Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2C9C83C9F607DEDF611C31EFAF96B4A456A2F7FA841B65D805F9FA43E9455B6/0/34352e352e39322e302f32322d3234203d3e203238343139.roa
File:                     34352e352e39322e302f32322d3234203d3e203238343139.roa (raw, json)
Hash identifier:          4QrayPP1KP1W7HszNKzsRtHQN1UrJFCPg8XxRwfT5Eg=
Subject key identifier:   9E:D6:E9:EF:CC:FC:73:E0:52:5D:8F:71:3F:04:B0:B5:3F:06:02:21
Certificate issuer:       /CN=171B26221A897DECC8BEAC70E403D28E12F3ACD9
Certificate serial:       25DB8DDD495ABA91A9EC361A35C0983EC752EE6B
Authority key identifier: 17:1B:26:22:1A:89:7D:EC:C8:BE:AC:70:E4:03:D2:8E:12:F3:AC:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171B26221A897DECC8BEAC70E403D28E12F3ACD9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2C9C83C9F607DEDF611C31EFAF96B4A456A2F7FA841B65D805F9FA43E9455B6/0/34352e352e39322e302f32322d3234203d3e203238343139.roa
Signing time:             Wed 08 Apr 2026 13:37:59 +0000
ROA not before:           Wed 08 Apr 2026 13:32:59 +0000
ROA not after:            Wed 07 Apr 2027 13:37:59 +0000
asID:                     28419
IP address blocks:        45.5.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2C9C83C9F607DEDF611C31EFAF96B4A456A2F7FA841B65D805F9FA43E9455B6/0/171B26221A897DECC8BEAC70E403D28E12F3ACD9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2C9C83C9F607DEDF611C31EFAF96B4A456A2F7FA841B65D805F9FA43E9455B6/0/171B26221A897DECC8BEAC70E403D28E12F3ACD9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171B26221A897DECC8BEAC70E403D28E12F3ACD9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:db:8d:dd:49:5a:ba:91:a9:ec:36:1a:35:c0:98:3e:c7:52:ee:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171B26221A897DECC8BEAC70E403D28E12F3ACD9
        Validity
            Not Before: Apr  8 13:32:59 2026 GMT
            Not After : Apr  7 13:37:59 2027 GMT
        Subject: CN=9ED6E9EFCCFC73E0525D8F713F04B0B53F060221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:cb:17:74:bb:e6:db:6b:d6:c2:c4:a2:a7:
                    f8:62:d0:3a:8b:8a:47:06:90:46:23:67:93:49:a2:
                    4d:5e:d2:84:d1:a9:5e:91:aa:b2:e5:af:78:8e:84:
                    dc:89:e5:31:ec:c0:16:b2:a3:d5:13:b1:a1:eb:6c:
                    50:a1:fa:a7:2f:78:da:31:34:1c:57:5b:0a:cf:96:
                    39:95:a6:d8:22:f4:e6:27:a4:cb:01:f6:09:74:68:
                    5d:4d:e8:8a:55:a4:18:e0:11:cb:d4:f8:f1:d0:0d:
                    cc:9a:34:9d:91:b8:50:54:26:1f:a4:26:ad:0b:d6:
                    cc:bd:0d:b5:0f:5b:0c:b6:09:4c:ba:4a:47:eb:1e:
                    7d:d5:ea:66:21:ce:7f:c9:5b:b9:95:cb:e5:bc:a2:
                    85:20:63:b6:b6:6d:85:dd:e5:9d:eb:71:aa:16:00:
                    98:3e:72:79:d3:2f:38:71:a7:2f:1c:71:58:5c:fc:
                    fb:07:80:2c:48:51:d3:3d:aa:8c:14:ba:77:1a:eb:
                    c5:44:10:1b:27:91:4a:43:c7:b9:f4:8d:9e:05:c2:
                    cb:8e:be:2c:f8:93:3a:7e:c2:63:aa:ab:be:7e:b7:
                    9d:3f:28:3f:d2:b4:4a:a2:ad:3f:56:96:33:10:40:
                    62:19:d2:cb:6a:e1:82:9b:15:4d:8c:04:d4:30:c1:
                    ba:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D6:E9:EF:CC:FC:73:E0:52:5D:8F:71:3F:04:B0:B5:3F:06:02:21
            X509v3 Authority Key Identifier:
                keyid:17:1B:26:22:1A:89:7D:EC:C8:BE:AC:70:E4:03:D2:8E:12:F3:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2C9C83C9F607DEDF611C31EFAF96B4A456A2F7FA841B65D805F9FA43E9455B6/0/171B26221A897DECC8BEAC70E403D28E12F3ACD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171B26221A897DECC8BEAC70E403D28E12F3ACD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2C9C83C9F607DEDF611C31EFAF96B4A456A2F7FA841B65D805F9FA43E9455B6/0/34352e352e39322e302f32322d3234203d3e203238343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:78:3e:e9:a9:49:bb:5a:14:a2:08:17:5b:06:09:cc:04:93:
         1f:da:a8:ba:ca:18:68:d1:04:ad:87:c8:1b:55:f1:4b:02:ed:
         5a:63:b7:07:8d:cf:b2:b8:87:03:50:f1:df:92:33:cd:86:90:
         0a:c8:31:03:d9:03:3d:76:cf:70:72:64:99:17:9e:d5:ec:ee:
         fb:e2:c9:e2:df:a7:d2:58:e1:f8:45:8b:9f:f6:dd:80:db:db:
         d6:c3:2d:ef:73:48:f6:f8:4c:7e:a4:18:08:6e:2c:7f:91:b7:
         73:67:2b:7b:30:60:84:7b:84:84:ee:f8:94:d0:4c:07:cc:16:
         72:b1:99:66:6c:9c:23:d2:54:62:44:54:dd:53:03:df:c5:05:
         b3:da:5b:4d:47:cb:43:ed:4b:e1:97:51:e0:50:5b:32:91:6b:
         e4:66:90:a8:56:89:96:0f:bb:a1:bd:6a:b4:9a:7e:33:e3:f3:
         c4:15:e6:e5:5c:33:0c:82:0f:ea:fa:d7:b2:11:31:10:cb:ff:
         46:aa:d7:bd:a9:88:b1:00:70:75:a9:70:f9:51:6f:87:8c:03:
         61:a9:99:d8:49:d4:4f:04:46:b7:31:88:e3:70:e9:94:c2:23:
         f1:4b:77:98:1e:df:5c:b9:13:8c:7e:c6:d3:ca:6b:e2:b6:99:
         48:3d:54:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:43:32 2026 by rpki-client