Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/34352e362e3234382e302f32312d3231203d3e203238303032.roa
File:                     34352e362e3234382e302f32312d3231203d3e203238303032.roa (raw, json)
Hash identifier:          eZopX5HMcswkiCIE7LepjYicSD2rD/dY74SJSbk4FCU=
Subject key identifier:   30:3C:36:65:23:74:F5:F8:2E:93:3A:40:21:48:41:D3:17:0A:8E:FF
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       32BECE8E707F7F240AD3DF23EDFD5E86DB51FC5F
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/34352e362e3234382e302f32312d3231203d3e203238303032.roa
Signing time:             Fri 15 May 2026 17:00:00 +0000
ROA not before:           Fri 15 May 2026 16:55:00 +0000
ROA not after:            Fri 14 May 2027 17:00:00 +0000
asID:                     28002
IP address blocks:        45.6.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 13:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:be:ce:8e:70:7f:7f:24:0a:d3:df:23:ed:fd:5e:86:db:51:fc:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: May 15 16:55:00 2026 GMT
            Not After : May 14 17:00:00 2027 GMT
        Subject: CN=303C36652374F5F82E933A40214841D3170A8EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:15:99:2c:d0:ca:21:8e:e2:c9:44:6c:1c:b7:
                    1d:a6:1f:f1:74:fc:78:61:07:d1:ed:76:b4:f9:17:
                    46:1e:9c:12:9f:4a:ab:bc:04:0c:4e:e8:21:5a:47:
                    76:20:28:82:71:4c:24:37:bd:5e:e4:1d:bf:1f:87:
                    cc:be:47:d2:98:1c:59:e6:28:24:38:bb:c1:ba:6f:
                    fb:ce:7b:84:4b:a9:30:1c:7f:4f:66:0a:21:e0:25:
                    2d:5f:11:e0:cc:86:d1:45:c7:53:2f:c5:53:48:94:
                    87:8e:0e:5d:81:04:65:08:90:c6:9b:ab:af:87:96:
                    a5:55:44:60:6a:a1:96:65:37:aa:a6:22:f4:ff:9b:
                    16:6c:b9:eb:2f:7e:0e:d1:56:91:97:e8:de:8f:70:
                    13:1f:46:89:29:a7:3c:8e:37:51:0f:30:40:55:20:
                    06:c4:0b:65:b6:d6:6a:74:db:6b:1f:f5:f2:49:9e:
                    ac:a8:ea:da:0c:e7:77:6b:63:05:6e:64:f1:e6:13:
                    f3:fd:e0:5a:a7:a1:cc:da:a2:68:89:ac:f3:c0:c5:
                    97:e9:3c:22:e6:78:d3:20:eb:75:80:ba:0a:d5:40:
                    84:82:03:30:82:26:29:6e:c5:ff:ce:ce:52:40:01:
                    f8:78:e5:30:d7:9e:60:24:81:2b:c9:50:8e:d6:b3:
                    47:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3C:36:65:23:74:F5:F8:2E:93:3A:40:21:48:41:D3:17:0A:8E:FF
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/34352e362e3234382e302f32312d3231203d3e203238303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c4:82:a9:d6:5f:3f:f7:de:83:a5:a5:c1:3a:d0:63:7c:8e:52:
         59:64:aa:bc:ce:04:d6:86:36:5f:da:79:c7:97:31:91:a6:f2:
         cf:a5:a6:42:be:45:54:7e:2b:63:b1:d2:e9:ac:5e:ec:df:56:
         60:17:ac:af:e4:3b:95:d4:61:60:a6:9e:4f:6a:9a:e8:26:4c:
         f9:e5:88:0f:97:bf:f2:f2:a5:b0:27:8f:17:22:46:0a:9e:29:
         10:19:a8:a0:f5:a3:6e:12:95:ac:3f:12:f3:6f:7b:2f:05:e4:
         d4:f0:fa:47:b9:e8:a9:e8:55:6e:20:99:3d:6a:9c:e1:6f:9d:
         57:8b:8a:6e:f3:b7:d4:2e:da:8e:f8:26:74:95:3d:e1:7c:d2:
         87:73:c4:11:c6:08:1a:a3:da:68:61:8c:e0:61:bf:99:db:01:
         ee:4c:d8:93:d0:8a:cd:e1:72:ae:d1:47:4a:11:7f:9d:29:7c:
         87:06:44:9c:48:07:94:d7:84:42:01:f9:1b:3f:08:38:69:23:
         14:a4:f5:e9:1a:68:9b:77:5b:85:61:fb:06:08:20:00:b4:29:
         50:03:85:8c:df:e5:68:b4:e4:d5:69:a7:1f:46:34:73:10:57:
         1c:9b:7b:25:7e:9f:e0:70:02:ee:f0:16:21:99:4c:b6:7e:ca:
         01:5b:a5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:15:38 2026 by rpki-client