d:27:2e:02:d2:05:e2:bf:f5:5b:7f:c8:64:
         00:77:d3:c6:0b:d3:20:01:13:f9:f1:f6:e3:97:30:0e:95:c7:
         e6:fe:ca:1a:3d:8c:6f:33:ab:63:22:66:ef:10:4b:05:6e:f5:
         ba:f6:05:f1:85:64:15:b0:e1:bc:fb:16:c6:ce:31:02:a6:35:
         17:a2:06:5f:74:3d:5c:7b:78:9b:bf:34:f0:da:08:1d:4b:e0:
         24:e7:55:af:32:a1:c7:90:21:26:e1:65:5a:85:a9:33:8a:28:
         d4:c9:a8:35:83:70:4f:f7:6d:ab:d0:1a:ce:5d:eb:9e:34:01:
         98:98:15:3e:2a:43:f1:98:9c:9f:d2:02:77:4d:f7:ef:eb:fa:
         85:da:4b:c1:d2:c5:d9:ba:1b:7b:d8:82:22:63:0d:20:16:8f:
         bc:8b:78:e7:83:25:d9:b3:e5:61:e9:09:ff:3e:29:9c:5c:be:
         cb:9c:e8:34:2e:4c:03:74:bc:7d:94:65:05:49:b6:9b:3a:5d:
         fe:13:f3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:16:09 2026 by rpki-client