Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31342e302f32342d3234203d3e20323636383337.roa
File:                     34352e3233382e31342e302f32342d3234203d3e20323636383337.roa (raw, json)
Hash identifier:          WvmZvRKfMkNEeagzPaTE3Y8AO1NbhuEnHzz8/71gxi8=
Subject key identifier:   88:D7:4C:A5:C2:9D:55:D1:29:89:96:25:9F:C5:1B:BB:B7:EB:2B:86
Certificate issuer:       /CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
Certificate serial:       79252A684E6C954DC7347F1B276311D00723590C
Authority key identifier: 3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31342e302f32342d3234203d3e20323636383337.roa
Signing time:             Wed 24 Jun 2026 21:49:37 +0000
ROA not before:           Wed 24 Jun 2026 21:44:37 +0000
ROA not after:            Wed 23 Jun 2027 21:49:37 +0000
asID:                     266837
IP address blocks:        45.238.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:25:2a:68:4e:6c:95:4d:c7:34:7f:1b:27:63:11:d0:07:23:59:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
        Validity
            Not Before: Jun 24 21:44:37 2026 GMT
            Not After : Jun 23 21:49:37 2027 GMT
        Subject: CN=88D74CA5C29D55D1298996259FC51BBBB7EB2B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:72:cf:68:ae:50:8e:ff:a8:8b:99:dc:dc:
                    7f:27:22:bb:3f:1d:dd:a6:81:5e:02:e1:51:6d:97:
                    61:b1:cf:84:c6:25:ae:d7:47:f6:88:23:29:29:f7:
                    d9:b5:15:0c:2c:a6:87:d5:04:3e:40:43:9c:99:5d:
                    e0:b3:06:f5:ee:44:a8:7e:67:b6:ce:fc:0f:a6:13:
                    56:96:ec:5a:82:2f:af:b4:72:07:f3:8a:09:94:80:
                    ad:76:0c:88:7d:79:3e:91:c1:ec:99:0d:50:1a:c2:
                    05:b6:4b:a0:df:fd:43:47:06:38:e4:2c:67:83:eb:
                    bf:fc:50:3e:ca:51:f3:72:8b:e6:dc:d6:0e:c5:22:
                    bd:82:4d:58:90:78:31:dc:f4:51:fc:ce:5e:b9:7f:
                    56:a7:62:2a:22:8f:7c:34:11:5a:99:93:1e:72:5e:
                    67:bf:34:f1:93:32:48:84:f4:9a:0f:55:e0:6d:9d:
                    81:bf:ea:a2:58:30:64:d2:bd:db:01:10:bf:5c:94:
                    d5:12:49:21:b9:82:85:f4:d2:66:b7:38:bd:62:c1:
                    62:df:48:70:61:c2:31:13:5c:f6:29:1a:43:87:ba:
                    c6:67:27:67:be:ff:72:7c:83:a7:85:ad:57:cd:71:
                    7e:db:07:f1:c8:d8:5f:8f:c4:40:d9:fe:e8:22:67:
                    fd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D7:4C:A5:C2:9D:55:D1:29:89:96:25:9F:C5:1B:BB:B7:EB:2B:86
            X509v3 Authority Key Identifier:
                keyid:3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31342e302f32342d3234203d3e20323636383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:05:e0:fc:5e:f9:42:f6:39:84:b1:42:bb:91:e0:12:50:64:
         5a:ad:29:fb:6f:bc:e8:f5:72:21:dc:c5:bb:16:27:5b:42:ac:
         de:3f:69:48:fa:25:fd:18:63:c6:c7:f6:14:f4:6b:48:78:54:
         db:7a:5d:c0:42:de:95:cd:38:f2:46:26:f4:67:bd:64:7b:1d:
         94:98:2c:87:33:e5:25:29:28:d3:5c:7a:ae:76:cd:d5:06:94:
         0b:bc:a4:e4:00:02:2e:77:be:cc:e3:56:2a:a1:a4:c1:41:88:
         ad:ee:b0:d9:b1:b5:2a:21:a7:2e:42:55:9b:5f:94:bd:87:c6:
         d3:d4:f8:42:6d:a2:33:72:96:b2:57:e0:d2:a0:f3:5a:19:a1:
         aa:3c:76:99:ef:2a:67:17:7b:a5:d9:12:cf:6a:bb:8e:be:1f:
         13:57:a1:d2:1d:13:d1:8e:dd:c2:cf:5b:63:22:70:51:fb:69:
         f4:e2:7c:9f:a3:4c:d9:27:1e:89:25:04:96:7a:94:0b:91:8b:
         97:1d:5c:85:4a:52:65:e6:b0:8e:49:db:03:9e:14:01:91:58:
         3a:56:6b:de:72:b5:b8:c4:f7:6a:e5:23:bd:ef:a9:26:1e:ec:
         5e:f9:c0:14:8f:9b:b0:5e:f2:a8:3f:47:2d:96:ed:b5:04:ba:
         1c:eb:88:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:44:42 2026 by rpki-client