Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/34352e3135322e3231362e302f32322d3234203d3e20323632313939.roa
File:                     34352e3135322e3231362e302f32322d3234203d3e20323632313939.roa (raw, json)
Hash identifier:          SjETXs/S98aM+fSFA4jmMdYCwKpG+Vn/AwxGs1SGHRg=
Subject key identifier:   E8:9D:B2:1B:69:FF:8B:2E:65:68:12:1A:9F:BA:DB:93:20:B0:6C:B7
Certificate issuer:       /CN=B38BDE76E463241532282B264A16F479CD7D0224
Certificate serial:       6AC1D055C51F6FD49C2EEED11B4B9CFDDCE1BEEB
Authority key identifier: B3:8B:DE:76:E4:63:24:15:32:28:2B:26:4A:16:F4:79:CD:7D:02:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38BDE76E463241532282B264A16F479CD7D0224.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/34352e3135322e3231362e302f32322d3234203d3e20323632313939.roa
Signing time:             Tue 02 Jun 2026 15:45:06 +0000
ROA not before:           Tue 02 Jun 2026 15:40:06 +0000
ROA not after:            Tue 01 Jun 2027 15:45:06 +0000
asID:                     262199
IP address blocks:        45.152.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/B38BDE76E463241532282B264A16F479CD7D0224.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/B38BDE76E463241532282B264A16F479CD7D0224.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38BDE76E463241532282B264A16F479CD7D0224.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c1:d0:55:c5:1f:6f:d4:9c:2e:ee:d1:1b:4b:9c:fd:dc:e1:be:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B38BDE76E463241532282B264A16F479CD7D0224
        Validity
            Not Before: Jun  2 15:40:06 2026 GMT
            Not After : Jun  1 15:45:06 2027 GMT
        Subject: CN=E89DB21B69FF8B2E6568121A9FBADB9320B06CB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0d:f2:35:56:46:61:9f:92:40:93:0a:f7:73:
                    7b:0a:a0:bb:03:52:88:31:cf:20:5e:b1:ff:13:92:
                    ad:c4:90:32:74:c8:20:69:2e:9b:bd:5a:82:08:48:
                    9e:ee:d6:02:35:91:b3:41:31:8d:15:ec:ee:6a:33:
                    0c:c0:62:c6:9a:ba:e7:63:00:bf:a7:c0:4a:9c:20:
                    0c:0b:a0:8c:92:8e:97:73:e0:b9:6e:78:1f:38:d3:
                    b0:b3:86:3a:0f:64:4c:ac:70:4d:d5:7b:fe:d5:ec:
                    cf:ca:c1:5f:e1:a6:a3:f4:58:92:94:df:cc:94:08:
                    f9:c7:d3:43:70:ce:d5:48:77:f0:2f:07:35:87:52:
                    3c:28:fb:d4:25:05:ed:e7:81:a9:89:86:e3:18:2b:
                    3b:92:0a:dc:9a:98:33:5e:a6:a4:29:6c:70:3e:d3:
                    53:ce:e0:c5:83:5e:11:50:43:b0:ed:68:f6:86:01:
                    08:ce:48:9d:31:4f:3b:3c:ed:37:0d:c0:54:3e:ee:
                    53:cd:e0:a1:ce:cb:ef:b9:46:e3:b7:97:b7:c8:05:
                    ba:ad:31:2d:25:94:78:9d:b3:bd:43:46:12:02:3a:
                    f4:a1:1b:a0:c1:60:d0:a9:bb:9f:cd:a2:45:e3:3c:
                    dd:d8:02:e4:44:d3:ca:71:11:b6:72:e2:97:70:4c:
                    ef:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9D:B2:1B:69:FF:8B:2E:65:68:12:1A:9F:BA:DB:93:20:B0:6C:B7
            X509v3 Authority Key Identifier:
                keyid:B3:8B:DE:76:E4:63:24:15:32:28:2B:26:4A:16:F4:79:CD:7D:02:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/B38BDE76E463241532282B264A16F479CD7D0224.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38BDE76E463241532282B264A16F479CD7D0224.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/34352e3135322e3231362e302f32322d3234203d3e20323632313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:93:91:61:d3:99:c8:f8:fc:e0:00:d6:ee:da:af:93:2c:12:
         42:3b:b7:b2:c5:7b:98:80:52:8a:46:87:a0:de:d5:3f:3a:cb:
         e4:fd:25:96:93:c1:c7:ac:fa:b8:32:e8:02:20:17:65:d0:73:
         f7:06:25:b7:6e:63:05:24:4b:4f:27:7b:46:4e:fd:fb:b7:e3:
         db:fd:d7:d7:ca:d3:32:a8:00:1a:0b:f0:01:08:d4:1c:72:cc:
         7c:b8:0f:f7:ae:4d:0f:c0:4d:35:1e:18:b0:ed:44:71:d7:39:
         b6:e5:14:8f:7f:df:28:12:d8:8b:80:3e:b2:00:b2:ea:63:fe:
         ff:63:4e:8e:61:08:30:63:7c:7f:30:89:46:9d:19:bc:dc:60:
         04:5f:4b:6f:26:03:90:06:46:45:e6:86:5c:85:b4:60:fb:74:
         de:96:dd:32:0e:b4:e9:f7:4a:0b:5c:02:73:46:6f:77:b3:08:
         b7:b6:b8:05:5e:7d:48:6b:de:f8:44:c8:79:6a:5b:ac:6b:df:
         da:f5:f4:0a:2c:24:ce:a6:7d:b4:65:40:50:52:d7:d7:1f:11:
         b9:2c:3e:58:98:f7:81:fc:9f:8a:cc:fb:a3:ce:b7:0f:c6:92:
         0d:18:59:e4:1b:75:f2:8d:a3:b8:3d:a6:ca:7d:d4:b6:a9:20:
         eb:c6:3b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:16:29 2026 by rpki-client