Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/34352e3232392e3234372e302f32342d3234203d3e20333936393832.roa
File:                     34352e3232392e3234372e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          bc9P19iu68PjIkyaDynHB9XSSPcf4ViyWcmOZQbyWAs=
Subject key identifier:   03:36:23:DF:60:AE:01:29:77:64:B2:D5:D9:9D:C3:07:72:6B:2B:0E
Certificate issuer:       /CN=8EEE8A60C988421683DBC2FDDE169C9AA912EF90
Certificate serial:       08B20616B468F4ECDDE796D902C6F1BCD1D94480
Authority key identifier: 8E:EE:8A:60:C9:88:42:16:83:DB:C2:FD:DE:16:9C:9A:A9:12:EF:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/34352e3232392e3234372e302f32342d3234203d3e20333936393832.roa
Signing time:             Fri 05 Jun 2026 14:46:40 +0000
ROA not before:           Fri 05 Jun 2026 14:41:40 +0000
ROA not after:            Fri 04 Jun 2027 14:46:40 +0000
asID:                     396982
IP address blocks:        45.229.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b2:06:16:b4:68:f4:ec:dd:e7:96:d9:02:c6:f1:bc:d1:d9:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EEE8A60C988421683DBC2FDDE169C9AA912EF90
        Validity
            Not Before: Jun  5 14:41:40 2026 GMT
            Not After : Jun  4 14:46:40 2027 GMT
        Subject: CN=033623DF60AE01297764B2D5D99DC307726B2B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:23:67:db:96:e0:2f:46:97:e5:1b:12:0f:6f:
                    60:01:cf:a4:8b:53:13:89:f7:b7:8e:5d:1e:07:66:
                    c6:48:ff:d3:92:e0:09:26:a4:41:af:8d:d3:1a:42:
                    65:c6:10:07:48:d0:aa:9c:ec:59:36:7f:ec:fb:e6:
                    37:59:ad:16:6b:22:e5:18:18:ca:51:ca:be:37:28:
                    0f:ed:3e:d3:9b:05:91:59:a1:97:20:9d:a1:6d:83:
                    3a:d3:dd:ef:6a:b3:59:88:df:8f:e0:70:81:ce:cb:
                    dc:57:62:bb:d5:d7:b4:30:6b:4e:c4:b8:4f:7e:82:
                    be:92:e3:ad:70:b5:6d:66:0a:72:24:e0:51:18:73:
                    0e:d6:16:4f:ea:8f:ae:05:85:87:3f:31:99:ed:bd:
                    07:59:85:e5:84:e0:c6:c4:0f:96:a6:6b:49:68:31:
                    80:f7:f2:4c:63:5a:a1:53:81:91:ad:18:52:66:0b:
                    36:16:a7:39:f6:9b:19:d4:76:f4:52:c6:9c:df:83:
                    46:5b:e4:da:78:6d:e4:6f:90:74:bd:43:aa:1e:1e:
                    ba:88:1c:40:07:f6:df:2d:c0:b2:e3:17:dd:ec:e5:
                    44:73:0d:db:31:0d:6e:75:78:bf:71:af:fe:9e:91:
                    60:4a:2e:de:a8:42:7b:cf:c5:80:5c:54:eb:0c:07:
                    d1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:36:23:DF:60:AE:01:29:77:64:B2:D5:D9:9D:C3:07:72:6B:2B:0E
            X509v3 Authority Key Identifier:
                keyid:8E:EE:8A:60:C9:88:42:16:83:DB:C2:FD:DE:16:9C:9A:A9:12:EF:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/34352e3232392e3234372e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:d3:68:ed:91:5b:3f:55:12:7c:f9:c7:94:8d:1a:5e:5c:a8:
         67:5e:2a:ae:2a:ae:eb:b6:d2:45:3d:51:fc:28:a9:e6:05:89:
         f9:c8:bd:6e:fc:34:12:10:97:f3:30:c7:00:7e:04:f9:b2:d1:
         9e:55:a9:c1:dd:95:6e:9c:36:ec:e8:8d:b8:91:05:8e:6c:21:
         74:d7:ab:a0:2a:31:77:79:31:6c:d2:ac:07:fa:01:46:de:c9:
         ef:db:1e:bb:69:1b:d7:6f:b0:4c:22:cf:a3:5f:f9:40:a2:18:
         84:ab:8a:7e:f1:fc:d7:40:02:85:ad:3b:2f:65:8e:2b:4f:96:
         f3:04:38:14:64:b9:15:88:0a:36:56:9d:23:25:29:8a:38:88:
         86:e6:64:9c:ec:56:28:d2:95:09:c9:a4:4c:88:97:a5:6e:76:
         d7:53:23:37:f9:be:d2:2a:12:8d:c0:c1:08:56:0a:96:d3:c4:
         bd:a8:88:15:4b:2f:bc:79:38:2a:ad:b8:36:cc:fd:72:eb:c2:
         c1:64:ec:ae:28:be:7f:e6:54:af:bf:32:35:ff:b6:a5:10:9c:
         ac:eb:f4:91:2b:b7:11:15:92:89:dd:6d:ac:9f:f6:65:c4:80:
         6b:f2:2b:e1:df:fa:d9:d0:43:67:0e:c5:70:4f:53:2e:eb:f7:
         ab:ba:02:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:20:04 2026 by rpki-client