Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/34352e3233302e37322e302f32322d3234203d3e20323634383537.roa
File:                     34352e3233302e37322e302f32322d3234203d3e20323634383537.roa (raw, json)
Hash identifier:          wRoqiNN28A8hg+UIuArGvM3/i9EKv93r51C86mo0AaA=
Subject key identifier:   3A:F4:C2:DA:25:A3:5A:5A:DF:05:16:6E:0A:E1:9F:5B:79:D7:C6:83
Certificate issuer:       /CN=3A400B3A5D53E4EA3825ED69A583478D86023E84
Certificate serial:       6FC652A732BBF55E60C465A231DE78C15EDE4FE1
Authority key identifier: 3A:40:0B:3A:5D:53:E4:EA:38:25:ED:69:A5:83:47:8D:86:02:3E:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/34352e3233302e37322e302f32322d3234203d3e20323634383537.roa
Signing time:             Fri 20 Feb 2026 11:31:27 +0000
ROA not before:           Fri 20 Feb 2026 11:26:27 +0000
ROA not after:            Fri 19 Feb 2027 11:31:27 +0000
asID:                     264857
IP address blocks:        45.230.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c6:52:a7:32:bb:f5:5e:60:c4:65:a2:31:de:78:c1:5e:de:4f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A400B3A5D53E4EA3825ED69A583478D86023E84
        Validity
            Not Before: Feb 20 11:26:27 2026 GMT
            Not After : Feb 19 11:31:27 2027 GMT
        Subject: CN=3AF4C2DA25A35A5ADF05166E0AE19F5B79D7C683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5b:68:20:9f:b0:b3:8a:9b:35:f1:80:1f:52:
                    fe:65:43:79:e2:dd:4e:52:e0:30:e9:be:49:82:ba:
                    ee:c7:9e:45:d1:91:55:fe:fd:69:1b:51:87:a6:20:
                    c6:75:79:e1:bc:64:ab:cd:55:3e:e8:68:7f:2d:c0:
                    c9:65:ca:b9:c7:a3:a4:80:3f:cb:19:81:3a:da:53:
                    0a:94:e5:db:e6:81:76:fd:5a:00:32:ba:b4:6b:ba:
                    0e:f7:7b:c3:ce:52:b1:2a:6f:aa:0b:1c:7f:cf:7b:
                    54:46:a9:12:89:34:f8:4b:45:9c:3a:e9:1a:4e:52:
                    88:4c:ee:91:37:c4:fc:9a:7d:11:50:d3:03:e8:54:
                    57:66:b4:a6:c4:b6:ef:8c:9a:a6:eb:76:14:a7:ce:
                    70:3b:fc:63:96:2f:7a:62:58:52:71:a4:96:47:ad:
                    8e:98:4a:2e:50:9a:ae:7c:fc:6c:f8:28:fa:8a:d5:
                    b4:90:d0:3f:4a:22:46:d7:ad:e2:9c:6d:c4:91:36:
                    c7:be:66:4f:9f:5f:a6:73:e6:c1:6f:7c:a9:ac:de:
                    42:94:87:a8:17:fc:30:75:c7:52:0f:b8:e5:ad:1e:
                    ec:da:59:5e:51:17:07:97:a0:f7:1f:5d:db:72:24:
                    3f:6b:d8:d2:c2:9b:67:37:68:32:10:75:66:cb:fb:
                    97:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F4:C2:DA:25:A3:5A:5A:DF:05:16:6E:0A:E1:9F:5B:79:D7:C6:83
            X509v3 Authority Key Identifier:
                keyid:3A:40:0B:3A:5D:53:E4:EA:38:25:ED:69:A5:83:47:8D:86:02:3E:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/34352e3233302e37322e302f32322d3234203d3e20323634383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:44:80:be:db:8f:91:0e:60:24:1a:9e:54:2e:ba:58:12:c4:
         44:c1:64:c4:96:23:77:0a:e3:0c:86:69:52:7b:69:6c:b0:7d:
         0d:37:d6:f7:fe:be:60:f2:5b:96:d4:2b:63:c8:d5:3a:31:37:
         7a:06:53:dd:1b:ff:89:e0:2f:f3:a8:d0:0d:51:2a:6c:d8:de:
         7a:e1:2a:99:0e:c8:8b:f3:9d:03:66:b0:f0:f1:9c:05:33:55:
         95:44:28:59:0a:cf:fa:bf:70:b8:be:fc:44:34:af:c1:ed:ad:
         4b:e0:4b:c7:4a:ad:dd:cd:fa:43:f6:17:b1:7c:13:8e:83:f0:
         c3:a0:2a:18:d9:6a:8c:af:ab:e9:18:c9:fa:d1:f4:63:44:25:
         c6:a1:11:ab:bd:6b:8a:d3:e1:d6:8a:37:2c:87:b2:a1:24:f2:
         fa:a4:4b:e9:ee:5c:fc:62:8b:96:bc:97:9e:b0:a5:0b:0d:c9:
         e9:a5:6b:5a:f4:a0:39:a9:31:68:95:4f:89:e3:a7:09:1e:2b:
         71:23:03:69:d1:bf:55:40:29:d3:61:fa:2e:49:59:13:98:45:
         ba:80:00:4c:ff:3f:72:05:ce:45:08:bc:54:4e:c7:e4:97:47:
         45:df:4a:20:54:4d:0f:c3:fc:53:61:72:91:78:d4:bc:78:aa:
         5a:dd:dc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:42:58 2026 by rpki-client