Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32342d3234203d3e203532343638.roa
File:                     34352e3136322e322e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          xGmNwBZyMre2eHxwH6oO2JqAqFPeyolsdBGLGa1PP4g=
Subject key identifier:   65:81:FE:A0:75:45:FE:47:2E:18:19:84:73:7E:28:CD:6A:DE:C6:0F
Certificate issuer:       /CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
Certificate serial:       5520DD4F5DC4D423B98F50AEBFAFA95C20CC202E
Authority key identifier: E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32342d3234203d3e203532343638.roa
Signing time:             Wed 25 Feb 2026 15:31:49 +0000
ROA not before:           Wed 25 Feb 2026 15:26:49 +0000
ROA not after:            Wed 24 Feb 2027 15:31:49 +0000
asID:                     52468
IP address blocks:        45.162.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:20:dd:4f:5d:c4:d4:23:b9:8f:50:ae:bf:af:a9:5c:20:cc:20:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
        Validity
            Not Before: Feb 25 15:26:49 2026 GMT
            Not After : Feb 24 15:31:49 2027 GMT
        Subject: CN=6581FEA07545FE472E181984737E28CD6ADEC60F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9f:5c:ca:73:70:3a:5a:89:99:95:bc:b5:53:
                    ca:63:f9:38:1f:36:d6:23:f1:30:62:02:67:0f:71:
                    30:a8:79:d7:dc:2d:9f:db:2f:f2:82:21:82:d8:0a:
                    b9:62:fe:9b:44:62:ab:c2:fd:52:8a:70:a3:9f:24:
                    77:5b:fc:8a:c6:30:8d:5c:6a:05:c0:a2:fc:22:99:
                    61:07:ee:d1:f6:9b:cc:5e:40:02:c5:59:9b:f9:a5:
                    d7:bb:d4:a7:da:56:ef:0b:06:9c:20:26:20:75:d0:
                    c8:58:aa:ff:84:25:1f:2d:5d:64:02:0b:a4:73:cb:
                    b2:4e:b2:1c:b9:93:e5:72:b3:ad:8c:64:6d:1d:f5:
                    31:d5:c4:b3:09:48:5d:3b:40:ef:99:3d:2e:e1:79:
                    64:11:ea:f3:ff:9d:52:8a:9a:db:36:e9:e5:45:77:
                    d6:d7:83:28:63:2b:c5:65:81:d9:36:3b:e0:08:8d:
                    5c:e9:a5:6e:1d:53:59:e2:1d:c5:ed:bc:1a:d1:39:
                    22:0b:40:01:63:f1:f7:79:80:46:f8:3c:fb:fc:2c:
                    c8:15:f4:73:eb:fe:e4:00:4a:87:88:7f:9b:0b:d6:
                    03:d7:22:1e:15:f6:64:27:3e:d1:63:ae:23:b9:d8:
                    82:c7:23:dc:a9:be:2e:e1:a8:2b:30:0f:64:6b:fd:
                    1b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:81:FE:A0:75:45:FE:47:2E:18:19:84:73:7E:28:CD:6A:DE:C6:0F
            X509v3 Authority Key Identifier:
                keyid:E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:d8:79:87:3d:9a:e6:7f:30:0b:59:f1:11:ff:c1:1f:a1:d4:
         ee:5b:43:87:1c:cd:47:dc:f7:70:7a:7b:8d:33:57:88:58:51:
         74:91:33:5a:b5:f3:b0:4e:2a:9a:bb:9d:ca:bf:20:a0:ee:07:
         9d:4b:90:3c:a9:e5:6c:63:8d:a9:cd:a2:a2:a1:61:33:de:10:
         b9:2b:f4:65:8e:24:76:48:54:63:cd:bd:cf:c7:46:ef:a5:e4:
         c0:e1:90:c9:9e:28:51:d9:f6:46:48:ff:82:93:2d:23:36:26:
         ce:a3:ac:94:a6:60:bb:ff:ae:a2:75:31:e7:02:70:04:d9:00:
         2b:51:bd:56:da:d8:37:23:72:6c:db:9b:9d:bf:90:95:d1:c1:
         c1:19:22:fb:2d:14:50:21:9d:55:2e:d5:bb:67:e5:58:6d:ca:
         f7:28:45:6f:93:9e:91:6f:a2:b3:3d:31:a1:e6:35:ca:03:21:
         bc:73:6b:ad:60:94:fb:e3:b6:67:0c:f9:f0:41:b1:14:4f:99:
         89:f8:3e:ab:10:8f:1a:83:40:6b:2e:ca:1a:cf:2e:4e:d2:d8:
         a7:4b:21:aa:f0:e6:ce:46:9a:cd:4b:e8:4b:15:db:46:94:1b:
         91:89:3b:ca:54:df:88:44:fe:19:e8:02:20:80:5a:f7:bb:3a:
         f8:ba:68:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:58:17 2026 by rpki-client