Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/34352e3233362e3234342e302f32322d3234203d3e20323633373332.roa
File:                     34352e3233362e3234342e302f32322d3234203d3e20323633373332.roa (raw, json)
Hash identifier:          xxOEkouNvMT6ft8PNn3E5xwm1rrEMvI3YbxDvDWN2/I=
Subject key identifier:   D7:64:F6:1E:70:76:EC:5B:E3:44:0D:E4:0C:93:12:8E:A2:C2:AB:51
Certificate issuer:       /CN=8B5877089EE5620C180446F9B30B225C6209D812
Certificate serial:       792B780BB3DB47F30766915CC3EB9C8496B529CB
Authority key identifier: 8B:58:77:08:9E:E5:62:0C:18:04:46:F9:B3:0B:22:5C:62:09:D8:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B5877089EE5620C180446F9B30B225C6209D812.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/34352e3233362e3234342e302f32322d3234203d3e20323633373332.roa
Signing time:             Wed 16 Sep 2026 08:35:48 +0000
ROA not before:           Wed 16 Sep 2026 08:30:48 +0000
ROA not after:            Wed 15 Sep 2027 08:35:48 +0000
asID:                     263732
IP address blocks:        45.236.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/8B5877089EE5620C180446F9B30B225C6209D812.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/8B5877089EE5620C180446F9B30B225C6209D812.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B5877089EE5620C180446F9B30B225C6209D812.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 06:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:2b:78:0b:b3:db:47:f3:07:66:91:5c:c3:eb:9c:84:96:b5:29:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B5877089EE5620C180446F9B30B225C6209D812
        Validity
            Not Before: Sep 16 08:30:48 2026 GMT
            Not After : Sep 15 08:35:48 2027 GMT
        Subject: CN=D764F61E7076EC5BE3440DE40C93128EA2C2AB51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:71:3e:fc:04:2b:0e:1c:74:7e:d9:f8:3b:
                    0e:5c:98:c4:0d:d2:3e:d9:f5:80:1d:95:a3:ea:cb:
                    db:34:92:15:72:b0:41:19:7c:ea:97:65:b6:bf:ba:
                    32:a8:6e:a4:65:06:18:08:a6:35:38:d9:d7:c2:29:
                    b0:00:58:a0:3b:11:8e:cb:20:84:b6:ac:d6:e7:e0:
                    a9:74:e5:23:fa:d1:ec:b0:5d:d7:3a:bf:b5:1f:0c:
                    56:4e:73:49:62:f3:78:8d:62:ff:eb:1e:e8:d3:03:
                    b4:08:d4:31:b9:b0:11:22:ef:22:39:a3:69:2f:60:
                    c5:2e:aa:fd:bd:74:12:f3:d1:72:59:18:b5:64:28:
                    a9:76:a9:14:2b:5b:d4:49:29:13:97:2f:12:7e:37:
                    4d:e9:e9:69:4c:cb:2b:b8:13:2a:96:74:f4:a6:c3:
                    a6:19:6b:9f:a4:01:6d:b3:33:af:30:a5:fa:e9:8e:
                    27:cb:ab:0c:98:33:2c:0f:2a:56:14:53:d8:af:20:
                    41:0e:d7:15:ba:f0:ca:dd:02:21:b9:38:fa:09:49:
                    8b:c4:27:a9:46:80:04:13:66:dd:d3:63:92:d5:42:
                    f3:07:a3:fe:42:d3:7e:fb:99:67:91:ec:ce:64:1e:
                    60:81:e0:87:53:50:20:36:dd:6b:0a:da:e2:7b:1e:
                    b7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:64:F6:1E:70:76:EC:5B:E3:44:0D:E4:0C:93:12:8E:A2:C2:AB:51
            X509v3 Authority Key Identifier:
                keyid:8B:58:77:08:9E:E5:62:0C:18:04:46:F9:B3:0B:22:5C:62:09:D8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/8B5877089EE5620C180446F9B30B225C6209D812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B5877089EE5620C180446F9B30B225C6209D812.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/34352e3233362e3234342e302f32322d3234203d3e20323633373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:3f:08:43:b6:76:88:30:17:25:5a:f5:d8:43:74:3d:bb:84:
         02:da:1f:62:58:5d:73:16:e3:32:98:cd:c0:b5:0b:1e:91:0a:
         27:84:2c:62:af:f2:89:21:59:ec:89:fb:1e:54:3c:34:a0:3a:
         50:ff:fa:3a:95:ca:48:89:5b:3f:92:a0:86:1e:5e:cf:8d:3b:
         f7:b9:bf:4e:0e:e2:c9:1e:a8:02:94:a4:d8:04:a4:e1:b1:f0:
         d1:f4:ee:99:17:7f:e0:f2:40:55:ce:e4:24:18:65:96:76:6f:
         e6:f2:08:e4:06:26:3d:d8:6b:1f:23:8e:ef:d4:da:e1:e2:1e:
         3a:ad:59:62:1e:22:81:1a:9f:ac:ea:43:6b:15:c7:4c:a8:d2:
         a7:89:3e:ce:1b:80:6d:f0:32:22:79:3f:eb:52:9c:d0:bd:0c:
         57:77:b5:3b:23:90:04:f7:14:60:24:c9:70:0c:c6:e3:55:a2:
         c5:4b:01:74:ae:4a:4c:2b:d5:fe:dd:72:9e:35:cd:d8:a1:9d:
         e5:11:8a:f3:db:f1:24:af:82:53:aa:2b:21:32:b9:ad:54:88:
         85:78:c0:73:ee:72:b8:44:51:7a:ec:f8:2c:6a:a7:55:89:17:
         e7:18:c2:5e:ee:2b:a7:19:42:cb:67:dc:c3:76:b9:61:7d:be:
         37:07:fe:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:54:33 2026 by rpki-client