Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/34352e3136332e33302e302f32342d3234203d3e20323637383431.roa
File:                     34352e3136332e33302e302f32342d3234203d3e20323637383431.roa (raw, json)
Hash identifier:          Y4GNA0LCFgL3Vy1HfoJQP6drTTOc3CnL3Y1oH8eQJJw=
Subject key identifier:   F7:70:DF:22:52:91:EB:A7:EE:78:BC:23:F8:BB:9E:22:9B:9B:F5:9A
Certificate issuer:       /CN=B83212ED5241F8A76D1955EDB09C991FF777815E
Certificate serial:       6D3DD393E6F25C3357ED41FE8C8D96F75F46E291
Authority key identifier: B8:32:12:ED:52:41:F8:A7:6D:19:55:ED:B0:9C:99:1F:F7:77:81:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B83212ED5241F8A76D1955EDB09C991FF777815E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/34352e3136332e33302e302f32342d3234203d3e20323637383431.roa
Signing time:             Tue 06 Jan 2026 20:48:29 +0000
ROA not before:           Tue 06 Jan 2026 20:43:29 +0000
ROA not after:            Tue 05 Jan 2027 20:48:29 +0000
asID:                     267841
IP address blocks:        45.163.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/B83212ED5241F8A76D1955EDB09C991FF777815E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/B83212ED5241F8A76D1955EDB09C991FF777815E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B83212ED5241F8A76D1955EDB09C991FF777815E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:3d:d3:93:e6:f2:5c:33:57:ed:41:fe:8c:8d:96:f7:5f:46:e2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B83212ED5241F8A76D1955EDB09C991FF777815E
        Validity
            Not Before: Jan  6 20:43:29 2026 GMT
            Not After : Jan  5 20:48:29 2027 GMT
        Subject: CN=F770DF225291EBA7EE78BC23F8BB9E229B9BF59A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e4:76:87:81:4a:52:7e:7e:01:b7:98:08:37:
                    e7:49:26:60:0e:9b:c3:d1:46:75:d4:91:7b:55:24:
                    a8:30:53:41:14:f5:c5:e5:c1:37:aa:da:22:a6:e4:
                    63:4d:19:b0:a2:a6:a9:22:b8:48:cd:08:6e:d2:ce:
                    09:a5:31:a9:6b:e0:6c:2d:fc:a9:a5:fe:80:74:85:
                    98:72:71:2e:11:0d:97:93:f5:1b:27:c3:7b:c5:3a:
                    ed:b9:51:f8:ea:81:98:f6:45:7d:7f:39:ac:62:11:
                    89:bb:24:68:7d:33:1d:a8:be:8b:67:31:1a:85:d7:
                    d3:2f:cc:f4:e2:52:66:fd:7f:47:0d:43:27:ed:8b:
                    0b:9b:24:c1:30:12:55:7c:aa:b8:3c:6d:78:18:61:
                    85:f5:96:62:6a:28:31:a7:53:bb:47:1d:a9:6e:34:
                    5a:3b:6b:82:8d:ec:34:79:b0:87:38:04:ff:71:fe:
                    07:09:5d:85:4f:a1:63:95:88:2c:94:4c:63:51:ae:
                    79:0d:65:5a:8d:18:f1:c0:24:54:35:12:cc:21:c8:
                    c9:1b:ff:75:45:a0:b5:b3:cd:c9:7f:46:9f:18:87:
                    d1:7c:8c:6d:4a:41:fb:f7:5a:90:70:8d:c8:8d:40:
                    6a:71:9b:df:28:cb:e5:3d:a2:58:f8:cf:10:03:66:
                    79:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:70:DF:22:52:91:EB:A7:EE:78:BC:23:F8:BB:9E:22:9B:9B:F5:9A
            X509v3 Authority Key Identifier:
                keyid:B8:32:12:ED:52:41:F8:A7:6D:19:55:ED:B0:9C:99:1F:F7:77:81:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/B83212ED5241F8A76D1955EDB09C991FF777815E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B83212ED5241F8A76D1955EDB09C991FF777815E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/34352e3136332e33302e302f32342d3234203d3e20323637383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:10:29:b0:3e:3c:00:85:48:86:18:0b:2b:43:11:54:5b:73:
         a7:13:37:fb:4b:97:3d:56:d2:69:54:3c:db:ad:a3:f9:02:6a:
         cd:71:18:b7:bc:63:6f:46:a0:9e:d6:74:b2:87:14:9d:3a:3d:
         f3:dd:d3:c7:e7:7e:90:bf:14:f0:43:40:0d:bb:68:6b:ae:5f:
         1f:a2:c7:1d:e3:2a:05:41:45:d2:63:48:77:f5:24:f7:67:cd:
         8b:02:6f:cf:db:07:80:28:f0:5c:b1:29:99:83:2d:e9:c8:28:
         ba:27:5d:54:c0:13:7f:20:1f:e7:1c:c7:6e:12:e4:b8:19:4f:
         52:91:3c:c2:fe:4c:e8:d2:78:25:82:a2:1d:ca:7c:c3:3d:cd:
         cd:bb:d6:b2:3b:59:af:51:18:c9:c7:5b:88:2b:76:fa:06:82:
         50:f4:60:98:1c:5a:87:e0:57:61:f3:51:fd:35:40:92:84:e5:
         d9:13:4a:4a:7a:4f:ae:67:d7:24:87:96:f8:b8:c3:c6:3f:3e:
         6f:d3:10:2f:ab:31:ec:49:09:24:7a:a8:e0:1e:55:22:9c:ee:
         1f:0b:10:b3:9e:5f:78:89:1c:dd:c7:a7:ed:e4:b9:e9:f0:27:
         46:a9:c2:06:a8:0f:9f:18:f8:8e:b9:e4:5a:3f:d1:f6:8e:58:
         c6:63:f2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:10:55 2026 by rpki-client