Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32332d3234203d3e20323636393033.roa
File:                     34352e3136322e322e302f32332d3234203d3e20323636393033.roa (raw, json)
Hash identifier:          o8cKchfiuUbE0c6hfO2jhLLc+0dCbFQc9YhcKJcJAhY=
Subject key identifier:   55:E2:00:8F:F5:F1:08:DE:9E:29:E6:4B:6A:A7:6D:60:84:F2:A8:60
Certificate issuer:       /CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
Certificate serial:       2BFEF03232C10A7DCA57193D72BFAA3FA8D38411
Authority key identifier: E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32332d3234203d3e20323636393033.roa
Signing time:             Wed 15 Apr 2026 22:39:02 +0000
ROA not before:           Wed 15 Apr 2026 22:34:02 +0000
ROA not after:            Wed 14 Apr 2027 22:39:02 +0000
asID:                     266903
IP address blocks:        45.162.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 13:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:fe:f0:32:32:c1:0a:7d:ca:57:19:3d:72:bf:aa:3f:a8:d3:84:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
        Validity
            Not Before: Apr 15 22:34:02 2026 GMT
            Not After : Apr 14 22:39:02 2027 GMT
        Subject: CN=55E2008FF5F108DE9E29E64B6AA76D6084F2A860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ee:c2:41:63:d2:5c:49:a6:be:c1:65:a1:f4:
                    41:53:7a:97:b2:54:e0:9b:6c:b3:e3:e6:74:8a:03:
                    01:e6:8e:17:c8:1f:86:ab:68:42:f4:26:9d:cc:ae:
                    f7:22:06:4d:ba:30:ce:ad:82:be:15:6a:3e:08:cf:
                    53:5f:6b:25:ed:36:bd:38:08:0c:02:72:5b:ac:32:
                    0f:36:9a:ba:1e:a0:0b:a5:e6:ab:f2:4e:3f:28:2c:
                    e8:ab:09:e2:20:cf:8e:4e:df:09:4c:cd:9c:3e:19:
                    76:2e:94:7a:6a:7e:7a:6d:46:79:42:4a:d0:3c:cb:
                    68:4d:61:c9:cf:47:2a:31:a2:dd:a2:04:29:0c:20:
                    e2:40:df:73:67:f9:42:bc:70:7c:09:54:1b:e0:16:
                    23:cc:cb:a2:52:fc:28:1f:6a:10:06:17:77:68:a2:
                    69:bc:14:3e:ed:f1:bb:63:02:1b:1b:3f:9a:7f:30:
                    85:dc:60:e2:67:73:4d:ee:d4:a6:84:7a:6a:3b:67:
                    91:ac:23:1d:d8:6d:a2:b2:c8:37:6c:fe:d7:c8:a6:
                    32:d0:fc:9e:ca:06:30:fa:c7:7f:16:24:70:89:4e:
                    55:f0:8e:2f:d6:f0:be:a3:e7:e5:b5:f3:5e:6d:25:
                    6d:16:1c:c2:31:d3:7b:4f:90:5c:56:54:3f:18:a9:
                    0b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E2:00:8F:F5:F1:08:DE:9E:29:E6:4B:6A:A7:6D:60:84:F2:A8:60
            X509v3 Authority Key Identifier:
                keyid:E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32332d3234203d3e20323636393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:4e:1d:4f:a6:24:a5:95:54:64:77:8c:52:02:4e:7e:21:dc:
         d5:da:e8:e2:d9:f4:00:88:46:7a:0d:02:61:aa:45:ad:c2:3e:
         f9:76:db:ac:e9:3a:05:ad:54:da:88:e1:32:61:b5:34:be:9f:
         8c:d6:4c:29:8f:3d:6e:5d:3e:ec:e0:ad:6b:e0:e0:03:07:ed:
         1f:46:44:a1:61:41:1a:15:3b:5a:ec:a8:b2:9f:b6:d1:65:f9:
         8d:32:13:0b:91:be:c1:69:64:6a:bb:81:83:c4:8a:d7:51:42:
         09:b6:02:51:84:84:d3:8b:ff:f2:cb:fc:b3:d2:1b:ed:68:f0:
         77:26:c6:f7:fb:36:54:2f:65:6e:b4:45:47:c4:f6:35:fd:30:
         75:db:45:9f:80:52:ab:f8:f8:0d:ae:07:90:e4:4c:1f:4d:5f:
         4c:69:f0:41:07:61:db:e6:39:83:74:52:ae:a9:b3:00:93:91:
         8a:3b:b5:14:77:c2:a2:2c:1f:ab:c5:67:04:f2:cc:54:5c:b2:
         c5:e5:78:ec:30:33:0f:cb:7f:ff:b7:e9:f2:61:64:81:ec:55:
         c8:dd:20:25:d2:c0:b4:0b:a6:40:cc:2f:3e:bd:5d:cd:42:bd:
         6a:82:d3:af:8f:a8:4f:a3:7d:50:d8:e7:cf:00:9a:11:b0:4f:
         e9:a0:99:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:12:10 2026 by rpki-client