Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31322e302f32322d3232203d3e20323636383337.roa
File:                     34352e3233382e31322e302f32322d3232203d3e20323636383337.roa (raw, json)
Hash identifier:          lvFK7etgavVLHH2c6UxJB0xoG68ehpT7u42DH9gI7+Y=
Subject key identifier:   D9:F9:D6:0C:BB:91:AE:2F:97:C3:8B:AD:43:F6:F9:9F:79:13:E5:B0
Certificate issuer:       /CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
Certificate serial:       63A614AF4AD28E5E389E80146BAB90EA67E09694
Authority key identifier: 3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31322e302f32322d3232203d3e20323636383337.roa
Signing time:             Tue 07 Apr 2026 23:37:56 +0000
ROA not before:           Tue 07 Apr 2026 23:32:56 +0000
ROA not after:            Tue 06 Apr 2027 23:37:56 +0000
asID:                     266837
IP address blocks:        45.238.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 05:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a6:14:af:4a:d2:8e:5e:38:9e:80:14:6b:ab:90:ea:67:e0:96:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
        Validity
            Not Before: Apr  7 23:32:56 2026 GMT
            Not After : Apr  6 23:37:56 2027 GMT
        Subject: CN=D9F9D60CBB91AE2F97C38BAD43F6F99F7913E5B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3a:d2:5d:76:9f:2f:ba:7e:ec:44:f6:83:18:
                    da:6c:d7:03:ed:62:e8:37:93:eb:7f:73:93:c6:6a:
                    06:b4:1f:20:80:30:46:6c:0f:03:f5:8e:2b:03:47:
                    df:1d:bd:53:fd:7e:03:f2:23:b2:30:16:1a:14:f8:
                    9f:19:a2:0b:e6:f8:a8:85:c8:fe:3e:e4:b9:a5:7e:
                    7b:e2:ad:5e:29:5a:a8:67:85:65:a6:64:00:ee:fe:
                    1d:31:ca:fa:6d:e7:dd:43:58:3d:93:d0:0b:2e:c5:
                    e3:e1:93:35:a7:e4:e4:de:31:72:b5:37:4c:b0:75:
                    dc:8d:90:82:69:61:d3:e9:a7:89:b8:7e:ce:7f:80:
                    fb:00:2d:a7:23:b6:3b:6b:af:88:7a:d1:01:74:59:
                    67:a4:83:cc:e9:f5:e0:6e:6b:6f:90:40:c2:47:55:
                    58:bc:10:0d:ec:ba:fa:47:ad:77:c9:f3:e3:1c:8a:
                    42:56:df:8e:d5:55:27:55:73:94:ca:d3:ca:17:bc:
                    c1:36:56:1c:13:7a:8a:0c:6e:25:fa:55:5b:3f:24:
                    01:12:46:a4:26:c9:b3:63:11:66:9f:90:12:b7:9a:
                    06:3f:1a:eb:d5:2a:33:76:ba:ca:26:30:8d:64:e5:
                    60:24:e6:6c:dd:ff:f4:6c:74:34:31:61:3f:fe:1a:
                    23:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F9:D6:0C:BB:91:AE:2F:97:C3:8B:AD:43:F6:F9:9F:79:13:E5:B0
            X509v3 Authority Key Identifier:
                keyid:3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31322e302f32322d3232203d3e20323636383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:9a:4d:06:29:62:61:ea:cf:7d:bb:b5:a7:f8:e3:9e:35:25:
