Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/34352e3137322e3134322e302f32342d3234203d3e20323634383030.roa
File:                     34352e3137322e3134322e302f32342d3234203d3e20323634383030.roa (raw, json)
Hash identifier:          XgXX84vX6sgvp3WL5x4LxdoXctSuoEJ7UNQSxZ0dZpw=
Subject key identifier:   DE:88:FA:95:43:94:2E:3D:D8:72:A5:E1:34:A0:00:B3:1B:29:DA:4C
Certificate issuer:       /CN=A452CC0A52E6766C48F9C7DF2D4337A911BA64D1
Certificate serial:       42990D22E47522088CB46DA955D7AAC134BCF3D2
Authority key identifier: A4:52:CC:0A:52:E6:76:6C:48:F9:C7:DF:2D:43:37:A9:11:BA:64:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/34352e3137322e3134322e302f32342d3234203d3e20323634383030.roa
Signing time:             Tue 14 Jul 2026 13:52:36 +0000
ROA not before:           Tue 14 Jul 2026 13:47:36 +0000
ROA not after:            Tue 13 Jul 2027 13:52:36 +0000
asID:                     264800
IP address blocks:        45.172.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:99:0d:22:e4:75:22:08:8c:b4:6d:a9:55:d7:aa:c1:34:bc:f3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A452CC0A52E6766C48F9C7DF2D4337A911BA64D1
        Validity
            Not Before: Jul 14 13:47:36 2026 GMT
            Not After : Jul 13 13:52:36 2027 GMT
        Subject: CN=DE88FA9543942E3DD872A5E134A000B31B29DA4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2d:66:fb:61:ed:43:b0:4b:28:02:c1:b1:eb:
                    bc:27:5c:b6:28:9c:7c:8a:06:63:64:8c:0f:a8:5c:
                    04:48:96:c0:be:56:8d:88:84:b2:74:80:67:1d:ce:
                    be:00:11:92:3d:a1:9a:dd:ee:b3:76:6b:dd:56:05:
                    b8:4f:9f:2f:16:34:a7:73:a6:51:ec:75:be:2d:3f:
                    0b:ac:c3:f1:da:63:e3:44:35:5c:d8:cb:45:d5:e6:
                    05:99:a7:8d:8c:b3:2b:5e:17:7e:7e:e8:ab:37:44:
                    e1:74:87:67:92:24:75:3d:c6:89:49:75:e7:91:d3:
                    38:b0:ba:71:20:79:63:d6:eb:76:30:7b:dd:cc:f5:
                    05:04:58:23:fe:8a:dd:4e:09:13:01:c7:be:5d:9f:
                    19:c1:d5:3c:59:74:86:93:2e:ac:b5:1f:cd:b4:3a:
                    52:9e:a6:15:d3:49:16:5c:70:1c:a4:57:ae:a7:a1:
                    39:8e:38:a5:db:e7:2b:d1:d1:d8:2f:c1:b4:d4:c2:
                    9f:70:95:dc:83:12:9d:c4:db:7d:5f:d7:66:a1:e0:
                    2d:a2:c0:4c:3a:e1:44:ea:c5:8f:04:42:e9:78:2f:
                    64:9b:d6:25:f1:b3:e6:dd:66:de:ab:93:b0:16:6c:
                    77:66:d6:5a:d3:01:dc:a6:5c:00:13:27:19:fc:a2:
                    e7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:88:FA:95:43:94:2E:3D:D8:72:A5:E1:34:A0:00:B3:1B:29:DA:4C
            X509v3 Authority Key Identifier:
                keyid:A4:52:CC:0A:52:E6:76:6C:48:F9:C7:DF:2D:43:37:A9:11:BA:64:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/34352e3137322e3134322e302f32342d3234203d3e20323634383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:d4:c0:59:32:ea:c1:9f:c9:97:27:f3:96:e2:bd:57:27:56:
         70:dd:e7:60:8e:69:77:cf:9b:fb:57:5a:f5:5b:a3:31:5b:1e:
         5d:a3:2a:a0:8b:6f:4f:6e:75:36:39:45:80:0f:4b:d7:10:c0:
         cb:de:d0:01:63:bc:57:ea:2a:37:4c:58:45:7a:26:a0:e4:26:
         e8:5e:c0:7f:ab:17:1a:13:db:03:31:87:05:34:77:3a:b5:83:
         f4:56:6d:5b:ce:63:9e:40:af:bd:12:c8:a1:d1:b8:87:2c:ec:
         0a:75:fb:1d:b2:cd:48:be:f9:07:74:48:2f:c9:29:1e:8d:90:
         15:c6:83:92:e6:1d:90:d5:88:ef:bb:59:21:e9:87:00:a4:e1:
         5a:d1:90:00:3b:99:cd:f0:96:a6:fc:12:3b:d0:2c:c3:30:17:
         55:d0:ec:54:47:ea:9b:3b:e4:41:9f:76:75:cc:f8:cf:af:02:
         f0:2b:81:cf:a7:bc:45:04:ca:b0:db:64:f0:ad:a3:99:02:4b:
         0d:b2:86:f1:0e:30:05:81:79:c2:50:76:1d:99:24:37:3f:6e:
         10:7d:4b:73:8d:ec:75:15:1f:d2:81:48:77:7f:07:8f:6f:c1:
         f1:c0:d9:07:65:7f:e5:8e:14:f1:d8:08:f4:b9:ce:bc:32:fc:
         74:01:a1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:23:06 2026 by rpki-client