Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/34352e3137302e3133322e302f32342d3234203d3e20313937393931.roa
File:                     34352e3137302e3133322e302f32342d3234203d3e20313937393931.roa (raw, json)
Hash identifier:          dmGEVxiMDWzNuMFxzHFUWqPH1zmGhZ7ALpt2Yw/LICM=
Subject key identifier:   EF:8D:10:9B:60:5F:06:A0:09:80:3F:B7:A6:F5:5A:3D:B8:B2:97:67
Certificate issuer:       /CN=643132A8FE5198797F39AACB314EC77EE8C6D84D
Certificate serial:       5887740035260ED06C87906F872462A0BADED2DC
Authority key identifier: 64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/34352e3137302e3133322e302f32342d3234203d3e20313937393931.roa
Signing time:             Mon 23 Feb 2026 16:31:35 +0000
ROA not before:           Mon 23 Feb 2026 16:26:35 +0000
ROA not after:            Mon 22 Feb 2027 16:31:35 +0000
asID:                     197991
IP address blocks:        45.170.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 18:10:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:87:74:00:35:26:0e:d0:6c:87:90:6f:87:24:62:a0:ba:de:d2:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643132A8FE5198797F39AACB314EC77EE8C6D84D
        Validity
            Not Before: Feb 23 16:26:35 2026 GMT
            Not After : Feb 22 16:31:35 2027 GMT
        Subject: CN=EF8D109B605F06A009803FB7A6F55A3DB8B29767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b9:d9:46:b8:02:24:ac:b3:3a:8c:06:d2:35:
                    c3:58:d2:0a:6a:18:30:fb:30:36:5e:06:0b:6e:91:
                    49:a3:84:db:d9:13:62:7b:88:b2:bc:16:9d:a3:aa:
                    44:97:d1:eb:b5:16:15:ff:b1:51:e5:db:9b:ef:75:
                    ec:06:ff:80:b7:b3:5d:17:60:75:53:39:fd:c4:cb:
                    c5:77:28:12:ad:1f:8f:5b:fa:1b:7a:f8:b6:3e:e3:
                    2d:9b:5c:82:54:4f:89:9d:51:b9:bb:17:af:42:1b:
                    c9:f3:99:b4:15:78:3d:6f:7f:d3:8b:e2:1a:4c:92:
                    43:48:a3:ce:18:45:44:ea:33:a7:8c:ba:1d:cf:5f:
                    4c:fe:49:ea:e3:f5:f5:52:c3:a6:49:5e:63:86:78:
                    3b:ba:7f:ac:df:01:34:9a:9c:fb:af:d2:a9:02:ea:
                    72:ce:40:9e:9d:91:8f:ac:ef:04:b9:ba:82:b7:93:
                    c7:f8:9b:25:97:84:2d:3d:95:7a:f7:cb:c6:26:a9:
                    2e:7e:9f:92:a7:b3:3f:c5:27:43:9b:7f:fe:ee:c2:
                    79:c3:67:5e:7e:e3:da:ce:96:23:cd:73:3c:f5:a5:
                    64:8c:f8:b8:58:6c:a3:c6:b4:5f:49:fb:90:ca:f6:
                    98:36:f7:f0:76:cc:6f:8d:6b:7a:7a:f6:7e:15:b9:
                    65:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8D:10:9B:60:5F:06:A0:09:80:3F:B7:A6:F5:5A:3D:B8:B2:97:67
            X509v3 Authority Key Identifier:
                keyid:64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/34352e3137302e3133322e302f32342d3234203d3e20313937393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:03:33:c2:72:dc:b7:0c:46:3e:c4:48:64:3f:f6:c0:c9:7f:
