Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33332e302f32342d3234203d3e20323636373931.roa
File:                     34352e3233362e33332e302f32342d3234203d3e20323636373931.roa (raw, json)
Hash identifier:          qFa++sogyAHTg/17kPWfd0cr8SlMnNDj1d+x4oNU4m4=
Subject key identifier:   BE:E6:B6:8F:77:FA:00:F4:C7:16:FA:42:C5:76:60:42:FD:47:FC:7C
Certificate issuer:       /CN=F381BE6CF64000AB9FF5B43AFF78F2623199F153
Certificate serial:       580B4F1D4A03D216FC8809695C0F7FA38D178A3B
Authority key identifier: F3:81:BE:6C:F6:40:00:AB:9F:F5:B4:3A:FF:78:F2:62:31:99:F1:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33332e302f32342d3234203d3e20323636373931.roa
Signing time:             Fri 27 Feb 2026 17:32:11 +0000
ROA not before:           Fri 27 Feb 2026 17:27:11 +0000
ROA not after:            Fri 26 Feb 2027 17:32:11 +0000
asID:                     266791
IP address blocks:        45.236.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 09:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0b:4f:1d:4a:03:d2:16:fc:88:09:69:5c:0f:7f:a3:8d:17:8a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F381BE6CF64000AB9FF5B43AFF78F2623199F153
        Validity
            Not Before: Feb 27 17:27:11 2026 GMT
            Not After : Feb 26 17:32:11 2027 GMT
        Subject: CN=BEE6B68F77FA00F4C716FA42C5766042FD47FC7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ff:27:10:2e:cd:8b:b1:b1:52:b8:3c:3e:27:
                    c4:52:bf:3d:eb:74:1a:d1:b1:b4:7c:51:e6:56:f1:
                    03:75:01:b3:67:65:9a:67:78:22:5a:25:19:d6:95:
                    b3:2d:d8:10:17:f1:38:6c:69:b4:60:7e:2d:4d:c5:
                    6f:c4:80:1d:e8:6b:c7:14:c5:b9:9c:36:28:7f:86:
                    5a:be:f5:af:63:26:2a:6a:af:51:5c:6b:9e:68:a6:
                    f9:2f:f3:89:6c:d7:be:41:93:53:12:24:ed:c0:06:
                    49:3a:03:52:26:2c:88:67:33:01:07:3d:3e:4f:8c:
                    7e:b9:bb:8e:8f:22:8f:b0:83:74:c9:2c:0a:67:02:
                    6a:4c:7d:a0:aa:a3:35:bb:ac:3c:72:a0:2d:79:6b:
                    dc:92:38:67:f7:af:f1:98:97:5e:46:72:83:19:95:
                    b8:f3:f4:57:8e:88:21:dd:6d:ce:f4:0e:6a:72:93:
                    fa:14:0a:f1:5b:b4:e7:f6:6d:75:3b:35:31:43:b3:
                    af:82:fc:5d:bd:0a:7a:60:dc:35:b9:dd:1a:f4:56:
                    9a:71:2f:d8:40:3a:5a:df:bc:9d:ae:a4:53:7c:a6:
                    08:c2:52:49:9c:3b:53:7e:c9:b4:b8:29:81:be:8b:
                    25:08:1f:81:88:06:49:fe:d0:9c:35:91:a2:9d:b7:
                    d8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E6:B6:8F:77:FA:00:F4:C7:16:FA:42:C5:76:60:42:FD:47:FC:7C
            X509v3 Authority Key Identifier:
                keyid:F3:81:BE:6C:F6:40:00:AB:9F:F5:B4:3A:FF:78:F2:62:31:99:F1:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33332e302f32342d3234203d3e20323636373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:72:b7:a4:47:69:42:ff:45:3d:28:26:1f:af:ed:bc:d9:d6:
