Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/34352e352e31322e302f32342d3234203d3e203136393036.roa
File:                     34352e352e31322e302f32342d3234203d3e203136393036.roa (raw, json)
Hash identifier:          O4ps76Lq8w/Vt4e7l9FxVdiGJeiDSe4/aZy4nF5CZpk=
Subject key identifier:   AC:95:DC:42:9E:4F:9F:5E:B2:5B:42:56:A3:6E:95:26:33:CA:85:1B
Certificate issuer:       /CN=D5752923966F847D0B5CFFF17C8C51A4E595421C
Certificate serial:       2886EC11CC32F86159C1047A7A7A5A6769AE51E9
Authority key identifier: D5:75:29:23:96:6F:84:7D:0B:5C:FF:F1:7C:8C:51:A4:E5:95:42:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/34352e352e31322e302f32342d3234203d3e203136393036.roa
Signing time:             Thu 09 Jul 2026 15:51:38 +0000
ROA not before:           Thu 09 Jul 2026 15:46:38 +0000
ROA not after:            Thu 08 Jul 2027 15:51:38 +0000
asID:                     16906
IP address blocks:        45.5.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 20:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:86:ec:11:cc:32:f8:61:59:c1:04:7a:7a:7a:5a:67:69:ae:51:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5752923966F847D0B5CFFF17C8C51A4E595421C
        Validity
            Not Before: Jul  9 15:46:38 2026 GMT
            Not After : Jul  8 15:51:38 2027 GMT
        Subject: CN=AC95DC429E4F9F5EB25B4256A36E952633CA851B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5b:3b:97:70:1b:76:e0:c8:66:d6:24:cf:12:
                    c2:6f:86:12:28:c3:64:c2:a8:05:87:fc:ad:94:69:
                    a8:44:e4:2a:46:37:c4:3d:03:e7:f6:3a:21:ff:46:
                    5b:80:8f:cb:33:44:27:d1:f4:e3:1b:ff:c8:6a:bc:
                    2b:61:4c:c8:bc:0a:ed:b1:a7:cd:ca:00:1d:22:36:
                    99:ce:4c:aa:94:31:10:cb:ce:36:95:b4:bc:cc:de:
                    62:c1:f1:b6:65:38:10:a3:44:26:9a:4a:50:db:0e:
                    19:3b:13:62:c3:27:14:7d:9f:75:ec:80:25:76:df:
                    07:fb:6d:2e:08:c7:29:3a:63:44:14:c5:00:25:c2:
                    44:ce:4e:ad:86:60:19:63:83:e9:98:85:cf:1c:e4:
                    af:e3:e3:75:ee:9e:6c:d1:3b:9a:33:15:2c:42:04:
                    5e:38:31:93:a8:86:6a:85:82:49:ca:0f:a1:53:78:
                    02:c1:01:32:fc:d3:d7:96:14:80:95:78:05:11:cf:
                    b9:13:2b:a9:1d:2d:80:2c:ad:7f:79:d5:49:88:cc:
                    58:0c:e4:b3:b0:12:15:6d:84:ea:1a:56:8a:37:9b:
                    b8:1c:2f:90:aa:e6:d3:93:b0:bf:9e:45:e8:80:cc:
                    d4:49:27:bd:2b:58:b6:88:68:ca:bd:9a:2f:02:83:
                    5b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:95:DC:42:9E:4F:9F:5E:B2:5B:42:56:A3:6E:95:26:33:CA:85:1B
            X509v3 Authority Key Identifier:
                keyid:D5:75:29:23:96:6F:84:7D:0B:5C:FF:F1:7C:8C:51:A4:E5:95:42:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5752923966F847D0B5CFFF17C8C51A4E595421C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/935549E77B0F6D5D907DF38A8245C6A1B663F50C2BF7AC6A10C2B8C61121365C/0/34352e352e31322e302f32342d3234203d3e203136393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:a8:c7:be:c8:86:f5:06:da:9c:b8:3a:29:e6:f4:fb:30:37:
         18:a0:0b:37:66:cf:68:79:9d:11:d7:1c:2c:ce:82:1c:9c:88:
         99:20:84:01:c5:20:43:ee:e3:c8:2b:6e:a2:86:95:80:00:f2:
         ec:b6:1b:ce:57:89:73:16:22:b8:fb:67:82:56:d5:d9:be:72:
         ba:c4:44:6d:2f:de:62:c6:df:5c:7b:06:53:d9:cf:9c:1f:4c:
         5a:49:7c:3c:61:a5:01:e7:38:4f:4a:d3:47:5d:db:5d:ab:4f:
         b0:42:4c:05:e9:c9:9b:a7:96:15:ef:2e:6c:5c:94:7e:08:c0:
         66:46:39:dc:70:02:62:e4:3f:bd:a6:f4:16:52:98:ef:b9:25:
         06:9c:ca:ab:b3:6f:09:8e:cc:87:ea:99:3f:f1:df:ea:dc:88:
         25:13:40:e8:71:52:ef:a2:98:da:ba:74:5d:2d:63:84:df:60:
         c1:bc:b8:10:df:74:f2:61:d3:6e:bb:bf:c0:d1:0b:57:42:0d:
         10:e7:33:40:a2:c2:1b:04:2a:70:91:d6:68:c5:cd:0f:33:75:
         95:a7:6b:dd:85:12:d9:f6:0b:b4:9d:9d:e6:af:9d:c3:2c:39:
         c7:39:00:90:fb:f0:01:74:76:50:33:32:3a:dd:3a:10:53:52:
         ec:a6:3d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:50:18 2026 by rpki-client