Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/088A3226179B313B94D3AA81E0FD5D60A54FD92142EF31BD8B6A36785710894D/0/34352e3232372e3137322e302f32322d3232203d3e20323634373538.roa
File:                     34352e3232372e3137322e302f32322d3232203d3e20323634373538.roa (raw, json)
Hash identifier:          k9TGfQ4oMdA1cz9YpMA7khsGeVMWBB8odlXb+5jzkoU=
Subject key identifier:   D6:BC:B7:FA:25:4A:CE:F4:68:40:13:1B:DC:F4:D1:09:F6:40:0C:65
Certificate issuer:       /CN=1F2FFC7C851193A5DE86090123B2951E01BD6B96
Certificate serial:       481895E1FA7F3FBAD49581CEE08538B9FC4853C3
Authority key identifier: 1F:2F:FC:7C:85:11:93:A5:DE:86:09:01:23:B2:95:1E:01:BD:6B:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F2FFC7C851193A5DE86090123B2951E01BD6B96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/088A3226179B313B94D3AA81E0FD5D60A54FD92142EF31BD8B6A36785710894D/0/34352e3232372e3137322e302f32322d3232203d3e20323634373538.roa
Signing time:             Fri 12 Jun 2026 19:35:00 +0000
ROA not before:           Fri 12 Jun 2026 19:30:00 +0000
ROA not after:            Fri 11 Jun 2027 19:35:00 +0000
asID:                     264758
IP address blocks:        45.227.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/088A3226179B313B94D3AA81E0FD5D60A54FD92142EF31BD8B6A36785710894D/0/1F2FFC7C851193A5DE86090123B2951E01BD6B96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/088A3226179B313B94D3AA81E0FD5D60A54FD92142EF31BD8B6A36785710894D/0/1F2FFC7C851193A5DE86090123B2951E01BD6B96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F2FFC7C851193A5DE86090123B2951E01BD6B96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:18:95:e1:fa:7f:3f:ba:d4:95:81:ce:e0:85:38:b9:fc:48:53:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F2FFC7C851193A5DE86090123B2951E01BD6B96
        Validity
            Not Before: Jun 12 19:30:00 2026 GMT
            Not After : Jun 11 19:35:00 2027 GMT
        Subject: CN=D6BCB7FA254ACEF46840131BDCF4D109F6400C65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:27:98:e2:3d:71:dc:0d:08:f8:aa:a9:af:
                    30:86:b7:dd:aa:05:76:5f:41:2b:9b:fe:59:78:41:
                    d1:1a:c0:07:4d:92:2e:2e:51:da:7e:9b:4e:b6:bf:
                    e1:4b:89:93:44:7b:c9:14:ab:ba:70:3f:05:50:15:
                    3b:68:07:2e:50:db:33:56:95:3a:0e:ce:28:28:b5:
                    65:28:db:6a:29:76:22:44:c4:42:5e:54:87:a3:a2:
                    83:72:1b:7e:15:41:27:00:38:c4:30:7d:6a:86:92:
                    42:c6:85:47:aa:c9:aa:a9:95:84:c2:18:61:aa:24:
                    a3:55:df:2b:a1:4b:62:cc:2a:e2:d9:ca:c5:64:f6:
                    76:ff:5a:4a:36:d4:36:26:9c:a5:ad:15:39:cf:c2:
                    c8:a3:b3:d0:7c:32:65:b7:62:ba:c3:0b:32:a3:de:
                    7f:ea:60:71:64:9c:b0:42:f2:94:b5:df:d7:7b:26:
                    91:01:ef:24:0d:d3:d7:d6:30:67:63:e3:0b:bb:8e:
                    74:b3:ba:a3:83:7b:34:44:cd:78:c5:09:47:c6:36:
                    01:18:39:57:e4:53:c5:42:df:3a:5c:a1:ea:57:d7:
                    fc:5e:05:cb:94:07:88:77:a0:d6:a9:2a:f2:d4:17:
                    17:c1:99:1f:9b:2f:a3:d5:8a:87:d9:71:43:4b:a4:
                    d1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BC:B7:FA:25:4A:CE:F4:68:40:13:1B:DC:F4:D1:09:F6:40:0C:65
            X509v3 Authority Key Identifier:
                keyid:1F:2F:FC:7C:85:11:93:A5:DE:86:09:01:23:B2:95:1E:01:BD:6B:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/088A3226179B313B94D3AA81E0FD5D60A54FD92142EF31BD8B6A36785710894D/0/1F2FFC7C851193A5DE86090123B2951E01BD6B96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F2FFC7C851193A5DE86090123B2951E01BD6B96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/088A3226179B313B94D3AA81E0FD5D60A54FD92142EF31BD8B6A36785710894D/0/34352e3232372e3137322e302f32322d3232203d3e20323634373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:59:6f:83:b1:c6:52:b4:79:53:f3:bb:a6:94:34:6e:c5:8c:
         9a:a8:17:1d:c5:62:cd:7c:44:da:2c:9a:ad:36:a8:68:31:84:
         4c:1a:71:c4:b5:3b:2c:c0:50:ff:1e:5c:18:d8:35:b5:f9:8f:
         60:2b:a2:6e:0f:80:af:d0:89:ce:75:c7:b2:2e:91:b1:b3:97:
         2e:83:4f:b3:b9:c4:b9:90:35:2e:7c:06:27:5d:3e:3a:d1:88:
         2d:1e:52:6c:53:04:71:35:6c:6e:28:4d:10:ce:e6:04:5d:a2:
         81:ae:bd:8e:b3:86:7a:9e:c7:bc:56:1b:b6:94:54:2a:89:c9:
         bd:87:1e:77:a7:5b:0b:73:1b:42:f7:66:f2:e5:e4:66:e4:00:
         11:a4:02:97:1d:23:b3:5b:88:6c:b1:c6:d9:87:9a:70:df:7c:
         b8:61:ee:64:7b:b1:fd:41:90:4a:84:f8:4a:2f:fd:fe:64:4c:
         c2:ff:67:9c:4c:01:fc:3a:58:b6:90:ce:65:09:7c:70:73:06:
         93:0b:11:7f:05:a7:aa:21:37:b7:32:f4:c7:7f:cd:77:18:d9:
         27:02:3a:1a:26:f9:aa:62:18:77:d4:18:94:58:16:b9:33:46:
         c3:97:f0:6a:93:e6:79:00:d9:b4:a0:e8:2e:0f:42:52:d9:1a:
         51:35:fe:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:48:47 2026 by rpki-client