Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/088A3226179B313B94D3AA81E0FD5D60A54FD92142EF31BD8B6A36785710894D/0/34352e3232372e3137322e302f32322d3234203d3e20323634373538.roa
File:                     34352e3232372e3137322e302f32322d3234203d3e20323634373538.roa (raw, json)
Hash identifier:          u/ngSs106ZXlafIWuu8pe/r5fSSQZ+cTiLbQAT/NCxA=
Subject key identifier:   E1:92:A8:97:61:39:D8:CD:76:8E:68:3B:A7:06:4F:E1:63:C2:8C:6D
Certificate issuer:       /CN=1F2FFC7C851193A5DE86090123B2951E01BD6B96
Certificate serial:       2880BD80298752F4A9FABAFAD1B0F9DB53C89C82
Authority key identifier: 1F:2F:FC:7C:85:11:93:A5:DE:86:09:01:23:B2:95:1E:01:BD:6B:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F2FFC7C851193A5DE86090123B2951E01BD6B96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/088A3226179B313B94D3AA81E0FD5D60A54FD92142EF31BD8B6A36785710894D/0/34352e3232372e3137322e302f32322d3234203d3e20323634373538.roa
Signing time:             Fri 12 Jun 2026 21:25:00 +0000
ROA not before:           Fri 12 Jun 2026 21:20:00 +0000
ROA not after:            Fri 11 Jun 2027 21:25:00 +0000
asID:                     264758
IP address blocks:        45.227.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/088A3226179B313B94D3AA81E0FD5D60A54FD92142EF31BD8B6A36785710894D/0/1F2FFC7C851193A5DE86090123B2951E01BD6B96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/088A3226179B313B94D3AA81E0FD5D60A54FD92142EF31BD8B6A36785710894D/0/1F2FFC7C851193A5DE86090123B2951E01BD6B96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F2FFC7C851193A5DE86090123B2951E01BD6B96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:80:bd:80:29:87:52:f4:a9:fa:ba:fa:d1:b0:f9:db:53:c8:9c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F2FFC7C851193A5DE86090123B2951E01BD6B96
        Validity
            Not Before: Jun 12 21:20:00 2026 GMT
            Not After : Jun 11 21:25:00 2027 GMT
        Subject: CN=E192A8976139D8CD768E683BA7064FE163C28C6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:1a:a7:8f:b5:60:26:9e:9d:55:f0:df:d0:f9:
                    aa:d7:4e:2f:92:95:e2:59:ac:53:2a:9c:3e:60:12:
                    09:0e:22:ec:1c:52:60:e7:b7:d2:a1:07:1a:b8:06:
                    28:73:4d:82:3f:33:5e:6e:30:cc:5b:06:f4:90:39:
                    a4:28:a9:9a:ca:75:9d:39:d7:23:44:50:59:09:57:
                    33:60:be:02:cf:02:1c:78:92:c8:72:36:4e:16:a6:
                    a0:73:3c:d1:2d:13:dd:a4:51:d7:1d:7d:39:63:d6:
                    66:c7:f2:61:9a:23:62:63:2a:3c:26:56:f3:9d:ab:
                    ae:9a:e7:f9:f1:57:15:b9:f4:79:cd:18:6c:27:09:
                    d3:63:33:e6:2d:bf:66:c4:ce:46:af:cb:f1:7b:8c:
                    3c:fc:32:99:81:b3:04:a7:0c:05:e4:fd:5f:d2:45:
                    8b:17:74:1f:ec:a6:91:c2:cc:db:33:5c:ea:84:21:
                    96:7e:e3:33:c9:aa:c0:e7:85:99:5d:d5:da:44:c7:
                    90:d0:d7:6c:cb:9f:c9:4f:33:35:0c:5d:97:a5:51:
                    c6:76:5a:ac:0b:28:08:61:17:0c:e1:99:9d:cd:b2:
                    c1:78:d9:dd:62:b0:80:42:67:44:91:7d:44:34:ea:
                    b2:a0:e8:cc:a8:08:2c:77:4f:ed:3d:f4:ff:2a:5d:
                    35:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:92:A8:97:61:39:D8:CD:76:8E:68:3B:A7:06:4F:E1:63:C2:8C:6D
            X509v3 Authority Key Identifier:
                keyid:1F:2F:FC:7C:85:11:93:A5:DE:86:09:01:23:B2:95:1E:01:BD:6B:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/088A3226179B313B94D3AA81E0FD5D60A54FD92142EF31BD8B6A36785710894D/0/1F2FFC7C851193A5DE86090123B2951E01BD6B96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F2FFC7C851193A5DE86090123B2951E01BD6B96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/088A3226179B313B94D3AA81E0FD5D60A54FD92142EF31BD8B6A36785710894D/0/34352e3232372e3137322e302f32322d3234203d3e20323634373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:bd:9a:d9:ec:78:76:89:8f:03:8a:91:93:68:c6:8e:1a:e7:
         92:0b:a3:eb:5a:c7:e1:55:f1:e0:89:d2:03:19:c0:62:b1:72:
         8b:64:56:ef:47:59:fd:ac:89:f5:d8:ca:b7:05:d3:de:52:46:
         cd:ee:82:c8:f8:6e:43:0d:d2:cf:69:b5:9d:d3:d5:75:0b:9a:
         fe:f3:ec:18:b3:34:f8:6e:45:15:f4:0f:eb:67:fd:49:13:f9:
         e6:73:05:fe:08:ce:38:9f:e6:99:41:ba:6b:c4:c2:b4:fc:70:
         ed:8e:86:67:f4:5f:a0:df:c5:27:b5:d4:23:37:32:d2:d3:fb:
         ae:92:a1:93:dc:a0:94:3a:f9:95:93:6b:95:51:9c:98:1c:31:
         36:b7:1c:81:22:16:3d:53:5d:c6:f6:51:2d:88:a3:11:f4:65:
         ff:82:e7:67:e5:3d:b5:b5:a3:c1:8f:08:6a:f8:2a:b2:5b:ab:
         ce:fa:a9:38:4d:ca:36:10:b4:4f:1c:85:90:11:ff:a6:76:61:
         93:0a:62:de:1b:1e:c3:a4:fa:5b:bd:98:f3:cc:6d:95:ff:4c:
         2a:d8:1a:c1:bd:8c:e9:d2:83:72:00:71:fc:3f:43:4e:b6:9c:
         c7:50:fd:4b:f8:53:52:53:06:a3:71:b0:7b:d7:c4:4b:d2:c0:
         a0:66:30:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:48:41 2026 by rpki-client