Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41FCA15035B0E58AB001B0FDF0D437CE3884354ECB9FB743621F0D80CA46A4A6/0/34352e3139312e39362e302f32322d3234203d3e20323639383934.roa
File:                     34352e3139312e39362e302f32322d3234203d3e20323639383934.roa (raw, json)
Hash identifier:          HKgrqZ6HXMFbWwqDFddOy96qoWx7hUPSY4b4pn2V/so=
Subject key identifier:   43:AD:91:86:62:F5:F2:B1:BE:28:2C:A9:D5:FF:68:CD:89:C3:D4:09
Certificate issuer:       /CN=781E27D1D63753D272005F532FE1E05783157413
Certificate serial:       38A6FFA791F7F4FECD14BADEDE229B1E853C596F
Authority key identifier: 78:1E:27:D1:D6:37:53:D2:72:00:5F:53:2F:E1:E0:57:83:15:74:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/781E27D1D63753D272005F532FE1E05783157413.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41FCA15035B0E58AB001B0FDF0D437CE3884354ECB9FB743621F0D80CA46A4A6/0/34352e3139312e39362e302f32322d3234203d3e20323639383934.roa
Signing time:             Tue 06 Jan 2026 19:06:23 +0000
ROA not before:           Tue 06 Jan 2026 19:01:23 +0000
ROA not after:            Tue 05 Jan 2027 19:06:23 +0000
asID:                     269894
IP address blocks:        45.191.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/41FCA15035B0E58AB001B0FDF0D437CE3884354ECB9FB743621F0D80CA46A4A6/0/781E27D1D63753D272005F532FE1E05783157413.crl
                          rsync://repository.lacnic.net/rpki/lacnic/41FCA15035B0E58AB001B0FDF0D437CE3884354ECB9FB743621F0D80CA46A4A6/0/781E27D1D63753D272005F532FE1E05783157413.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/781E27D1D63753D272005F532FE1E05783157413.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 22:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a6:ff:a7:91:f7:f4:fe:cd:14:ba:de:de:22:9b:1e:85:3c:59:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781E27D1D63753D272005F532FE1E05783157413
        Validity
            Not Before: Jan  6 19:01:23 2026 GMT
            Not After : Jan  5 19:06:23 2027 GMT
        Subject: CN=43AD918662F5F2B1BE282CA9D5FF68CD89C3D409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:b2:92:5d:b4:83:db:d1:bb:42:78:ed:f5:
                    d9:cf:d1:ab:04:8d:c3:0a:39:71:0d:e4:e3:bd:bc:
                    9d:ca:92:80:c5:64:17:dc:27:e6:cf:5d:0c:b2:d0:
                    77:01:d5:fd:25:b2:f8:cb:53:65:55:cc:99:da:ce:
                    00:c5:91:d3:2b:aa:8c:72:85:7f:8b:04:fa:15:d3:
                    56:3f:ab:5a:5e:43:e0:7b:ef:23:f6:57:b2:f4:e0:
                    65:ef:e5:32:9c:b6:b7:6f:61:4c:fe:6f:a4:09:4b:
                    48:14:e7:7f:c8:84:21:49:83:5a:04:7d:27:69:9e:
                    93:8e:0c:58:1d:2b:9e:ca:67:5c:e8:67:82:9f:37:
                    bb:29:aa:4d:56:a3:9e:d4:01:3c:91:1a:e3:86:83:
                    d4:a9:46:4c:b2:77:9f:a0:43:c8:77:59:91:9b:90:
                    4b:59:5f:54:2f:49:4e:90:19:bb:4f:af:a6:a4:84:
                    b2:e3:19:c1:15:8d:06:2c:9e:f0:22:ef:39:0b:c3:
                    51:66:23:23:6f:0b:08:68:1d:6c:d4:ac:8f:7c:a2:
                    17:05:44:5a:71:bc:c3:59:97:7d:af:70:a6:fd:63:
                    1f:c9:5b:14:0f:23:2d:67:ea:f4:9c:75:0e:d1:73:
                    a4:9d:86:0b:1e:84:f5:1e:4e:87:c9:2e:7d:48:37:
                    69:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AD:91:86:62:F5:F2:B1:BE:28:2C:A9:D5:FF:68:CD:89:C3:D4:09
            X509v3 Authority Key Identifier:
                keyid:78:1E:27:D1:D6:37:53:D2:72:00:5F:53:2F:E1:E0:57:83:15:74:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41FCA15035B0E58AB001B0FDF0D437CE3884354ECB9FB743621F0D80CA46A4A6/0/781E27D1D63753D272005F532FE1E05783157413.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/781E27D1D63753D272005F532FE1E05783157413.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41FCA15035B0E58AB001B0FDF0D437CE3884354ECB9FB743621F0D80CA46A4A6/0/34352e3139312e39362e302f32322d3234203d3e20323639383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:1e:ad:b4:a3:73:eb:3a:f9:24:82:4e:e1:17:78:77:9a:7d:
         52:0b:f8:8e:fe:6f:a7:a1:25:48:e7:58:c9:91:84:45:e9:1c:
         ad:1d:64:53:14:7d:37:2e:7b:12:3c:c9:9f:3e:55:bc:73:a9:
         dc:1f:2e:42:7f:dc:79:59:04:20:72:b5:5f:c6:c0:e1:4a:90:
         82:22:0e:bb:7b:a9:e6:28:0c:18:1c:02:81:0e:67:a1:31:b9:
         26:de:e6:98:6c:2a:97:ce:a6:98:5b:7f:23:81:77:b4:7e:0f:
         ee:e8:4a:c0:d8:cf:c6:7c:7c:79:7d:6b:96:66:69:ca:d6:5e:
         ee:71:e6:27:43:dc:63:c7:5e:57:49:e9:2f:22:31:ee:f8:7c:
         63:1e:b1:19:b4:12:8e:b6:a4:77:df:fc:ce:a5:a2:25:72:cd:
         13:96:78:a6:03:d4:04:09:6c:b6:57:92:ac:11:d8:9a:32:cb:
         bf:41:aa:48:cb:66:47:7f:0e:b7:79:46:1e:39:cb:7e:2e:90:
         9e:a5:3a:0c:f3:5a:54:bd:5a:22:0b:01:35:e9:74:ef:a9:10:
         50:78:a0:34:28:e6:10:b9:5a:5a:5f:76:17:e1:af:ad:fe:58:
         8e:54:0b:91:e9:52:32:5d:87:4e:9a:36:d8:de:9a:9a:4c:6e:
         3f:3e:c9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:43:35 2026 by rpki-client