Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32332d3233203d3e20323636373931.roa
File:                     34352e3233362e33322e302f32332d3233203d3e20323636373931.roa (raw, json)
Hash identifier:          KGbdFyIj1pw+TdFHnTu8/VVmxO+LprdSbINvAXeWSMM=
Subject key identifier:   70:1D:A4:73:AA:83:98:91:BA:EF:74:79:4D:05:4B:1A:BF:5A:C8:55
Certificate issuer:       /CN=F381BE6CF64000AB9FF5B43AFF78F2623199F153
Certificate serial:       296B8A14B68AC57526D42EFE1E4BCB76460977FF
Authority key identifier: F3:81:BE:6C:F6:40:00:AB:9F:F5:B4:3A:FF:78:F2:62:31:99:F1:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32332d3233203d3e20323636373931.roa
Signing time:             Fri 27 Feb 2026 17:32:11 +0000
ROA not before:           Fri 27 Feb 2026 17:27:11 +0000
ROA not after:            Fri 26 Feb 2027 17:32:11 +0000
asID:                     266791
IP address blocks:        45.236.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 09:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6b:8a:14:b6:8a:c5:75:26:d4:2e:fe:1e:4b:cb:76:46:09:77:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F381BE6CF64000AB9FF5B43AFF78F2623199F153
        Validity
            Not Before: Feb 27 17:27:11 2026 GMT
            Not After : Feb 26 17:32:11 2027 GMT
        Subject: CN=701DA473AA839891BAEF74794D054B1ABF5AC855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:18:01:79:e7:aa:f6:76:0a:b4:22:a7:1e:32:
                    cc:1a:af:14:16:4e:5f:df:07:8f:fb:e2:19:ef:30:
                    b4:76:d3:38:a4:70:34:7e:d5:d4:c9:f7:aa:78:fd:
                    3d:b6:18:a4:12:7b:6d:7e:56:4a:98:2c:92:04:3b:
                    e5:d5:78:5f:8a:9f:81:87:28:26:2b:b1:7e:b4:78:
                    3b:4c:21:19:81:16:db:ab:30:a7:c1:99:fe:ef:13:
                    68:7d:5c:f6:3f:1d:25:d8:af:8c:3e:12:c0:9e:e0:
                    0b:70:fe:3d:94:5b:b3:bf:fe:2b:d5:08:93:db:57:
                    6c:a6:62:8b:ef:c3:68:72:bc:11:c7:41:40:c9:c2:
                    2b:51:9a:2a:22:da:6e:cb:bd:60:d3:8d:00:1c:cf:
                    5c:2a:01:e8:a6:e0:26:e6:87:d9:4a:72:92:f8:09:
                    d9:0c:6a:51:09:07:0e:6a:d8:fb:11:87:b2:52:40:
                    07:cf:9c:fa:73:09:70:f7:35:03:83:b0:0e:5c:0d:
                    a5:6c:10:01:6d:70:06:e5:8d:d1:6e:ac:f5:9b:93:
                    8f:51:a1:50:c8:7e:22:c6:90:c6:36:9e:98:06:8c:
                    d9:04:74:4b:90:8c:e3:78:b4:68:b0:63:f6:d9:d2:
                    1b:4c:9f:1e:8c:6e:de:45:84:8a:8c:da:33:45:9a:
                    69:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1D:A4:73:AA:83:98:91:BA:EF:74:79:4D:05:4B:1A:BF:5A:C8:55
            X509v3 Authority Key Identifier:
                keyid:F3:81:BE:6C:F6:40:00:AB:9F:F5:B4:3A:FF:78:F2:62:31:99:F1:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32332d3233203d3e20323636373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:fe:29:8c:82:c4:f5:3f:3c:04:d4:71:17:6d:9d:1e:74:56:
