Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/34352e3136372e3139392e302f32342d3234203d3e20323633373835.roa
File:                     34352e3136372e3139392e302f32342d3234203d3e20323633373835.roa (raw, json)
Hash identifier:          W/h01j1HvwunoB24Cb9492etwKgg/ITu23ZDnQGcNuE=
Subject key identifier:   EC:78:9A:6C:F6:BE:26:FB:C1:E6:DE:D9:BF:A6:1D:4E:F0:63:1A:10
Certificate issuer:       /CN=E69FE49708F2E468CDB13D588F7D464E0166D1D9
Certificate serial:       10B59D6CCC3EAA5337214A78B98FFDFBD5CF3959
Authority key identifier: E6:9F:E4:97:08:F2:E4:68:CD:B1:3D:58:8F:7D:46:4E:01:66:D1:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/34352e3136372e3139392e302f32342d3234203d3e20323633373835.roa
Signing time:             Wed 24 Jun 2026 02:49:25 +0000
ROA not before:           Wed 24 Jun 2026 02:44:25 +0000
ROA not after:            Wed 23 Jun 2027 02:49:25 +0000
asID:                     263785
IP address blocks:        45.167.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b5:9d:6c:cc:3e:aa:53:37:21:4a:78:b9:8f:fd:fb:d5:cf:39:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E69FE49708F2E468CDB13D588F7D464E0166D1D9
        Validity
            Not Before: Jun 24 02:44:25 2026 GMT
            Not After : Jun 23 02:49:25 2027 GMT
        Subject: CN=EC789A6CF6BE26FBC1E6DED9BFA61D4EF0631A10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:27:8f:d8:a7:bc:6c:c6:d0:17:c9:f0:f5:3a:
                    58:a0:3d:80:25:c6:72:bd:e6:6b:36:44:28:dd:46:
                    29:f7:24:3a:a1:03:2a:27:28:73:50:9b:c9:ea:b7:
                    7f:2e:8f:d1:5f:90:9f:dd:c2:81:84:d1:1b:a9:2f:
                    86:8a:fe:75:1b:a7:5f:9a:f6:86:98:d9:f2:e9:a4:
                    7e:e6:27:ef:20:db:b7:86:e4:67:96:fb:c1:e5:e0:
                    4b:4a:45:83:68:05:f1:67:69:40:3c:19:40:29:3d:
                    65:f4:63:72:7d:73:41:eb:e5:06:fb:38:10:6c:8e:
                    3b:69:9d:b4:66:9f:39:ce:0c:1f:39:48:ae:c2:7e:
                    e4:cd:a4:67:46:0f:9a:1f:f6:53:79:31:c1:27:14:
                    0e:3f:9f:80:3e:fc:80:44:b1:5e:cd:30:14:cb:b1:
                    9e:dc:dd:93:00:96:77:ba:08:3a:0e:79:1f:de:4d:
                    71:24:b6:4b:a3:ed:46:c8:71:86:29:ee:e3:6f:4b:
                    39:c1:2a:a4:fb:df:bc:5f:62:ba:d3:5c:af:b8:4d:
                    40:24:3a:00:01:2a:d4:84:75:38:bf:db:2f:0f:c4:
                    d4:c6:4c:69:ee:2a:69:1a:15:df:60:cf:8a:27:3e:
                    97:9b:3b:d7:e2:80:0e:6b:a9:b7:67:15:e9:93:18:
                    c1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:78:9A:6C:F6:BE:26:FB:C1:E6:DE:D9:BF:A6:1D:4E:F0:63:1A:10
            X509v3 Authority Key Identifier:
                keyid:E6:9F:E4:97:08:F2:E4:68:CD:B1:3D:58:8F:7D:46:4E:01:66:D1:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E69FE49708F2E468CDB13D588F7D464E0166D1D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FCF494A2EA5F2ADFAB2178D7B14D22A55E1AE9BA6E44CBA8A5A6A313CF391F1B/0/34352e3136372e3139392e302f32342d3234203d3e20323633373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:f8:96:2c:d0:1c:3d:59:56:0d:e7:00:8e:24:68:65:9f:6d:
         da:94:d0:4e:f0:09:b2:e8:58:72:53:08:66:e4:00:db:2d:85:
         6c:da:f7:2a:25:89:61:33:c7:6f:cd:ed:8f:71:69:25:a2:6a:
         42:53:c9:84:0d:a0:57:c2:31:2f:d1:7b:21:38:f0:45:58:82:
         a1:22:25:6e:bf:94:15:98:56:e6:8f:52:42:84:aa:21:58:d3:
         69:db:2f:fc:c3:38:2e:62:69:9f:d7:a8:a5:c3:62:ca:5d:e3:
         3e:f4:69:6b:e9:f6:82:3c:be:f7:79:e6:b8:1c:c3:20:a0:b6:
         f3:03:8c:b7:10:13:ea:6e:2e:08:b7:ed:a5:2e:3b:3f:1a:77:
         05:03:56:d0:d6:6a:b2:88:09:40:58:ee:dc:54:f3:20:93:ef:
         96:47:d7:11:44:8e:39:9c:bb:bd:4b:fc:83:a1:e3:80:2d:91:
         2f:e5:f7:45:2b:61:4a:74:d6:ff:41:32:1b:ab:7e:98:21:fe:
         1a:70:da:f4:3c:bc:d2:b4:9a:bc:03:55:be:39:f4:4c:65:81:
         d2:56:ae:c9:8e:61:8b:dd:77:ce:c9:cc:30:c6:3e:1e:3d:40:
         cf:c2:e8:f3:66:20:fd:cc:28:8f:ff:80:f5:c5:8d:d7:75:c2:
         71:a4:21:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:40:04 2026 by rpki-client