Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/34352e3233302e32302e302f32342d3234203d3e2033333536.roa
File:                     34352e3233302e32302e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          +3Cp+ZhCIQ1gLMmIuHo+X0okZ0+MLQi3gMhiGZ/xhFw=
Subject key identifier:   09:7C:8F:04:D3:5D:2F:F8:08:02:B6:D2:AF:C7:C7:24:93:0C:A3:D2
Certificate issuer:       /CN=964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96
Certificate serial:       1F7005C8FE9942D0FA3E3FA8377DC170EA66193A
Authority key identifier: 96:4E:B9:84:A6:CD:AD:66:DD:3C:C7:17:D7:0D:6E:7D:CD:4F:FE:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/34352e3233302e32302e302f32342d3234203d3e2033333536.roa
Signing time:             Fri 27 Mar 2026 19:36:20 +0000
ROA not before:           Fri 27 Mar 2026 19:31:20 +0000
ROA not after:            Fri 26 Mar 2027 19:36:20 +0000
asID:                     3356
IP address blocks:        45.230.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 00:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:70:05:c8:fe:99:42:d0:fa:3e:3f:a8:37:7d:c1:70:ea:66:19:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96
        Validity
            Not Before: Mar 27 19:31:20 2026 GMT
            Not After : Mar 26 19:36:20 2027 GMT
        Subject: CN=097C8F04D35D2FF80802B6D2AFC7C724930CA3D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c1:0d:04:8c:f7:2c:65:54:37:43:9e:e8:39:
                    c8:76:28:a0:e1:27:a1:b8:5d:56:6b:9c:a7:47:97:
                    24:f3:9f:94:53:4e:48:dd:83:d8:4d:a8:33:16:25:
                    5d:e2:fc:e0:97:88:8a:2d:1b:e2:7a:60:63:64:5d:
                    b1:72:60:b1:d3:54:29:0f:b6:5e:76:1f:f7:36:21:
                    c1:0f:4c:5a:c7:10:cc:9b:2c:a6:59:80:0c:5f:69:
                    3a:17:2b:b5:da:25:69:2c:8e:e8:8b:08:6b:8f:f1:
                    ba:c2:45:99:e4:2f:c2:a2:16:37:f1:42:f8:5a:ee:
                    1c:07:52:31:ae:de:e7:db:14:57:1e:3d:43:cc:2a:
                    46:05:b8:4a:01:00:98:5d:1f:74:a5:d5:69:4a:86:
                    89:4d:1a:66:38:66:78:5b:84:b7:32:e8:84:65:f8:
                    85:2b:22:bd:68:08:2b:b3:d7:b4:9b:a1:67:23:e4:
                    49:78:ee:42:ce:57:60:64:3f:cb:df:05:8f:ff:ac:
                    15:00:ef:24:0f:6f:79:ba:15:92:68:dc:d4:f4:50:
                    f0:7c:be:57:be:66:96:c5:9f:64:67:a4:89:57:2d:
                    e3:71:f1:39:e5:ec:56:2e:24:bc:fc:87:c0:aa:4e:
                    bf:a2:3f:64:f0:bd:00:5e:52:c6:bd:fa:b5:14:b0:
                    20:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7C:8F:04:D3:5D:2F:F8:08:02:B6:D2:AF:C7:C7:24:93:0C:A3:D2
            X509v3 Authority Key Identifier:
                keyid:96:4E:B9:84:A6:CD:AD:66:DD:3C:C7:17:D7:0D:6E:7D:CD:4F:FE:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/34352e3233302e32302e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:01:8e:b4:99:db:50:9c:e0:d5:af:d4:3a:f8:9e:1d:4c:69:
         d0:3a:58:0b:a8:a5:10:ac:92:0a:53:77:8f:f6:60:3e:4f:b5:
         32:e9:0d:06:4f:1a:6d:19:5f:d3:9c:62:47:f2:7d:39:92:d5:
         58:52:d1:03:f1:83:3c:08:f7:b0:91:77:10:08:41:b9:f7:89:
         35:96:9a:70:68:7d:72:d9:8e:3e:1b:88:3d:35:54:08:e6:cc:
         b3:2f:f0:29:ed:a1:cb:36:7e:90:f7:5d:a4:e6:2b:96:6e:f6:
         4a:39:88:98:22:02:45:47:16:aa:48:42:71:5b:bc:06:0b:1b:
         7c:dc:5c:93:83:ad:fc:be:6c:b8:d4:fc:f7:a0:26:b4:f6:20:
         33:8b:9a:8b:a4:4e:34:be:f4:3a:77:92:ff:27:09:b3:9b:40:
         42:58:6c:49:fb:31:5a:63:21:d0:bd:ee:c9:64:05:a2:bb:88:
         2f:74:3b:8d:8c:3c:4d:1b:05:bc:95:2f:7c:7d:2b:a8:ce:be:
         4d:70:fc:83:8c:b7:00:2a:21:15:c4:93:e8:b1:c2:5c:28:fd:
         13:cc:3b:54:d5:e8:5a:d4:db:97:a0:f0:58:37:72:dc:19:6b:
         df:af:39:29:fa:ea:09:e1:65:04:ea:57:c5:84:06:d3:a4:2d:
         22:3c:51:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:38:44 2026 by rpki-client