Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/34352e342e3230342e302f32332d3234203d3e20313938373938.roa
File:                     34352e342e3230342e302f32332d3234203d3e20313938373938.roa (raw, json)
Hash identifier:          MlxfmCTw801GIXkVw65ksPpaeb1uvB83497LPZjFeUQ=
Subject key identifier:   C5:BF:F3:2B:7B:94:3E:FE:6D:3D:3D:4C:F8:12:92:A8:E0:B3:15:F2
Certificate issuer:       /CN=B4CF94EC7154D2BC51066D5BB556A7589514A5C6
Certificate serial:       51CEC9D2DD59E9B47ADF93E9770EE43AD395F235
Authority key identifier: B4:CF:94:EC:71:54:D2:BC:51:06:6D:5B:B5:56:A7:58:95:14:A5:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/34352e342e3230342e302f32332d3234203d3e20313938373938.roa
Signing time:             Sat 22 Aug 2026 19:50:00 +0000
ROA not before:           Sat 22 Aug 2026 19:45:00 +0000
ROA not after:            Sat 21 Aug 2027 19:50:00 +0000
asID:                     198798
IP address blocks:        45.4.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ce:c9:d2:dd:59:e9:b4:7a:df:93:e9:77:0e:e4:3a:d3:95:f2:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4CF94EC7154D2BC51066D5BB556A7589514A5C6
        Validity
            Not Before: Aug 22 19:45:00 2026 GMT
            Not After : Aug 21 19:50:00 2027 GMT
        Subject: CN=C5BFF32B7B943EFE6D3D3D4CF81292A8E0B315F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:0c:48:63:26:54:cf:73:60:99:8d:2e:ca:
                    57:4e:f8:44:98:20:7b:d9:b9:0d:c3:5f:ac:b1:b7:
                    15:05:44:7d:f5:91:3c:0a:f5:e8:09:48:c5:1f:b5:
                    3d:59:96:7a:80:98:68:f5:ad:f1:62:e4:6c:b4:57:
                    0e:1c:0b:42:c6:1d:13:72:2a:39:01:70:82:46:95:
                    a2:66:e8:af:11:72:d1:8e:a2:ac:62:0f:98:f6:3d:
                    de:3a:24:a9:6f:4b:ff:c6:68:d0:37:f6:b1:47:8c:
                    37:d5:33:c5:91:56:67:bf:1c:75:2b:ba:99:b1:8c:
                    1d:ac:5a:15:a0:16:a5:82:16:c7:da:72:87:34:20:
                    84:12:e5:bf:e6:68:ed:9a:35:17:6e:23:9c:bc:d6:
                    47:d1:2c:5b:f7:ba:60:37:35:f7:80:d5:19:02:17:
                    3c:9a:c9:fd:8b:a2:13:5d:df:52:cf:6d:d4:35:a5:
                    5c:33:75:2c:cd:89:a3:0d:34:29:7a:20:9c:b1:99:
                    eb:42:c2:3b:e6:28:8e:2f:97:1c:ae:af:25:20:d2:
                    77:3b:bf:5a:34:53:d0:51:ad:a3:93:70:c2:aa:06:
                    00:c8:e4:1c:c0:9e:1b:c2:87:a3:44:d0:0e:ae:3b:
                    0e:83:6c:a4:87:76:f9:fe:58:4a:67:a1:6e:7f:34:
                    a1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BF:F3:2B:7B:94:3E:FE:6D:3D:3D:4C:F8:12:92:A8:E0:B3:15:F2
            X509v3 Authority Key Identifier:
                keyid:B4:CF:94:EC:71:54:D2:BC:51:06:6D:5B:B5:56:A7:58:95:14:A5:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/34352e342e3230342e302f32332d3234203d3e20313938373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:9c:7c:31:e5:ab:1a:15:d3:9d:3d:d7:b5:25:71:6a:c6:c8:
         50:66:0e:a5:3d:58:16:18:1a:4f:79:14:b1:18:4d:e6:e8:39:
         12:2d:b3:f7:5f:e5:cb:ef:75:96:c9:60:65:83:0b:7f:6f:7c:
         3a:66:81:05:0b:d1:80:54:66:62:69:67:55:16:65:2e:b5:0a:
         8a:70:85:04:2b:71:3d:c7:cc:1d:32:bd:fd:21:68:85:38:68:
         00:11:2c:77:8a:93:9c:8f:7f:a6:a1:39:70:aa:7c:40:f0:99:
         46:51:78:3f:9e:b9:e0:e9:b1:f7:17:e3:e3:a2:80:d6:54:a6:
         2a:0a:d2:4b:3d:15:70:b8:7a:50:12:b0:16:f1:e5:04:9e:b6:
         aa:65:de:95:6a:43:53:e7:c4:ef:83:42:1b:b1:57:c1:54:4e:
         97:31:11:b6:00:25:d8:9b:d1:e4:d4:d6:1a:51:65:df:fc:82:
         90:fb:0e:f1:fe:75:42:ff:3c:d8:1d:0b:bd:24:4a:8f:01:bf:
         45:53:bc:85:61:e1:43:79:a1:a5:3c:86:f6:62:07:9b:a3:49:
         d1:8b:c9:56:6d:50:39:b2:28:02:55:f0:3e:3b:71:9d:ed:17:
         18:59:6b:e0:41:e6:09:a4:c9:8b:09:c9:1f:96:f7:51:33:4b:
         58:fe:3a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:09:28 2026 by rpki-client