Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31382e302f32332d3233203d3e20323637373938.roa
File:                     34352e3137332e31382e302f32332d3233203d3e20323637373938.roa (raw, json)
Hash identifier:          zdlBDNfq4+yKQ18HsaNrWrsKYdItNs5AhHzL+sa6qnQ=
Subject key identifier:   78:10:C5:71:32:95:9B:AC:47:CE:EC:57:8E:EE:F8:E3:CB:90:45:F7
Certificate issuer:       /CN=378C4A178BD1442C656AA12825B69BFF74217F32
Certificate serial:       500BC9B13D76B8C062D661544D78B57AFC138DF0
Authority key identifier: 37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31382e302f32332d3233203d3e20323637373938.roa
Signing time:             Fri 20 Mar 2026 17:35:22 +0000
ROA not before:           Fri 20 Mar 2026 17:30:22 +0000
ROA not after:            Fri 19 Mar 2027 17:35:22 +0000
asID:                     267798
IP address blocks:        45.173.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:0b:c9:b1:3d:76:b8:c0:62:d6:61:54:4d:78:b5:7a:fc:13:8d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378C4A178BD1442C656AA12825B69BFF74217F32
        Validity
            Not Before: Mar 20 17:30:22 2026 GMT
            Not After : Mar 19 17:35:22 2027 GMT
        Subject: CN=7810C57132959BAC47CEEC578EEEF8E3CB9045F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3c:6f:89:01:0a:15:25:b0:5e:d1:a0:f5:32:
                    43:c1:5f:98:93:64:29:96:a3:92:9f:fd:1f:1b:f0:
                    a2:3e:7b:ff:99:7c:d9:cd:cd:ea:8d:1d:da:33:26:
                    91:1a:e2:f1:60:a0:f2:f0:1f:7d:a7:80:4f:89:eb:
                    1a:2a:86:af:6d:67:d2:04:56:e9:78:8b:8f:85:79:
                    60:dd:37:d1:6c:36:e1:b9:d6:c3:c8:6e:10:14:90:
                    17:28:59:5b:c6:48:b0:65:60:04:f7:0a:91:04:61:
                    26:06:25:32:1f:49:c9:80:b7:7c:34:ec:a3:9a:84:
                    6a:0f:7b:7a:d6:89:83:2f:d3:7d:54:68:be:11:c2:
                    fe:d2:11:37:96:cd:e5:e1:cf:ed:2c:6e:97:2a:d5:
                    97:3e:fc:8e:af:38:79:d3:4a:95:ef:0b:7c:f7:52:
                    2a:90:ed:76:d4:3a:0e:a7:c2:d3:86:44:31:c1:ee:
                    0d:5d:ea:33:08:87:bc:34:78:2d:32:48:20:10:83:
                    f5:8e:9e:bb:6c:ec:a9:e5:37:46:1b:1f:90:89:aa:
                    b8:5e:a8:82:a5:e8:83:22:bd:ec:11:2c:c1:be:e0:
                    f6:4d:d9:f2:04:dd:98:7e:43:0e:86:46:91:dc:10:
                    4c:2e:37:73:af:28:d4:b6:57:4d:2f:51:2c:b4:55:
                    18:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:10:C5:71:32:95:9B:AC:47:CE:EC:57:8E:EE:F8:E3:CB:90:45:F7
            X509v3 Authority Key Identifier:
                keyid:37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31382e302f32332d3233203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:08:12:b9:f8:03:d4:7d:85:9c:d8:9a:c9:82:b0:e0:63:5a:
         f6:b7:cb:4d:e6:60:f5:4f:fd:f2:9d:84:30:a5:38:46:e8:84:
         86:26:0d:ee:b2:c6:ba:f1:a4:85:31:e8:dd:41:52:10:42:b6:
         62:f7:bb:e1:87:8b:cc:94:7d:c5:a7:2f:44:7a:fb:60:08:4e:
         f3:4b:f2:f5:fd:30:95:03:2e:73:fc:66:3d:1d:52:0d:63:1a:
         62:c1:77:e7:b2:3b:45:de:b4:dc:8d:48:fa:90:3e:43:33:09:
         35:33:63:ee:5d:f3:c9:49:f7:2f:27:de:64:ec:42:16:a0:fa:
         53:5f:dc:f0:ce:2a:7b:80:4f:83:6a:a4:90:9d:64:41:12:cf:
         68:db:9d:42:21:ff:85:38:7a:0e:24:23:79:b1:75:ff:cc:7d:
         70:04:d8:fc:b0:9d:ef:f2:4c:bd:e4:02:e5:6a:52:e0:55:9c:
         87:15:50:05:63:7e:7d:ef:7b:51:b3:2c:1b:b9:2b:1c:b5:b6:
         c8:1d:60:d3:52:c2:7f:63:e5:dd:aa:3c:b3:f5:7d:70:71:34:
         40:32:74:c7:c7:1e:79:69:66:e0:23:ac:91:e9:f8:42:52:ac:
         20:d7:8d:e4:cc:9e:64:f8:aa:cc:95:3f:f1:06:c2:33:95:2e:
         42:28:8b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:06:54 2026 by rpki-client