Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130312e302f32342d3237203d3e20323636373930.roa
File:                     34352e3233332e3130312e302f32342d3237203d3e20323636373930.roa (raw, json)
Hash identifier:          ug5D+N7HH9HD6/sbKimcJ+2ZTgUvyNgb7Q9b7Gwtkw0=
Subject key identifier:   31:42:33:33:6D:53:FC:90:78:C0:12:50:DF:81:9A:29:EA:63:ED:55
Certificate issuer:       /CN=69B942F2442A4B878DCF7E43089B60B94955608D
Certificate serial:       5CE53A95BDCA0F07FDA94AED984614B7FF791EA3
Authority key identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130312e302f32342d3237203d3e20323636373930.roa
Signing time:             Wed 08 Jul 2026 21:51:31 +0000
ROA not before:           Wed 08 Jul 2026 21:46:31 +0000
ROA not after:            Wed 07 Jul 2027 21:51:31 +0000
asID:                     266790
IP address blocks:        45.233.101.0/24 maxlen: 27
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e5:3a:95:bd:ca:0f:07:fd:a9:4a:ed:98:46:14:b7:ff:79:1e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B942F2442A4B878DCF7E43089B60B94955608D
        Validity
            Not Before: Jul  8 21:46:31 2026 GMT
            Not After : Jul  7 21:51:31 2027 GMT
        Subject: CN=314233336D53FC9078C01250DF819A29EA63ED55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:ac:f1:22:7d:c2:9b:10:97:79:47:c5:2d:
                    94:2d:a5:77:b1:23:5f:4e:df:05:fd:37:c0:54:f6:
                    45:6c:6b:f4:dd:ed:f4:77:99:a4:19:4d:a0:79:ef:
                    3d:eb:bf:53:29:90:05:25:99:d4:b5:87:6b:61:c8:
                    74:fc:03:a4:bf:aa:95:c3:7a:fe:73:d3:4b:fb:77:
                    01:72:44:8a:1e:a3:7d:e7:84:12:91:d7:67:08:45:
                    0a:ab:0c:0c:83:b7:54:96:f0:85:3c:87:2f:ca:e7:
                    1a:bc:ef:59:6e:10:a9:d3:bc:68:74:a5:59:6e:ae:
                    c5:f4:76:cf:d6:de:a1:31:d9:58:11:c8:07:f9:16:
                    36:26:00:a7:61:6f:ca:71:ca:9d:15:15:b1:71:d2:
                    a6:cc:d9:26:86:d1:e6:f8:99:fe:04:66:bc:f2:14:
                    a3:bd:8a:3c:ff:50:63:56:46:b9:15:92:66:1c:dd:
                    31:d8:09:3e:92:e9:4d:a6:f3:08:de:bb:36:ba:1b:
                    f2:c9:23:15:e8:fe:52:33:86:c6:6e:8d:92:75:9e:
                    99:97:a2:a4:eb:53:dc:b9:3c:bf:96:85:a4:63:c9:
                    44:3f:6f:0c:53:b6:82:38:db:ab:43:b7:80:d2:95:
                    1b:65:b3:3c:07:03:60:6b:af:f6:63:7d:e1:92:95:
                    8d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:42:33:33:6D:53:FC:90:78:C0:12:50:DF:81:9A:29:EA:63:ED:55
            X509v3 Authority Key Identifier:
                keyid:69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130312e302f32342d3237203d3e20323636373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:9d:59:fe:8b:2a:21:b0:95:35:25:02:9f:3d:db:2a:32:ca:
         58:de:38:49:ca:97:10:b1:c7:0a:b9:31:09:3a:71:87:b7:49:
         e3:c2:54:bd:91:95:6b:14:88:a8:c3:3a:6a:47:51:5a:fd:9b:
         99:d2:c9:11:28:35:dc:0a:a2:09:47:2a:3e:75:ce:25:83:fd:
         fd:1f:b8:d1:8f:9f:47:36:77:2c:be:7e:db:38:73:cd:13:22:
         b6:b3:2e:03:e4:9b:de:1b:be:17:69:c5:3c:83:55:eb:fe:1c:
         41:ec:5f:f3:b7:f7:0e:b3:a6:5f:af:9b:b5:03:2b:ce:01:9a:
         a8:fe:8e:64:ac:8b:1f:c0:37:f9:b8:45:ad:d9:a1:19:d1:e4:
         87:fd:b1:2d:51:83:3e:2e:dc:9f:c9:72:05:77:53:73:59:4d:
         97:01:86:c7:ee:f7:88:7c:ce:b4:0f:0e:f8:ca:8f:7e:12:fc:
         88:3c:48:5b:db:a3:82:ef:81:34:e3:99:4a:e5:be:ba:d6:c0:
         50:62:b0:26:2b:14:a0:dc:d3:5c:bd:2c:5e:cf:5b:ea:6d:ef:
         d9:3a:90:60:ea:9b:24:e4:bc:96:d8:e9:76:dd:cf:53:c4:57:
         e4:95:01:0a:31:80:6f:ec:46:ca:f9:1a:ac:77:c1:9a:c7:4f:
         f9:d8:91:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:42:48 2026 by rpki-client