Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/34352e3138312e34342e302f32322d3234203d3e20323637373938.roa
File:                     34352e3138312e34342e302f32322d3234203d3e20323637373938.roa (raw, json)
Hash identifier:          d4YXF4f8BXowlr49el9VhKq7bfkR+TGoLldQUHyPLrI=
Subject key identifier:   C2:5B:C2:98:09:8A:BD:50:BC:FD:FB:98:A2:67:0E:CE:E5:D2:C0:DF
Certificate issuer:       /CN=44B7D6626292744063A0029B3E214C905150E05D
Certificate serial:       765C2E7C43DAA4B0468D03443E4B91A409398FB5
Authority key identifier: 44:B7:D6:62:62:92:74:40:63:A0:02:9B:3E:21:4C:90:51:50:E0:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/34352e3138312e34342e302f32322d3234203d3e20323637373938.roa
Signing time:             Mon 30 Mar 2026 19:36:39 +0000
ROA not before:           Mon 30 Mar 2026 19:31:39 +0000
ROA not after:            Mon 29 Mar 2027 19:36:39 +0000
asID:                     267798
IP address blocks:        45.181.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/44B7D6626292744063A0029B3E214C905150E05D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/44B7D6626292744063A0029B3E214C905150E05D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 01:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5c:2e:7c:43:da:a4:b0:46:8d:03:44:3e:4b:91:a4:09:39:8f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44B7D6626292744063A0029B3E214C905150E05D
        Validity
            Not Before: Mar 30 19:31:39 2026 GMT
            Not After : Mar 29 19:36:39 2027 GMT
        Subject: CN=C25BC298098ABD50BCFDFB98A2670ECEE5D2C0DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:14:cd:d0:c6:ef:51:6c:b2:14:a7:8f:5b:
                    56:38:5a:f5:6f:a9:ae:78:3b:e8:12:8e:3e:40:2f:
                    de:75:7b:10:64:be:6e:ae:c7:d3:fc:1b:28:3d:fc:
                    84:5f:00:01:1c:d8:d4:1d:ac:4b:17:5f:3e:79:57:
                    99:8b:87:57:24:ef:78:49:38:65:a8:76:15:bf:26:
                    1f:20:20:ee:f0:36:e0:4d:e8:3f:bf:8b:e0:72:de:
                    25:ee:5d:14:4e:ba:3e:a2:06:66:0b:50:71:c1:ad:
                    dd:f6:84:42:73:cc:ee:ed:78:d5:23:db:be:4a:4c:
                    4a:8a:9e:18:10:4e:22:d5:0b:f2:36:f2:2a:4b:38:
                    d6:26:42:14:b9:c3:a3:0f:c6:94:97:40:93:23:28:
                    06:26:87:79:28:2e:9b:16:09:ee:09:4a:f8:4a:a4:
                    1c:f0:02:ed:6b:3d:fa:33:c9:95:94:df:4e:b3:59:
                    82:ba:55:a6:8e:bb:e5:6a:1b:a2:80:0d:c6:e7:75:
                    9b:80:67:11:33:3d:13:3c:3b:99:06:7f:f1:c5:97:
                    c8:a6:7d:35:e9:42:8d:3e:f1:17:cd:cb:04:4a:e0:
                    48:86:2a:7c:c7:c9:35:22:1e:f3:4c:06:6c:4f:23:
                    2d:07:53:b0:cc:4c:79:63:2f:e0:ae:03:7e:a1:ae:
                    14:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5B:C2:98:09:8A:BD:50:BC:FD:FB:98:A2:67:0E:CE:E5:D2:C0:DF
            X509v3 Authority Key Identifier:
