Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/34352e3233342e3132302e302f32322d3232203d3e20323636383030.roa
File:                     34352e3233342e3132302e302f32322d3232203d3e20323636383030.roa (raw, json)
Hash identifier:          hQrzFRM7pnHeFoxH0RrvlmWGW/7WB/Ba0y2OnGJv7PY=
Subject key identifier:   2C:46:76:66:99:9C:D0:83:F1:BC:1D:98:41:05:8F:E8:EC:8F:57:84
Certificate issuer:       /CN=E5E5F55E39001EF24D658430EB3A500D80E40348
Certificate serial:       13D57E729880830E2B487ABE6E6386DD33B8E5A7
Authority key identifier: E5:E5:F5:5E:39:00:1E:F2:4D:65:84:30:EB:3A:50:0D:80:E4:03:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/34352e3233342e3132302e302f32322d3232203d3e20323636383030.roa
Signing time:             Wed 20 May 2026 15:43:25 +0000
ROA not before:           Wed 20 May 2026 15:38:25 +0000
ROA not after:            Wed 19 May 2027 15:43:25 +0000
asID:                     266800
IP address blocks:        45.234.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jun 2026 23:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d5:7e:72:98:80:83:0e:2b:48:7a:be:6e:63:86:dd:33:b8:e5:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5F55E39001EF24D658430EB3A500D80E40348
        Validity
            Not Before: May 20 15:38:25 2026 GMT
            Not After : May 19 15:43:25 2027 GMT
        Subject: CN=2C467666999CD083F1BC1D9841058FE8EC8F5784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c7:ab:3d:18:2f:f9:6d:7e:80:ac:5d:8e:b8:
                    c4:a0:26:6f:41:82:e7:1d:73:84:91:b4:bc:35:eb:
                    c6:50:01:64:4e:4b:59:04:59:3d:4d:b2:62:a0:0a:
                    47:c9:de:98:af:20:c6:3f:74:79:04:40:9c:da:ea:
                    14:1c:b2:5b:6e:fa:ef:01:8b:5b:01:94:3d:d7:00:
                    1a:dc:5f:7c:03:17:33:3e:64:dc:0a:df:bb:32:17:
                    98:13:25:f4:7b:b3:75:83:af:2e:e8:cb:22:e0:42:
                    70:c5:46:a7:55:f6:0d:e6:44:48:75:af:4e:62:e6:
                    0c:01:e8:b2:a8:6b:72:4c:76:48:f9:a1:5b:0a:41:
                    d4:d5:d3:c4:2f:56:2e:78:75:63:9c:43:53:45:ed:
                    9e:6a:92:60:35:6e:53:ab:9c:2d:7a:0b:3c:8b:04:
                    ad:0e:ef:47:4c:94:0a:52:69:76:ce:e1:8f:4b:dc:
                    82:0b:83:3d:f1:99:0d:05:c8:60:ef:2d:55:7e:52:
                    a4:30:2a:bd:fc:05:98:ac:3b:be:66:14:34:e1:4d:
                    47:7e:7b:1e:0b:37:4e:cf:70:97:6b:08:4a:d7:4b:
                    d1:85:e9:de:cc:d5:68:52:9f:7d:4a:00:49:66:90:
                    04:b7:23:43:bf:1e:88:d6:92:82:f2:29:02:96:2e:
                    01:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:46:76:66:99:9C:D0:83:F1:BC:1D:98:41:05:8F:E8:EC:8F:57:84
            X509v3 Authority Key Identifier:
                keyid:E5:E5:F5:5E:39:00:1E:F2:4D:65:84:30:EB:3A:50:0D:80:E4:03:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/34352e3233342e3132302e302f32322d3232203d3e20323636383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:e0:9c:44:3a:68:a6:fb:6b:bf:5e:51:c8:13:d9:b1:ed:65:
         84:77:46:5a:63:e1:3a:d7:3b:e4:21:4f:9f:2b:1e:b6:b5:70:
         a4:65:1b:a3:39:4e:ad:82:f3:38:cf:63:77:ad:15:80:84:3f:
         0f:57:f8:30:fd:6c:b6:0a:53:14:8b:42:a0:93:fa:e4:d2:59:
         d1:01:ff:c4:75:b7:56:cb:72:c4:03:dc:d6:f1:1a:d3:86:d7:
         d7:4d:aa:3d:59:36:1f:60:ea:86:ea:c6:a2:ea:ae:00:a6:e4:
         3e:c9:f5:ac:a8:75:0c:a5:a1:bb:3a:79:b1:a2:96:0e:c4:f1:
         40:f1:ef:1a:46:ca:25:20:82:04:3a:90:bd:61:ab:80:4f:c1:
         af:a3:3b:16:be:e5:64:fb:4f:24:ec:63:5c:c8:2f:9f:2f:4c:
         21:0a:d0:49:70:90:6c:c8:76:0b:05:0d:a6:ff:99:5b:20:f0:
         5a:a6:ea:90:e9:c2:a4:49:29:70:10:d8:36:ab:5d:8a:6c:ba:
         52:e1:5c:3f:14:29:45:93:c1:2c:59:91:d9:d7:50:7e:87:65:
         3a:47:b6:3e:d6:05:06:b9:78:ad:b4:a4:3a:b8:de:69:18:dc:
         b1:f1:11:b7:4d:17:3c:2a:1e:65:4a:0f:26:d3:27:78:0e:8a:
         0f:7a:7c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 19:21:45 2026 by rpki-client