Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/34352e3137302e33302e302f32342d3234203d3e20323637373532.roa
File:                     34352e3137302e33302e302f32342d3234203d3e20323637373532.roa (raw, json)
Hash identifier:          JUyWXOOCux/GXQa+iuCgUq9NZIgf42sr2AatAUVmRfw=
Subject key identifier:   00:DE:26:0D:93:FF:B3:0B:2C:17:16:66:D7:19:B1:DE:5F:DB:94:C8
Certificate issuer:       /CN=FD07AFBCC3FFB625EEA674F938508F1BC3309E00
Certificate serial:       2089B5F227A9263CF3E6C874E97DCF7D4618F000
Authority key identifier: FD:07:AF:BC:C3:FF:B6:25:EE:A6:74:F9:38:50:8F:1B:C3:30:9E:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/34352e3137302e33302e302f32342d3234203d3e20323637373532.roa
Signing time:             Thu 01 Oct 2026 23:37:43 +0000
ROA not before:           Thu 01 Oct 2026 23:32:43 +0000
ROA not after:            Thu 30 Sep 2027 23:37:43 +0000
asID:                     267752
IP address blocks:        45.170.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 16:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:89:b5:f2:27:a9:26:3c:f3:e6:c8:74:e9:7d:cf:7d:46:18:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD07AFBCC3FFB625EEA674F938508F1BC3309E00
        Validity
            Not Before: Oct  1 23:32:43 2026 GMT
            Not After : Sep 30 23:37:43 2027 GMT
        Subject: CN=00DE260D93FFB30B2C171666D719B1DE5FDB94C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c3:a8:18:01:7a:5f:8d:1a:43:5b:66:78:ad:
                    14:71:67:55:9f:84:a9:c7:69:42:da:2d:af:8a:7e:
                    77:58:3b:20:8f:bf:c2:08:4b:46:3f:ef:e4:31:7e:
                    66:09:9e:55:5f:1e:0e:bd:e4:f1:e1:a3:2a:c3:eb:
                    23:bb:2f:60:2a:76:63:d5:0b:df:da:87:80:99:1b:
                    0f:fc:5d:0c:b3:3f:e4:43:b6:8d:78:30:0b:d4:59:
                    b3:74:71:e2:9f:69:a1:e0:17:ac:c7:d3:8b:82:2b:
                    92:30:05:fa:bc:58:f6:66:df:9c:37:26:b4:b4:00:
                    c6:af:19:27:1a:44:32:a7:21:8a:cb:d4:e9:87:97:
                    eb:ee:7e:4a:e2:9b:31:41:5b:b0:47:11:9f:6a:e5:
                    84:28:dc:e1:41:41:87:4c:fb:21:8a:3a:f3:0c:1f:
                    d9:dc:19:cc:0d:e5:82:4e:23:a9:07:0d:02:9d:c0:
                    a4:bd:c5:d6:ce:4a:62:3d:32:c5:9e:5b:e7:5e:cf:
                    fa:d9:98:12:76:fe:d8:4e:a9:c2:fd:ab:e8:89:95:
                    ef:c6:46:b2:ae:88:98:1c:ed:3e:84:5e:78:f9:fa:
                    f6:8b:d2:a5:47:d7:27:27:7c:41:85:6c:a9:26:5f:
                    12:44:9f:db:22:da:d9:87:f3:01:8c:af:4e:41:3a:
                    cb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DE:26:0D:93:FF:B3:0B:2C:17:16:66:D7:19:B1:DE:5F:DB:94:C8
            X509v3 Authority Key Identifier:
                keyid:FD:07:AF:BC:C3:FF:B6:25:EE:A6:74:F9:38:50:8F:1B:C3:30:9E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/34352e3137302e33302e302f32342d3234203d3e20323637373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:b9:fe:07:18:57:5c:56:de:1d:35:c3:a4:62:9c:65:74:21:
         da:ce:18:f6:77:a2:b9:07:fc:d6:b7:ec:da:91:b4:ed:2f:dd:
         ce:a3:38:99:27:20:58:0b:6a:40:46:33:43:1a:e3:e8:98:b7:
         d5:cf:13:c6:4d:31:9e:38:a2:79:1c:e4:bd:25:13:7e:77:83:
         70:c6:4c:87:8f:3d:1d:d8:bc:7e:c9:fc:96:40:3b:b8:ef:ba:
         7d:f8:3a:a9:b0:f1:f9:d7:06:7e:8b:e3:dc:86:02:d5:9b:a7:
         ed:f6:c5:18:3e:0f:2e:8d:53:77:36:08:5b:28:26:3f:14:f5:
         2e:b8:7b:a8:22:93:c3:8c:3f:57:5b:8c:85:92:d5:5c:50:53:
         3e:1f:9b:1b:32:03:20:72:9d:9e:4e:98:9d:1a:b9:50:93:cc:
         e3:21:89:54:ef:f6:13:41:90:1d:8f:2c:9a:4a:ba:2e:4c:06:
         10:1f:7b:aa:b5:0a:a9:08:52:e4:4c:2b:a9:d3:9c:76:ce:a5:
         23:5e:10:70:62:23:66:db:e5:01:4e:a7:bc:d4:f0:36:e6:2c:
         8d:cc:ba:aa:b3:d9:a7:57:18:16:cf:51:fb:42:01:30:b2:7b:
         64:2d:88:5a:d2:12:cf:20:c8:be:cf:de:48:e3:3e:10:9c:9a:
         a5:f7:db:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:37:55 2026 by rpki-client