Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/34352e3137352e3133382e302f32342d3234203d3e20323733393635.roa
File:                     34352e3137352e3133382e302f32342d3234203d3e20323733393635.roa (raw, json)
Hash identifier:          yUHEPNeN3aP/uWoSQBzajIeT5J2g0/wLwnVMwDO3jVs=
Subject key identifier:   34:67:48:39:B4:90:54:F7:C6:84:7A:1B:C7:0A:22:25:90:0F:D9:18
Certificate issuer:       /CN=24CD02F5861A290CB8722F495D087C5FC34EB3A8
Certificate serial:       3A277353A13A1D691F615B8DACC4B2234395253A
Authority key identifier: 24:CD:02:F5:86:1A:29:0C:B8:72:2F:49:5D:08:7C:5F:C3:4E:B3:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/34352e3137352e3133382e302f32342d3234203d3e20323733393635.roa
Signing time:             Mon 11 May 2026 16:42:02 +0000
ROA not before:           Mon 11 May 2026 16:37:02 +0000
ROA not after:            Mon 10 May 2027 16:42:02 +0000
asID:                     273965
IP address blocks:        45.175.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 10:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:27:73:53:a1:3a:1d:69:1f:61:5b:8d:ac:c4:b2:23:43:95:25:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CD02F5861A290CB8722F495D087C5FC34EB3A8
        Validity
            Not Before: May 11 16:37:02 2026 GMT
            Not After : May 10 16:42:02 2027 GMT
        Subject: CN=34674839B49054F7C6847A1BC70A2225900FD918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3f:30:6d:16:93:32:0a:dd:01:ad:e7:1e:e0:
                    2c:b2:ce:23:f9:08:f9:83:92:20:08:56:d2:14:5d:
                    44:27:dd:6f:5a:31:56:3d:22:ee:9c:e5:24:e6:d2:
                    11:77:34:70:70:a9:4e:31:fa:40:2e:b0:b0:b1:41:
                    57:d9:59:9c:a8:f4:76:fd:f3:4b:73:b5:fd:13:26:
                    0c:7a:4c:8a:85:f1:a7:d2:8f:4d:19:fc:0f:3f:3f:
                    07:89:42:e3:ce:64:7c:06:43:8b:39:46:ea:fc:b9:
                    5a:8a:53:2f:36:09:0d:8b:5f:5e:a1:36:45:28:f2:
                    9d:51:0e:a6:a1:da:51:81:7b:52:5f:5b:26:13:ae:
                    fb:fa:9c:fb:f3:74:e9:68:09:ca:ad:d8:4d:8b:36:
                    80:1c:61:d9:38:3e:78:38:9c:77:89:6a:a8:02:23:
                    03:e3:de:1a:6d:93:76:43:7e:77:37:37:c2:6c:25:
                    82:45:d2:6e:ca:57:dc:c0:23:c1:a6:fe:60:3a:b7:
                    f3:bb:c6:3f:2f:f4:69:5b:d5:4e:19:67:de:1d:63:
                    b7:93:9c:c8:24:79:a4:5c:86:4f:78:c2:1f:1a:e3:
                    ad:59:56:8f:54:7f:4f:05:fd:b1:a6:0d:f7:d4:7a:
                    af:58:32:d5:2a:4c:62:6d:67:87:07:74:94:c7:93:
                    42:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:67:48:39:B4:90:54:F7:C6:84:7A:1B:C7:0A:22:25:90:0F:D9:18
            X509v3 Authority Key Identifier:
                keyid:24:CD:02:F5:86:1A:29:0C:B8:72:2F:49:5D:08:7C:5F:C3:4E:B3:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/34352e3137352e3133382e302f32342d3234203d3e20323733393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:e6:38:e3:88:4a:e5:a8:4b:e7:be:51:b5:45:08:70:b0:03:
