Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/34352e3136302e3231332e302f32342d3234203d3e20323636383831.roa
File:                     34352e3136302e3231332e302f32342d3234203d3e20323636383831.roa (raw, json)
Hash identifier:          /vjpxK5UiiUe/9bwGglfDprstmDemCoRISpVGoE+Csg=
Subject key identifier:   81:DB:11:72:48:C9:4C:1C:0A:8A:61:AC:99:EE:0A:0A:F0:42:73:79
Certificate issuer:       /CN=1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927
Certificate serial:       1AD51EFCBAD82B6CD2F9E488E77003A561CBB433
Authority key identifier: 1A:DC:8F:78:5D:1F:AD:0C:E5:D6:E3:7B:7C:9B:05:C5:42:5B:E9:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/34352e3136302e3231332e302f32342d3234203d3e20323636383831.roa
Signing time:             Fri 16 Oct 2026 03:40:43 +0000
ROA not before:           Fri 16 Oct 2026 03:35:43 +0000
ROA not after:            Fri 15 Oct 2027 03:40:43 +0000
asID:                     266881
IP address blocks:        45.160.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d5:1e:fc:ba:d8:2b:6c:d2:f9:e4:88:e7:70:03:a5:61:cb:b4:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927
        Validity
            Not Before: Oct 16 03:35:43 2026 GMT
            Not After : Oct 15 03:40:43 2027 GMT
        Subject: CN=81DB117248C94C1C0A8A61AC99EE0A0AF0427379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:e6:93:5d:77:e4:f0:d7:5d:04:21:f5:14:
                    c1:02:06:ac:bc:df:21:ac:f4:31:a5:29:91:d1:b6:
                    55:c4:3a:63:a8:91:df:0e:35:05:59:a5:1c:a3:b8:
                    b3:99:88:44:e7:05:41:79:a5:f6:98:cc:b4:71:94:
                    e5:15:46:1d:94:26:15:e3:f1:e2:8c:79:ee:42:db:
                    72:05:b2:37:27:5f:2f:8c:29:42:2d:62:b6:3e:07:
                    2c:7f:3d:a6:b7:ef:1a:12:64:21:3a:a9:28:2c:5f:
                    06:5f:a5:09:59:4a:55:ad:b6:69:01:dd:35:2e:9f:
                    ba:33:c0:28:64:7d:9c:21:75:b3:08:f1:c4:da:b4:
                    35:2d:c6:23:2e:40:55:ae:4f:94:0f:ec:e7:96:e1:
                    61:30:ce:d5:a9:45:60:4c:e0:4d:6f:96:ef:9e:14:
                    cf:1c:6f:8c:35:c7:24:5d:61:4f:a2:8c:df:5f:e6:
                    c1:4d:af:56:ad:34:15:fa:4f:3e:34:a4:b2:33:60:
                    c1:52:f9:7d:ea:ca:8a:14:77:7b:f0:53:e4:80:72:
                    4a:43:7a:e7:dd:0c:bb:f6:16:fa:dc:d5:e3:12:68:
                    87:4a:23:10:79:ed:0d:0b:d8:58:6b:c1:0c:9c:4b:
                    bc:c5:d9:95:54:df:d2:e2:de:f9:3e:ce:b3:cc:1c:
                    a7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DB:11:72:48:C9:4C:1C:0A:8A:61:AC:99:EE:0A:0A:F0:42:73:79
            X509v3 Authority Key Identifier:
                keyid:1A:DC:8F:78:5D:1F:AD:0C:E5:D6:E3:7B:7C:9B:05:C5:42:5B:E9:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/34352e3136302e3231332e302f32342d3234203d3e20323636383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:53:d1:3b:eb:e7:d7:4a:54:60:5a:0e:b9:8e:4c:54:9d:06:
         ea:c9:aa:89:9f:29:50:21:e5:0f:ce:67:77:35:31:bb:e2:df:
         3a:7d:e9:cf:eb:c9:cd:bf:bc:7f:1e:a0:bc:57:85:91:04:e5:
         78:a1:47:16:e6:6e:b0:88:7d:47:9a:62:6d:a6:6f:78:be:cc:
         31:df:2e:df:66:2b:44:f0:8d:b5:61:df:47:5c:3c:10:a0:ca:
         25:88:8e:0d:64:db:a8:7e:52:35:df:83:34:b4:6e:50:76:89:
         9a:51:46:4d:56:e9:3e:7a:8f:a7:b7:aa:dc:8d:69:c0:63:f1:
         ff:b0:63:e8:06:c1:17:58:ba:02:83:7e:19:92:bf:46:cc:35:
         19:79:de:db:3a:25:fb:51:4d:9c:15:f0:b5:6e:1e:d6:7b:78:
         23:f4:fe:1c:94:c0:66:24:70:88:5c:ff:f9:8f:54:2a:d1:40:
         ec:ca:b9:4b:cf:2f:d6:49:75:c9:07:6c:e8:1e:c4:c6:6f:08:
         d0:ba:41:85:c6:fe:b5:b7:74:4b:7d:61:04:a5:55:21:de:0b:
         7b:2c:f6:02:c4:be:75:f1:3e:16:b2:91:53:43:5c:4b:48:86:
         9d:06:e9:c5:a5:9f:b2:6b:2b:c7:79:69:cd:9e:05:c3:42:82:
         2d:88:95:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 19:43:28 2026 by rpki-client