Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/34352e3137302e3138372e302f32342d3234203d3e20323637373636.roa
File:                     34352e3137302e3138372e302f32342d3234203d3e20323637373636.roa (raw, json)
Hash identifier:          h6PHfHZSoqwL8vwEh+xXpHNDAjKuwAfCMo3qDAZ9D5Y=
Subject key identifier:   E9:7D:02:74:76:F0:09:FC:EA:D2:05:53:98:D5:75:71:55:60:59:32
Certificate issuer:       /CN=42EE9B624E098B952E8E073D8C62609958DB7CC3
Certificate serial:       4A80AE428EA92D30126FAA9C55E43199FAFC8E9F
Authority key identifier: 42:EE:9B:62:4E:09:8B:95:2E:8E:07:3D:8C:62:60:99:58:DB:7C:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/34352e3137302e3138372e302f32342d3234203d3e20323637373636.roa
Signing time:             Tue 23 Jun 2026 02:48:59 +0000
ROA not before:           Tue 23 Jun 2026 02:43:59 +0000
ROA not after:            Tue 22 Jun 2027 02:48:59 +0000
asID:                     267766
IP address blocks:        45.170.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:80:ae:42:8e:a9:2d:30:12:6f:aa:9c:55:e4:31:99:fa:fc:8e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42EE9B624E098B952E8E073D8C62609958DB7CC3
        Validity
            Not Before: Jun 23 02:43:59 2026 GMT
            Not After : Jun 22 02:48:59 2027 GMT
        Subject: CN=E97D027476F009FCEAD2055398D5757155605932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:6d:86:74:2a:6a:a6:28:fb:55:e8:af:c0:
                    29:7c:4f:f9:9e:ff:06:19:a0:17:ae:f2:d7:bc:1e:
                    b9:9d:91:09:3f:20:7e:fd:0b:4c:70:5f:c1:17:c0:
                    39:0a:c4:9d:bd:0e:7d:ce:4d:a2:1d:7d:2b:71:ae:
                    2d:8f:6c:cb:62:63:75:19:cb:1d:84:2c:fb:4b:8d:
                    9f:f6:2a:dc:0d:dc:36:9b:a2:b7:89:b2:81:ad:ce:
                    1a:e6:28:74:f8:ee:cd:80:f6:c2:48:f0:11:04:7e:
                    ef:7f:47:7a:aa:b0:e8:6e:a8:cd:35:2b:e0:1f:fe:
                    4e:a7:9b:37:a6:75:d9:dc:69:e4:e1:d1:05:2f:8c:
                    9a:fa:8e:d2:db:d8:90:07:be:6c:13:2e:b6:13:34:
                    94:f1:09:77:fd:cb:96:63:69:f7:27:47:ea:6f:84:
                    75:c6:9b:74:42:ef:db:b8:a5:f7:66:32:19:91:89:
                    8b:77:5a:cc:03:1d:27:60:5a:79:39:16:b8:bf:0e:
                    e6:82:6b:62:0e:fb:14:77:d7:94:97:c1:9d:2b:3e:
                    80:d1:eb:17:61:04:29:d1:8e:ff:4e:33:02:7e:dd:
                    d0:9c:a5:1d:aa:1c:4f:9a:6f:db:28:02:04:a4:06:
                    ff:61:4a:68:65:b8:de:52:53:f5:8b:de:53:ad:8d:
                    5b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7D:02:74:76:F0:09:FC:EA:D2:05:53:98:D5:75:71:55:60:59:32
            X509v3 Authority Key Identifier:
                keyid:42:EE:9B:62:4E:09:8B:95:2E:8E:07:3D:8C:62:60:99:58:DB:7C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/34352e3137302e3138372e302f32342d3234203d3e20323637373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:3d:fb:1d:7b:6d:72:da:86:b6:4c:af:d0:65:6f:b8:e0:85:
         2a:ea:26:a9:c0:6f:2b:7b:a7:0c:d3:e1:4a:70:22:62:10:28:
         bb:48:ed:13:e8:e2:69:ee:d6:3d:27:a0:6a:07:b6:1c:24:f9:
         40:a0:7e:a2:0a:18:f0:40:d0:87:77:18:89:3d:0a:53:d5:b7:
         8b:d0:81:4e:ef:8e:66:fd:fc:b5:82:da:ee:ce:2a:3a:b5:86:
         8f:68:d8:fd:94:50:a5:05:f5:e5:c6:d5:44:d4:10:c6:d8:54:
         89:4b:93:68:2b:a5:b7:4c:0e:2d:c2:2b:24:24:77:61:1b:64:
         45:e3:22:38:41:91:2a:cf:92:9b:55:eb:31:75:3b:b9:fa:b8:
         9a:a3:b8:74:54:31:ea:1b:85:4a:c5:42:c2:2f:8d:4e:d6:09:
         1a:06:1e:d6:1e:d5:16:69:06:3b:59:e7:f5:91:c5:71:f2:dd:
         51:4e:cf:16:cf:1f:4e:2e:c9:df:0b:21:89:37:b4:8d:6b:44:
         da:65:1a:b3:f4:7b:78:2d:11:17:c8:1e:fd:a5:51:bc:a4:74:
         ef:e6:af:a2:8f:16:37:31:48:a4:8d:55:19:2c:06:ae:6e:d4:
         b0:f6:47:52:76:e5:c8:c9:62:da:c8:34:ee:52:c5:b4:6c:c3:
         33:27:5b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:16:11 2026 by rpki-client