         ed:6f:fd:af:79:5c:ed:a1:e0:9f:95:42:6c:d6:77:89:44:48:
         2a:a2:dd:09:4d:51:5d:9b:dc:ed:b8:44:0a:d7:24:60:25:3f:
         21:3b:51:05:ad:a6:68:fa:16:83:2b:cf:13:a5:20:54:4e:dd:
         b1:be:1e:1c:e0:fc:47:4c:57:36:75:21:42:48:d1:c5:d7:e8:
         f5:39:07:98:d3:ec:63:a1:b8:67:45:65:26:80:d4:63:78:60:
         e7:b8:13:78:30:45:bc:45:e8:2e:8f:97:c9:a1:39:c7:1e:64:
         48:ae:77:64:bc:1b:ff:b6:93:f5:52:55:75:70:b0:b9:fb:da:
         2f:77:8a:57:a1:f2:8e:58:8e:29:63:62:78:ac:30:36:30:b3:
         6e:a0:cc:cd:10:ec:7c:2e:97:cb:a2:31:54:6c:7d:d2:bb:2e:
         d2:06:52:7b:14:c7:e2:96:9c:65:1d:72:fe:ba:24:aa:1d:65:
         a0:97:c7:77:a9:70:55:fb:db:80:c5:ac:13:46:d9:24:31:d5:
         c3:73:97:5b:4b:be:88:41:34:fd:df:9a:73:ab:62:f1:72:b0:
         01:e1:c9:07:65:0b:51:37:7a:4a:e9:a5:ec:0e:32:32:a7:a8:
         76:1a:81:09
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUWId0ADUmDtBsh5BvhyRioLre0twwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQzMTMyQThGRTUxOTg3OTdGMzlBQUNCMzE0RUM3N0VF
OEM2RDg0RDAeFw0yNjAyMjMxNjI2MzVaFw0yNzAyMjIxNjMxMzVaMDMxMTAvBgNV
BAMTKEVGOEQxMDlCNjA1RjA2QTAwOTgwM0ZCN0E2RjU1QTNEQjhCMjk3NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWudlGuAIkrLM6jAbSNcNY0gpq
GDD7MDZeBgtukUmjhNvZE2J7iLK8Fp2jqkSX0eu1FhX/sVHl25vvdewG/4C3s10X
YHVTOf3Ey8V3KBKtH49b+ht6+LY+4y2bXIJUT4mdUbm7F69CG8nzmbQVeD1vf9OL
4hpMkkNIo84YRUTqM6eMuh3PX0z+Serj9fVSw6ZJXmOGeDu6f6zfATSanPuv0qkC
6nLOQJ6dkY+s7wS5uoK3k8f4myWXhC09lXr3y8YmqS5+n5Knsz/FJ0Obf/7uwnnD
Z15+49rOliPNczz1pWSM+LhYbKPGtF9J+5DK9pg29/B2zG+Na3p69n4VuWUdAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU740Qm2BfBqAJgD+3pvVaPbiyl2cwHwYDVR0j
BBgwFoAUZDEyqP5RmHl/OarLMU7HfujG2E0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMkMyMkEwNzY0RTRDRDQ1ODRFNDMwNTk1MTM3NjNFOTQz
MzY1QzkzMDUwNDVFRkIzMDFGNTE1NDczNTBBNTQwLzAvNjQzMTMyQThGRTUxOTg3
OTdGMzlBQUNCMzE0RUM3N0VFOEM2RDg0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NDMxMzJBOEZFNTE5ODc5N0Yz
OUFBQ0IzMTRFQzc3RUU4QzZEODRELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjJDMjJBMDc2NEU0Q0Q0NTg0RTQzMDU5NTEzNzYzRTk0MzM2NUM5MzA1
MDQ1RUZCMzAxRjUxNTQ3MzUwQTU0MC8wLzM0MzUyZTMxMzczMDJlMzEzMzMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzOTM3MzkzOTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALaqE
MA0GCSqGSIb3DQEBCwUAA4IBAQAiAzPCcty3DEY+xEhkP/bAyX/tb/2veVztoeCf
lUJs1neJREgqot0JTVFdm9ztuEQK1yRgJT8hO1EFraZo+haDK88TpSBUTt2xvh4c
4PxHTFc2dSFCSNHF1+j1OQeY0+xjobhnRWUmgNRjeGDnuBN4MEW8Reguj5fJoTnH
HmRIrndkvBv/tpP1UlV1cLC5+9ovd4pXofKOWI4pY2J4rDA2MLNuoMzNEOx8LpfL
ojFUbH3Suy7SBlJ7FMfilpxlHXL+uiSqHWWgl8d3qXBV+9uAxawTRtkkMdXDc5db
S76IQTT935pzq2LxcrAB4ckHZQtRN3pK6aXsDjIyp6h2GoEJ
-----END CERTIFICATE-----
Generated at Tue Mar 3 03:01:07 2026 by rpki-client