Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDF8F0F5D4C1C13B8DC15D3D2E7148D87101FECA19F695464DAADA661340AC5D/0/34352e372e3132342e302f32332d3233203d3e20323633373933.roa
File:                     34352e372e3132342e302f32332d3233203d3e20323633373933.roa (raw, json)
Hash identifier:          yjKsqOqQBW2zjFlB3qeLhZcyJWclSKdvOjXiSVfKH+s=
Subject key identifier:   1E:BD:B7:72:08:E4:C9:5E:78:86:C5:CE:FF:5E:8A:71:49:73:77:00
Certificate issuer:       /CN=E893E7DF088A28A1F63079C5C26B3F63D1DB965E
Certificate serial:       043270891CF6BC65A9C2704FDC6C269F4B0699D8
Authority key identifier: E8:93:E7:DF:08:8A:28:A1:F6:30:79:C5:C2:6B:3F:63:D1:DB:96:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E893E7DF088A28A1F63079C5C26B3F63D1DB965E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BDF8F0F5D4C1C13B8DC15D3D2E7148D87101FECA19F695464DAADA661340AC5D/0/34352e372e3132342e302f32332d3233203d3e20323633373933.roa
Signing time:             Sat 04 Jul 2026 13:40:01 +0000
ROA not before:           Sat 04 Jul 2026 13:35:01 +0000
ROA not after:            Sat 03 Jul 2027 13:40:01 +0000
asID:                     263793
IP address blocks:        45.7.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BDF8F0F5D4C1C13B8DC15D3D2E7148D87101FECA19F695464DAADA661340AC5D/0/E893E7DF088A28A1F63079C5C26B3F63D1DB965E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BDF8F0F5D4C1C13B8DC15D3D2E7148D87101FECA19F695464DAADA661340AC5D/0/E893E7DF088A28A1F63079C5C26B3F63D1DB965E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E893E7DF088A28A1F63079C5C26B3F63D1DB965E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 16:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:32:70:89:1c:f6:bc:65:a9:c2:70:4f:dc:6c:26:9f:4b:06:99:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893E7DF088A28A1F63079C5C26B3F63D1DB965E
        Validity
            Not Before: Jul  4 13:35:01 2026 GMT
            Not After : Jul  3 13:40:01 2027 GMT
        Subject: CN=1EBDB77208E4C95E7886C5CEFF5E8A7149737700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b2:b7:41:d1:6c:db:f5:be:8f:98:c3:c6:00:
                    91:75:ea:44:37:54:5a:31:db:b9:ac:e1:11:7e:3e:
                    61:93:69:c0:40:f9:01:5d:78:69:16:08:47:bf:c4:
                    70:20:e5:b9:17:9d:68:26:e5:82:7e:27:b1:40:6f:
                    9d:da:d4:a9:e4:0e:28:a3:b3:20:20:6a:bf:7c:4a:
                    3e:ca:5c:a7:21:b8:92:2c:e7:77:13:6d:52:7f:3a:
                    e6:23:21:a5:f0:fa:20:f2:1d:d0:d2:31:85:14:7c:
                    4f:91:45:a8:de:49:8f:19:3e:af:71:6c:49:3a:f2:
                    4e:36:72:ba:f0:7d:b9:af:27:6a:e7:53:d6:73:ad:
                    df:eb:1c:d1:83:a2:8e:08:4d:c7:f7:2c:6e:94:aa:
                    09:55:2b:f9:bf:e2:6b:d2:6d:69:2d:ca:4b:73:64:
                    60:63:c0:b6:51:77:69:a3:53:87:3b:d3:30:c7:45:
                    ed:e1:cc:f2:e7:9b:72:d5:81:ad:81:46:69:f5:c2:
                    a9:79:92:d3:7e:5c:ee:6c:51:e6:9f:00:a6:5e:7c:
                    29:53:6f:86:03:a2:7e:bb:2c:fc:80:1d:36:9b:dc:
                    d3:47:92:96:47:a4:af:07:9b:e5:d9:58:cf:d6:3d:
                    64:b6:76:9f:97:4d:46:b5:ba:6e:a9:ff:8e:d3:9e:
                    db:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BD:B7:72:08:E4:C9:5E:78:86:C5:CE:FF:5E:8A:71:49:73:77:00
            X509v3 Authority Key Identifier:
                keyid:E8:93:E7:DF:08:8A:28:A1:F6:30:79:C5:C2:6B:3F:63:D1:DB:96:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BDF8F0F5D4C1C13B8DC15D3D2E7148D87101FECA19F695464DAADA661340AC5D/0/E893E7DF088A28A1F63079C5C26B3F63D1DB965E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E893E7DF088A28A1F63079C5C26B3F63D1DB965E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDF8F0F5D4C1C13B8DC15D3D2E7148D87101FECA19F695464DAADA661340AC5D/0/34352e372e3132342e302f32332d3233203d3e20323633373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:20:b8:50:60:bd:dc:41:bc:5c:96:20:8b:19:8d:72:20:75:
         28:13:f6:59:10:20:d7:45:e0:d1:db:bf:37:f6:93:74:36:e1:
         77:9b:57:12:b2:79:9e:fb:cc:da:d4:45:86:45:31:5a:c8:3c:
         bc:47:76:5e:7e:12:50:4c:e4:d7:a2:0d:85:6d:19:05:e9:7a:
         a7:3c:a9:d0:54:a9:f1:ec:3e:55:b4:4d:fb:91:58:29:64:e8:
         8f:cb:b9:ba:79:4f:e8:0a:74:e8:22:12:f0:29:aa:db:65:c2:
         b9:1e:39:48:08:80:b3:b0:f2:99:e6:86:6b:f2:6d:b0:ef:19:
         09:15:8f:1e:c5:00:60:e0:99:51:b8:c9:94:b7:89:09:20:b0:
         85:7e:8b:82:3a:69:c1:91:1b:c3:c3:64:b1:49:3c:19:b6:78:
         9c:73:c5:2c:76:b3:26:7a:20:bb:61:d5:10:72:2d:9f:ee:0a:
         27:e5:fa:4e:6c:11:da:f8:09:ed:62:0a:33:f7:0a:6a:05:ae:
         da:f1:f2:a5:b6:05:a6:bc:2d:e7:ba:40:3b:a1:ba:63:da:21:
         d8:b1:29:49:6a:d9:58:ae:d4:65:eb:e1:1e:4b:ec:67:c7:66:
         bf:1c:6e:d3:fd:db:9a:3d:e9:7e:46:51:27:fc:96:0a:c4:d1:
         9d:13:22:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:48:36 2026 by rpki-client