Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8A46606001554EA6612B8A067F48A11441DCEB65C6B1849BFD159326CEFB17D/0/34352e3136382e3137322e302f32332d3234203d3e20323637373337.roa
File:                     34352e3136382e3137322e302f32332d3234203d3e20323637373337.roa (raw, json)
Hash identifier:          X8w+D67DkNSYWT6V478LVprzN30CQO2JORN5nv6kkDM=
Subject key identifier:   5B:F2:02:06:90:27:EE:95:6A:0D:C7:48:3A:AA:97:61:05:23:D4:C6
Certificate issuer:       /CN=0862BB5C4F073480DDD03F1C74576C631356E254
Certificate serial:       2C23E5B8BF39127095600EDDA30CDB019B970471
Authority key identifier: 08:62:BB:5C:4F:07:34:80:DD:D0:3F:1C:74:57:6C:63:13:56:E2:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0862BB5C4F073480DDD03F1C74576C631356E254.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8A46606001554EA6612B8A067F48A11441DCEB65C6B1849BFD159326CEFB17D/0/34352e3136382e3137322e302f32332d3234203d3e20323637373337.roa
Signing time:             Mon 30 Mar 2026 19:36:40 +0000
ROA not before:           Mon 30 Mar 2026 19:31:40 +0000
ROA not after:            Mon 29 Mar 2027 19:36:40 +0000
asID:                     267737
IP address blocks:        45.168.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8A46606001554EA6612B8A067F48A11441DCEB65C6B1849BFD159326CEFB17D/0/0862BB5C4F073480DDD03F1C74576C631356E254.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8A46606001554EA6612B8A067F48A11441DCEB65C6B1849BFD159326CEFB17D/0/0862BB5C4F073480DDD03F1C74576C631356E254.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0862BB5C4F073480DDD03F1C74576C631356E254.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:23:e5:b8:bf:39:12:70:95:60:0e:dd:a3:0c:db:01:9b:97:04:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0862BB5C4F073480DDD03F1C74576C631356E254
        Validity
            Not Before: Mar 30 19:31:40 2026 GMT
            Not After : Mar 29 19:36:40 2027 GMT
        Subject: CN=5BF202069027EE956A0DC7483AAA97610523D4C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:79:a6:7b:50:d7:07:96:e4:43:a6:4f:f4:73:
                    87:50:84:d3:25:93:f6:1e:29:7e:c6:0f:91:72:3d:
                    8c:07:84:5b:d2:cb:f2:b3:2d:64:ae:cd:30:56:42:
                    a6:f2:77:81:e3:1c:45:d4:15:40:c5:ab:f0:71:61:
                    96:10:4c:01:39:3b:99:f3:87:cf:95:3f:49:16:c0:
                    ad:c7:7b:28:ac:e8:6a:fc:e1:da:c2:f5:44:70:82:
                    ae:b7:3c:7e:9f:13:66:6c:41:bb:c4:82:7e:3e:2a:
                    0b:61:6b:e7:d9:36:a1:67:50:1c:c6:bf:80:d4:6d:
                    7c:5f:db:4b:f1:f4:30:02:22:a3:85:f6:9f:cb:36:
                    bb:2a:fe:8a:08:a5:d5:3b:50:59:94:60:8a:15:ce:
                    13:c9:6a:6d:94:e4:f1:e3:16:89:2a:11:1e:5a:3e:
                    1e:35:de:12:78:cd:72:81:db:db:2b:41:ea:2f:28:
                    73:42:99:bb:7e:8c:c7:e8:f5:ce:fb:3f:f7:6c:a3:
                    1b:62:44:0d:d1:6a:cb:2e:18:f6:dd:b7:ff:c0:66:
                    d4:7f:0a:db:01:19:58:90:a2:45:59:82:1d:87:3a:
                    00:38:fa:4e:7f:df:4e:a7:8a:88:87:16:14:94:b8:
                    86:61:f2:f0:90:26:17:8d:4e:da:b9:f9:02:71:2a:
                    4c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F2:02:06:90:27:EE:95:6A:0D:C7:48:3A:AA:97:61:05:23:D4:C6
            X509v3 Authority Key Identifier:
                keyid:08:62:BB:5C:4F:07:34:80:DD:D0:3F:1C:74:57:6C:63:13:56:E2:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8A46606001554EA6612B8A067F48A11441DCEB65C6B1849BFD159326CEFB17D/0/0862BB5C4F073480DDD03F1C74576C631356E254.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0862BB5C4F073480DDD03F1C74576C631356E254.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8A46606001554EA6612B8A067F48A11441DCEB65C6B1849BFD159326CEFB17D/0/34352e3136382e3137322e302f32332d3234203d3e20323637373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:2b:7c:89:8d:cc:cd:94:f9:83:22:a0:2e:fa:c0:59:b0:1a:
         17:19:00:e5:e2:3f:6d:2a:56:de:10:5c:32:c1:06:40:e8:e1:
         8b:0b:2e:36:c5:cd:91:d2:f3:69:bf:56:6d:bc:84:db:6b:b3:
         c1:b7:8f:50:4c:87:ad:0d:3e:99:10:75:32:df:c5:d6:fc:b5:
         0f:38:4d:ea:c8:65:b3:68:2a:85:4e:53:06:7a:30:e3:4d:15:
         66:29:29:fa:16:50:7e:c4:d8:49:92:69:d7:77:7c:f3:4f:c7:
         2e:e8:43:ce:0d:d5:e9:23:b6:f6:ee:ae:7b:03:48:50:41:03:
         48:51:9f:f5:a4:86:73:a6:76:a5:e0:7f:dd:a5:45:ff:9d:ee:
         1f:a6:9f:94:b2:8e:49:e1:1d:11:b9:8a:69:6f:6b:db:ba:00:
         71:4d:85:e0:76:1c:47:a2:a6:45:ec:be:a6:17:50:ee:c9:dc:
         57:28:ba:7c:bd:67:19:65:0a:4f:62:76:7e:66:f4:61:4a:98:
         52:f1:a7:e4:cb:45:34:35:1e:55:ff:b9:c5:0c:6e:c8:a5:d8:
         d0:d7:b1:e5:17:2c:fc:63:f3:fc:23:08:3a:4f:94:de:b9:00:
         60:07:5f:6e:5c:06:a7:e8:72:de:fa:26:da:c8:34:00:ee:f0:
         5c:64:f8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:45:18 2026 by rpki-client