Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/34352e3233352e39382e302f32342d3332203d3e20323636373737.roa
File:                     34352e3233352e39382e302f32342d3332203d3e20323636373737.roa (raw, json)
Hash identifier:          7ItQHZ5YpS3cRnLp5I1pzxvx883e/O/Kq8qVt4WWesU=
Subject key identifier:   3A:84:7C:89:09:A3:A5:0F:B4:A3:1E:4A:97:F6:94:E6:85:B5:09:B1
Certificate issuer:       /CN=E99008F3C333627E9F8C6939370696F7049C22EB
Certificate serial:       118905C20F384DD3D4F7940DA3674A490CEC2817
Authority key identifier: E9:90:08:F3:C3:33:62:7E:9F:8C:69:39:37:06:96:F7:04:9C:22:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/34352e3233352e39382e302f32342d3332203d3e20323636373737.roa
Signing time:             Fri 17 Apr 2026 02:05:00 +0000
ROA not before:           Fri 17 Apr 2026 02:00:00 +0000
ROA not after:            Fri 16 Apr 2027 02:05:00 +0000
asID:                     266777
IP address blocks:        45.235.98.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:89:05:c2:0f:38:4d:d3:d4:f7:94:0d:a3:67:4a:49:0c:ec:28:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E99008F3C333627E9F8C6939370696F7049C22EB
        Validity
            Not Before: Apr 17 02:00:00 2026 GMT
            Not After : Apr 16 02:05:00 2027 GMT
        Subject: CN=3A847C8909A3A50FB4A31E4A97F694E685B509B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b9:05:de:3f:c5:d4:c4:07:a1:ec:43:bb:6c:
                    d3:72:30:4e:eb:70:91:8e:f7:8e:c9:d7:1a:ec:a2:
                    fa:f5:68:83:ba:53:40:4b:34:6f:fd:78:36:67:8c:
                    de:63:78:bc:af:9b:2a:28:4d:66:68:68:8b:a9:1a:
                    aa:eb:a6:6a:9c:c2:de:21:46:f6:dc:16:d3:02:dc:
                    4b:a9:e2:3a:07:97:67:3b:c9:9a:f2:3d:24:cd:9c:
                    6a:a7:90:93:d9:8d:dc:82:fd:22:8a:73:9b:1f:1b:
                    85:50:49:8e:2c:3a:e9:de:c2:e8:43:09:e9:1d:dc:
                    2c:b8:ab:0d:5f:3c:46:e2:ca:a4:4b:b4:5b:08:7f:
                    fc:27:7b:48:35:85:3b:58:3b:b7:80:c0:0a:1f:4d:
                    a2:cf:10:6d:48:61:75:30:2f:d9:ea:52:2c:30:4c:
                    ec:b0:02:8b:cf:2b:a3:28:3b:47:36:60:c9:ee:c1:
                    45:89:0e:1b:7c:5c:f0:17:42:d3:8d:2c:1e:a8:87:
                    5c:47:4f:68:25:ba:83:89:6c:cd:14:1c:28:6f:75:
                    74:91:50:34:9b:2b:ad:db:3a:7e:a4:14:0f:88:8d:
                    03:1b:55:54:06:4b:17:60:f7:19:2e:d7:05:86:39:
                    7b:3d:ae:1f:f9:8b:97:24:db:9c:e7:76:8e:00:68:
                    ab:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:84:7C:89:09:A3:A5:0F:B4:A3:1E:4A:97:F6:94:E6:85:B5:09:B1
            X509v3 Authority Key Identifier:
                keyid:E9:90:08:F3:C3:33:62:7E:9F:8C:69:39:37:06:96:F7:04:9C:22:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/34352e3233352e39382e302f32342d3332203d3e20323636373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:97:50:c5:5c:6a:c3:ca:cd:a1:7c:84:db:39:3b:f7:24:6d:
