Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138302e302f32322d3232203d3e20323636373634.roa
File:                     34352e3233342e3138302e302f32322d3232203d3e20323636373634.roa (raw, json)
Hash identifier:          xN/k7fCf839KFRHla4K1lgiNrP3FD/LMbQNCQbZIkKA=
Subject key identifier:   3E:3E:FC:99:F9:53:BF:1E:E0:30:92:F9:4A:E1:ED:85:D1:AF:31:24
Certificate issuer:       /CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
Certificate serial:       209B9BB3A203DAE0E1E6A66106E973CDFC62D6BA
Authority key identifier: CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138302e302f32322d3232203d3e20323636373634.roa
Signing time:             Fri 27 Mar 2026 00:36:12 +0000
ROA not before:           Fri 27 Mar 2026 00:31:12 +0000
ROA not after:            Fri 26 Mar 2027 00:36:12 +0000
asID:                     266764
IP address blocks:        45.234.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 05:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9b:9b:b3:a2:03:da:e0:e1:e6:a6:61:06:e9:73:cd:fc:62:d6:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
        Validity
            Not Before: Mar 27 00:31:12 2026 GMT
            Not After : Mar 26 00:36:12 2027 GMT
        Subject: CN=3E3EFC99F953BF1EE03092F94AE1ED85D1AF3124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7d:2d:4c:47:a9:72:3c:48:f2:04:09:bf:95:
                    36:b1:96:c5:32:f1:4a:42:c8:90:2e:3c:5a:07:e6:
                    ee:4c:ee:28:79:e5:52:ac:67:ca:fc:1a:7a:fe:db:
                    85:7d:e5:4c:91:0d:43:7b:f8:d1:81:dc:3d:fb:7e:
                    31:6d:03:0c:1e:fb:63:df:1d:b8:86:29:28:a8:50:
                    a1:c8:f4:cb:4b:20:83:52:ba:fc:08:c5:9e:b7:fa:
                    58:03:a3:1d:53:85:ad:f4:a4:75:cf:e2:ce:6d:5f:
                    a9:07:f5:69:9c:5b:de:66:46:ba:3a:6f:49:27:5c:
                    ba:7f:e9:df:0d:01:3d:4b:84:d3:d1:05:0a:05:72:
                    e5:ed:c0:2f:f9:b0:9d:77:bf:0d:92:d6:df:29:72:
                    f9:d8:a0:9e:ac:70:9e:cc:19:94:a8:3d:04:f1:55:
                    cf:e3:ab:bc:f6:f6:6e:ce:43:39:69:9a:07:05:dc:
                    ff:70:0b:63:2a:46:3b:48:f6:4c:7c:0f:19:ed:b4:
                    ba:66:f4:94:95:2b:52:d3:77:e6:7e:25:a6:11:d9:
                    fb:83:ac:b9:1a:23:51:b6:92:c1:b9:17:2b:c9:4f:
                    1f:13:71:8b:a7:4c:50:47:97:4f:b9:17:67:71:ef:
                    37:98:f7:3b:d2:13:ca:d8:ac:ac:de:a2:86:94:cb:
                    2f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3E:FC:99:F9:53:BF:1E:E0:30:92:F9:4A:E1:ED:85:D1:AF:31:24
            X509v3 Authority Key Identifier:
                keyid:CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138302e302f32322d3232203d3e20323636373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:2e:c0:b0:68:ef:06:26:03:30:9d:fc:da:26:9d:80:d4:b3:
