Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5A2BC656B29F7BE7830D483660384B2FC7DC3E56DA031D73E59AAC754F017F2/0/34352e3137342e3230302e302f32322d3234203d3e20323635353735.roa
File:                     34352e3137342e3230302e302f32322d3234203d3e20323635353735.roa (raw, json)
Hash identifier:          OaIUXtWxwoDr3qdxdiBhhjsFGjeit+6Mbu/4Ahhs6OA=
Subject key identifier:   29:CE:B7:A8:0F:5C:3B:26:54:32:2E:64:26:28:89:42:7F:57:E9:1C
Certificate issuer:       /CN=81384A93C6E6952115926F1C88CDC5866A02DF8F
Certificate serial:       2060840ECB2A6E19CD7FC200DBAB6DCC73E31E39
Authority key identifier: 81:38:4A:93:C6:E6:95:21:15:92:6F:1C:88:CD:C5:86:6A:02:DF:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81384A93C6E6952115926F1C88CDC5866A02DF8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5A2BC656B29F7BE7830D483660384B2FC7DC3E56DA031D73E59AAC754F017F2/0/34352e3137342e3230302e302f32322d3234203d3e20323635353735.roa
Signing time:             Thu 02 Apr 2026 17:30:00 +0000
ROA not before:           Thu 02 Apr 2026 17:25:00 +0000
ROA not after:            Thu 01 Apr 2027 17:30:00 +0000
asID:                     265575
IP address blocks:        45.174.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5A2BC656B29F7BE7830D483660384B2FC7DC3E56DA031D73E59AAC754F017F2/0/81384A93C6E6952115926F1C88CDC5866A02DF8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5A2BC656B29F7BE7830D483660384B2FC7DC3E56DA031D73E59AAC754F017F2/0/81384A93C6E6952115926F1C88CDC5866A02DF8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81384A93C6E6952115926F1C88CDC5866A02DF8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 11 Apr 2026 09:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:60:84:0e:cb:2a:6e:19:cd:7f:c2:00:db:ab:6d:cc:73:e3:1e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81384A93C6E6952115926F1C88CDC5866A02DF8F
        Validity
            Not Before: Apr  2 17:25:00 2026 GMT
            Not After : Apr  1 17:30:00 2027 GMT
        Subject: CN=29CEB7A80F5C3B2654322E64262889427F57E91C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9e:1c:b4:5e:71:a3:c4:56:b8:63:bd:ef:cc:
                    5c:86:0b:63:db:62:44:c4:7b:fd:e4:4f:b0:9a:1c:
                    ef:4d:f7:e0:0b:20:ac:2d:fc:c8:eb:ec:73:3b:14:
                    ae:9b:75:af:dd:72:98:66:f8:1d:19:6e:47:fb:b3:
                    f5:11:b6:aa:f2:9f:6a:cd:33:9b:d1:91:2a:cf:92:
                    b1:ff:53:2d:d0:99:aa:5c:56:20:09:a2:4b:7d:84:
                    ea:3c:20:51:87:54:bc:ef:99:3e:ee:52:9c:25:f7:
                    87:da:9a:e8:cd:f9:0c:1c:35:1a:05:66:e5:3e:d0:
                    e1:53:ee:90:b9:3a:8e:26:b4:02:7c:f3:9a:00:da:
                    08:0e:d7:65:d1:46:12:49:5d:23:06:5d:5e:4e:2d:
                    6c:39:39:ab:ca:5e:16:09:6b:ec:13:56:62:05:e1:
                    ad:68:eb:c9:ee:8b:df:17:c0:b0:88:d5:81:8d:62:
                    5b:08:38:c4:0d:48:27:0f:0c:cb:da:a8:b0:8d:a0:
                    ad:d9:f6:86:3e:d3:fe:de:31:6d:81:2f:d8:8a:5e:
                    cf:57:8a:29:23:af:66:ea:22:5e:ec:d1:ce:4b:ea:
                    6f:31:6b:41:29:0b:cf:8e:cd:7d:a2:8f:93:e1:c8:
                    b4:8c:f4:71:86:50:9e:f1:39:b0:5f:f4:bd:0a:aa:
                    5d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CE:B7:A8:0F:5C:3B:26:54:32:2E:64:26:28:89:42:7F:57:E9:1C
            X509v3 Authority Key Identifier:
                keyid:81:38:4A:93:C6:E6:95:21:15:92:6F:1C:88:CD:C5:86:6A:02:DF:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5A2BC656B29F7BE7830D483660384B2FC7DC3E56DA031D73E59AAC754F017F2/0/81384A93C6E6952115926F1C88CDC5866A02DF8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81384A93C6E6952115926F1C88CDC5866A02DF8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5A2BC656B29F7BE7830D483660384B2FC7DC3E56DA031D73E59AAC754F017F2/0/34352e3137342e3230302e302f32322d3234203d3e20323635353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:bc:01:85:5f:55:e5:01:6b:d5:1e:76:c5:4c:1b:ed:c2:ad:
         66:0e:e8:70:35:24:75:7c:d3:5f:dd:89:23:1b:bf:f6:39:9e:
         81:23:cb:04:66:0f:4a:fc:84:f8:26:23:80:56:15:81:dd:dd:
         37:4c:0c:f4:fe:26:a7:ca:c9:d3:ac:d4:b6:a5:3d:92:8b:1a:
         84:1e:aa:84:a5:4e:fe:59:98:78:46:65:d8:ab:0c:9c:ad:76:
         ee:e3:b9:80:1a:05:dc:72:10:9c:80:59:70:0c:f8:b3:2a:ef:
         2a:b5:7e:c6:42:19:09:c3:7d:5f:7e:8a:75:10:3e:e4:92:fc:
         ef:bb:7d:22:4a:ae:a6:df:97:7f:9d:ae:3b:c6:48:8e:5e:31:
         36:45:83:05:19:4c:cf:67:80:ec:7c:c8:f7:b1:6a:c1:3e:40:
         ab:20:ec:32:93:2a:75:18:7c:59:32:74:41:58:dc:40:0b:44:
         0e:bf:5e:db:42:ae:3b:90:9f:24:b0:11:e7:bc:57:ce:f2:4e:
         4b:c0:c5:28:b5:12:de:2f:92:e5:64:ff:e1:8d:ff:fa:9f:97:
         c1:a8:03:cd:6b:3f:dd:5a:45:fc:d2:cd:fb:a5:ba:81:e8:df:
         0a:05:31:5c:2a:c0:64:63:ba:42:03:3b:c3:3b:bf:67:76:80:
         81:eb:0e:4c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIGCEDssqbhnNf8IA26ttzHPjHjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODEzODRBOTNDNkU2OTUyMTE1OTI2RjFDODhDREM1ODY2
QTAyREY4RjAeFw0yNjA0MDIxNzI1MDBaFw0yNzA0MDExNzMwMDBaMDMxMTAvBgNV
BAMTKDI5Q0VCN0E4MEY1QzNCMjY1NDMyMkU2NDI2Mjg4OTQyN0Y1N0U5MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDnhy0XnGjxFa4Y73vzFyGC2Pb
YkTEe/3kT7CaHO9N9+ALIKwt/Mjr7HM7FK6bda/dcphm+B0Zbkf7s/URtqryn2rN
M5vRkSrPkrH/Uy3QmapcViAJokt9hOo8IFGHVLzvmT7uUpwl94famujN+QwcNRoF
ZuU+0OFT7pC5Oo4mtAJ885oA2ggO12XRRhJJXSMGXV5OLWw5OavKXhYJa+wTVmIF
4a1o68nui98XwLCI1YGNYlsIOMQNSCcPDMvaqLCNoK3Z9oY+0/7eMW2BL9iKXs9X
iikjr2bqIl7s0c5L6m8xa0EpC8+OzX2ij5PhyLSM9HGGUJ7xObBf9L0Kql0dAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUKc63qA9cOyZUMi5kJiiJQn9X6RwwHwYDVR0j
BBgwFoAUgThKk8bmlSEVkm8ciM3FhmoC348wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNUEyQkM2NTZCMjlGN0JFNzgzMEQ0ODM2NjAzODRCMkZD
N0RDM0U1NkRBMDMxRDczRTU5QUFDNzU0RjAxN0YyLzAvODEzODRBOTNDNkU2OTUy
MTE1OTI2RjFDODhDREM1ODY2QTAyREY4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MTM4NEE5M0M2RTY5NTIxMTU5
MjZGMUM4OENEQzU4NjZBMDJERjhGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjVBMkJDNjU2QjI5RjdCRTc4MzBENDgzNjYwMzg0QjJGQzdEQzNFNTZE
QTAzMUQ3M0U1OUFBQzc1NEYwMTdGMi8wLzM0MzUyZTMxMzczNDJlMzIzMDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzUzNzM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLa7I
MA0GCSqGSIb3DQEBCwUAA4IBAQBpvAGFX1XlAWvVHnbFTBvtwq1mDuhwNSR1fNNf
3YkjG7/2OZ6BI8sEZg9K/IT4JiOAVhWB3d03TAz0/ianysnTrNS2pT2SixqEHqqE
pU7+WZh4RmXYqwycrXbu47mAGgXcchCcgFlwDPizKu8qtX7GQhkJw31ffop1ED7k
kvzvu30iSq6m35d/na47xkiOXjE2RYMFGUzPZ4DsfMj3sWrBPkCrIOwykyp1GHxZ
MnRBWNxAC0QOv17bQq47kJ8ksBHnvFfO8k5LwMUotRLeL5LlZP/hjf/6n5fBqAPN
az/dWkX80s37pbqB6N8KBTFcKsBkY7pCAzvDO79ndoCB6w5M
-----END CERTIFICATE-----
Generated at Wed Apr 8 07:39:49 2026 by rpki-client