Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/34352e3138392e3138392e302f32342d3234203d3e20323732393739.roa
File:                     34352e3138392e3138392e302f32342d3234203d3e20323732393739.roa (raw, json)
Hash identifier:          uuOoD+SfggPZvO50CdBJzaNeTMK6O/dGZNm1FclT59s=
Subject key identifier:   8B:64:E9:B5:83:0C:73:A2:25:DD:C1:5A:FA:A9:90:AC:96:38:FC:83
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       2AFC43C5060D0957F72E3751B4BE62CC0D33A44C
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/34352e3138392e3138392e302f32342d3234203d3e20323732393739.roa
Signing time:             Thu 02 Apr 2026 19:37:16 +0000
ROA not before:           Thu 02 Apr 2026 19:32:16 +0000
ROA not after:            Thu 01 Apr 2027 19:37:16 +0000
asID:                     272979
IP address blocks:        45.189.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 05:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fc:43:c5:06:0d:09:57:f7:2e:37:51:b4:be:62:cc:0d:33:a4:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Apr  2 19:32:16 2026 GMT
            Not After : Apr  1 19:37:16 2027 GMT
        Subject: CN=8B64E9B5830C73A225DDC15AFAA990AC9638FC83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d5:e0:fa:b8:82:bc:e4:e6:de:c2:5d:d7:78:
                    a7:bc:02:d1:64:08:80:ab:d4:19:d3:16:28:e6:66:
                    d1:3d:b1:47:8f:87:b2:ae:0c:6c:fb:be:81:de:80:
                    50:3b:12:d4:39:62:61:31:60:ae:d5:63:bc:a7:d6:
                    19:b6:ca:e6:3d:f0:41:37:de:37:4f:b2:1e:a5:a7:
                    32:3f:29:ae:04:4d:d6:7b:d7:a6:33:b3:fc:be:a4:
                    f6:2b:cb:e4:60:e7:fd:68:0b:42:b6:e7:fe:87:8f:
                    c5:30:9a:4b:e4:e7:5c:64:4b:65:b8:79:2b:6f:92:
                    f4:44:bf:ff:c5:bb:75:68:50:eb:7f:fb:10:93:a3:
                    41:cb:28:30:73:ff:99:9c:cc:1c:3f:d6:7c:b2:b5:
                    46:af:3a:52:7b:ca:4e:51:39:df:54:5c:6d:7c:44:
                    b5:a9:09:33:10:01:0d:55:11:83:cf:0f:b3:9f:84:
                    1d:e8:a2:30:ab:01:e3:fd:79:04:db:70:79:9d:9b:
                    0e:0e:01:cf:0d:7e:7f:ba:48:ed:a0:4b:ce:bc:a5:
                    e1:dc:62:56:c9:84:d2:a9:f8:90:e9:1b:ec:84:a3:
                    8a:96:87:d0:c0:f6:41:58:73:cc:e0:f3:8d:9f:e2:
                    63:b2:ac:26:29:24:02:33:d5:18:c9:2a:5b:87:6f:
                    5b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:64:E9:B5:83:0C:73:A2:25:DD:C1:5A:FA:A9:90:AC:96:38:FC:83
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/34352e3138392e3138392e302f32342d3234203d3e20323732393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:d2:b5:11:bf:2a:5b:ec:eb:e8:75:21:1d:cb:fd:27:bc:c1:
         ee:01:97:62:fd:b9:78:80:bd:b8:e2:59:c3:14:6c:05:6d:f4:
         15:9f:69:5e:3d:f9:67:88:6e:ee:2f:54:2c:4d:3c:4e:73:db:
         3d:ad:e4:cd:cf:22:e7:19:22:2d:b0:8b:39:a3:65:00:51:d1:
         03:75:88:21:c0:bf:78:cc:6a:53:9e:e5:a1:55:f8:50:ca:92:
         5e:18:2c:9a:fd:bb:a0:db:e6:64:d9:57:16:c6:0b:ec:7e:60:
         a7:82:a8:8a:9e:2d:a3:1f:c8:52:37:89:38:6f:2e:ca:b3:d6:
         77:6e:61:2e:ef:46:08:94:4f:6a:cb:51:f0:15:7f:da:f0:1a:
         b7:2d:2d:73:a0:8a:24:f7:e0:4c:a9:42:e5:ac:74:7c:2b:71:
         80:79:41:d5:9e:a0:9c:e9:ef:26:fe:16:13:44:5e:66:33:5d:
         3c:5f:6f:ee:56:b6:09:04:2f:8e:6a:64:57:ff:03:93:c3:55:
         8d:55:80:93:a6:8c:04:0b:65:81:63:29:74:b3:a0:54:51:b5:
         01:df:da:ec:32:08:84:5e:e5:0c:8a:4d:1b:e1:18:aa:1d:32:
         ea:84:75:c4:4a:2c:1b:58:fb:20:91:53:28:41:15:5e:9f:87:
         cd:e9:06:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 06:18:11 2026 by rpki-client