         f3:1d:57:1c:14:30:c2:b2:2a:6a:52:78:2d:d1:5f:fe:a4:98:
         ab:7d:4f:6e:a6:17:d4:05:63:ad:db:ee:8a:8a:fe:a1:ef:61:
         be:33:16:04:91:c4:59:d5:19:8d:69:15:27:fd:27:51:b6:a5:
         f9:2c:cc:82:e4:6f:0c:f1:6b:87:0f:2f:2b:af:bf:4b:03:ab:
         e5:77:59:d9:8e:dd:35:b9:c6:8a:6d:8c:08:70:ec:c3:39:9c:
         b6:79:7b:1f:ac:a4:14:14:5a:bb:28:a1:b1:b1:0b:16:ef:fe:
         57:ec:ba:0e:c2:b5:7d:87:79:c1:9c:29:a8:a6:2e:4b:6e:a2:
         7a:cc:e9:ce:df:ce:49:79:3a:1d:2b:1e:56:70:bf:44:bd:18:
         72:1d:a7:91:8c:2d:f3:9c:77:ed:46:29:fa:e0:8c:4f:b4:fe:
         a8:27:96:e6:63:77:dc:67:ff:e7:2e:15:3b:68:b2:e4:a2:90:
         12:06:91:e6:36:51:16:2e:85:2d:cd:79:62:ba:24:dc:d6:ae:
         d1:34:a4:a7:93:4d:ce:95:d3:b6:ab:ab:9d:52:fe:8f:38:d6:
         f9:e4:0e:1b:6d:e5:0f:4c:48:9b:3d:91:93:7f:8f:c6:6f:ea:
         9b:46:81:f6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWAtPHUoD0hb8iAlpXA9/o40XijswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM4MUJFNkNGNjQwMDBBQjlGRjVCNDNBRkY3OEYyNjIz
MTk5RjE1MzAeFw0yNjAyMjcxNzI3MTFaFw0yNzAyMjYxNzMyMTFaMDMxMTAvBgNV
BAMTKEJFRTZCNjhGNzdGQTAwRjRDNzE2RkE0MkM1NzY2MDQyRkQ0N0ZDN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF/ycQLs2LsbFSuDw+J8RSvz3r
dBrRsbR8UeZW8QN1AbNnZZpneCJaJRnWlbMt2BAX8ThsabRgfi1NxW/EgB3oa8cU
xbmcNih/hlq+9a9jJipqr1Fca55opvkv84ls175Bk1MSJO3ABkk6A1ImLIhnMwEH
PT5PjH65u46PIo+wg3TJLApnAmpMfaCqozW7rDxyoC15a9ySOGf3r/GYl15GcoMZ
lbjz9FeOiCHdbc70Dmpyk/oUCvFbtOf2bXU7NTFDs6+C/F29Cnpg3DW53Rr0Vppx
L9hAOlrfvJ2upFN8pgjCUkmcO1N+ybS4KYG+iyUIH4GIBkn+0Jw1kaKdt9jvAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUvua2j3f6APTHFvpCxXZgQv1H/HwwHwYDVR0j
BBgwFoAU84G+bPZAAKuf9bQ6/3jyYjGZ8VMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GREM2QUU0RjIwNDc0OTM3OTM0QUY1RUY0OEVGOEIyQzY0
NTU1RkZFRTk4NDg2NDVCMUI4NkI3NTc5MjhGNzM4LzAvRjM4MUJFNkNGNjQwMDBB
QjlGRjVCNDNBRkY3OEYyNjIzMTk5RjE1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMzgxQkU2Q0Y2NDAwMEFCOUZG
NUI0M0FGRjc4RjI2MjMxOTlGMTUzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkRDNkFFNEYyMDQ3NDkzNzkzNEFGNUVGNDhFRjhCMkM2NDU1NUZGRUU5
ODQ4NjQ1QjFCODZCNzU3OTI4RjczOC8wLzM0MzUyZTMyMzMzNjJlMzMzMzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM3MzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3sITAN
BgkqhkiG9w0BAQsFAAOCAQEAMHK3pEdpQv9FPSgmH6/tvNnW8x1XHBQwwrIqalJ4
LdFf/qSYq31PbqYX1AVjrdvuior+oe9hvjMWBJHEWdUZjWkVJ/0nUbal+SzMguRv
DPFrhw8vK6+/SwOr5XdZ2Y7dNbnGim2MCHDswzmctnl7H6ykFBRauyihsbELFu/+
V+y6DsK1fYd5wZwpqKYuS26ieszpzt/OSXk6HSseVnC/RL0Ych2nkYwt85x37UYp
+uCMT7T+qCeW5mN33Gf/5y4VO2iy5KKQEgaR5jZRFi6FLc15Yrok3Nau0TSkp5NN
zpXTtqurnVL+jzjW+eQOG23lD0xImz2Rk3+Pxm/qm0aB9g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:09:59 2026 by rpki-client