Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FA115C95B315D263C61820CF01071FB4D65E226A3E656639FAAB6569941FB212/0/34352e3137372e38302e302f32322d3232203d3e20323637383937.roa
File:                     34352e3137372e38302e302f32322d3232203d3e20323637383937.roa (raw, json)
Hash identifier:          GJd+9Rch3oiVtJa+ub0wHlv/jXmxL6YSRZktabuWoAg=
Subject key identifier:   ED:74:59:BB:E3:0E:CC:57:6A:D9:55:19:7A:06:F3:2F:DE:CD:43:64
Certificate issuer:       /CN=9216C72CE512D40CF58FE3EF39F11D213A1FDF9B
Certificate serial:       370F5DE8FC825CB4543D6832CCE85D6CA248C59F
Authority key identifier: 92:16:C7:2C:E5:12:D4:0C:F5:8F:E3:EF:39:F1:1D:21:3A:1F:DF:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9216C72CE512D40CF58FE3EF39F11D213A1FDF9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FA115C95B315D263C61820CF01071FB4D65E226A3E656639FAAB6569941FB212/0/34352e3137372e38302e302f32322d3232203d3e20323637383937.roa
Signing time:             Wed 08 Jul 2026 23:45:00 +0000
ROA not before:           Wed 08 Jul 2026 23:40:00 +0000
ROA not after:            Wed 07 Jul 2027 23:45:00 +0000
asID:                     267897
IP address blocks:        45.177.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FA115C95B315D263C61820CF01071FB4D65E226A3E656639FAAB6569941FB212/0/9216C72CE512D40CF58FE3EF39F11D213A1FDF9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FA115C95B315D263C61820CF01071FB4D65E226A3E656639FAAB6569941FB212/0/9216C72CE512D40CF58FE3EF39F11D213A1FDF9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9216C72CE512D40CF58FE3EF39F11D213A1FDF9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 20:12:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:0f:5d:e8:fc:82:5c:b4:54:3d:68:32:cc:e8:5d:6c:a2:48:c5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9216C72CE512D40CF58FE3EF39F11D213A1FDF9B
        Validity
            Not Before: Jul  8 23:40:00 2026 GMT
            Not After : Jul  7 23:45:00 2027 GMT
        Subject: CN=ED7459BBE30ECC576AD955197A06F32FDECD4364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:e3:12:20:10:d4:42:e6:04:d4:f2:02:ae:
                    06:83:1e:5a:a0:19:90:9f:7b:1e:db:96:0a:92:3f:
                    cb:dd:ea:f4:8c:c8:91:31:f5:af:b8:56:58:d7:b3:
                    5f:f9:25:43:d9:e2:62:11:2a:be:e5:57:79:46:33:
                    7a:69:a4:a5:9c:c5:ce:73:79:8e:6c:53:d9:11:7b:
                    a7:91:15:6d:b8:95:f2:a6:15:62:02:69:b8:d5:ef:
                    49:61:a5:ea:89:7b:9f:55:95:f6:ed:20:19:54:be:
                    2c:c3:23:c2:59:9e:4a:e7:9b:03:34:95:1c:57:34:
                    8c:ae:f2:1a:0e:43:df:ee:45:c8:18:fb:f5:a8:d7:
                    fa:3b:81:28:1b:33:ee:5d:8b:4d:c0:66:e4:99:59:
                    91:a7:2c:12:f4:bd:2d:d3:4b:fe:87:db:07:52:b5:
                    ba:ca:d1:04:2b:a2:cf:a8:67:23:99:6a:f4:92:67:
                    ad:ec:34:93:81:de:af:1b:3f:9a:bb:8c:3f:2a:ae:
                    fa:52:4d:cd:df:dc:ba:c3:e4:a8:31:f7:58:eb:3a:
                    48:ff:17:0f:cd:a5:72:02:61:68:58:cb:17:88:c0:
                    f2:62:64:04:a6:fb:ed:ad:6f:7e:73:24:d1:9f:ae:
                    45:74:f4:86:00:f5:14:d1:e6:4d:10:f8:ef:39:63:
                    0c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:74:59:BB:E3:0E:CC:57:6A:D9:55:19:7A:06:F3:2F:DE:CD:43:64
            X509v3 Authority Key Identifier:
                keyid:92:16:C7:2C:E5:12:D4:0C:F5:8F:E3:EF:39:F1:1D:21:3A:1F:DF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FA115C95B315D263C61820CF01071FB4D65E226A3E656639FAAB6569941FB212/0/9216C72CE512D40CF58FE3EF39F11D213A1FDF9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9216C72CE512D40CF58FE3EF39F11D213A1FDF9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FA115C95B315D263C61820CF01071FB4D65E226A3E656639FAAB6569941FB212/0/34352e3137372e38302e302f32322d3232203d3e20323637383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:49:13:60:ff:1d:8e:e9:d8:f2:05:99:fa:3c:49:3e:a6:29:
         97:94:42:b3:6c:8c:ce:7c:25:6d:a7:55:99:a7:34:ac:8a:45:
         18:9c:00:68:94:ac:7d:8b:8b:0c:a0:3a:a7:f1:2a:36:7e:02:
         7a:6e:e4:7f:63:35:87:d8:30:28:9a:56:f4:c1:01:e9:21:7e:
         4f:74:ed:88:66:69:4e:42:24:f7:09:30:ea:26:c2:c4:86:de:
         81:a3:fa:00:e7:02:3b:2f:51:3a:fe:05:12:c5:c1:68:2a:a4:
         d4:70:34:67:3e:dd:f8:2f:0f:5f:f8:1b:d2:f9:cd:b1:25:56:
         a5:bb:96:09:1c:f9:d6:75:c5:5c:ec:4d:16:dd:1a:b5:8b:ff:
         0a:2f:71:ae:82:ab:a8:9e:b0:b5:c6:77:b5:89:2d:b6:1a:01:
         b7:23:3b:ef:c1:b2:31:a0:68:0d:b1:c1:66:01:ea:b9:ad:55:
         6d:6b:0a:56:96:21:ff:c5:d2:00:33:2d:93:86:28:e6:49:ff:
         c1:5f:8e:1e:e5:4b:80:79:f2:05:b8:85:cf:79:32:78:20:fc:
         2c:36:e9:f7:d6:08:87:c3:66:64:da:df:10:a1:07:53:c2:8f:
         b1:61:49:23:5f:99:25:29:6c:db:37:bb:12:7f:a0:8c:67:da:
         f5:a1:55:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:44:27 2026 by rpki-client