         a2:af:4f:a9:9b:86:4b:ff:a9:8f:4c:fc:d1:76:a3:dd:5d:ed:
         1e:24:80:5c:d5:b4:85:ac:6f:2c:be:1e:6a:f6:33:f1:4f:92:
         93:9a:e1:df:b4:98:34:fb:ab:6b:d0:ae:d6:1f:a0:3f:20:7c:
         8c:92:d7:7e:de:75:37:86:e0:54:ac:db:1d:f9:67:39:7d:31:
         8b:e7:df:dd:82:46:6f:24:b2:31:4f:76:2b:4a:9e:d3:ad:c6:
         65:c0:94:f9:a1:3e:f1:2e:c2:9a:ff:c5:77:c5:a0:28:6d:be:
         60:47:3a:d2:c8:6e:ab:b5:58:ab:80:a1:d3:07:fc:ec:9e:4b:
         c4:c0:bc:01:c5:3b:70:ed:35:08:95:55:3e:94:95:80:1f:1b:
         18:a1:6e:67:46:94:5e:c0:da:91:61:63:a7:8e:6b:e9:79:11:
         28:12:31:0f:21:d9:75:71:f6:e8:94:a2:a4:6f:11:1f:92:a7:
         f2:f4:22:86:6b:4e:de:76:fb:36:86:f6:f7:89:6b:da:ac:56:
         47:8a:fc:77:5b:f8:95:78:4c:58:9a:ff:ae:d9:31:b9:a6:4a:
         00:13:a3:a4:d7:2e:ce:fd:c1:ae:b0:9a:9b:7e:f2:09:c2:e2:
         b3:76:df:d2
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEYkFwg84TdPU95QNo2dKSQzsKBcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk5MDA4RjNDMzMzNjI3RTlGOEM2OTM5MzcwNjk2Rjcw
NDlDMjJFQjAeFw0yNjA0MTcwMjAwMDBaFw0yNzA0MTYwMjA1MDBaMDMxMTAvBgNV
BAMTKDNBODQ3Qzg5MDlBM0E1MEZCNEEzMUU0QTk3RjY5NEU2ODVCNTA5QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFuQXeP8XUxAeh7EO7bNNyME7r
cJGO947J1xrsovr1aIO6U0BLNG/9eDZnjN5jeLyvmyooTWZoaIupGqrrpmqcwt4h
RvbcFtMC3Eup4joHl2c7yZryPSTNnGqnkJPZjdyC/SKKc5sfG4VQSY4sOunewuhD
Cekd3Cy4qw1fPEbiyqRLtFsIf/wne0g1hTtYO7eAwAofTaLPEG1IYXUwL9nqUiww
TOywAovPK6MoO0c2YMnuwUWJDht8XPAXQtONLB6oh1xHT2gluoOJbM0UHChvdXSR
UDSbK63bOn6kFA+IjQMbVVQGSxdg9xku1wWGOXs9rh/5i5ck25zndo4AaKsHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUOoR8iQmjpQ+0ox5Kl/aU5oW1CbEwHwYDVR0j
BBgwFoAU6ZAI88MzYn6fjGk5NwaW9wScIuswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CN0VCQ0Y0MDdGNjJCQUYxMzNEQ0UwODBDMzFBRTdENEYy
Q0VGOEE2MDNBNDcyQkNFNEE3OEVCQ0E5MzJDODRFLzAvRTk5MDA4RjNDMzMzNjI3
RTlGOEM2OTM5MzcwNjk2RjcwNDlDMjJFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOTkwMDhGM0MzMzM2MjdFOUY4
QzY5MzkzNzA2OTZGNzA0OUMyMkVCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjdFQkNGNDA3RjYyQkFGMTMzRENFMDgwQzMxQUU3RDRGMkNFRjhBNjAz
QTQ3MkJDRTRBNzhFQkNBOTMyQzg0RS8wLzM0MzUyZTMyMzMzNTJlMzkzODJlMzAy
ZjMyMzQyZDMzMzIyMDNkM2UyMDMyMzYzNjM3MzczNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3rYjAN
BgkqhkiG9w0BAQsFAAOCAQEAm5dQxVxqw8rNoXyE2zk79yRtoq9PqZuGS/+pj0z8
0Xaj3V3tHiSAXNW0haxvLL4eavYz8U+Sk5rh37SYNPura9Cu1h+gPyB8jJLXft51
N4bgVKzbHflnOX0xi+ff3YJGbySyMU92K0qe063GZcCU+aE+8S7Cmv/Fd8WgKG2+
YEc60shuq7VYq4Ch0wf87J5LxMC8AcU7cO01CJVVPpSVgB8bGKFuZ0aUXsDakWFj
p45r6XkRKBIxDyHZdXH26JSipG8RH5Kn8vQihmtO3nb7Nob294lr2qxWR4r8d1v4
lXhMWJr/rtkxuaZKABOjpNcuzv3BrrCam37yCcLis3bf0g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:12:46 2026 by rpki-client