Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFB4C0F7CCADD62E07ED7A054BF45AB8B38472AF4BA299DEE13AD4C5AE60FC46/0/34352e3137352e3231322e302f32322d3234203d3e20323637383430.roa
File:                     34352e3137352e3231322e302f32322d3234203d3e20323637383430.roa (raw, json)
Hash identifier:          CEpEx15533u/RVCCQ3xBGb+K/3Uz5G+xksfatNrmof8=
Subject key identifier:   07:5A:0F:E6:F2:B0:42:55:BC:92:41:2E:BA:04:6F:8F:30:02:6C:5D
Certificate issuer:       /CN=03EADE63CD8AF6482547D464E8DBBEA8040D0D88
Certificate serial:       35B7F3EF327F2D4E2E1DDBEA82B3491B5681D775
Authority key identifier: 03:EA:DE:63:CD:8A:F6:48:25:47:D4:64:E8:DB:BE:A8:04:0D:0D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03EADE63CD8AF6482547D464E8DBBEA8040D0D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFB4C0F7CCADD62E07ED7A054BF45AB8B38472AF4BA299DEE13AD4C5AE60FC46/0/34352e3137352e3231322e302f32322d3234203d3e20323637383430.roa
Signing time:             Mon 25 May 2026 21:44:05 +0000
ROA not before:           Mon 25 May 2026 21:39:05 +0000
ROA not after:            Mon 24 May 2027 21:44:05 +0000
asID:                     267840
IP address blocks:        45.175.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFB4C0F7CCADD62E07ED7A054BF45AB8B38472AF4BA299DEE13AD4C5AE60FC46/0/03EADE63CD8AF6482547D464E8DBBEA8040D0D88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFB4C0F7CCADD62E07ED7A054BF45AB8B38472AF4BA299DEE13AD4C5AE60FC46/0/03EADE63CD8AF6482547D464E8DBBEA8040D0D88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03EADE63CD8AF6482547D464E8DBBEA8040D0D88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 04:39:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b7:f3:ef:32:7f:2d:4e:2e:1d:db:ea:82:b3:49:1b:56:81:d7:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03EADE63CD8AF6482547D464E8DBBEA8040D0D88
        Validity
            Not Before: May 25 21:39:05 2026 GMT
            Not After : May 24 21:44:05 2027 GMT
        Subject: CN=075A0FE6F2B04255BC92412EBA046F8F30026C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4e:a7:df:e5:8a:77:85:79:47:c5:c2:9e:2d:
                    fa:09:1d:d7:10:23:b5:c4:af:7e:75:49:d4:79:90:
                    3c:32:3d:f5:2e:27:5f:50:96:84:4b:26:53:9e:56:
                    d3:e1:27:bb:02:d7:70:b4:bf:86:05:c0:86:b1:f3:
                    1a:2a:2a:bc:2d:97:2f:01:bf:a4:98:a9:24:b6:1b:
                    28:d8:f5:06:2c:03:04:bb:18:25:90:82:3b:8d:85:
                    e2:88:29:c8:11:6f:de:df:69:45:9c:87:15:11:4b:
                    3b:b6:87:30:3c:f9:6e:e7:ad:51:ee:ee:85:86:57:
                    e2:21:b4:e1:99:39:a9:df:5a:aa:a6:8f:3b:89:8f:
                    a7:0e:a7:84:52:61:b2:a9:6a:68:f0:eb:08:15:fa:
                    7c:f8:ba:6a:ea:6a:f0:83:1d:3f:10:30:c0:12:c3:
                    60:f8:0d:11:c9:da:9c:ab:ce:fe:dd:93:95:8e:b7:
                    fe:53:ea:48:be:f4:21:f6:30:cc:84:c8:e7:8c:d6:
                    30:f0:3a:b4:c2:eb:85:5c:9a:20:17:b1:15:7a:40:
                    c8:11:54:1a:a8:5c:72:af:14:5a:69:5e:8a:6f:92:
                    db:9d:cf:1c:fc:0d:f7:78:af:74:2f:e1:25:7a:9b:
                    a9:ab:38:cc:8a:08:69:c4:1a:6a:d1:87:9f:ef:58:
                    aa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5A:0F:E6:F2:B0:42:55:BC:92:41:2E:BA:04:6F:8F:30:02:6C:5D
            X509v3 Authority Key Identifier:
