Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32342d3234203d3e203139353531.roa
File:                     34352e3136322e322e302f32342d3234203d3e203139353531.roa (raw, json)
Hash identifier:          Tf5aVhFokMjq1geZnvAzrlaKSINggezMR/Lz2wccBnM=
Subject key identifier:   15:1F:41:75:F0:3D:6E:82:B1:DA:24:8A:29:40:E1:B0:FF:17:BC:46
Certificate issuer:       /CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
Certificate serial:       339B1D152520E4701ACDB2FF6E22B3A637E639EB
Authority key identifier: E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32342d3234203d3e203139353531.roa
Signing time:             Wed 25 Feb 2026 14:31:48 +0000
ROA not before:           Wed 25 Feb 2026 14:26:48 +0000
ROA not after:            Wed 24 Feb 2027 14:31:48 +0000
asID:                     19551
IP address blocks:        45.162.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:9b:1d:15:25:20:e4:70:1a:cd:b2:ff:6e:22:b3:a6:37:e6:39:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
        Validity
            Not Before: Feb 25 14:26:48 2026 GMT
            Not After : Feb 24 14:31:48 2027 GMT
        Subject: CN=151F4175F03D6E82B1DA248A2940E1B0FF17BC46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3a:6e:2a:92:fd:86:6c:68:72:bb:0e:80:66:
                    15:fe:9d:21:f5:b5:5d:2c:2b:b2:08:a8:64:1d:13:
                    f2:32:6b:6a:51:30:ab:a1:7e:72:93:0f:04:81:a3:
                    b6:25:18:e7:09:a8:ed:97:cf:a2:89:51:d4:bd:c1:
                    7d:46:56:c0:28:29:db:ad:d1:73:7c:38:24:9a:09:
                    34:45:77:3f:f9:0f:b4:b5:a0:a8:a7:9f:ba:61:74:
                    a0:c3:c2:23:9f:c2:34:7f:bf:c8:c8:af:0d:eb:2d:
                    88:d1:7b:f8:ba:9b:c6:d2:1e:94:c5:d8:9c:05:dc:
                    1c:71:09:30:39:92:e1:9a:52:31:3e:74:92:11:d7:
                    1c:09:1e:58:fe:e9:26:52:7d:47:20:b1:ca:32:6c:
                    37:a1:e1:59:21:86:6a:e8:34:e3:59:12:55:c8:24:
                    b9:50:95:6d:4d:17:29:9c:5e:3a:35:9e:f0:01:40:
                    9a:b7:84:c4:5b:97:bd:43:97:a5:f9:48:83:5e:e0:
                    9e:09:69:77:d6:49:d0:09:25:b2:cc:86:ee:ab:27:
                    c1:28:ec:ce:a1:4e:da:bf:ec:c8:48:4a:06:d2:e6:
                    3f:14:e3:74:da:23:34:3b:3c:5a:1a:05:cc:73:8a:
                    cb:34:99:cf:de:cd:1a:13:5d:01:c5:db:bf:64:e2:
                    01:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1F:41:75:F0:3D:6E:82:B1:DA:24:8A:29:40:E1:B0:FF:17:BC:46
            X509v3 Authority Key Identifier:
                keyid:E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32342d3234203d3e203139353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:63:ca:ed:98:66:c0:c4:d7:85:5b:45:0c:a1:90:17:23:01:
         80:04:49:46:45:ca:cf:48:40:3c:2e:c9:d5:a0:27:da:7a:0b:
         7c:cb:9a:d3:67:33:91:9b:6b:ec:f4:84:6a:2d:29:80:48:22:
         5d:57:63:4b:e1:02:df:32:88:ba:07:33:ab:2c:74:cc:76:e2:
         9f:2f:fa:34:28:fe:47:0e:c7:e3:6d:84:ea:7a:69:7d:33:8d:
         82:b0:12:43:5e:0e:11:84:dd:1d:17:f4:e0:31:73:54:c1:08:
         54:8d:bb:0f:de:be:d6:94:b9:d3:c5:5e:f4:6e:8b:2a:c7:41:
         7e:b9:d2:c7:5f:ff:d8:8b:10:7e:44:47:cd:e5:f6:de:b3:99:
         11:cc:ed:73:c8:44:51:6f:5d:42:a8:db:eb:e2:85:8a:35:30:
         3f:9c:40:3c:be:31:fa:39:be:a4:bb:b6:cf:f7:97:45:ef:da:
         52:32:a0:05:94:b9:a4:08:c1:e0:64:e9:9d:1d:0c:77:6e:fa:
         31:66:5c:70:de:59:77:fc:73:99:cd:65:8b:a1:f5:cf:1c:bf:
         eb:58:1a:47:d0:4b:27:aa:05:2e:4d:11:e7:cc:92:17:36:93:
         f4:d9:e0:9e:fc:eb:51:23:95:16:6f:d9:d0:0e:79:6d:b7:df:
         63:c7:07:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:57:59 2026 by rpki-client