Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/34352e362e34302e302f32322d3332203d3e20323634363035.roa
File:                     34352e362e34302e302f32322d3332203d3e20323634363035.roa (raw, json)
Hash identifier:          W5ySbphjwfqzNAgyq5MBgJ4IjPuB6ftfy0vZy0NlGXk=
Subject key identifier:   B9:7C:DD:A7:B7:EE:1C:B4:CF:0F:D5:3D:18:87:37:AF:7C:33:7D:A5
Certificate issuer:       /CN=B8196866E8E404DE886895D0DF5004CF22D49297
Certificate serial:       4036829EE04D85974EB29F5BF00A34E6B52B3B82
Authority key identifier: B8:19:68:66:E8:E4:04:DE:88:68:95:D0:DF:50:04:CF:22:D4:92:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8196866E8E404DE886895D0DF5004CF22D49297.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/34352e362e34302e302f32322d3332203d3e20323634363035.roa
Signing time:             Thu 13 Aug 2026 16:25:14 +0000
ROA not before:           Thu 13 Aug 2026 16:20:14 +0000
ROA not after:            Thu 12 Aug 2027 16:25:14 +0000
asID:                     264605
IP address blocks:        45.6.40.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/B8196866E8E404DE886895D0DF5004CF22D49297.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/B8196866E8E404DE886895D0DF5004CF22D49297.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8196866E8E404DE886895D0DF5004CF22D49297.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 21:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:36:82:9e:e0:4d:85:97:4e:b2:9f:5b:f0:0a:34:e6:b5:2b:3b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8196866E8E404DE886895D0DF5004CF22D49297
        Validity
            Not Before: Aug 13 16:20:14 2026 GMT
            Not After : Aug 12 16:25:14 2027 GMT
        Subject: CN=B97CDDA7B7EE1CB4CF0FD53D188737AF7C337DA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:88:25:3e:cc:6f:b4:17:38:86:c1:d7:b7:4d:
                    77:37:db:8f:0f:31:8a:49:1b:76:18:e5:5a:78:6f:
                    f2:57:4a:d6:7a:01:6f:73:61:e0:44:2b:d6:ef:d8:
                    aa:b2:b6:e4:d7:22:d1:25:41:0a:17:15:19:dc:d4:
                    92:6a:9e:29:ce:fb:dd:a0:a4:e5:03:12:9f:44:6e:
                    1c:93:ca:e7:c7:da:92:b4:00:a1:3b:77:ed:04:8f:
                    6d:ab:40:38:be:26:dc:ed:44:16:cc:7a:6f:65:fa:
                    45:65:32:31:8f:be:6c:f8:58:7b:e2:76:9f:d2:6f:
                    c7:55:5a:06:64:0a:42:09:f3:43:7c:b8:9f:a0:f5:
                    35:76:33:0b:b3:84:47:45:7e:d5:cd:c8:9e:b7:f8:
                    1a:b0:82:6e:ae:4e:48:5c:b4:d0:d4:01:51:16:e6:
                    7a:23:3c:30:a7:49:7a:3a:d9:1f:0e:fc:c1:b1:3b:
                    40:55:f3:0f:91:81:87:71:e3:94:ea:a7:32:fa:a8:
                    60:97:4c:6e:35:2e:93:4a:0c:10:40:43:0a:a1:a1:
                    84:6c:78:33:85:c3:c1:ac:79:be:39:34:6c:31:46:
                    c2:7f:57:06:a3:c7:e4:88:cd:fb:5c:da:1a:ce:63:
                    35:c8:bf:36:f9:e0:25:fd:34:58:97:69:c3:5d:69:
                    11:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7C:DD:A7:B7:EE:1C:B4:CF:0F:D5:3D:18:87:37:AF:7C:33:7D:A5
            X509v3 Authority Key Identifier:
                keyid:B8:19:68:66:E8:E4:04:DE:88:68:95:D0:DF:50:04:CF:22:D4:92:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/B8196866E8E404DE886895D0DF5004CF22D49297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8196866E8E404DE886895D0DF5004CF22D49297.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E01AD377763F06E111A5AFB8282884C1F221A4C91C0B367091595E5CD96BE9C/0/34352e362e34302e302f32322d3332203d3e20323634363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:d9:11:8a:c6:22:bd:24:15:27:21:09:89:14:be:e5:b2:b6:
         c7:19:99:44:91:ec:43:ee:c2:e8:83:5e:1b:23:fa:40:62:7d:
         8f:40:e0:e0:7c:56:f0:c1:eb:f0:8f:d0:a6:8d:76:ff:03:39:
         3d:67:48:ad:eb:d3:06:2e:d8:47:29:09:d0:63:f8:fc:a0:35:
         8d:90:35:27:ca:d5:d0:2a:d2:27:d9:93:0a:74:bd:77:bd:32:
         0b:f7:6c:cd:a1:11:91:83:83:c8:ab:22:6e:0c:a4:8b:a1:18:
         93:f7:c3:32:b6:fe:c2:4b:af:ee:d9:d4:24:81:11:c3:26:90:
         ae:fd:18:5e:10:ff:6f:ad:d0:e0:a5:ec:15:e5:1a:d8:d4:87:
         f4:a1:a1:32:95:fc:60:6b:21:f0:64:e8:9e:38:6b:de:70:6f:
         fd:db:a6:ce:47:d2:ab:f1:cd:07:b5:dd:ee:b8:6e:70:23:e2:
         64:b3:03:9d:99:7f:ee:f2:48:39:a7:e1:44:5e:27:e7:6f:37:
         4b:45:2e:bc:13:85:88:00:7e:60:c8:45:0e:d9:76:af:d4:72:
         41:b0:12:ce:ad:f3:17:d1:a0:ea:15:01:e1:a2:0d:79:63:f0:
         13:17:a5:46:1f:a4:db:80:1d:25:5c:4a:da:32:b3:7d:00:34:
         97:bc:3e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:18:21 2026 by rpki-client