Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/34352e3232392e3136382e302f32342d3234203d3e20323636363934.roa
File:                     34352e3232392e3136382e302f32342d3234203d3e20323636363934.roa (raw, json)
Hash identifier:          mAUDDlZWX5UlMRGHWT+M5nqVcY7ZjGUAidl+RbrtQJA=
Subject key identifier:   6B:12:3E:6F:B1:10:20:2A:2B:25:18:21:3D:BD:4B:18:C9:4A:9F:98
Certificate issuer:       /CN=F16271A6D5A5968361D977B117B0281F2D2B08AE
Certificate serial:       546CCD68CCCE567946F7964F8C34686020F0B26C
Authority key identifier: F1:62:71:A6:D5:A5:96:83:61:D9:77:B1:17:B0:28:1F:2D:2B:08:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/34352e3232392e3136382e302f32342d3234203d3e20323636363934.roa
Signing time:             Tue 31 Mar 2026 18:36:59 +0000
ROA not before:           Tue 31 Mar 2026 18:31:59 +0000
ROA not after:            Tue 30 Mar 2027 18:36:59 +0000
asID:                     266694
IP address blocks:        45.229.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 23:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:6c:cd:68:cc:ce:56:79:46:f7:96:4f:8c:34:68:60:20:f0:b2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16271A6D5A5968361D977B117B0281F2D2B08AE
        Validity
            Not Before: Mar 31 18:31:59 2026 GMT
            Not After : Mar 30 18:36:59 2027 GMT
        Subject: CN=6B123E6FB110202A2B2518213DBD4B18C94A9F98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6f:3b:2d:8d:be:f8:9b:3e:69:a9:ce:72:23:
                    6c:9b:6c:a8:77:1b:b5:b2:56:cb:d3:71:96:a6:ee:
                    e6:bb:3e:65:9e:fe:36:2c:70:0c:31:29:d7:c2:89:
                    1f:50:9e:6a:88:82:21:3f:5e:e9:e4:fd:c6:95:20:
                    df:bf:84:10:ce:32:cc:63:5c:74:da:48:de:74:cf:
                    79:87:b5:9c:3b:5d:92:8a:82:f2:1d:60:3f:6c:ef:
                    5f:40:8d:4e:58:31:fa:ce:2f:bd:09:a8:ad:99:76:
                    79:23:c1:57:49:69:e4:ce:12:87:2a:4d:ef:df:32:
                    ea:d2:b1:a0:4f:f2:06:05:86:60:67:e0:8b:0d:2c:
                    72:f9:c1:c4:c8:60:01:78:e6:cd:c5:ee:34:44:50:
                    93:42:24:53:f8:9c:77:c1:66:e3:f8:9a:cd:e2:04:
                    9e:37:9c:28:b0:7b:66:ea:ca:b1:df:53:f2:e0:25:
                    49:5f:5d:ff:2c:0a:f9:16:fb:01:a9:c4:a0:37:48:
                    f0:1c:ac:f7:e2:c8:b6:9e:f0:f0:5a:2c:75:46:e4:
                    49:f7:36:fe:88:9f:08:c4:62:9c:af:f6:53:24:84:
                    c8:a1:5c:96:29:da:a2:36:c0:73:91:0e:e6:72:be:
                    de:cd:24:2b:c6:31:d3:25:43:3f:39:d5:70:02:bc:
                    f2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:12:3E:6F:B1:10:20:2A:2B:25:18:21:3D:BD:4B:18:C9:4A:9F:98
            X509v3 Authority Key Identifier:
                keyid:F1:62:71:A6:D5:A5:96:83:61:D9:77:B1:17:B0:28:1F:2D:2B:08:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/34352e3232392e3136382e302f32342d3234203d3e20323636363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:c6:b4:c4:9f:b3:6d:53:3b:19:b5:01:06:a0:f0:15:a6:ad:
         68:5e:79:53:3d:e4:d6:49:12:01:19:9a:55:76:44:c0:df:29:
         07:2e:e4:0b:6d:c6:8d:3c:60:ef:61:6c:fd:a1:ee:70:47:35:
         ea:a6:2a:9b:1f:4a:cc:63:29:84:31:02:b3:fb:29:fe:d9:ea:
         81:6c:6b:69:9d:41:9f:57:57:d1:00:01:05:b2:9f:00:1b:38:
         85:d2:af:98:8d:a9:af:ee:6c:09:ec:04:d8:1c:80:8d:76:b4:
         63:4e:85:f5:fe:c7:99:23:a9:1c:18:fd:93:05:aa:3b:14:e2:
         b0:c9:fa:0b:8f:bf:82:da:fe:da:67:77:38:8c:a5:7d:69:32:
         dd:7c:84:bd:79:9c:d9:d7:af:fc:1f:14:5d:e0:53:f0:01:60:
         d1:68:7c:05:22:98:6e:cf:bd:93:14:a0:48:4b:36:db:0e:3e:
         dc:2a:79:74:63:a0:82:08:df:8d:8d:89:ac:2e:2d:00:1d:a8:
         88:8b:c2:d8:37:0e:83:41:97:e3:44:a4:de:52:dd:e6:2b:81:
         39:05:7d:98:30:0d:bf:3f:7d:c0:97:5b:08:b6:fb:18:27:c0:
         a2:35:1e:26:3d:1b:d7:95:cc:65:1a:f5:64:42:f4:31:03:11:
         fe:e5:04:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:31:55 2026 by rpki-client