         01:d5:90:3e:9a:2b:1e:37:8f:b2:93:b0:a8:4d:c9:63:85:66:
         b8:d1:28:e6:2b:c3:a6:7b:9b:d5:1a:2c:7b:d0:54:93:d7:ad:
         24:f6:80:fe:cd:ff:e2:8e:40:dc:a0:39:e2:f8:cb:c2:a0:87:
         cf:d2:96:de:eb:4b:69:1e:60:a1:c6:3d:8a:11:06:85:10:4c:
         c7:85:e3:1f:80:c1:47:2a:c8:14:d8:6b:65:48:63:be:7f:e3:
         bb:83:17:5c:c7:cd:2a:f8:1c:7a:76:1f:3d:49:bc:d7:a6:22:
         f4:37:c4:d6:29:da:fa:c0:95:cb:98:b8:4c:4b:ba:4b:01:db:
         f0:3f:94:3b:78:e8:81:ad:d2:d2:ee:bc:21:92:b3:f2:58:5e:
         90:4c:60:1a:a7:25:22:53:ff:dc:31:7f:8a:ef:c7:77:d2:31:
         4f:56:f5:a3:4f:33:09:47:9a:42:93:fd:e0:fc:be:2f:26:cb:
         60:d7:0d:85:4d:88:17:a3:62:4e:c8:b8:35:22:a7:e0:17:72:
         ef:07:32:8d:c2:ac:1c:3d:e5:bc:c4:76:aa:f3:6b:27:60:5c:
         93:c6:76:94:18:0c:0d:0f:2e:d8:c0:2a:7a:69:07:32:76:5e:
         bb:20:38:66
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIJubs6ID2uDh5qZhBulzzfxi1rowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E2RkE4NzZFQzNGQkI3QjA0MzEwQUJDNEIzMTIzQUZC
RTg4QTIwQzAeFw0yNjAzMjcwMDMxMTJaFw0yNzAzMjYwMDM2MTJaMDMxMTAvBgNV
BAMTKDNFM0VGQzk5Rjk1M0JGMUVFMDMwOTJGOTRBRTFFRDg1RDFBRjMxMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0fS1MR6lyPEjyBAm/lTaxlsUy
8UpCyJAuPFoH5u5M7ih55VKsZ8r8Gnr+24V95UyRDUN7+NGB3D37fjFtAwwe+2Pf
HbiGKSioUKHI9MtLIINSuvwIxZ63+lgDox1Tha30pHXP4s5tX6kH9WmcW95mRro6
b0knXLp/6d8NAT1LhNPRBQoFcuXtwC/5sJ13vw2S1t8pcvnYoJ6scJ7MGZSoPQTx
Vc/jq7z29m7OQzlpmgcF3P9wC2MqRjtI9kx8DxnttLpm9JSVK1LTd+Z+JaYR2fuD
rLkaI1G2ksG5FyvJTx8TcYunTFBHl0+5F2dx7zeY9zvSE8rYrKzeooaUyy8RAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUPj78mflTvx7gMJL5SuHthdGvMSQwHwYDVR0j
BBgwFoAUym+oduw/u3sEMQq8SzEjr76IogwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQ0ZGMjc3NjlBNDM5NjA1REEyN0Q3Mjk1QjJBODY1MDRC
NUI2RjZBQjRBQjhDNERENDQwNTJERTA3ODAxMzcxLzAvQ0E2RkE4NzZFQzNGQkI3
QjA0MzEwQUJDNEIzMTIzQUZCRTg4QTIwQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTZGQTg3NkVDM0ZCQjdCMDQz
MTBBQkM0QjMxMjNBRkJFODhBMjBDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRENGRjI3NzY5QTQzOTYwNURBMjdENzI5NUIyQTg2NTA0QjVCNkY2QUI0
QUI4QzRERDQ0MDUyREUwNzgwMTM3MS8wLzM0MzUyZTMyMzMzNDJlMzEzODMwMmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM2MzczNjM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLeq0
MA0GCSqGSIb3DQEBCwUAA4IBAQAPLsCwaO8GJgMwnfzaJp2A1LMB1ZA+miseN4+y
k7CoTcljhWa40SjmK8Ome5vVGix70FST160k9oD+zf/ijkDcoDni+MvCoIfP0pbe
60tpHmChxj2KEQaFEEzHheMfgMFHKsgU2GtlSGO+f+O7gxdcx80q+Bx6dh89SbzX
piL0N8TWKdr6wJXLmLhMS7pLAdvwP5Q7eOiBrdLS7rwhkrPyWF6QTGAapyUiU//c
MX+K78d30jFPVvWjTzMJR5pCk/3g/L4vJstg1w2FTYgXo2JOyLg1IqfgF3LvBzKN
wqwcPeW8xHaq82snYFyTxnaUGAwNDy7YwCp6aQcydl67IDhm
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:09:05 2026 by rpki-client