Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e302e302f32332d3234203d3e20323636393033.roa
File:                     34352e3136322e302e302f32332d3234203d3e20323636393033.roa (raw, json)
Hash identifier:          /osjLOLOQNdJ0TJoXTeLy77VzjAfqSLpIxncjtJn/qs=
Subject key identifier:   7A:8B:4E:7D:73:B2:AD:A3:0E:0E:E1:59:B2:88:23:DB:84:D7:FB:F3
Certificate issuer:       /CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
Certificate serial:       6146F37DFCDA938CBE3F07C58A28FC971FDDCB83
Authority key identifier: E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e302e302f32332d3234203d3e20323636393033.roa
Signing time:             Wed 25 Feb 2026 14:31:47 +0000
ROA not before:           Wed 25 Feb 2026 14:26:47 +0000
ROA not after:            Wed 24 Feb 2027 14:31:47 +0000
asID:                     266903
IP address blocks:        45.162.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:46:f3:7d:fc:da:93:8c:be:3f:07:c5:8a:28:fc:97:1f:dd:cb:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
        Validity
            Not Before: Feb 25 14:26:47 2026 GMT
            Not After : Feb 24 14:31:47 2027 GMT
        Subject: CN=7A8B4E7D73B2ADA30E0EE159B28823DB84D7FBF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cb:50:91:28:b1:c3:45:c9:3e:b2:72:4b:24:
                    de:c8:c8:da:95:63:ce:3c:66:fe:82:3f:f9:53:a7:
                    16:86:a6:a7:09:98:39:93:4d:9a:6b:13:77:cb:6c:
                    e8:78:2f:f1:12:97:7a:92:a1:6a:54:4b:7f:2d:c7:
                    58:d0:ec:a1:7c:23:97:83:b3:41:3f:52:8b:dc:c7:
                    5b:96:7a:d0:63:bb:89:ed:93:e9:75:7f:a6:c7:d6:
                    a2:2c:93:9c:3a:01:5f:8a:37:32:b9:48:a0:24:66:
                    2e:6d:7d:8b:c4:74:d2:28:20:71:b8:4d:0d:b0:6d:
                    e9:fe:bb:9a:6d:da:29:77:bc:4e:17:89:30:a6:f7:
                    97:3e:2a:e7:1f:f9:8a:a1:0d:d1:84:5e:d7:c8:6f:
                    60:00:90:b2:f0:35:52:9b:ce:58:5a:f6:85:71:9c:
                    c6:1c:33:0a:51:29:ed:19:e0:56:97:2f:0b:20:f2:
                    51:4d:ef:4f:1b:d5:b9:af:71:9b:e9:3b:c9:b1:dd:
                    c3:f3:9c:63:89:66:75:35:af:5b:0f:1c:b3:5e:14:
                    19:f1:9e:22:21:27:22:ef:37:39:79:a0:c0:c8:ed:
                    82:ab:73:ff:bf:33:22:5e:4b:57:14:30:f5:8a:c6:
                    dd:56:d4:f8:5f:ec:05:2c:7f:8a:40:3d:19:9c:69:
                    3c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8B:4E:7D:73:B2:AD:A3:0E:0E:E1:59:B2:88:23:DB:84:D7:FB:F3
            X509v3 Authority Key Identifier:
                keyid:E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e302e302f32332d3234203d3e20323636393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:32:f4:43:b3:be:45:09:1a:67:fd:5b:9d:9d:8e:3b:33:6f:
         0b:d1:8c:78:41:7c:2a:c0:4f:65:f8:ce:69:36:13:0b:db:b8:
         e4:a0:f5:55:ff:98:14:a3:dc:8a:c5:ac:6c:ab:57:16:d0:f7:
         5f:8e:30:f0:58:32:3b:7b:8c:11:7a:d4:16:be:2e:76:9a:4f:
         23:c7:41:89:8e:97:aa:ab:01:e6:48:2e:98:d2:33:b2:1a:87:
         85:48:ba:37:82:b1:fa:9b:1f:4f:4e:06:ba:54:ce:4d:40:d9:
         d1:32:6d:ce:63:3c:c4:02:64:39:44:b8:83:59:7c:e6:12:67:
         01:dd:f6:59:e8:39:21:c3:08:03:7a:b1:e4:2b:92:88:ef:fd:
         f8:74:8f:73:d2:55:77:c8:81:e5:f9:d8:ef:ab:7b:14:3b:a4:
         39:df:32:ce:02:0f:b3:9f:b4:93:b6:aa:c1:ec:60:88:8a:e1:
         52:98:6b:c7:11:99:e4:27:68:01:47:64:7c:94:7b:2d:41:d2:
         17:37:ae:30:0d:3a:a2:60:95:35:7a:fb:e2:55:76:cd:81:e3:
         e9:7d:dd:8f:a1:75:eb:ba:bc:52:5c:9b:a2:bd:17:d1:f4:46:
         16:6d:d5:8e:cb:8f:2c:03:46:b3:5b:6f:18:30:eb:f3:9b:a9:
         72:e9:21:7f
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUYUbzffzak4y+PwfFiij8lx/dy4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTgwNDZGQ0ZBMDkwRUQzMEE4MDAxNkYwQkM0NkFCMjg5
RTI1ODMxQTAeFw0yNjAyMjUxNDI2NDdaFw0yNzAyMjQxNDMxNDdaMDMxMTAvBgNV
BAMTKDdBOEI0RTdENzNCMkFEQTMwRTBFRTE1OUIyODgyM0RCODREN0ZCRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+y1CRKLHDRck+snJLJN7IyNqV
Y848Zv6CP/lTpxaGpqcJmDmTTZprE3fLbOh4L/ESl3qSoWpUS38tx1jQ7KF8I5eD
s0E/Uovcx1uWetBju4ntk+l1f6bH1qIsk5w6AV+KNzK5SKAkZi5tfYvEdNIoIHG4
TQ2wben+u5pt2il3vE4XiTCm95c+Kucf+YqhDdGEXtfIb2AAkLLwNVKbzlha9oVx
nMYcMwpRKe0Z4FaXLwsg8lFN708b1bmvcZvpO8mx3cPznGOJZnU1r1sPHLNeFBnx
niIhJyLvNzl5oMDI7YKrc/+/MyJeS1cUMPWKxt1W1Phf7AUsf4pAPRmcaTxbAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUeotOfXOyraMODuFZsogj24TX+/MwHwYDVR0j
BBgwFoAU6ARvz6CQ7TCoABbwvEarKJ4lgxowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NzA0NzY0RURBQTAxRTg5MjI5NUZDOTIwMzlGREFBMDM4
N0YwMzc2Q0YwQkQ1RkQ4NjA0RjFBMzY1RDlDRkZGLzAvRTgwNDZGQ0ZBMDkwRUQz
MEE4MDAxNkYwQkM0NkFCMjg5RTI1ODMxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FODA0NkZDRkEwOTBFRDMwQTgw
MDE2RjBCQzQ2QUIyODlFMjU4MzFBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTcwNDc2NEVEQUEwMUU4OTIyOTVGQzkyMDM5RkRBQTAzODdGMDM3NkNG
MEJENUZEODYwNEYxQTM2NUQ5Q0ZGRi8wLzM0MzUyZTMxMzYzMjJlMzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMjM2MzYzOTMwMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEtogAwDQYJ
KoZIhvcNAQELBQADggEBADsy9EOzvkUJGmf9W52djjszbwvRjHhBfCrAT2X4zmk2
EwvbuOSg9VX/mBSj3IrFrGyrVxbQ91+OMPBYMjt7jBF61Ba+LnaaTyPHQYmOl6qr
AeZILpjSM7Iah4VIujeCsfqbH09OBrpUzk1A2dEybc5jPMQCZDlEuINZfOYSZwHd
9lnoOSHDCAN6seQrkojv/fh0j3PSVXfIgeX52O+rexQ7pDnfMs4CD7OftJO2qsHs
YIiK4VKYa8cRmeQnaAFHZHyUey1B0hc3rjANOqJglTV6++JVds2B4+l93Y+hdeu6
vFJcm6K9F9H0RhZt1Y7LjywDRrNbbxgw6/ObqXLpIX8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:09:58 2026 by rpki-client