Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17038716DFCD58CB212E0E99334F7A6E114F1102925EE915910543224C0531F7/0/34352e3233322e3134382e302f32322d3234203d3e20323636373537.roa
File:                     34352e3233322e3134382e302f32322d3234203d3e20323636373537.roa (raw, json)
Hash identifier:          79yq5qTtIu6nRStxlyRlleAkDp18L7obS9ZRY/0C9VI=
Subject key identifier:   B0:EF:68:77:2C:FB:73:DE:AA:B7:EB:43:4F:4A:CE:68:CD:67:E0:A9
Certificate issuer:       /CN=B5EB48ADB4190C70817FF889BBCFB6F550E6A106
Certificate serial:       6D71E95B9DF1D9690152034B22DE8D73133774F8
Authority key identifier: B5:EB:48:AD:B4:19:0C:70:81:7F:F8:89:BB:CF:B6:F5:50:E6:A1:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EB48ADB4190C70817FF889BBCFB6F550E6A106.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17038716DFCD58CB212E0E99334F7A6E114F1102925EE915910543224C0531F7/0/34352e3233322e3134382e302f32322d3234203d3e20323636373537.roa
Signing time:             Mon 18 May 2026 16:43:00 +0000
ROA not before:           Mon 18 May 2026 16:38:00 +0000
ROA not after:            Mon 17 May 2027 16:43:00 +0000
asID:                     266757
IP address blocks:        45.232.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17038716DFCD58CB212E0E99334F7A6E114F1102925EE915910543224C0531F7/0/B5EB48ADB4190C70817FF889BBCFB6F550E6A106.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17038716DFCD58CB212E0E99334F7A6E114F1102925EE915910543224C0531F7/0/B5EB48ADB4190C70817FF889BBCFB6F550E6A106.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EB48ADB4190C70817FF889BBCFB6F550E6A106.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 12:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:71:e9:5b:9d:f1:d9:69:01:52:03:4b:22:de:8d:73:13:37:74:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EB48ADB4190C70817FF889BBCFB6F550E6A106
        Validity
            Not Before: May 18 16:38:00 2026 GMT
            Not After : May 17 16:43:00 2027 GMT
        Subject: CN=B0EF68772CFB73DEAAB7EB434F4ACE68CD67E0A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5f:29:29:77:37:75:14:77:8d:48:c9:90:a8:
                    cf:ce:93:e1:d7:0c:94:29:8c:2b:1d:48:e7:8f:ce:
                    83:57:2f:a2:4f:0e:e2:70:e7:11:c5:3c:2e:a6:5c:
                    8d:e7:66:85:2c:53:72:c3:c7:90:5c:56:82:ab:48:
                    7d:b1:fb:69:ff:84:9f:d6:ed:c1:ed:2d:c7:32:64:
                    40:ce:ac:4e:7e:b4:3c:49:0d:1f:aa:2d:30:5f:b0:
                    f2:07:00:5f:ef:cf:15:a0:bf:63:ac:d5:f7:84:ed:
                    bc:04:99:ff:4b:6e:e5:23:f7:2c:25:ae:06:7e:92:
                    ab:39:da:5d:23:df:b7:ce:a9:d8:41:95:39:5a:0d:
                    da:36:34:9a:35:95:0e:6b:a4:94:c8:0a:c0:e0:e8:
                    46:42:2f:bd:9f:40:33:ef:8d:c6:ef:69:28:b1:82:
                    25:f6:83:b5:4d:dd:db:94:6b:cf:5e:e8:14:a2:48:
                    3a:b8:08:50:70:f9:b8:8c:78:0a:d5:ee:1f:97:19:
                    6f:37:d8:c0:1c:6e:82:66:24:88:1b:b7:ac:ea:c3:
                    46:42:4f:59:eb:e0:5e:1b:08:5e:21:a7:8e:0d:9f:
                    87:43:c3:b8:4f:e8:ab:40:9c:26:0a:29:0a:d8:59:
                    66:d9:ff:41:77:0c:69:91:8d:5c:53:9f:10:cc:eb:
                    03:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EF:68:77:2C:FB:73:DE:AA:B7:EB:43:4F:4A:CE:68:CD:67:E0:A9
            X509v3 Authority Key Identifier:
