Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/34352e3136372e3139372e302f32342d3234203d3e20323633373835.roa
File:                     34352e3136372e3139372e302f32342d3234203d3e20323633373835.roa (raw, json)
Hash identifier:          YnFtNv4NZe9NHmOmbazfZ4j9oQAfSxg58z3A2MItni8=
Subject key identifier:   88:D8:57:8B:67:3C:E0:D0:D7:D0:FB:E8:61:4E:9B:1A:2B:AC:C8:F7
Certificate issuer:       /CN=E69FE49708F2E468CDB13D588F7D464E0166D1D9
Certificate serial:       47622221A4E1D5E2B2E90B9942EFA75096F0D27A
Authority key identifier: E6:9F:E4:97:08:F2:E4:68:CD:B1:3D:58:8F:7D:46:4E:01:66:D1:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/34352e3136372e3139372e302f32342d3234203d3e20323633373835.roa
Signing time:             Wed 24 Jun 2026 02:49:24 +0000
ROA not before:           Wed 24 Jun 2026 02:44:24 +0000
ROA not after:            Wed 23 Jun 2027 02:49:24 +0000
asID:                     263785
IP address blocks:        45.167.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:62:22:21:a4:e1:d5:e2:b2:e9:0b:99:42:ef:a7:50:96:f0:d2:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E69FE49708F2E468CDB13D588F7D464E0166D1D9
        Validity
            Not Before: Jun 24 02:44:24 2026 GMT
            Not After : Jun 23 02:49:24 2027 GMT
        Subject: CN=88D8578B673CE0D0D7D0FBE8614E9B1A2BACC8F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:17:5a:1b:cb:fa:9a:cb:04:0f:85:f0:eb:b0:
                    74:26:86:ed:7f:6d:33:5a:bd:8c:62:3f:62:70:d6:
                    aa:77:b0:d2:a8:8e:18:6c:d6:26:a6:7c:e7:40:fa:
                    8e:1e:8f:6e:cd:09:8b:a9:94:23:6d:32:e1:a2:5f:
                    7f:d7:29:c2:68:07:04:6d:aa:d7:50:37:79:47:71:
                    9a:0a:3d:f8:71:10:13:88:97:59:d1:9b:e8:31:6a:
                    8f:18:41:d6:ca:09:ef:2b:53:d8:24:7d:a8:ec:e0:
                    77:62:90:ad:f5:e6:02:03:1e:ce:fe:50:04:25:66:
                    23:73:1c:20:e4:b4:1d:7e:c7:e4:42:55:0a:e6:06:
                    4d:c9:9c:c9:78:5f:e8:80:5b:f9:8d:b0:c8:6d:a2:
                    97:0e:a2:66:8b:45:85:94:5f:ea:9b:53:67:de:95:
                    fc:48:15:94:37:b6:e4:79:1f:cb:e3:bd:6f:d5:b6:
                    aa:29:78:05:52:f4:c4:8d:f9:f8:99:23:d0:55:36:
                    5b:85:ef:92:91:af:b7:0b:65:32:b8:65:e8:34:45:
                    57:df:8b:59:53:f4:a8:54:46:c2:65:05:a7:da:0b:
                    03:e8:60:bd:b0:ca:43:98:74:14:d0:8e:af:46:de:
                    b1:09:93:f7:fa:e7:65:f7:f9:b4:4d:d3:51:ab:99:
                    fa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D8:57:8B:67:3C:E0:D0:D7:D0:FB:E8:61:4E:9B:1A:2B:AC:C8:F7
            X509v3 Authority Key Identifier:
                keyid:E6:9F:E4:97:08:F2:E4:68:CD:B1:3D:58:8F:7D:46:4E:01:66:D1:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/34352e3136372e3139372e302f32342d3234203d3e20323633373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:2a:8b:3e:5a:f7:44:fa:90:cf:11:2b:b5:10:8d:2e:94:e7:
         a3:05:0a:26:3d:12:8b:2e:1a:28:c7:cf:fd:fc:fa:bc:5d:26:
         88:59:2b:16:0c:06:31:2d:17:75:29:da:bf:71:52:77:90:94:
         d1:25:fb:fe:21:0a:cf:53:b2:9c:89:36:75:19:d3:0f:4a:df:
         62:a4:c0:ac:44:01:28:7c:64:25:06:e2:9d:8a:dd:95:66:f4:
         2b:d1:52:85:74:0b:e7:5c:9f:c8:e1:32:63:ae:47:75:a1:f6:
         61:31:98:de:48:67:47:6e:65:2f:4b:04:2f:c9:d5:46:bc:14:
         00:22:74:2b:60:ad:07:07:89:32:d2:8e:2c:90:d5:f9:2c:87:
         fe:cc:52:9e:7d:1f:8a:fe:c3:f8:52:e3:1b:4a:0b:a6:cc:82:
         f1:d9:4a:08:94:68:60:eb:d1:31:0a:e4:0a:46:cc:60:40:01:
         79:72:17:76:14:ab:7d:b2:66:6e:3a:4b:8d:d6:9c:f7:d6:c9:
         b0:a1:9b:9f:cd:62:93:28:e7:46:0d:89:23:08:c8:51:e3:53:
         78:4a:95:15:0a:2e:b1:d8:3a:d3:13:33:24:cd:ab:ff:df:4f:
         8f:07:53:84:01:10:22:11:93:fa:cf:4b:cc:78:69:83:06:6f:
         a3:26:c2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:40:05 2026 by rpki-client