         4f:e3:74:ae:0b:d7:a0:a2:78:8a:3b:09:d4:fd:af:fb:2b:41:
         94:6b:b6:76:68:94:f6:f4:91:95:a0:39:07:d0:58:c1:25:90:
         1d:72:cd:bc:bb:8b:d2:74:cf:5f:9a:7b:64:d2:8a:b2:15:c1:
         04:18:2c:3c:40:f7:28:3a:14:b3:55:31:9c:3f:27:c1:e0:76:
         d0:f7:56:45:f0:37:ed:6c:62:8b:b5:ae:b0:c8:2a:a0:7b:0f:
         3d:27:02:f9:b6:02:04:89:7e:e1:b7:49:8b:d6:28:a5:c9:0c:
         22:fb:88:11:43:d4:36:84:ff:a3:77:59:30:15:08:4a:29:66:
         d9:e0:63:46:eb:8d:61:1a:aa:1c:4f:7e:d8:10:44:52:ac:1e:
         01:9c:39:ce:48:be:36:1c:4e:5c:5d:16:7f:7a:11:a5:4a:c7:
         cb:67:fb:0a:05:8f:72:bf:91:ed:99:82:43:1f:29:56:c2:dc:
         23:96:97:92:6f:18:a1:d9:34:d8:38:22:f4:8f:d5:d0:62:d1:
         78:5a:f0:3c:40:6a:e4:1b:57:79:a3:44:fc:5f:21:0e:9d:61:
         3a:aa:34:b8:c5:e5:7e:ff:50:44:10:6b:a0:5c:af:91:f2:91:
         cc:9b:b9:bf
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUKWuKFLaKxXUm1C7+HkvLdkYJd/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM4MUJFNkNGNjQwMDBBQjlGRjVCNDNBRkY3OEYyNjIz
MTk5RjE1MzAeFw0yNjAyMjcxNzI3MTFaFw0yNzAyMjYxNzMyMTFaMDMxMTAvBgNV
BAMTKDcwMURBNDczQUE4Mzk4OTFCQUVGNzQ3OTREMDU0QjFBQkY1QUM4NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNGAF556r2dgq0IqceMswarxQW
Tl/fB4/74hnvMLR20zikcDR+1dTJ96p4/T22GKQSe21+VkqYLJIEO+XVeF+Kn4GH
KCYrsX60eDtMIRmBFturMKfBmf7vE2h9XPY/HSXYr4w+EsCe4Atw/j2UW7O//ivV
CJPbV2ymYovvw2hyvBHHQUDJwitRmioi2m7LvWDTjQAcz1wqAeim4Cbmh9lKcpL4
CdkMalEJBw5q2PsRh7JSQAfPnPpzCXD3NQODsA5cDaVsEAFtcAbljdFurPWbk49R
oVDIfiLGkMY2npgGjNkEdEuQjON4tGiwY/bZ0htMnx6Mbt5FhIqM2jNFmmmJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUcB2kc6qDmJG673R5TQVLGr9ayFUwHwYDVR0j
BBgwFoAU84G+bPZAAKuf9bQ6/3jyYjGZ8VMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GREM2QUU0RjIwNDc0OTM3OTM0QUY1RUY0OEVGOEIyQzY0
NTU1RkZFRTk4NDg2NDVCMUI4NkI3NTc5MjhGNzM4LzAvRjM4MUJFNkNGNjQwMDBB
QjlGRjVCNDNBRkY3OEYyNjIzMTk5RjE1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMzgxQkU2Q0Y2NDAwMEFCOUZG
NUI0M0FGRjc4RjI2MjMxOTlGMTUzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkRDNkFFNEYyMDQ3NDkzNzkzNEFGNUVGNDhFRjhCMkM2NDU1NUZGRUU5
ODQ4NjQ1QjFCODZCNzU3OTI4RjczOC8wLzM0MzUyZTMyMzMzNjJlMzMzMjJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNjM3MzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS3sIDAN
BgkqhkiG9w0BAQsFAAOCAQEAj/4pjILE9T88BNRxF22dHnRWT+N0rgvXoKJ4ijsJ
1P2v+ytBlGu2dmiU9vSRlaA5B9BYwSWQHXLNvLuL0nTPX5p7ZNKKshXBBBgsPED3
KDoUs1UxnD8nweB20PdWRfA37Wxii7WusMgqoHsPPScC+bYCBIl+4bdJi9YopckM
IvuIEUPUNoT/o3dZMBUISilm2eBjRuuNYRqqHE9+2BBEUqweAZw5zki+NhxOXF0W
f3oRpUrHy2f7CgWPcr+R7ZmCQx8pVsLcI5aXkm8Yodk02Dgi9I/V0GLReFrwPEBq
5BtXeaNE/F8hDp1hOqo0uMXlfv9QRBBroFyvkfKRzJu5vw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:10:10 2026 by rpki-client