Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/34352e352e36382e302f32322d3234203d3e20323635363931.roa
File:                     34352e352e36382e302f32322d3234203d3e20323635363931.roa (raw, json)
Hash identifier:          Ct5XBcor+ddryS4zCABFlFNI5Cyk2Es9VgqpSQZIBgw=
Subject key identifier:   54:49:5C:84:82:77:CD:E5:92:A4:A9:35:AD:1F:58:EA:CE:EE:3B:5F
Certificate issuer:       /CN=E7A27C8F6CDCF649D79DE823E920014569787295
Certificate serial:       2AEB9E632897C66BA7E4E3C89E1C73EFD952813D
Authority key identifier: E7:A2:7C:8F:6C:DC:F6:49:D7:9D:E8:23:E9:20:01:45:69:78:72:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A27C8F6CDCF649D79DE823E920014569787295.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/34352e352e36382e302f32322d3234203d3e20323635363931.roa
Signing time:             Mon 18 May 2026 22:30:00 +0000
ROA not before:           Mon 18 May 2026 22:25:00 +0000
ROA not after:            Mon 17 May 2027 22:30:00 +0000
asID:                     265691
IP address blocks:        45.5.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/E7A27C8F6CDCF649D79DE823E920014569787295.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/E7A27C8F6CDCF649D79DE823E920014569787295.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A27C8F6CDCF649D79DE823E920014569787295.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 08:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:eb:9e:63:28:97:c6:6b:a7:e4:e3:c8:9e:1c:73:ef:d9:52:81:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7A27C8F6CDCF649D79DE823E920014569787295
        Validity
            Not Before: May 18 22:25:00 2026 GMT
            Not After : May 17 22:30:00 2027 GMT
        Subject: CN=54495C848277CDE592A4A935AD1F58EACEEE3B5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3b:54:ff:29:09:04:08:b6:1b:bb:69:52:f9:
                    76:eb:38:48:e4:14:b6:ee:77:3b:b7:e0:bc:92:ba:
                    65:2d:ad:b7:a1:63:63:38:3f:71:0c:e5:08:80:1c:
                    5b:cd:ee:82:d8:5f:52:f4:71:1e:70:59:58:43:b7:
                    78:36:93:1a:4f:7b:c4:2a:ff:0a:06:d5:80:7a:db:
                    06:78:8f:b5:c4:47:18:39:a3:13:9a:1c:09:72:28:
                    96:c9:5b:0d:59:22:85:e8:fc:7a:35:71:6b:9b:76:
                    47:74:b6:80:06:c4:e2:0b:42:06:84:1f:73:e4:95:
                    78:c3:73:ee:ad:36:bf:96:bc:90:f0:d4:58:99:c9:
                    b7:2b:5d:60:3e:a2:22:39:14:33:22:b0:5a:3a:25:
                    29:87:ad:a9:e1:25:fc:28:ba:83:de:4e:31:08:02:
                    e7:06:43:93:30:6f:07:50:ec:84:77:ee:f9:85:16:
                    b2:fd:99:ed:f0:2b:f5:5f:43:0c:72:c2:da:6a:ea:
                    05:f9:61:d7:34:c7:15:8a:24:97:82:bf:f9:ad:51:
                    61:f2:f3:40:7b:f4:dc:c3:9f:c7:f6:88:65:98:92:
                    49:29:5c:26:4c:85:b1:ea:35:f2:f8:35:40:3d:c6:
                    74:cc:4d:39:1b:fa:87:0c:c4:1e:0f:c5:09:c4:c6:
                    c0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:49:5C:84:82:77:CD:E5:92:A4:A9:35:AD:1F:58:EA:CE:EE:3B:5F
            X509v3 Authority Key Identifier:
                keyid:E7:A2:7C:8F:6C:DC:F6:49:D7:9D:E8:23:E9:20:01:45:69:78:72:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/E7A27C8F6CDCF649D79DE823E920014569787295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A27C8F6CDCF649D79DE823E920014569787295.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/34352e352e36382e302f32322d3234203d3e20323635363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:bb:34:0b:68:8e:8c:37:5c:72:0e:ca:c7:95:84:95:4b:96:
         8c:b8:5e:7f:65:53:8b:84:4a:03:47:a4:31:67:6b:c6:d1:44:
         7f:95:fa:45:7e:80:03:11:ba:77:80:fe:1f:65:f3:f5:fe:0a:
         df:4c:c8:e6:70:f2:ab:2e:7a:b0:df:de:bc:39:90:58:af:f3:
         3e:a1:22:6c:0c:0c:b2:be:77:40:aa:10:f6:f6:f0:20:df:2f:
         f8:53:94:de:7d:82:60:d5:4d:3d:46:de:ba:7d:0b:50:e7:de:
         66:32:44:be:75:19:65:9f:dc:72:98:7d:49:c5:6b:b8:da:93:
         6e:1f:03:c0:fc:96:ef:94:9a:a5:ff:09:e3:78:b0:9d:8f:08:
         b2:73:04:b3:c0:4a:b1:7c:47:21:f1:99:9a:ff:bb:80:a4:64:
         73:6f:d0:48:9c:e3:0c:aa:ed:20:e6:be:9a:79:2e:97:45:38:
         63:24:54:0a:9c:d2:0e:62:74:a3:b2:cf:79:21:5f:f2:21:39:
         cb:b1:fb:f7:6f:b3:01:21:11:44:af:26:57:6d:f2:fc:83:6d:
         18:b0:51:2d:cb:64:10:aa:ad:71:80:d7:52:b6:93:cb:b5:ed:
         89:5d:9a:e1:40:cf:c9:8c:01:19:60:9f:85:36:3e:9a:ce:c9:
         2e:65:8f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:15:40 2026 by rpki-client