Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/34352e3233352e3132382e302f32322d3234203d3e20323635353233.roa
File:                     34352e3233352e3132382e302f32322d3234203d3e20323635353233.roa (raw, json)
Hash identifier:          x6pwD5oKfgntGo3XvP3ERrMpniwFLp7dQUr8/IicpJc=
Subject key identifier:   56:25:E2:FF:49:D1:3D:03:F6:11:E8:C6:A5:ED:2B:80:05:78:5B:DE
Certificate issuer:       /CN=40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F
Certificate serial:       5389DB0DC68297812817EE4261CE0EEA9343A45B
Authority key identifier: 40:48:6D:CD:4F:F9:A7:DB:63:55:71:FB:C2:CC:D6:D2:AD:B8:62:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/34352e3233352e3132382e302f32322d3234203d3e20323635353233.roa
Signing time:             Thu 05 Mar 2026 17:25:00 +0000
ROA not before:           Thu 05 Mar 2026 17:20:00 +0000
ROA not after:            Thu 04 Mar 2027 17:25:00 +0000
asID:                     265523
IP address blocks:        45.235.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Mar 2026 20:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:89:db:0d:c6:82:97:81:28:17:ee:42:61:ce:0e:ea:93:43:a4:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F
        Validity
            Not Before: Mar  5 17:20:00 2026 GMT
            Not After : Mar  4 17:25:00 2027 GMT
        Subject: CN=5625E2FF49D13D03F611E8C6A5ED2B8005785BDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c3:5b:73:7a:b7:03:a5:08:91:69:f8:80:2d:
                    43:d3:12:47:77:7b:c6:c4:4e:e8:81:32:8f:95:71:
                    81:81:5c:a2:2a:ab:dc:73:ab:c0:06:35:78:6f:aa:
                    d4:fe:52:e7:79:b3:12:0d:5f:df:52:85:31:49:50:
                    37:45:6a:66:83:46:3d:9f:66:c3:a3:a8:73:af:3f:
                    58:96:c6:ce:77:44:5a:b9:a8:39:a9:b3:9f:46:50:
                    c9:bd:4e:91:ea:da:a8:62:48:31:71:f1:8f:8b:14:
                    f1:17:a0:f1:12:95:fb:88:12:d4:52:fc:08:58:21:
                    f1:91:ab:e3:7a:ed:8b:88:05:46:d9:a6:37:7c:ae:
                    c8:e9:cb:04:cd:ea:cb:21:ae:71:ac:8a:de:aa:d7:
                    f5:53:65:ab:95:14:cb:3a:6d:54:e9:e5:69:7c:10:
                    87:1a:d1:9f:00:7f:10:d5:43:f7:8a:3d:e4:26:9f:
                    91:ec:56:93:f6:94:c3:16:3a:ac:4a:7e:6d:d5:07:
                    3a:92:4e:b4:27:c0:b8:51:03:41:a6:b3:60:b4:9b:
                    6f:b4:17:b9:1c:21:64:7d:f9:3f:60:88:75:eb:3c:
                    24:0b:66:64:1a:bc:e8:59:6c:a0:36:41:5f:7f:4c:
                    59:9c:1f:73:32:bf:d4:2f:e6:7b:be:fc:dc:4c:d5:
                    be:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:25:E2:FF:49:D1:3D:03:F6:11:E8:C6:A5:ED:2B:80:05:78:5B:DE
            X509v3 Authority Key Identifier:
                keyid:40:48:6D:CD:4F:F9:A7:DB:63:55:71:FB:C2:CC:D6:D2:AD:B8:62:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/34352e3233352e3132382e302f32322d3234203d3e20323635353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:4b:5b:a1:d4:01:cc:44:fd:fd:1a:c3:4b:e7:5e:e1:f0:db:
         5f:24:e5:ff:06:36:de:06:68:41:f4:55:8f:d6:18:f3:19:2e:
         2f:77:23:72:e3:fc:95:84:c8:33:d1:d9:de:b0:c7:e4:1c:87:
         9b:3b:86:a4:bd:05:2b:b3:a7:39:39:d5:5c:13:3c:fd:ec:48:
         c8:d8:14:dc:5f:d5:54:d1:9a:02:0c:fa:cd:ca:7b:e8:7c:52:
         bc:3f:dd:34:f6:b0:96:e1:2b:82:df:44:9a:0a:49:43:ba:4c:
         de:48:94:4c:a7:0c:2b:7d:c7:d7:be:16:d8:c5:83:2e:ef:bc:
         d4:1b:47:b9:53:3f:fa:01:df:d0:75:48:d2:54:6b:16:1a:0f:
         f5:8d:fc:7e:1e:1f:82:32:00:d0:43:53:1f:44:94:fe:bd:e9:
         56:33:ac:c8:21:2b:2f:09:62:bc:56:6f:db:2d:ae:e0:ec:bd:
         a2:ee:10:e4:c6:43:76:50:87:60:46:1b:35:1b:3f:7e:da:dd:
         6d:e9:37:4d:02:ed:7b:da:03:2c:92:db:4e:ac:30:31:28:f9:
         a4:01:15:5d:a1:4d:e7:5e:70:10:ce:4c:cf:a6:be:89:84:d5:
         87:00:47:0b:d7:38:2f:8a:11:a9:7a:7f:f6:49:f7:21:bc:c6:
         ca:ca:8e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 07:46:50 2026 by rpki-client