Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/34352e3136372e3139362e302f32342d3234203d3e20323633373835.roa
File:                     34352e3136372e3139362e302f32342d3234203d3e20323633373835.roa (raw, json)
Hash identifier:          N9o0jZIiyUqSz3ClyOcBLSIvuggKhNHIcN0FMpIxgEs=
Subject key identifier:   4E:7D:C3:99:51:53:0E:86:43:9B:F4:0A:19:56:30:20:6E:A6:DD:BA
Certificate issuer:       /CN=E69FE49708F2E468CDB13D588F7D464E0166D1D9
Certificate serial:       5F17C85584B54DF699E33656FA63538AD886886C
Authority key identifier: E6:9F:E4:97:08:F2:E4:68:CD:B1:3D:58:8F:7D:46:4E:01:66:D1:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/34352e3136372e3139362e302f32342d3234203d3e20323633373835.roa
Signing time:             Wed 24 Jun 2026 02:49:24 +0000
ROA not before:           Wed 24 Jun 2026 02:44:24 +0000
ROA not after:            Wed 23 Jun 2027 02:49:24 +0000
asID:                     263785
IP address blocks:        45.167.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:17:c8:55:84:b5:4d:f6:99:e3:36:56:fa:63:53:8a:d8:86:88:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E69FE49708F2E468CDB13D588F7D464E0166D1D9
        Validity
            Not Before: Jun 24 02:44:24 2026 GMT
            Not After : Jun 23 02:49:24 2027 GMT
        Subject: CN=4E7DC39951530E86439BF40A195630206EA6DDBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:8a:b7:a6:28:7d:c9:2e:49:35:e3:73:27:
                    53:e3:71:12:4d:70:c0:24:a2:9a:d4:db:0a:c8:9b:
                    15:39:ae:86:fc:97:62:75:53:56:b3:6f:c8:c1:ba:
                    31:84:e3:64:60:28:63:3f:81:4e:e8:9a:e1:35:41:
                    6f:49:3c:a5:b2:e0:9e:4c:b9:e3:74:43:b6:3b:3e:
                    35:3c:77:10:96:b5:40:41:09:07:b2:d9:67:93:88:
                    92:3c:6a:56:05:71:da:b1:3b:23:3a:27:3b:ce:9e:
                    14:94:1c:81:b0:28:fe:78:61:73:4a:97:01:7f:30:
                    bf:0d:c2:3d:84:b6:a8:9b:04:9e:d2:b9:a8:30:84:
                    4c:05:65:9c:71:d6:a0:a2:78:14:77:f7:dc:bf:96:
                    fa:67:77:55:74:14:2a:71:d1:ba:d0:fb:d6:09:76:
                    d9:1b:46:b3:e4:7c:10:4b:9b:eb:dd:1e:58:59:99:
                    7a:9c:03:01:6c:7a:01:ec:e6:66:4e:0c:fb:36:7b:
                    8d:97:03:35:cc:f8:17:eb:67:88:2b:f9:24:ff:d2:
                    39:f6:1d:0f:58:d4:7c:d4:bb:20:50:4b:22:68:ab:
                    de:97:d0:8d:69:98:81:7e:15:92:9c:30:40:2a:95:
                    e2:3c:ae:cb:c6:9b:c7:b3:32:19:7f:dc:d5:cf:fb:
                    20:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7D:C3:99:51:53:0E:86:43:9B:F4:0A:19:56:30:20:6E:A6:DD:BA
            X509v3 Authority Key Identifier:
                keyid:E6:9F:E4:97:08:F2:E4:68:CD:B1:3D:58:8F:7D:46:4E:01:66:D1:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/34352e3136372e3139362e302f32342d3234203d3e20323633373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:b5:9e:de:8c:fa:e7:a3:ae:61:98:f3:c5:af:d6:27:0e:e9:
         e8:01:98:30:89:5e:fd:23:a9:ab:59:78:6a:06:61:6b:a4:17:
         79:0f:c4:30:75:d1:da:75:5f:da:df:ca:db:a6:da:a2:dc:b4:
         8c:f2:30:15:93:e9:87:e5:cb:89:b1:0a:97:7b:72:52:08:d2:
         d9:fc:59:6c:30:e4:a7:54:60:57:e2:9f:d2:e4:dd:85:95:1a:
         7f:4c:88:5a:e5:42:7c:91:ac:12:88:8f:16:7a:b1:9c:b3:ce:
         ed:4c:73:00:3a:2a:36:63:84:d9:6e:ee:0e:86:4d:54:f4:6b:
         a1:16:b4:e5:80:26:67:ef:9a:4a:a4:37:0c:89:e9:96:8b:20:
         d7:f3:e3:8b:ff:14:ba:ab:62:7e:63:b8:2a:38:7a:23:3d:fa:
         46:9e:83:40:33:a0:9b:fa:88:2a:3f:98:6f:d2:92:25:77:59:
         de:6a:13:55:f2:6c:2d:98:e8:52:88:f0:c4:93:6d:95:34:a9:
         ea:ee:b2:8f:7b:c8:89:b1:17:47:13:9e:b7:2b:f8:b8:c0:f0:
         e7:7a:78:41:91:4b:76:d4:11:cb:1f:7e:ad:01:41:47:c7:fa:
         9a:fd:87:f9:ae:57:f8:e0:34:15:a6:11:c8:d6:2d:24:13:b1:
         88:82:88:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:40:04 2026 by rpki-client