Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/34352e3138362e3133362e302f32322d3235203d3e20323639383133.roa
File:                     34352e3138362e3133362e302f32322d3235203d3e20323639383133.roa (raw, json)
Hash identifier:          zg4lDiuqrLlGkbt8rsfwuEQVjSxrKAp1U1Kluxrgri0=
Subject key identifier:   90:C3:0A:FB:E4:80:A1:8F:83:DC:1C:CB:7C:61:08:55:6D:8C:74:C7
Certificate issuer:       /CN=1543ECDEE164252425B06E8AA0858149FE72AFA3
Certificate serial:       46DAD4F0E1CCC9160CFDA058667A10EADE542980
Authority key identifier: 15:43:EC:DE:E1:64:25:24:25:B0:6E:8A:A0:85:81:49:FE:72:AF:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/34352e3138362e3133362e302f32322d3235203d3e20323639383133.roa
Signing time:             Thu 09 Apr 2026 18:38:14 +0000
ROA not before:           Thu 09 Apr 2026 18:33:14 +0000
ROA not after:            Thu 08 Apr 2027 18:38:14 +0000
asID:                     269813
IP address blocks:        45.186.136.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 15:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:da:d4:f0:e1:cc:c9:16:0c:fd:a0:58:66:7a:10:ea:de:54:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1543ECDEE164252425B06E8AA0858149FE72AFA3
        Validity
            Not Before: Apr  9 18:33:14 2026 GMT
            Not After : Apr  8 18:38:14 2027 GMT
        Subject: CN=90C30AFBE480A18F83DC1CCB7C6108556D8C74C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:58:53:9f:22:b0:af:33:f0:fb:ad:97:01:28:
                    61:3f:16:ff:84:8b:34:65:ca:1d:0e:e3:e8:1e:55:
                    48:6f:bd:29:ff:d9:54:ec:1a:49:b9:0a:20:0d:12:
                    d7:b1:ea:5b:0f:fa:63:12:48:2a:c5:e7:d4:84:56:
                    c5:8b:b7:02:22:03:e3:68:2b:be:17:ab:a3:70:15:
                    3b:0c:14:be:49:df:fc:d7:84:92:40:c0:30:83:c0:
                    e4:29:d1:65:76:7d:2b:24:6c:12:19:e9:c2:75:57:
                    63:af:8a:7e:ff:75:af:1c:30:3e:21:b6:ac:18:8a:
                    03:a7:27:f7:6e:47:75:5c:71:ea:fc:4e:8a:7e:df:
                    7a:32:8f:17:5f:a7:de:ae:3b:78:05:98:59:eb:5f:
                    04:df:7c:7a:f9:cb:d6:03:af:34:90:7b:92:b1:84:
                    aa:c2:e1:57:a2:72:18:88:c2:0d:53:c2:c5:12:99:
                    97:58:fc:7b:62:39:4f:f9:9d:22:f8:60:db:fc:48:
                    8a:8c:a8:d6:c1:a5:b8:59:95:6c:c2:a1:e5:74:df:
                    f3:98:32:93:61:1b:76:ce:8a:ac:1c:04:8d:e5:1a:
                    52:df:18:01:b6:01:d8:4c:39:a4:82:6a:49:07:2c:
                    6d:d9:b4:a7:cd:0e:09:bd:f8:2c:45:17:d0:4a:c9:
                    77:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C3:0A:FB:E4:80:A1:8F:83:DC:1C:CB:7C:61:08:55:6D:8C:74:C7
            X509v3 Authority Key Identifier:
                keyid:15:43:EC:DE:E1:64:25:24:25:B0:6E:8A:A0:85:81:49:FE:72:AF:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/34352e3138362e3133362e302f32322d3235203d3e20323639383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:67:aa:6c:58:25:ea:d3:85:7c:05:64:bb:4d:93:01:41:f2:
         05:28:b5:72:ba:99:b7:7c:9a:7a:30:88:cd:7d:15:7e:d4:73:
         43:45:bc:60:7a:21:0b:2e:28:cc:7c:40:6b:41:f0:ae:8e:df:
         ec:7c:5d:55:a6:ce:10:6d:07:62:8e:26:36:7a:8a:10:77:37:
         b6:98:8f:dd:04:42:10:5d:b6:3f:01:62:0c:e8:3e:96:14:e2:
         0f:8c:d1:6c:31:3e:0b:2f:e9:74:d3:07:68:3d:1a:86:5b:36:
         3c:09:30:66:95:50:25:13:3f:28:3d:ae:d1:b4:a6:3b:bb:f6:
         9b:55:f4:93:d4:75:23:9d:52:c1:70:de:6f:99:cf:f9:fa:68:
         15:80:4a:cd:27:49:68:a7:bd:80:ba:ca:24:7f:6e:e9:44:b0:
         68:0b:c9:c5:3f:6b:6f:e0:87:f1:c7:14:bf:0f:eb:d4:c4:98:
         c9:76:51:ff:43:da:7a:dd:70:5f:91:ff:34:b6:a9:c1:fd:82:
         e0:03:4b:c8:13:51:e2:66:e6:9a:af:51:fc:6c:ea:f3:b9:54:
         56:44:aa:ea:3a:cc:f5:0d:cc:33:01:7a:a7:40:10:81:96:b9:
         07:24:28:a6:7a:9e:41:a9:1e:99:61:69:31:7d:e8:4d:6c:bd:
         88:2f:3c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:53:21 2026 by rpki-client