Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e302e302f32332d3234203d3e203134313837.roa
File:                     34352e3136322e302e302f32332d3234203d3e203134313837.roa (raw, json)
Hash identifier:          WJOT0IazpfQIPxXoeGsW/8oBTAKFwugBcFkW6PRHTRI=
Subject key identifier:   79:A3:66:3C:5A:1A:A7:2B:39:9D:BF:08:BF:BB:FE:01:D3:9F:0E:3B
Certificate issuer:       /CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
Certificate serial:       0FC0FD4F6537D4DE799F10C84FEC126D6131536B
Authority key identifier: E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e302e302f32332d3234203d3e203134313837.roa
Signing time:             Wed 15 Apr 2026 22:39:01 +0000
ROA not before:           Wed 15 Apr 2026 22:34:01 +0000
ROA not after:            Wed 14 Apr 2027 22:39:01 +0000
asID:                     14187
IP address blocks:        45.162.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 13:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c0:fd:4f:65:37:d4:de:79:9f:10:c8:4f:ec:12:6d:61:31:53:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
        Validity
            Not Before: Apr 15 22:34:01 2026 GMT
            Not After : Apr 14 22:39:01 2027 GMT
        Subject: CN=79A3663C5A1AA72B399DBF08BFBBFE01D39F0E3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fa:ca:c5:69:d5:22:af:38:4b:a6:eb:80:22:
                    ee:01:90:c1:7d:c2:b3:e8:a8:02:dd:dd:29:f1:f2:
                    fe:5e:8c:2e:99:ae:29:9b:0c:71:89:b9:3b:70:68:
                    8c:6f:fe:af:4b:81:91:d1:e6:45:9b:c8:20:2f:5f:
                    40:dc:96:86:e0:14:c3:1d:98:f4:ec:17:ae:2f:1f:
                    e9:60:77:6e:28:e3:42:cf:ce:9a:2a:eb:9e:a6:9b:
                    79:22:6a:87:4a:2a:03:76:7d:7d:cf:21:1a:c1:6f:
                    a4:41:8b:26:60:f0:63:7c:2a:f2:a8:42:9d:f7:9d:
                    75:f7:66:cf:ee:aa:6f:22:03:59:08:ef:2a:be:b2:
                    b0:1a:62:4d:87:f2:c6:59:ce:2f:26:3a:e3:2d:d9:
                    25:5c:c0:d9:a8:29:b8:5f:65:aa:d0:ba:7d:c0:5b:
                    8e:e2:f4:89:12:b4:8d:45:0a:b2:5b:da:55:ed:25:
                    ac:d2:23:29:d0:90:82:6a:8c:ed:27:60:ad:fb:42:
                    73:77:96:fc:f7:5d:57:30:1c:41:17:10:ef:7f:b4:
                    70:83:bd:c5:a8:b4:15:81:75:84:03:3d:d3:f9:6f:
                    20:15:e5:b4:e9:7f:b5:7a:71:6a:cf:dc:1f:ac:b3:
                    e5:8c:9b:d8:75:e8:17:1b:4f:50:0d:4e:e6:46:8d:
                    83:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A3:66:3C:5A:1A:A7:2B:39:9D:BF:08:BF:BB:FE:01:D3:9F:0E:3B
            X509v3 Authority Key Identifier:
                keyid:E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e302e302f32332d3234203d3e203134313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:96:a6:f5:b5:e2:f4:b0:7c:24:16:c2:78:20:81:5b:b7:7b:
         e6:32:8a:0d:09:03:91:50:b7:c8:0c:2e:d5:53:f7:d7:25:6c:
         af:5d:4f:85:94:cd:c6:87:a0:f9:61:4f:2e:70:ae:8c:2e:e5:
         9e:be:d2:c0:3b:39:a2:6c:d5:3c:11:91:f2:c7:ae:5e:91:cd:
         8c:af:a8:dc:7a:cc:9b:be:e8:ef:61:43:14:57:8c:a2:86:6a:
         e9:e5:9c:ba:ad:ff:01:3b:78:4e:0a:c7:0b:7f:42:52:00:4b:
         c4:e8:53:31:9e:75:2b:7f:be:b3:40:14:fb:de:9f:d8:28:3b:
         18:78:f5:16:82:d5:2e:92:33:6d:05:b2:7e:a9:fa:56:bb:7a:
         0f:cd:ae:66:51:e5:09:dc:2f:55:49:e8:19:e4:18:16:8a:7a:
         53:54:67:9f:32:c8:2e:a3:e3:dd:17:3b:22:7c:6e:24:5f:d6:
         d6:0d:c3:4c:87:c6:e4:6a:cf:92:a3:b5:3e:20:4d:d2:53:b9:
         7b:80:93:7c:3e:44:63:52:36:cd:15:fc:d1:88:3f:c1:be:96:
         26:62:a6:15:e6:af:cb:88:02:e9:36:a3:cb:ea:04:e9:be:fa:
         6f:95:94:74:c2:97:7d:e0:2c:11:67:95:8d:cc:1e:75:5b:e4:
         ba:1f:9f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:12:11 2026 by rpki-client