Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/34352e3232372e3136332e302f32342d3234203d3e20323636363630.roa
File:                     34352e3232372e3136332e302f32342d3234203d3e20323636363630.roa (raw, json)
Hash identifier:          +hMUNgWVig2Nm621rdPQA2JZTDu8q3MmtPCdc8mzMVs=
Subject key identifier:   28:2C:3D:53:07:1B:B2:E1:E4:F0:C7:E5:F4:7E:FA:FF:31:5F:CE:24
Certificate issuer:       /CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
Certificate serial:       2EFDB76E9D8B7667FFB12BD82197E31529D7021F
Authority key identifier: 67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/34352e3232372e3136332e302f32342d3234203d3e20323636363630.roa
Signing time:             Tue 29 Sep 2026 16:15:00 +0000
ROA not before:           Tue 29 Sep 2026 16:10:00 +0000
ROA not after:            Tue 28 Sep 2027 16:15:00 +0000
asID:                     266660
IP address blocks:        45.227.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:fd:b7:6e:9d:8b:76:67:ff:b1:2b:d8:21:97:e3:15:29:d7:02:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
        Validity
            Not Before: Sep 29 16:10:00 2026 GMT
            Not After : Sep 28 16:15:00 2027 GMT
        Subject: CN=282C3D53071BB2E1E4F0C7E5F47EFAFF315FCE24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4d:b2:66:2f:e5:e0:4e:1f:1b:ec:59:7c:18:
                    5e:51:d0:fc:8b:7e:be:d2:ed:c5:4b:eb:e4:d9:40:
                    2a:32:a2:25:d7:80:78:17:8e:e0:87:9d:4c:07:98:
                    d8:cc:92:7b:f3:f2:e3:07:45:8f:7c:a1:a2:aa:c5:
                    05:eb:75:52:29:be:13:ce:ba:d5:87:7f:e8:c2:f0:
                    be:6c:8d:3e:15:3f:c8:fe:c3:f7:f8:b2:53:4c:55:
                    86:c3:a3:0a:74:84:28:5a:ec:28:29:76:ff:8a:16:
                    1e:3e:40:f3:8e:42:45:19:51:a1:0c:f3:78:f2:2d:
                    73:bc:7d:1c:10:e4:ac:5f:fe:ac:80:63:85:a5:05:
                    f5:b6:de:1f:24:69:fd:ea:6b:f3:c4:43:06:30:15:
                    f2:f3:d9:b8:ab:c7:12:e6:33:de:75:43:c5:4a:20:
                    a4:1a:6e:f3:6c:18:a0:9d:36:1d:94:a0:cf:98:00:
                    6e:48:21:b3:ee:2b:20:60:bf:3a:61:ce:81:0f:fa:
                    0f:23:cf:54:7c:fd:2b:0b:1a:bf:95:fc:2c:fb:48:
                    0b:ee:d5:df:a8:5f:6f:6e:46:98:0b:f7:a8:f5:0e:
                    09:56:9a:72:6d:c4:10:1c:67:01:41:32:85:ff:14:
                    a0:00:79:73:c8:51:ff:31:b6:8d:f5:be:54:ba:7c:
                    ce:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2C:3D:53:07:1B:B2:E1:E4:F0:C7:E5:F4:7E:FA:FF:31:5F:CE:24
            X509v3 Authority Key Identifier:
                keyid:67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/34352e3232372e3136332e302f32342d3234203d3e20323636363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:96:d0:75:52:1b:5f:7a:fb:81:a3:94:c9:c1:ef:bf:f1:84:
         7c:ff:93:e1:43:0a:ef:17:59:44:db:48:ca:85:c9:76:36:75:
         9a:7f:ae:b0:ed:dc:7b:51:48:a0:7e:39:1e:7e:0a:9c:e8:90:
         c9:8a:02:8a:3d:44:a1:1c:a5:bf:ce:5e:13:ef:96:56:0f:de:
         3b:dc:7a:32:00:f8:2f:bd:c9:90:95:71:de:a1:6e:e8:1d:9c:
         b5:c6:0b:de:c2:1c:fc:a4:07:3d:29:aa:da:6d:b8:f6:09:6c:
         a1:fa:1b:4d:4b:b0:71:eb:6a:7f:66:77:e2:55:89:f4:bb:48:
         ad:85:2e:64:33:62:a3:6c:e7:95:04:0e:3d:ae:00:0b:57:16:
         49:0e:6c:28:3e:a7:b0:63:4e:3e:0c:98:25:01:c0:f5:06:29:
         eb:df:9c:80:63:6d:69:67:6c:c9:40:e1:7a:31:7f:72:ba:81:
         5d:ae:a6:74:ce:dd:88:2a:c0:b3:74:5b:6c:90:34:63:0c:4c:
         ae:67:6f:6a:af:b8:7d:3d:47:df:68:92:c6:27:46:02:00:7f:
         a8:56:27:19:d6:be:14:af:2d:a9:44:3e:4a:68:30:d5:6b:1d:
         b0:71:6e:58:e1:83:df:5a:3e:9e:c1:2c:9f:ea:be:1e:51:95:
         f0:57:ff:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 01:21:04 2026 by rpki-client