Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FF4E360FA5AA65B38880D0FD2F73B4AAF8FED36ACE02A776A3294553A6E4C60/0/34352e3233362e38332e302f32342d3234203d3e203237393833.roa
File:                     34352e3233362e38332e302f32342d3234203d3e203237393833.roa (raw, json)
Hash identifier:          hv4OEvUhYafSJpUstsEoUrNjw4jIh4g7tRrVl+Y8V2A=
Subject key identifier:   D4:4B:9B:99:05:13:15:39:7C:5F:EF:76:E4:09:DD:34:94:49:40:93
Certificate issuer:       /CN=9FE81A9D6A9B36D6B8E8F02955BEF63C3210C9E0
Certificate serial:       5A5264E66D267A67E239B228B92BFA629BB890DF
Authority key identifier: 9F:E8:1A:9D:6A:9B:36:D6:B8:E8:F0:29:55:BE:F6:3C:32:10:C9:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9FE81A9D6A9B36D6B8E8F02955BEF63C3210C9E0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FF4E360FA5AA65B38880D0FD2F73B4AAF8FED36ACE02A776A3294553A6E4C60/0/34352e3233362e38332e302f32342d3234203d3e203237393833.roa
Signing time:             Tue 06 Jan 2026 19:47:55 +0000
ROA not before:           Tue 06 Jan 2026 19:42:55 +0000
ROA not after:            Tue 05 Jan 2027 19:47:55 +0000
asID:                     27983
IP address blocks:        45.236.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FF4E360FA5AA65B38880D0FD2F73B4AAF8FED36ACE02A776A3294553A6E4C60/0/9FE81A9D6A9B36D6B8E8F02955BEF63C3210C9E0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FF4E360FA5AA65B38880D0FD2F73B4AAF8FED36ACE02A776A3294553A6E4C60/0/9FE81A9D6A9B36D6B8E8F02955BEF63C3210C9E0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9FE81A9D6A9B36D6B8E8F02955BEF63C3210C9E0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 23:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:52:64:e6:6d:26:7a:67:e2:39:b2:28:b9:2b:fa:62:9b:b8:90:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE81A9D6A9B36D6B8E8F02955BEF63C3210C9E0
        Validity
            Not Before: Jan  6 19:42:55 2026 GMT
            Not After : Jan  5 19:47:55 2027 GMT
        Subject: CN=D44B9B99051315397C5FEF76E409DD3494494093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:78:ba:fc:32:cc:73:85:a1:ec:58:b4:00:53:
                    16:e0:98:64:f8:28:f2:ef:47:49:62:a2:45:2e:90:
                    54:4f:85:49:ae:ee:a1:81:2b:4c:5d:9d:d1:70:10:
                    83:ad:93:50:53:9c:47:78:8a:e0:d6:91:b1:82:de:
                    52:5c:4c:e6:62:20:f5:96:b8:b8:f2:6d:2c:95:f4:
                    06:df:37:a8:d2:17:fe:78:10:cf:8a:71:80:e1:8a:
                    52:fa:cb:c7:f0:af:c9:ea:a6:ad:7e:44:64:59:52:
                    ed:53:2d:0a:bf:40:7c:98:07:6a:87:0e:ac:fc:23:
                    67:bb:1f:75:ce:c1:cf:db:2f:7f:09:22:0b:c9:e9:
                    d9:25:51:58:66:77:de:62:f6:53:dc:5a:11:b3:5a:
                    8a:7a:c1:76:0e:7b:a7:59:f9:85:ab:1b:ad:e1:51:
                    27:36:a5:56:90:fb:b1:f9:54:2b:5e:33:48:26:2d:
                    81:8c:27:bd:09:45:b1:30:93:9c:5a:ff:55:1d:ce:
                    b8:69:88:2c:62:a4:4f:18:f9:8f:e8:8d:a1:4b:ff:
                    d3:22:80:b9:10:79:05:13:e2:25:3b:e6:87:3a:85:
                    ae:59:8a:0f:d5:e2:88:f9:36:ce:51:73:5d:54:6e:
                    53:84:34:68:c9:4a:cc:e2:5a:6b:e4:20:16:71:b2:
                    2d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4B:9B:99:05:13:15:39:7C:5F:EF:76:E4:09:DD:34:94:49:40:93
            X509v3 Authority Key Identifier:
                keyid:9F:E8:1A:9D:6A:9B:36:D6:B8:E8:F0:29:55:BE:F6:3C:32:10:C9:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FF4E360FA5AA65B38880D0FD2F73B4AAF8FED36ACE02A776A3294553A6E4C60/0/9FE81A9D6A9B36D6B8E8F02955BEF63C3210C9E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9FE81A9D6A9B36D6B8E8F02955BEF63C3210C9E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FF4E360FA5AA65B38880D0FD2F73B4AAF8FED36ACE02A776A3294553A6E4C60/0/34352e3233362e38332e302f32342d3234203d3e203237393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:60:c0:85:28:09:db:7f:81:cc:d3:ec:b3:da:4c:a6:7d:98:
         07:a9:c2:0d:9a:1c:af:36:8a:df:ec:e8:08:68:30:29:31:b2:
         17:ba:b3:98:d2:4f:01:ee:eb:ae:c5:30:31:6a:a8:8e:d6:7d:
         d7:68:56:66:86:ed:62:e4:f0:e5:ae:63:38:3d:26:2c:29:b4:
         ea:0c:27:42:a8:8a:a3:82:1b:3f:16:51:ba:7a:03:bc:1d:ca:
         61:aa:34:88:62:33:73:4c:24:23:fa:a6:2f:3c:6b:9d:95:49:
         67:c9:e6:b4:95:7e:fe:31:c2:35:f6:d3:65:5c:f3:6a:d7:65:
         70:e3:43:e3:21:2b:91:e3:03:94:ed:d5:2a:b9:38:01:7a:fc:
         e9:67:85:57:cd:49:d4:00:97:21:f6:10:23:4a:7b:e3:5a:4f:
         3e:a1:f5:4c:cc:c0:89:6c:35:4d:a1:a2:68:24:a8:5c:5c:b2:
         d1:fc:23:2e:66:67:56:45:82:e7:b0:cc:18:e2:1a:19:54:6f:
         f7:0b:3d:36:70:c2:9d:e3:d6:18:df:11:65:b4:91:a5:c6:f8:
         00:f6:90:bc:88:75:26:8e:ac:43:1d:43:d3:1d:18:0c:82:a7:
         5b:14:d5:e0:56:89:5f:2f:66:f6:0b:43:56:cb:08:ee:ac:a2:
         cf:69:29:3d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUWlJk5m0memfiObIouSv6Ypu4kN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZFODFBOUQ2QTlCMzZENkI4RThGMDI5NTVCRUY2M0Mz
MjEwQzlFMDAeFw0yNjAxMDYxOTQyNTVaFw0yNzAxMDUxOTQ3NTVaMDMxMTAvBgNV
BAMTKEQ0NEI5Qjk5MDUxMzE1Mzk3QzVGRUY3NkU0MDlERDM0OTQ0OTQwOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCveLr8MsxzhaHsWLQAUxbgmGT4
KPLvR0liokUukFRPhUmu7qGBK0xdndFwEIOtk1BTnEd4iuDWkbGC3lJcTOZiIPWW
uLjybSyV9AbfN6jSF/54EM+KcYDhilL6y8fwr8nqpq1+RGRZUu1TLQq/QHyYB2qH
Dqz8I2e7H3XOwc/bL38JIgvJ6dklUVhmd95i9lPcWhGzWop6wXYOe6dZ+YWrG63h
USc2pVaQ+7H5VCteM0gmLYGMJ70JRbEwk5xa/1UdzrhpiCxipE8Y+Y/ojaFL/9Mi
gLkQeQUT4iU75oc6ha5Zig/V4oj5Ns5Rc11UblOENGjJSsziWmvkIBZxsi2FAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU1EubmQUTFTl8X+925AndNJRJQJMwHwYDVR0j
BBgwFoAUn+ganWqbNta46PApVb72PDIQyeAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RkY0RTM2MEZBNUFBNjVCMzg4ODBEMEZEMkY3M0I0QUFG
OEZFRDM2QUNFMDJBNzc2QTMyOTQ1NTNBNkU0QzYwLzAvOUZFODFBOUQ2QTlCMzZE
NkI4RThGMDI5NTVCRUY2M0MzMjEwQzlFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RkU4MUE5RDZBOUIzNkQ2QjhF
OEYwMjk1NUJFRjYzQzMyMTBDOUUwLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEZGNEUzNjBGQTVBQTY1QjM4ODgwRDBGRDJGNzNCNEFBRjhGRUQzNkFD
RTAyQTc3NkEzMjk0NTUzQTZFNEM2MC8wLzM0MzUyZTMyMzMzNjJlMzgzMzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczOTM4MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt7FMwDQYJ
KoZIhvcNAQELBQADggEBAKlgwIUoCdt/gczT7LPaTKZ9mAepwg2aHK82it/s6Aho
MCkxshe6s5jSTwHu667FMDFqqI7WfddoVmaG7WLk8OWuYzg9JiwptOoMJ0KoiqOC
Gz8WUbp6A7wdymGqNIhiM3NMJCP6pi88a52VSWfJ5rSVfv4xwjX202Vc82rXZXDj
Q+MhK5HjA5Tt1Sq5OAF6/OlnhVfNSdQAlyH2ECNKe+NaTz6h9UzMwIlsNU2homgk
qFxcstH8Iy5mZ1ZFguewzBjiGhlUb/cLPTZwwp3j1hjfEWW0kaXG+AD2kLyIdSaO
rEMdQ9MdGAyCp1sU1eBWiV8vZvYLQ1bLCO6sos9pKT0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:41:13 2026 by rpki-client