Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/694C7D361EEED3038F08C182B38BE0F8D032919D09A4447C00A0A1F53EE76709/0/34352e3233372e33362e302f32322d3234203d3e203631353130.roa
File:                     34352e3233372e33362e302f32322d3234203d3e203631353130.roa (raw, json)
Hash identifier:          dzwYoST7FJSNLcpQ3efJK+CatYEDManoSG2Fb2AlYnc=
Subject key identifier:   69:9F:EF:C8:98:FE:99:91:36:14:55:31:9A:FE:15:76:C2:9E:68:D6
Certificate issuer:       /CN=F43A9A12F8E8BF00FA962B7630FC633E917262E5
Certificate serial:       54C7006A18656CDEE2D3E558BAD5CC43E404EC07
Authority key identifier: F4:3A:9A:12:F8:E8:BF:00:FA:96:2B:76:30:FC:63:3E:91:72:62:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F43A9A12F8E8BF00FA962B7630FC633E917262E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/694C7D361EEED3038F08C182B38BE0F8D032919D09A4447C00A0A1F53EE76709/0/34352e3233372e33362e302f32322d3234203d3e203631353130.roa
Signing time:             Fri 16 Oct 2026 16:40:47 +0000
ROA not before:           Fri 16 Oct 2026 16:35:47 +0000
ROA not after:            Fri 15 Oct 2027 16:40:47 +0000
asID:                     61510
IP address blocks:        45.237.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/694C7D361EEED3038F08C182B38BE0F8D032919D09A4447C00A0A1F53EE76709/0/F43A9A12F8E8BF00FA962B7630FC633E917262E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/694C7D361EEED3038F08C182B38BE0F8D032919D09A4447C00A0A1F53EE76709/0/F43A9A12F8E8BF00FA962B7630FC633E917262E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F43A9A12F8E8BF00FA962B7630FC633E917262E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 05:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c7:00:6a:18:65:6c:de:e2:d3:e5:58:ba:d5:cc:43:e4:04:ec:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F43A9A12F8E8BF00FA962B7630FC633E917262E5
        Validity
            Not Before: Oct 16 16:35:47 2026 GMT
            Not After : Oct 15 16:40:47 2027 GMT
        Subject: CN=699FEFC898FE9991361455319AFE1576C29E68D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f2:88:21:46:c8:0d:a5:0a:2b:e2:7d:d0:35:
                    23:a9:8f:72:49:2e:7f:2d:74:29:86:5a:42:ae:0a:
                    7f:de:a6:f9:09:18:56:ee:1b:f5:23:dc:f6:9f:68:
                    dd:f4:79:d9:ae:dd:71:33:50:9a:6f:89:d3:c8:b0:
                    61:c7:00:8a:70:d5:dc:fd:8f:8d:67:de:23:0e:f6:
                    24:1e:c8:a8:43:d7:c9:69:79:82:d4:1b:3d:64:5d:
                    25:0a:8a:a3:c8:c6:d6:f2:e1:0f:15:0c:f5:56:6b:
                    75:07:71:ad:b1:19:17:c8:b0:a0:95:dd:b7:d6:02:
                    f5:a0:9e:4d:84:f7:a0:a8:e4:d8:9b:5d:24:2d:1d:
                    2d:70:70:22:fb:b2:c9:cd:4e:d9:1c:da:13:54:94:
                    8c:fd:20:0d:08:13:bf:89:5b:b5:ef:6a:d2:07:d5:
                    a1:87:e2:26:46:77:9d:a2:4f:ae:92:0d:75:cf:62:
                    51:ac:69:4e:98:16:19:8a:64:13:75:11:13:6d:fb:
                    e9:c0:5d:30:46:77:51:6c:33:dc:88:60:c4:2f:b3:
                    86:5e:fb:92:19:b8:38:f6:92:b2:78:bb:8e:be:f6:
                    13:ef:43:31:d4:ac:c3:74:06:6b:77:59:43:20:b8:
                    49:9e:fa:e2:db:c1:48:47:ae:b7:8b:90:ae:5b:dc:
                    89:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9F:EF:C8:98:FE:99:91:36:14:55:31:9A:FE:15:76:C2:9E:68:D6
            X509v3 Authority Key Identifier:
                keyid:F4:3A:9A:12:F8:E8:BF:00:FA:96:2B:76:30:FC:63:3E:91:72:62:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/694C7D361EEED3038F08C182B38BE0F8D032919D09A4447C00A0A1F53EE76709/0/F43A9A12F8E8BF00FA962B7630FC633E917262E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F43A9A12F8E8BF00FA962B7630FC633E917262E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/694C7D361EEED3038F08C182B38BE0F8D032919D09A4447C00A0A1F53EE76709/0/34352e3233372e33362e302f32322d3234203d3e203631353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:b6:20:84:dc:6d:36:6a:73:a7:37:23:19:90:fe:cf:a6:da:
         84:99:4e:28:cd:1e:f7:42:91:0e:65:43:74:6e:39:85:92:48:
         60:85:a3:7c:5a:88:6d:04:40:4c:13:31:d1:f6:dc:d8:7d:08:
         a7:e5:9e:4f:2a:d2:4b:49:65:2c:20:0d:9b:dc:f6:7d:e7:93:
         7f:ad:5e:32:b8:c1:e1:2e:74:9b:2a:01:ac:b3:61:8d:c4:bb:
         93:90:d4:6d:62:25:f7:7e:c3:a4:6a:35:b9:53:08:0e:4d:bc:
         7d:7d:23:fd:5f:f3:8f:ba:bd:29:60:dc:c3:0d:00:1e:98:8b:
         7e:f5:d9:c3:18:12:64:cf:3e:4e:ff:09:26:d3:63:4d:91:78:
         7d:d1:b7:df:5e:3e:b5:ff:3e:90:b5:70:ae:43:6b:8c:55:33:
         4b:ef:0b:94:24:41:07:5b:7c:7a:18:14:47:d3:a2:56:5f:22:
         c9:7a:14:07:0d:5d:26:dd:2a:1b:ce:92:c6:1d:73:6f:f1:dc:
         d8:73:76:e7:06:8b:8d:06:d8:44:51:51:b8:25:ac:2a:4f:66:
         97:b0:e8:f7:62:f6:e0:54:a2:fb:a3:b2:10:ea:44:a2:a6:d7:
         c4:4d:a2:67:32:ef:ce:fb:22:80:67:02:b9:83:65:3c:f8:a0:
         88:ab:71:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 07:45:58 2026 by rpki-client