Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/34352e3138352e3234372e302f32342d3234203d3e20323635363032.roa
File:                     34352e3138352e3234372e302f32342d3234203d3e20323635363032.roa (raw, json)
Hash identifier:          MR2a43OhBl3ZD26GZrESQa/WdxACX56ufugSTKiUHsE=
Subject key identifier:   CC:B1:29:B1:68:4D:D7:5F:6E:F8:06:B1:61:FB:0D:E2:39:5A:1B:17
Certificate issuer:       /CN=88F38689307EA2905E98E7E6F6C44D7E6D8E1C35
Certificate serial:       53CA8129E7A51B643D5FA0A6594BC0ED0D8378DF
Authority key identifier: 88:F3:86:89:30:7E:A2:90:5E:98:E7:E6:F6:C4:4D:7E:6D:8E:1C:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/34352e3138352e3234372e302f32342d3234203d3e20323635363032.roa
Signing time:             Wed 15 Apr 2026 02:55:00 +0000
ROA not before:           Wed 15 Apr 2026 02:50:00 +0000
ROA not after:            Wed 14 Apr 2027 02:55:00 +0000
asID:                     265602
IP address blocks:        45.185.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 23:44:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ca:81:29:e7:a5:1b:64:3d:5f:a0:a6:59:4b:c0:ed:0d:83:78:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88F38689307EA2905E98E7E6F6C44D7E6D8E1C35
        Validity
            Not Before: Apr 15 02:50:00 2026 GMT
            Not After : Apr 14 02:55:00 2027 GMT
        Subject: CN=CCB129B1684DD75F6EF806B161FB0DE2395A1B17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2e:5d:b8:68:a9:45:6d:35:21:a3:8c:9a:b2:
                    35:9e:78:7f:44:94:c1:e8:7d:a7:3c:02:59:6d:70:
                    cd:db:f2:52:22:a8:cf:17:16:92:e7:3c:9c:7d:5a:
                    4e:4a:7f:1c:dc:ca:94:9a:e3:cc:ce:93:44:17:26:
                    df:6e:cb:e9:33:41:d9:09:bf:5c:85:5c:dd:d0:d7:
                    12:57:58:a1:3c:be:1e:45:e8:14:09:99:0a:41:fb:
                    fb:ed:25:37:d2:44:13:4c:13:03:f6:18:11:4a:4a:
                    47:34:fc:70:e9:d4:0a:c5:40:e5:8c:6c:67:68:b6:
                    ec:3c:d4:1f:3b:86:f2:10:20:36:03:5a:17:fa:f7:
                    35:5d:a0:b0:45:f7:21:12:05:f7:c4:11:19:6d:d4:
                    e4:30:55:b7:23:ff:dd:fd:b9:9b:f6:87:ff:a8:8d:
                    4d:22:8e:c9:bc:a0:91:12:b3:8f:e2:c8:24:b0:cc:
                    4c:ba:df:57:7e:e8:49:0a:48:03:98:2e:83:18:1f:
                    92:10:d1:40:3c:a0:b0:ce:a5:75:87:1b:ae:e6:2e:
                    5d:87:49:7f:8d:29:9a:f2:2a:3d:1b:59:29:e9:b4:
                    18:60:fd:f7:42:fa:c5:cc:69:ac:a5:14:42:14:8d:
                    a3:4c:04:35:68:28:21:bf:d0:82:5d:c5:0c:6e:5a:
                    4d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B1:29:B1:68:4D:D7:5F:6E:F8:06:B1:61:FB:0D:E2:39:5A:1B:17
            X509v3 Authority Key Identifier:
                keyid:88:F3:86:89:30:7E:A2:90:5E:98:E7:E6:F6:C4:4D:7E:6D:8E:1C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/34352e3138352e3234372e302f32342d3234203d3e20323635363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:1a:4f:68:6c:82:8b:d7:67:d2:0e:b4:bf:34:94:50:1c:80:
         c6:ae:03:36:6b:3b:0c:6d:07:2b:51:d4:e3:11:35:91:3d:68:
         44:59:7b:f0:69:bc:8c:51:a3:aa:d5:e3:0b:b7:db:72:4c:e9:
         1f:e2:34:45:68:ce:3e:25:27:eb:c8:62:19:5a:2b:39:75:47:
         5e:a4:a8:db:03:dc:24:b6:83:a3:12:75:26:90:e3:bf:ee:b9:
         69:d3:45:15:19:11:b3:02:4a:59:78:e2:71:89:07:52:06:89:
         3e:35:d3:5e:c4:04:e1:1c:4f:9f:be:58:a1:ec:d1:59:f4:eb:
         41:62:4a:ab:b8:62:eb:ca:0b:f3:98:8b:7e:d8:fd:93:a2:14:
         20:76:f7:6d:fa:b4:43:e0:ad:a8:e6:51:c2:c7:8c:da:91:bb:
         9e:7f:4e:88:f1:ad:10:b2:25:03:5d:45:05:66:68:31:ce:1b:
         8a:2f:ac:d4:19:c6:84:8f:5b:e9:6f:24:5f:cf:fa:10:11:4d:
         a8:94:27:17:ed:8a:b6:2f:97:50:bd:1b:bf:17:2a:f7:a2:79:
         80:a8:5c:d3:26:e3:4c:85:59:b1:c9:4b:27:9a:8f:e1:13:f9:
         0c:eb:f3:69:05:4a:fd:b9:cd:89:0f:f5:5b:1b:0e:0b:ef:0f:
         6a:8f:53:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:30:55 2026 by rpki-client