         22:79:af:b0:8a:e3:7b:7b:83:e5:72:b2:3e:4d:3b:9b:53:3e:
         ee:b1:ba:61:a9:92:76:37:e0:e3:0f:c0:a0:d5:d9:8e:c2:7f:
         c4:a3:c1:0c:af:11:1f:05:10:ee:a7:db:0f:3d:f5:19:44:61:
         0e:0a:09:e6:cb:ff:69:f8:9d:5d:9f:a5:0e:7d:37:86:db:25:
         a6:4d:f8:5d:f6:37:7a:66:06:ad:f7:90:9e:73:1d:b1:99:6c:
         15:b8:90:a6:db:24:7b:8a:9a:5a:7d:0a:53:a1:7e:46:bd:ef:
         14:16:32:f8:72:6f:e4:03:22:52:64:60:9a:49:ba:2c:9c:ce:
         17:7a:ae:37:74:93:3d:e2:0a:1b:e4:79:9c:4b:7a:1f:59:ce:
         0b:26:19:de:74:f3:a0:1f:78:4a:39:b7:7f:a2:6c:4c:57:e7:
         7e:3b:dd:35:2a:27:f1:72:ee:48:bf:22:5c:27:81:44:bf:6d:
         df:ac:f2:16:19:0f:2a:b6:d4:45:51:cb:7c:de:c8:60:be:c0:
         86:31:15:c4:b9:c7:d0:cd:70:93:20:0f:02:36:4b:d3:d7:19:
         0d:b2:10:19:35:8d:a2:73:6f:6f:7a:28:34:ef:f9:03:a6:80:
         8c:8e:79:79
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUOidzU6E6HWkfYVuNrMSyI0OVJTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRDRDAyRjU4NjFBMjkwQ0I4NzIyRjQ5NUQwODdDNUZD
MzRFQjNBODAeFw0yNjA1MTExNjM3MDJaFw0yNzA1MTAxNjQyMDJaMDMxMTAvBgNV
BAMTKDM0Njc0ODM5QjQ5MDU0RjdDNjg0N0ExQkM3MEEyMjI1OTAwRkQ5MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSPzBtFpMyCt0Brece4CyyziP5
CPmDkiAIVtIUXUQn3W9aMVY9Iu6c5STm0hF3NHBwqU4x+kAusLCxQVfZWZyo9Hb9
80tztf0TJgx6TIqF8afSj00Z/A8/PweJQuPOZHwGQ4s5Rur8uVqKUy82CQ2LX16h
NkUo8p1RDqah2lGBe1JfWyYTrvv6nPvzdOloCcqt2E2LNoAcYdk4Png4nHeJaqgC
IwPj3hptk3ZDfnc3N8JsJYJF0m7KV9zAI8Gm/mA6t/O7xj8v9Glb1U4ZZ94dY7eT
nMgkeaRchk94wh8a461ZVo9Uf08F/bGmDffUeq9YMtUqTGJtZ4cHdJTHk0KxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUNGdIObSQVPfGhHobxwoiJZAP2RgwHwYDVR0j
BBgwFoAUJM0C9YYaKQy4ci9JXQh8X8NOs6gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQ0UwMjhGM0ZEMkUyQTY4RkU0QTk4RjRFQkM3QzE4MDYw
MDlFNkYwOTY0Qjk0QkExQUYwQjU2NjU1RjVGMjJCLzAvMjRDRDAyRjU4NjFBMjkw
Q0I4NzIyRjQ5NUQwODdDNUZDMzRFQjNBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNENEMDJGNTg2MUEyOTBDQjg3
MjJGNDk1RDA4N0M1RkMzNEVCM0E4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRENFMDI4RjNGRDJFMkE2OEZFNEE5OEY0RUJDN0MxODA2MDA5RTZGMDk2
NEI5NEJBMUFGMEI1NjY1NUY1RjIyQi8wLzM0MzUyZTMxMzczNTJlMzEzMzM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzkzNjM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALa+K
MA0GCSqGSIb3DQEBCwUAA4IBAQA35jjjiErlqEvnvlG1RQhwsAMiea+wiuN7e4Pl
crI+TTubUz7usbphqZJ2N+DjD8Cg1dmOwn/Eo8EMrxEfBRDup9sPPfUZRGEOCgnm
y/9p+J1dn6UOfTeG2yWmTfhd9jd6Zgat95Cecx2xmWwVuJCm2yR7ippafQpToX5G
ve8UFjL4cm/kAyJSZGCaSbosnM4Xeq43dJM94gob5HmcS3ofWc4LJhnedPOgH3hK
Obd/omxMV+d+O901Kifxcu5IvyJcJ4FEv23frPIWGQ8qttRFUct83shgvsCGMRXE
ucfQzXCTIA8CNkvT1xkNshAZNY2ic29veig07/kDpoCMjnl5
-----END CERTIFICATE-----
Generated at Wed May 13 15:10:40 2026 by rpki-client