                keyid:B5:EB:48:AD:B4:19:0C:70:81:7F:F8:89:BB:CF:B6:F5:50:E6:A1:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17038716DFCD58CB212E0E99334F7A6E114F1102925EE915910543224C0531F7/0/B5EB48ADB4190C70817FF889BBCFB6F550E6A106.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EB48ADB4190C70817FF889BBCFB6F550E6A106.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17038716DFCD58CB212E0E99334F7A6E114F1102925EE915910543224C0531F7/0/34352e3233322e3134382e302f32322d3234203d3e20323636373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:87:95:9e:8c:d8:65:79:5b:fc:cb:4f:77:b5:95:32:5b:73:
         a6:db:0d:f5:3a:80:6b:fe:21:ac:22:1b:2c:71:7f:bf:a6:da:
         9a:b2:1f:34:79:09:a1:ec:13:43:1d:b2:52:9f:d0:09:a0:d5:
         86:65:7b:27:11:40:cd:5d:26:ff:8a:e8:04:f5:b2:9d:3b:fd:
         c9:e0:b9:3c:7f:d7:87:09:4a:d6:7f:d9:0b:00:01:29:db:28:
         d1:2c:8c:55:e5:25:1c:d9:57:12:14:3e:0b:ef:c9:5d:53:8f:
         53:65:55:42:29:bc:c3:65:03:70:1b:3d:10:79:8d:c9:39:e9:
         5e:c3:82:91:93:06:15:64:15:ea:15:19:a8:54:a3:12:7c:e5:
         cf:64:3b:dc:78:af:3d:f2:b9:c3:3a:ce:65:29:53:fb:4e:98:
         8a:94:3f:d9:d4:41:98:35:6f:7d:f1:90:dc:43:88:6b:bc:66:
         8d:9f:e9:7d:f8:83:01:b3:b1:0e:c4:d8:41:0d:90:3c:21:c1:
         58:c4:0f:f2:ee:12:0a:3c:36:14:79:76:c0:db:a4:a6:47:c1:
         a4:ac:f3:93:70:d3:09:2d:ce:f3:fa:24:bf:92:cd:6e:92:0b:
         a7:be:f9:62:e4:8b:f5:7f:d2:a6:46:fb:11:08:38:2f:02:41:
         c9:63:7c:3a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbXHpW53x2WkBUgNLIt6NcxM3dPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVFQjQ4QURCNDE5MEM3MDgxN0ZGODg5QkJDRkI2RjU1
MEU2QTEwNjAeFw0yNjA1MTgxNjM4MDBaFw0yNzA1MTcxNjQzMDBaMDMxMTAvBgNV
BAMTKEIwRUY2ODc3MkNGQjczREVBQUI3RUI0MzRGNEFDRTY4Q0Q2N0UwQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsXykpdzd1FHeNSMmQqM/Ok+HX
DJQpjCsdSOePzoNXL6JPDuJw5xHFPC6mXI3nZoUsU3LDx5BcVoKrSH2x+2n/hJ/W
7cHtLccyZEDOrE5+tDxJDR+qLTBfsPIHAF/vzxWgv2Os1feE7bwEmf9LbuUj9ywl
rgZ+kqs52l0j37fOqdhBlTlaDdo2NJo1lQ5rpJTICsDg6EZCL72fQDPvjcbvaSix
giX2g7VN3duUa89e6BSiSDq4CFBw+biMeArV7h+XGW832MAcboJmJIgbt6zqw0ZC
T1nr4F4bCF4hp44Nn4dDw7hP6KtAnCYKKQrYWWbZ/0F3DGmRjVxTnxDM6wNhAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUsO9odyz7c96qt+tDT0rOaM1n4KkwHwYDVR0j
BBgwFoAUtetIrbQZDHCBf/iJu8+29VDmoQYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNzAzODcxNkRGQ0Q1OENCMjEyRTBFOTkzMzRGN0E2RTEx
NEYxMTAyOTI1RUU5MTU5MTA1NDMyMjRDMDUzMUY3LzAvQjVFQjQ4QURCNDE5MEM3
MDgxN0ZGODg5QkJDRkI2RjU1MEU2QTEwNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUVCNDhBREI0MTkwQzcwODE3
RkY4ODlCQkNGQjZGNTUwRTZBMTA2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTcwMzg3MTZERkNENThDQjIxMkUwRTk5MzM0RjdBNkUxMTRGMTEwMjky
NUVFOTE1OTEwNTQzMjI0QzA1MzFGNy8wLzM0MzUyZTMyMzMzMjJlMzEzNDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2MzczNTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLeiU
MA0GCSqGSIb3DQEBCwUAA4IBAQCDh5WejNhleVv8y093tZUyW3Om2w31OoBr/iGs
IhsscX+/ptqash80eQmh7BNDHbJSn9AJoNWGZXsnEUDNXSb/iugE9bKdO/3J4Lk8
f9eHCUrWf9kLAAEp2yjRLIxV5SUc2VcSFD4L78ldU49TZVVCKbzDZQNwGz0QeY3J
Oelew4KRkwYVZBXqFRmoVKMSfOXPZDvceK898rnDOs5lKVP7TpiKlD/Z1EGYNW99
8ZDcQ4hrvGaNn+l9+IMBs7EOxNhBDZA8IcFYxA/y7hIKPDYUeXbA26SmR8GkrPOT
cNMJLc7z+iS/ks1ukgunvvli5Iv1f9KmRvsRCDgvAkHJY3w6
-----END CERTIFICATE-----
Generated at Sat May 30 00:24:37 2026 by rpki-client