Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FA115C95B315D263C61820CF01071FB4D65E226A3E656639FAAB6569941FB212/0/34352e3137372e38332e302f32342d3234203d3e20323637383937.roa
File:                     34352e3137372e38332e302f32342d3234203d3e20323637383937.roa (raw, json)
Hash identifier:          Vlgc1Ehck7xcSey4Hrws+Yk4SIHEmg1KP//c0lF+nT8=
Subject key identifier:   3E:4B:B2:C8:3D:68:57:05:B8:81:81:A8:97:D5:A5:7C:A6:93:6C:90
Certificate issuer:       /CN=9216C72CE512D40CF58FE3EF39F11D213A1FDF9B
Certificate serial:       509FEF4F61E3F41B01272B9B2FDE89438F40A676
Authority key identifier: 92:16:C7:2C:E5:12:D4:0C:F5:8F:E3:EF:39:F1:1D:21:3A:1F:DF:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9216C72CE512D40CF58FE3EF39F11D213A1FDF9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FA115C95B315D263C61820CF01071FB4D65E226A3E656639FAAB6569941FB212/0/34352e3137372e38332e302f32342d3234203d3e20323637383937.roa
Signing time:             Wed 08 Jul 2026 23:45:00 +0000
ROA not before:           Wed 08 Jul 2026 23:40:00 +0000
ROA not after:            Wed 07 Jul 2027 23:45:00 +0000
asID:                     267897
IP address blocks:        45.177.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FA115C95B315D263C61820CF01071FB4D65E226A3E656639FAAB6569941FB212/0/9216C72CE512D40CF58FE3EF39F11D213A1FDF9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FA115C95B315D263C61820CF01071FB4D65E226A3E656639FAAB6569941FB212/0/9216C72CE512D40CF58FE3EF39F11D213A1FDF9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9216C72CE512D40CF58FE3EF39F11D213A1FDF9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 20:12:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9f:ef:4f:61:e3:f4:1b:01:27:2b:9b:2f:de:89:43:8f:40:a6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9216C72CE512D40CF58FE3EF39F11D213A1FDF9B
        Validity
            Not Before: Jul  8 23:40:00 2026 GMT
            Not After : Jul  7 23:45:00 2027 GMT
        Subject: CN=3E4BB2C83D685705B88181A897D5A57CA6936C90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:a4:30:ff:1d:fb:2e:b9:d7:89:1d:4f:1a:
                    57:7a:c9:9b:aa:50:57:4e:ac:73:c7:b7:43:a4:fb:
                    41:3d:13:e2:02:92:32:e5:4c:a2:21:d5:6b:61:c3:
                    8d:30:c8:a6:1d:b9:42:84:95:2f:c6:d5:45:e7:ed:
                    c0:2b:0c:10:7d:35:84:d7:55:cb:ef:c1:fa:1d:08:
                    9b:fc:f9:e6:d3:44:a9:60:aa:61:9b:00:aa:f6:26:
                    49:ec:18:a3:74:19:6f:ad:e8:c8:95:d7:23:bd:4c:
                    0b:65:8a:ba:ef:6e:1b:57:86:40:3e:8f:86:45:60:
                    cc:be:e2:1c:6b:79:49:78:47:16:33:90:05:29:0d:
                    ea:bf:7f:07:83:f9:b5:53:c3:e9:ee:1b:85:b5:60:
                    5d:c6:e8:cc:60:e4:94:13:11:cd:eb:e4:f5:e9:cf:
                    3c:a3:d0:9f:f7:ad:96:f5:48:31:79:17:7c:5e:a7:
                    16:ce:be:76:0f:b0:22:f7:0f:67:16:0a:3a:52:d2:
                    54:72:b5:ad:69:b1:27:21:81:7b:39:ab:7c:9b:98:
                    9e:f5:06:a2:30:18:fb:29:d5:2e:43:b1:69:99:81:
                    e9:77:78:29:a0:44:d8:23:54:71:d6:b9:d0:95:a1:
                    99:86:9b:a4:59:47:03:14:c0:19:eb:f0:52:96:45:
                    fd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4B:B2:C8:3D:68:57:05:B8:81:81:A8:97:D5:A5:7C:A6:93:6C:90
            X509v3 Authority Key Identifier:
                keyid:92:16:C7:2C:E5:12:D4:0C:F5:8F:E3:EF:39:F1:1D:21:3A:1F:DF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FA115C95B315D263C61820CF01071FB4D65E226A3E656639FAAB6569941FB212/0/9216C72CE512D40CF58FE3EF39F11D213A1FDF9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9216C72CE512D40CF58FE3EF39F11D213A1FDF9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FA115C95B315D263C61820CF01071FB4D65E226A3E656639FAAB6569941FB212/0/34352e3137372e38332e302f32342d3234203d3e20323637383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:48:07:ef:24:0f:51:d1:9e:63:bf:fd:d9:1a:b5:b0:da:40:
         39:96:73:0e:5b:d6:56:fa:a1:eb:02:ba:d8:2b:a8:2e:1e:68:
         5f:cb:69:54:47:06:66:e7:3d:67:36:b4:c8:11:00:7e:e0:05:
         19:f3:8f:92:4a:24:78:4a:e3:64:90:76:59:96:d9:50:4d:30:
         b2:35:5f:00:6a:cf:58:e7:6f:49:e5:30:31:7c:69:8b:c0:9c:
         e3:0b:de:9d:6a:5d:38:28:78:18:85:35:49:e6:d6:05:d9:97:
         57:2c:94:6d:ab:e3:7b:a9:a1:fa:cb:c2:27:e1:da:a0:cf:c1:
         54:81:c7:9a:2a:1e:f2:2b:81:ca:3d:24:d1:82:13:d0:0e:f4:
         ac:f4:77:b6:e4:d4:a6:fa:eb:0b:6b:2a:d2:86:c9:b2:9c:4c:
         8a:65:4e:00:58:55:12:1e:14:ec:93:d3:d8:b1:a5:9b:c9:a5:
         2c:81:bd:58:22:fb:6a:60:43:b6:48:a6:d5:4b:70:1e:35:45:
         52:ec:f4:a9:25:9e:17:0e:ee:61:33:07:6f:07:c5:70:b7:9d:
         03:46:21:43:db:2f:db:69:d7:cf:36:c4:6d:75:d0:98:95:5a:
         92:ef:a9:c5:37:af:25:c8:80:a1:8a:26:dd:10:c7:76:9f:3f:
         31:08:e0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:47:02 2026 by rpki-client