Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e302e302f32342d3234203d3e203139353531.roa
File:                     34352e3136322e302e302f32342d3234203d3e203139353531.roa (raw, json)
Hash identifier:          cdVXRMQZ/NM8HGgNkP7v1shXH1IwwBkvoE9Vk3ILcMQ=
Subject key identifier:   C3:31:0A:8B:A2:47:84:07:06:F1:41:28:E8:97:A3:B5:62:62:3F:7C
Certificate issuer:       /CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
Certificate serial:       145F15E84F1A60663C17AA07462769AC76EA81A2
Authority key identifier: E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e302e302f32342d3234203d3e203139353531.roa
Signing time:             Wed 15 Apr 2026 22:39:01 +0000
ROA not before:           Wed 15 Apr 2026 22:34:01 +0000
ROA not after:            Wed 14 Apr 2027 22:39:01 +0000
asID:                     19551
IP address blocks:        45.162.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 13:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:5f:15:e8:4f:1a:60:66:3c:17:aa:07:46:27:69:ac:76:ea:81:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
        Validity
            Not Before: Apr 15 22:34:01 2026 GMT
            Not After : Apr 14 22:39:01 2027 GMT
        Subject: CN=C3310A8BA247840706F14128E897A3B562623F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6a:e3:57:67:f0:37:3b:c4:23:87:04:9d:d0:
                    7d:e4:ec:9b:02:36:a4:dc:ba:c4:00:4c:c6:69:29:
                    65:d9:66:7a:72:53:9c:0e:56:3a:7a:f0:76:1f:4b:
                    5a:ba:e9:c0:44:fd:02:61:15:25:e0:e5:42:83:20:
                    07:5c:6c:51:b6:51:ae:bf:9c:51:45:03:05:90:37:
                    d7:ac:32:9a:71:ee:25:67:55:7b:1d:09:7c:8b:62:
                    e7:99:cf:70:8b:04:05:da:ac:9e:00:de:76:07:6f:
                    28:29:d6:6a:cb:3c:9c:5e:2f:26:9d:a5:4c:db:ae:
                    50:22:1a:ce:18:0c:36:ac:56:3a:bd:08:fc:4a:c9:
                    44:6d:79:0f:13:0d:45:4b:6d:d9:d1:e0:77:50:7f:
                    35:48:cd:52:b7:dd:c7:08:a1:18:6e:14:83:60:6e:
                    7d:e5:0a:12:7b:b2:88:59:aa:ad:4b:bf:11:87:61:
                    b4:a4:e8:1b:d4:4f:0a:fc:8f:41:e3:4e:f2:f7:b5:
                    80:85:1d:96:36:47:d2:8e:e6:28:7b:9f:dd:71:f5:
                    48:d9:c1:65:e1:a2:e9:4f:8a:97:f7:0c:fe:71:0c:
                    43:d0:3c:27:35:47:8f:6a:47:81:31:f7:ec:b0:7b:
                    82:6a:97:d3:1e:67:52:30:a6:38:29:b0:52:40:24:
                    6a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:31:0A:8B:A2:47:84:07:06:F1:41:28:E8:97:A3:B5:62:62:3F:7C
            X509v3 Authority Key Identifier:
                keyid:E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e302e302f32342d3234203d3e203139353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:91:1e:85:cd:8f:6d:f5:3d:19:fc:81:62:cb:33:5e:d0:d9:
         7c:f7:70:16:a2:9a:73:c4:c5:63:94:d8:76:f7:3d:82:99:ec:
         02:9b:b6:bc:6e:23:29:f6:b0:c7:39:16:3e:0d:2e:b3:ad:55:
         de:77:c0:ab:0b:92:ac:a9:b2:c9:8b:eb:6e:0b:8e:5c:2a:ee:
         52:51:77:ab:bf:aa:ff:4e:07:20:e9:17:27:23:ba:de:2e:f2:
         3c:5e:cb:b5:08:9a:39:05:17:cc:f4:be:b8:e8:a5:36:24:fb:
         72:e6:6a:ad:e1:ac:b6:21:49:e2:4e:d8:22:b7:72:ce:33:d7:
         2e:b8:06:c0:90:7a:35:93:79:4f:18:a9:fd:2c:12:31:2a:b4:
         c3:30:db:cf:26:7c:e7:cb:04:fd:7a:90:7c:c0:9c:1f:8b:04:
         00:ba:af:6e:ac:68:8d:8d:5c:48:cf:a1:65:0c:c8:13:6c:f4:
         59:12:d1:6c:d3:9b:bf:ef:7f:d0:2d:b3:2a:7e:bd:da:6d:55:
         9e:f9:7a:43:e1:13:12:8f:11:ac:97:13:25:81:02:d7:c8:a2:
         53:7b:b8:7b:1e:fd:9c:9d:1f:ed:ea:30:6b:0c:f7:9e:c4:36:
         ef:2d:bd:6a:bb:d4:a6:ec:2d:e8:fb:e8:eb:20:1b:19:93:d4:
         03:ae:db:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:45:35 2026 by rpki-client