Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/34352e3136362e3131302e302f32342d3234203d3e203238343233.roa
File:                     34352e3136362e3131302e302f32342d3234203d3e203238343233.roa (raw, json)
Hash identifier:          NQHftRCefRyOqeVHd03LByDtvFpyEG9WKFfBsqSOTws=
Subject key identifier:   F0:DB:21:36:54:7E:94:4D:AE:E7:CB:B6:B7:B7:D5:34:E5:34:2C:A4
Certificate issuer:       /CN=2E53C3E1222D746A5EEABB43EDFC93BA4037CACD
Certificate serial:       2FB02BDB48443FB2A12F9AE463F0B40687B906EA
Authority key identifier: 2E:53:C3:E1:22:2D:74:6A:5E:EA:BB:43:ED:FC:93:BA:40:37:CA:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/34352e3136362e3131302e302f32342d3234203d3e203238343233.roa
Signing time:             Tue 27 Jan 2026 08:40:00 +0000
ROA not before:           Tue 27 Jan 2026 08:35:00 +0000
ROA not after:            Tue 26 Jan 2027 08:40:00 +0000
asID:                     28423
IP address blocks:        45.166.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 03:41:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b0:2b:db:48:44:3f:b2:a1:2f:9a:e4:63:f0:b4:06:87:b9:06:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E53C3E1222D746A5EEABB43EDFC93BA4037CACD
        Validity
            Not Before: Jan 27 08:35:00 2026 GMT
            Not After : Jan 26 08:40:00 2027 GMT
        Subject: CN=F0DB2136547E944DAEE7CBB6B7B7D534E5342CA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:9a:9e:56:45:fe:00:78:36:fa:44:58:5e:
                    d3:57:18:5b:01:73:ef:31:14:6b:b0:e1:d5:8f:a6:
                    44:42:72:24:67:78:ad:34:ea:f7:86:a8:3a:be:39:
                    78:4e:ec:43:48:bc:57:e3:d6:35:27:1a:30:42:64:
                    ec:f3:78:25:66:7a:7a:13:0e:9e:5e:1a:5d:4d:65:
                    e4:c0:23:55:9f:c3:43:59:20:3a:ea:0f:e1:66:b5:
                    ca:ca:9b:5a:69:2e:87:67:ae:b1:0b:92:9d:c7:4a:
                    e5:e8:52:b9:89:53:44:23:ba:ef:74:9f:6a:c2:23:
                    a9:6d:ad:c5:4b:d6:31:31:af:92:04:91:a3:26:e9:
                    26:62:10:a2:61:7e:42:06:3a:26:02:34:f3:6f:e5:
                    d1:28:e0:21:03:df:71:5f:47:b3:c3:c7:40:59:33:
                    e3:2b:93:cc:4b:b6:3d:dd:1e:f0:77:fe:2f:2a:fa:
                    31:f1:f1:96:31:7d:09:8f:cc:b9:1f:cb:be:95:bd:
                    e8:0b:91:3c:36:2f:22:76:4e:ad:96:f7:39:0a:20:
                    53:d9:88:6a:97:85:1f:89:42:4f:1e:07:f9:06:c4:
                    be:03:ea:73:ea:98:6e:e3:e4:6b:6b:f0:9e:5e:6a:
                    e7:77:86:d5:dd:82:bf:1d:00:62:d3:21:e0:a9:57:
                    cd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DB:21:36:54:7E:94:4D:AE:E7:CB:B6:B7:B7:D5:34:E5:34:2C:A4
            X509v3 Authority Key Identifier:
                keyid:2E:53:C3:E1:22:2D:74:6A:5E:EA:BB:43:ED:FC:93:BA:40:37:CA:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/34352e3136362e3131302e302f32342d3234203d3e203238343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:f5:23:15:54:ab:a8:6d:c4:df:bb:db:cb:b8:42:59:b2:be:
         09:1c:e9:e8:48:9f:d8:c2:ec:70:ae:59:ff:2f:77:10:75:22:
         24:e1:8e:f1:83:b2:a3:62:19:ce:1a:14:c9:b0:9c:17:e4:27:
         40:82:e6:ea:94:1f:6c:40:a7:e5:01:bd:49:f7:ff:e1:31:a5:
         b1:17:f0:1f:71:e9:b0:07:e9:90:be:79:90:20:27:e6:a8:a2:
         70:d3:27:6d:12:ed:54:ad:3e:fc:0c:5b:80:84:f8:6c:2f:2d:
         ba:0e:a7:e2:1c:da:b2:7a:59:7a:d4:ce:f5:1c:b2:aa:ec:b5:
         4a:60:72:a8:f4:d2:59:d1:f6:36:86:e4:7b:58:db:8b:12:8c:
         12:47:d7:ac:cd:2f:e5:d1:e9:fa:57:3b:9c:31:b0:9c:c0:96:
         a1:13:22:25:5e:10:97:12:ff:34:c8:3e:c3:a8:f1:82:ab:5f:
         5a:cb:47:0e:11:89:af:fc:a4:30:b2:d4:a7:0a:57:cc:c5:ac:
         7c:4d:60:a6:f2:b6:81:73:fd:7e:b3:7e:32:14:6d:f9:b8:a7:
         1d:7e:72:72:7e:1e:bb:d3:62:25:ca:72:14:cd:f6:b5:a4:a8:
         24:af:0b:1d:ce:f7:da:2b:35:19:15:2c:02:45:fc:bf:32:d0:
         a8:05:26:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:07:39 2026 by rpki-client