Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31362e302f32332d3233203d3e20323637373938.roa
File:                     34352e3137332e31362e302f32332d3233203d3e20323637373938.roa (raw, json)
Hash identifier:          DBN3JdtBlbfWrVf3/MO51lVRJ9w7YxHt0XVOZbsMQSo=
Subject key identifier:   A4:3C:74:18:42:D9:50:93:9D:B4:9E:2C:3D:98:0A:50:2D:7E:C3:73
Certificate issuer:       /CN=378C4A178BD1442C656AA12825B69BFF74217F32
Certificate serial:       60D484523C8B43479B7D26B2E8E2FC0E89A3960F
Authority key identifier: 37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31362e302f32332d3233203d3e20323637373938.roa
Signing time:             Fri 20 Mar 2026 17:35:22 +0000
ROA not before:           Fri 20 Mar 2026 17:30:22 +0000
ROA not after:            Fri 19 Mar 2027 17:35:22 +0000
asID:                     267798
IP address blocks:        45.173.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d4:84:52:3c:8b:43:47:9b:7d:26:b2:e8:e2:fc:0e:89:a3:96:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378C4A178BD1442C656AA12825B69BFF74217F32
        Validity
            Not Before: Mar 20 17:30:22 2026 GMT
            Not After : Mar 19 17:35:22 2027 GMT
        Subject: CN=A43C741842D950939DB49E2C3D980A502D7EC373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:da:4b:ad:4d:96:2a:76:b5:a1:75:45:77:9d:
                    1d:f1:76:21:3e:5d:41:27:53:81:2e:f9:ed:36:41:
                    33:d7:77:ea:41:70:58:fc:42:9e:bd:c2:67:a0:d4:
                    d4:2a:70:06:db:ae:a7:d7:75:b1:32:91:50:6d:1f:
                    f4:f2:72:28:24:aa:ea:7b:57:95:94:03:a1:dd:4f:
                    41:17:1f:77:de:38:14:95:47:08:36:2a:dc:de:6d:
                    9f:cc:37:fd:63:57:4a:1c:d3:b6:7e:66:a7:c3:0c:
                    6f:91:3f:7a:3d:24:c6:dc:2f:db:2a:4e:45:55:5b:
                    91:d6:a0:a3:eb:00:aa:09:3a:85:16:f4:d8:d4:a7:
                    02:92:f6:99:73:56:9b:e3:9f:5b:68:b4:11:93:13:
                    5c:04:9c:fc:05:6a:d9:ae:96:1b:74:18:05:cc:64:
                    80:7d:30:1f:59:48:00:90:84:a7:3f:96:7b:d5:ce:
                    ef:64:fb:64:9a:df:fe:44:24:57:bb:4d:0a:89:05:
                    c5:88:11:e4:b9:82:2e:33:14:56:da:67:27:c4:fa:
                    62:e2:a1:4d:2d:97:ca:c3:b1:30:77:1b:3d:fe:26:
                    86:4b:a7:ec:f6:31:b3:b9:2b:47:ca:4b:47:60:3b:
                    cf:1c:80:73:dc:56:54:3a:ba:5b:97:18:0c:7c:a5:
                    bc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3C:74:18:42:D9:50:93:9D:B4:9E:2C:3D:98:0A:50:2D:7E:C3:73
            X509v3 Authority Key Identifier:
                keyid:37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31362e302f32332d3233203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:e3:e7:ea:11:2c:11:6d:4b:5b:1e:3e:1b:0e:9f:4e:33:1e:
         61:cc:14:b8:2b:f2:5c:df:91:8f:9d:b5:8c:09:48:18:51:7d:
         53:46:bb:db:79:cf:95:96:e4:4d:8d:49:22:be:59:69:0f:41:
         fb:d6:16:f5:8e:79:36:5f:28:75:96:3b:cf:1b:ce:e5:07:7b:
         70:97:d8:9f:5d:e3:a1:c2:bf:9e:81:64:88:02:7b:1d:94:7b:
         be:eb:50:8a:22:88:76:74:80:69:b7:09:00:91:58:ee:aa:af:
         e3:ae:06:93:44:0c:45:4c:28:1d:25:82:32:52:39:15:ac:67:
         d7:9d:b0:59:7e:25:42:54:da:0f:2b:1d:97:24:96:e6:71:4e:
         73:c3:fc:4b:4d:3f:21:6b:de:af:3e:4f:a9:82:03:83:be:a7:
         f3:4d:b9:67:d3:21:eb:8d:b3:8a:26:31:cf:af:2d:a7:61:09:
         ca:7a:8c:aa:0f:e3:ef:68:f6:bd:8f:c8:9f:78:5a:62:92:48:
         ec:04:4e:e8:8e:0c:63:c3:5c:b3:95:32:ab:c3:de:19:e1:bc:
         40:d9:ce:bf:6f:db:19:28:48:49:fa:68:18:24:0b:ff:f9:4e:
         b4:40:4f:bc:6d:ea:fc:bc:67:52:e6:f7:5e:a8:6a:04:56:10:
         21:9d:57:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:06:54 2026 by rpki-client