                keyid:44:B7:D6:62:62:92:74:40:63:A0:02:9B:3E:21:4C:90:51:50:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/44B7D6626292744063A0029B3E214C905150E05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/34352e3138312e34342e302f32322d3234203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:84:c2:6b:84:4f:9e:46:4e:96:40:55:88:cf:cb:c5:bd:9c:
         1a:42:13:2d:09:bf:fc:1d:97:19:e0:ea:b6:78:53:5e:88:8e:
         02:9d:6b:20:91:43:d7:50:17:cb:9b:ae:dc:94:52:60:ce:6f:
         d1:2b:7e:4b:a6:d8:b8:e1:ad:ea:83:66:9b:9e:f4:cf:bb:86:
         de:c0:bb:89:a5:2a:54:40:6d:fb:2e:4b:90:8f:a1:2e:f1:3c:
         28:bf:6b:8f:d3:09:05:de:4c:b9:a7:e1:07:58:a4:eb:94:cb:
         27:c1:10:3e:65:d2:36:03:1b:03:ff:0d:12:ee:fa:5c:bc:e4:
         e8:21:af:c2:9c:b0:ba:da:da:00:1b:1d:0a:cc:3a:2c:e1:c8:
         22:bd:d8:9f:1e:b0:e4:4f:27:77:5b:ed:9d:6b:41:94:19:4c:
         bf:de:f7:0e:48:89:69:47:9c:e3:0a:d7:5c:d9:23:47:a3:e4:
         c0:0b:cd:d3:ad:5b:13:59:c4:f9:36:be:29:6c:b7:cc:3b:bb:
         8e:c1:39:17:49:5c:b2:66:02:b9:cd:0f:21:41:b8:ef:f3:f6:
         57:a7:3c:72:b9:e0:c4:d4:92:3c:24:71:65:71:06:49:e1:fd:
         b9:40:62:55:7e:83:47:a4:d9:17:fb:36:bf:30:d2:40:99:33:
         b4:ee:54:fb
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdlwufEPapLBGjQNEPkuRpAk5j7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRCN0Q2NjI2MjkyNzQ0MDYzQTAwMjlCM0UyMTRDOTA1
MTUwRTA1RDAeFw0yNjAzMzAxOTMxMzlaFw0yNzAzMjkxOTM2MzlaMDMxMTAvBgNV
BAMTKEMyNUJDMjk4MDk4QUJENTBCQ0ZERkI5OEEyNjcwRUNFRTVEMkMwREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6UBTN0MbvUWyyFKePW1Y4WvVv
qa54O+gSjj5AL951exBkvm6ux9P8Gyg9/IRfAAEc2NQdrEsXXz55V5mLh1ck73hJ
OGWodhW/Jh8gIO7wNuBN6D+/i+By3iXuXRROuj6iBmYLUHHBrd32hEJzzO7teNUj
275KTEqKnhgQTiLVC/I28ipLONYmQhS5w6MPxpSXQJMjKAYmh3koLpsWCe4JSvhK
pBzwAu1rPfozyZWU306zWYK6VaaOu+VqG6KADcbndZuAZxEzPRM8O5kGf/HFl8im
fTXpQo0+8RfNywRK4EiGKnzHyTUiHvNMBmxPIy0HU7DMTHljL+CuA36hrhTRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUwlvCmAmKvVC8/fuYomcOzuXSwN8wHwYDVR0j
BBgwFoAURLfWYmKSdEBjoAKbPiFMkFFQ4F0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85OTBGRjlBRDUzMTA1NzRENjU0Q0E0NjlDM0M2OTc5QjIz
RDkzNEZDNUFFNjEwRkIxODZGMDZEQTY1MThCQTRBLzAvNDRCN0Q2NjI2MjkyNzQ0
MDYzQTAwMjlCM0UyMTRDOTA1MTUwRTA1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NEI3RDY2MjYyOTI3NDQwNjNB
MDAyOUIzRTIxNEM5MDUxNTBFMDVELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTkwRkY5QUQ1MzEwNTc0RDY1NENBNDY5QzNDNjk3OUIyM0Q5MzRGQzVB
RTYxMEZCMTg2RjA2REE2NTE4QkE0QS8wLzM0MzUyZTMxMzgzMTJlMzQzNDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNzM3MzkzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi21LDAN
BgkqhkiG9w0BAQsFAAOCAQEAK4TCa4RPnkZOlkBViM/Lxb2cGkITLQm//B2XGeDq
tnhTXoiOAp1rIJFD11AXy5uu3JRSYM5v0St+S6bYuOGt6oNmm570z7uG3sC7iaUq
VEBt+y5LkI+hLvE8KL9rj9MJBd5MuafhB1ik65TLJ8EQPmXSNgMbA/8NEu76XLzk
6CGvwpywutraABsdCsw6LOHIIr3Ynx6w5E8nd1vtnWtBlBlMv973DkiJaUec4wrX
XNkjR6PkwAvN061bE1nE+Ta+KWy3zDu7jsE5F0lcsmYCuc0PIUG47/P2V6c8crng
xNSSPCRxZXEGSeH9uUBiVX6DR6TZF/s2vzDSQJkztO5U+w==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:52:24 2026 by rpki-client