Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/34352e3138352e3138342e302f32332d3234203d3e20323639383037.roa
File:                     34352e3138352e3138342e302f32332d3234203d3e20323639383037.roa (raw, json)
Hash identifier:          TVOjt2dOYjnDEnaRr4P4FLxQ5eyCMtMGtpSlPCH6dVQ=
Subject key identifier:   5A:E2:9E:ED:7A:DF:C9:BD:94:81:75:DC:7D:D9:23:7D:0E:97:D4:C7
Certificate issuer:       /CN=F68803BAD715CA869FCCE393884E6C602582BFF4
Certificate serial:       7F3C8A740BCBBA07B44096C24D24A17DBE030A04
Authority key identifier: F6:88:03:BA:D7:15:CA:86:9F:CC:E3:93:88:4E:6C:60:25:82:BF:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68803BAD715CA869FCCE393884E6C602582BFF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/34352e3138352e3138342e302f32332d3234203d3e20323639383037.roa
Signing time:             Tue 06 Jan 2026 19:41:32 +0000
ROA not before:           Tue 06 Jan 2026 19:36:32 +0000
ROA not after:            Tue 05 Jan 2027 19:41:32 +0000
asID:                     269807
IP address blocks:        45.185.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/F68803BAD715CA869FCCE393884E6C602582BFF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/F68803BAD715CA869FCCE393884E6C602582BFF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68803BAD715CA869FCCE393884E6C602582BFF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:3c:8a:74:0b:cb:ba:07:b4:40:96:c2:4d:24:a1:7d:be:03:0a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F68803BAD715CA869FCCE393884E6C602582BFF4
        Validity
            Not Before: Jan  6 19:36:32 2026 GMT
            Not After : Jan  5 19:41:32 2027 GMT
        Subject: CN=5AE29EED7ADFC9BD948175DC7DD9237D0E97D4C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5c:7e:e1:bb:a1:39:fc:10:5f:1f:30:64:d6:
                    d8:8f:18:86:ce:4a:5f:82:6d:9b:2f:4b:e7:28:bf:
                    0c:e1:50:dd:e6:ef:53:69:52:12:77:8b:c1:88:5f:
                    c6:8f:a4:a9:cb:26:cc:bc:63:f4:be:16:bd:2e:21:
                    e3:42:95:33:c4:12:74:38:70:f2:ee:46:aa:a8:ff:
                    fb:67:9d:84:33:1c:71:e5:93:6c:f4:e1:da:81:d4:
                    9f:16:61:53:59:ae:a2:c0:fb:7b:3b:98:85:b2:f6:
                    08:44:24:cb:28:c9:ec:49:e2:12:5c:04:2e:1f:20:
                    cf:78:fd:19:c4:05:c9:42:d7:6f:86:06:d0:aa:fb:
                    c3:4b:34:94:fc:27:a2:79:25:2e:39:f9:46:ef:43:
                    18:f6:fa:cb:6e:e3:b0:9e:c2:56:ba:ba:a4:9a:84:
                    b5:00:9e:4e:d3:c2:96:7a:47:36:93:0b:94:c1:1b:
                    c9:46:4c:47:11:89:d8:97:46:e1:15:e1:43:e7:d1:
                    fb:d2:16:fa:af:47:7d:db:bf:64:34:02:2a:a5:73:
                    d6:e6:87:cc:d5:f8:bf:2c:d8:22:83:9a:0a:66:34:
                    0f:db:6b:f0:66:5d:72:3c:01:5f:2f:70:da:17:24:
                    dd:ca:b2:d3:2e:4d:e1:85:bc:dd:be:92:80:68:0a:
                    65:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E2:9E:ED:7A:DF:C9:BD:94:81:75:DC:7D:D9:23:7D:0E:97:D4:C7
            X509v3 Authority Key Identifier:
                keyid:F6:88:03:BA:D7:15:CA:86:9F:CC:E3:93:88:4E:6C:60:25:82:BF:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/F68803BAD715CA869FCCE393884E6C602582BFF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68803BAD715CA869FCCE393884E6C602582BFF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/34352e3138352e3138342e302f32332d3234203d3e20323639383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:3f:e0:ba:8b:05:f7:a0:41:98:fd:e7:a9:9e:35:8d:99:e8:
         72:4a:86:e5:be:63:30:aa:19:a0:4d:4a:74:5c:11:e2:f9:e5:
         d3:2b:a1:7a:66:47:7d:58:3d:7a:41:f3:44:ec:76:ea:ab:f4:
         5a:8e:88:21:5a:d0:54:3f:22:7c:f7:e7:b5:b8:91:ee:da:88:
         43:ff:bf:41:54:c6:3e:dc:3b:17:5e:9e:e7:15:95:74:c4:4b:
         f4:45:e6:5f:dd:c0:1d:f5:77:c9:29:14:db:1b:c1:ad:14:1c:
         cb:6f:27:57:2a:fb:e1:99:42:cf:f6:7c:b2:0a:fd:27:2c:4b:
         d8:c6:f4:85:07:6e:55:b5:cb:ab:61:5a:5b:7d:b3:e1:b0:df:
         d5:91:69:9e:78:27:62:5d:73:ab:ec:ff:97:10:32:ad:57:96:
         fe:b8:a5:e7:75:0f:1c:f4:c3:43:7b:13:33:2e:3d:eb:f0:fa:
         db:cb:37:c7:ed:29:bd:e1:c2:c5:7c:2f:2e:e1:88:a3:02:d9:
         21:42:87:1b:67:0c:d9:92:d0:e2:25:e4:2a:d9:c7:18:ab:65:
         07:43:d0:26:10:92:94:2b:40:e1:62:53:e5:98:db:ab:38:b4:
         dc:ba:34:e4:00:bb:9d:58:86:82:f5:49:8d:18:9e:97:86:7f:
         52:ec:0a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:27:33 2026 by rpki-client