                keyid:03:EA:DE:63:CD:8A:F6:48:25:47:D4:64:E8:DB:BE:A8:04:0D:0D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFB4C0F7CCADD62E07ED7A054BF45AB8B38472AF4BA299DEE13AD4C5AE60FC46/0/03EADE63CD8AF6482547D464E8DBBEA8040D0D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03EADE63CD8AF6482547D464E8DBBEA8040D0D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFB4C0F7CCADD62E07ED7A054BF45AB8B38472AF4BA299DEE13AD4C5AE60FC46/0/34352e3137352e3231322e302f32322d3234203d3e20323637383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:80:16:e1:30:0b:4d:92:31:fb:5c:28:e7:06:c8:6c:93:d2:
         61:71:41:f1:b3:52:6f:26:be:11:b9:51:9a:bf:ed:00:cb:69:
         ef:c1:af:dd:66:26:62:cd:a0:4f:fb:cc:9b:1d:1a:94:5b:13:
         e1:3f:41:15:a9:f4:72:b7:79:13:05:03:e6:33:5b:3e:4c:d2:
         2f:5c:10:c7:14:09:2c:78:05:f8:d8:fb:2b:a9:8e:22:20:1c:
         40:8f:f9:6c:2e:3b:61:4b:fb:48:a8:f0:25:ae:87:05:0f:d5:
         75:e7:29:bc:9d:99:ef:2c:0c:d9:0c:61:10:7a:eb:4a:8f:df:
         15:3c:4c:e3:7c:97:d1:8b:15:3d:21:3f:94:d7:04:8d:21:0f:
         20:c6:7a:2d:8f:40:18:ef:4b:f2:03:40:a2:27:d6:5d:a8:96:
         c1:fd:7c:60:46:6a:cb:e1:ea:60:53:c5:fe:97:38:d3:99:81:
         94:4f:69:41:73:49:09:3b:a9:56:3b:88:51:dc:a5:82:b3:e4:
         24:a5:5a:bb:58:3a:91:e7:11:1d:10:02:ae:43:24:62:8a:a6:
         16:18:77:ff:90:53:a3:16:77:bc:f2:06:9e:4f:c6:5e:58:1f:
         75:51:f7:40:aa:89:89:da:c2:4e:53:37:13:46:ef:bf:a9:de:
         a9:91:eb:7f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUNbfz7zJ/LU4uHdvqgrNJG1aB13UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNFQURFNjNDRDhBRjY0ODI1NDdENDY0RThEQkJFQTgw
NDBEMEQ4ODAeFw0yNjA1MjUyMTM5MDVaFw0yNzA1MjQyMTQ0MDVaMDMxMTAvBgNV
BAMTKDA3NUEwRkU2RjJCMDQyNTVCQzkyNDEyRUJBMDQ2RjhGMzAwMjZDNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOTqff5Yp3hXlHxcKeLfoJHdcQ
I7XEr351SdR5kDwyPfUuJ19QloRLJlOeVtPhJ7sC13C0v4YFwIax8xoqKrwtly8B
v6SYqSS2GyjY9QYsAwS7GCWQgjuNheKIKcgRb97faUWchxURSzu2hzA8+W7nrVHu
7oWGV+IhtOGZOanfWqqmjzuJj6cOp4RSYbKpamjw6wgV+nz4umrqavCDHT8QMMAS
w2D4DRHJ2pyrzv7dk5WOt/5T6ki+9CH2MMyEyOeM1jDwOrTC64VcmiAXsRV6QMgR
VBqoXHKvFFppXopvktudzxz8Dfd4r3Qv4SV6m6mrOMyKCGnEGmrRh5/vWKo1AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUB1oP5vKwQlW8kkEuugRvjzACbF0wHwYDVR0j
BBgwFoAUA+reY82K9kglR9Rk6Nu+qAQNDYgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRkI0QzBGN0NDQURENjJFMDdFRDdBMDU0QkY0NUFCOEIz
ODQ3MkFGNEJBMjk5REVFMTNBRDRDNUFFNjBGQzQ2LzAvMDNFQURFNjNDRDhBRjY0
ODI1NDdENDY0RThEQkJFQTgwNDBEMEQ4OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wM0VBREU2M0NEOEFGNjQ4MjU0
N0Q0NjRFOERCQkVBODA0MEQwRDg4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkZCNEMwRjdDQ0FERDYyRTA3RUQ3QTA1NEJGNDVBQjhCMzg0NzJBRjRC
QTI5OURFRTEzQUQ0QzVBRTYwRkM0Ni8wLzM0MzUyZTMxMzczNTJlMzIzMTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3MzgzNDMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLa/U
MA0GCSqGSIb3DQEBCwUAA4IBAQCLgBbhMAtNkjH7XCjnBshsk9JhcUHxs1JvJr4R
uVGav+0Ay2nvwa/dZiZizaBP+8ybHRqUWxPhP0EVqfRyt3kTBQPmM1s+TNIvXBDH
FAkseAX42PsrqY4iIBxAj/lsLjthS/tIqPAlrocFD9V15ym8nZnvLAzZDGEQeutK
j98VPEzjfJfRixU9IT+U1wSNIQ8gxnotj0AY70vyA0CiJ9ZdqJbB/XxgRmrL4epg
U8X+lzjTmYGUT2lBc0kJO6lWO4hR3KWCs+QkpVq7WDqR5xEdEAKuQyRiiqYWGHf/
kFOjFne88gaeT8ZeWB91UfdAqomJ2sJOUzcTRu+/qd6pket/
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:20:04 2026 by rpki-client