         1c:cf:da:bb:bf:68:71:88:b3:28:8f:e0:06:1d:25:ac:9d:b1:
         51:4e:ec:03:0b:40:44:12:2a:d4:a7:cb:24:f4:d6:3a:34:d2:
         a4:17:4d:6d:b2:6b:cc:60:df:9a:0a:83:a6:cf:84:a8:ce:af:
         db:b1:a4:f2:d4:0f:52:55:14:ba:a0:90:fc:af:aa:95:d5:ec:
         36:52:a0:a8:e9:67:b7:1a:cd:f3:98:6a:f6:c6:ac:53:53:e5:
         32:19:22:72:6e:a0:21:52:c8:89:1a:be:ea:a3:a2:24:ee:cf:
         e2:11:a5:b2:7b:cd:8b:ff:24:8a:90:6a:d6:15:15:34:4b:92:
         81:b8:9c:fd:3c:88:bf:f1:e5:1d:de:15:bc:60:db:d5:00:63:
         4a:7e:dd:58:ca:ea:8c:65:bb:70:78:79:af:d1:10:f2:e5:a5:
         a0:38:a6:ad:1e:4c:43:a2:9b:e6:61:c8:cd:5e:da:a1:57:d0:
         8a:f6:92:5f:2b:5e:b1:10:5f:19:af:5d:8a:5f:d7:63:ed:b9:
         6a:4c:f1:dd:97:57:8a:70:24:98:d3:cb:2c:c6:89:fe:0f:c5:
         b4:ff:fe:3b:20:47:cc:7f:34:38:ab:61:88:46:ec:a8:c9:21:
         87:7c:90:e4
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUY6YUr0rSjl44noAUa6uQ6mfglpQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0EyQzNERTM5REVEQkE1MjI1RUE3RkVCQzI4OTMzMTIw
QUI5MzYxQjAeFw0yNjA0MDcyMzMyNTZaFw0yNzA0MDYyMzM3NTZaMDMxMTAvBgNV
BAMTKEQ5RjlENjBDQkI5MUFFMkY5N0MzOEJBRDQzRjZGOTlGNzkxM0U1QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMOtJddp8vun7sRPaDGNps1wPt
Yug3k+t/c5PGaga0HyCAMEZsDwP1jisDR98dvVP9fgPyI7IwFhoU+J8Zogvm+KiF
yP4+5LmlfnvirV4pWqhnhWWmZADu/h0xyvpt591DWD2T0AsuxePhkzWn5OTeMXK1
N0ywddyNkIJpYdPpp4m4fs5/gPsALacjtjtrr4h60QF0WWekg8zp9eBua2+QQMJH
VVi8EA3suvpHrXfJ8+McikJW347VVSdVc5TK08oXvME2VhwTeooMbiX6VVs/JAES
RqQmybNjEWafkBK3mgY/GuvVKjN2usomMI1k5WAk5mzd//RsdDQxYT/+GiNRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU2fnWDLuRri+Xw4utQ/b5n3kT5bAwHwYDVR0j
BBgwFoAUOiw9453tulIl6n/rwokzEgq5NhswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0YwODIzMkJGNTAyMTk0RTNBMkU0MDExREI0ODNERDdC
RjQ4Qzg0NjU3NDE4MEY0RUVCNTE3RUE5MTgzRjMwLzAvM0EyQzNERTM5REVEQkE1
MjI1RUE3RkVCQzI4OTMzMTIwQUI5MzYxQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQTJDM0RFMzlERURCQTUyMjVF
QTdGRUJDMjg5MzMxMjBBQjkzNjFCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNGMDgyMzJCRjUwMjE5NEUzQTJFNDAxMURCNDgzREQ3QkY0OEM4NDY1
NzQxODBGNEVFQjUxN0VBOTE4M0YzMC8wLzM0MzUyZTMyMzMzODJlMzEzMjJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNjM4MzMzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3uDDAN
BgkqhkiG9w0BAQsFAAOCAQEAAppNBiliYerPfbu1p/jjnjUlHM/au79ocYizKI/g
Bh0lrJ2xUU7sAwtARBIq1KfLJPTWOjTSpBdNbbJrzGDfmgqDps+EqM6v27Gk8tQP
UlUUuqCQ/K+qldXsNlKgqOlntxrN85hq9sasU1PlMhkicm6gIVLIiRq+6qOiJO7P
4hGlsnvNi/8kipBq1hUVNEuSgbic/TyIv/HlHd4VvGDb1QBjSn7dWMrqjGW7cHh5
r9EQ8uWloDimrR5MQ6Kb5mHIzV7aoVfQivaSXytesRBfGa9dil/XY+25akzx3ZdX
inAkmNPLLMaJ/g/FtP/+OyBHzH80OKthiEbsqMkhh3yQ5A==
-----END CERTIFICATE-----
Generated at Wed Apr 8 07:46:48 2026 by rpki-client