Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1BB91DF4D3A1B4F40F8D6ADE94FEAFCAB943DD914AB823C11175020CA4B64E23/0/34352e3137302e34382e302f32322d3232203d3e20323735303333.roa
File:                     34352e3137302e34382e302f32322d3232203d3e20323735303333.roa (raw, json)
Hash identifier:          BfWB9IB/rqKYSgZx3fCYvg9dOUZgz/m8aHsPDQfXgQA=
Subject key identifier:   F3:B2:7B:04:04:6B:67:62:55:B7:5B:19:42:83:22:6B:B6:EE:7A:2B
Certificate issuer:       /CN=A94CC48F8E2343C327108F4AE2785031FCA42F2F
Certificate serial:       6212174A67E1FABF9E1C96E441EEFC8F12E31C4B
Authority key identifier: A9:4C:C4:8F:8E:23:43:C3:27:10:8F:4A:E2:78:50:31:FC:A4:2F:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A94CC48F8E2343C327108F4AE2785031FCA42F2F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BB91DF4D3A1B4F40F8D6ADE94FEAFCAB943DD914AB823C11175020CA4B64E23/0/34352e3137302e34382e302f32322d3232203d3e20323735303333.roa
Signing time:             Wed 09 Sep 2026 06:50:00 +0000
ROA not before:           Wed 09 Sep 2026 06:45:00 +0000
ROA not after:            Wed 08 Sep 2027 06:50:00 +0000
asID:                     275033
IP address blocks:        45.170.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BB91DF4D3A1B4F40F8D6ADE94FEAFCAB943DD914AB823C11175020CA4B64E23/0/A94CC48F8E2343C327108F4AE2785031FCA42F2F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BB91DF4D3A1B4F40F8D6ADE94FEAFCAB943DD914AB823C11175020CA4B64E23/0/A94CC48F8E2343C327108F4AE2785031FCA42F2F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A94CC48F8E2343C327108F4AE2785031FCA42F2F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:12:17:4a:67:e1:fa:bf:9e:1c:96:e4:41:ee:fc:8f:12:e3:1c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A94CC48F8E2343C327108F4AE2785031FCA42F2F
        Validity
            Not Before: Sep  9 06:45:00 2026 GMT
            Not After : Sep  8 06:50:00 2027 GMT
        Subject: CN=F3B27B04046B676255B75B194283226BB6EE7A2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0a:32:41:71:0a:36:26:06:e6:8a:6f:77:e4:
                    cf:00:dc:cb:33:b3:33:4c:b1:3c:92:86:13:40:b5:
                    bc:6c:23:a6:1b:8f:88:8d:43:26:eb:4e:a5:74:b9:
                    0a:cb:83:87:28:4f:38:fe:f8:39:75:1f:91:f6:7f:
                    89:fb:e1:50:49:50:52:86:e8:14:b2:10:2c:68:7e:
                    39:6d:20:92:b8:4a:16:31:c9:8d:4a:3d:49:72:9a:
                    f7:46:e0:25:d4:0b:b8:83:d0:be:e3:cb:cc:61:b0:
                    3b:71:73:82:06:d2:f8:d4:08:b1:ba:4a:90:50:0b:
                    90:46:57:fe:bd:ba:01:56:36:f7:2e:7e:90:68:47:
                    d2:04:19:1c:e6:5a:ee:4f:ef:d9:18:39:1c:b0:5d:
                    33:5a:0a:bb:8f:02:1e:93:c8:30:44:6a:20:ff:03:
                    d4:bd:bb:69:fe:ff:c3:2e:2b:22:a9:93:6a:59:e4:
                    27:60:00:c0:e7:c3:b0:17:2d:e1:d5:40:b7:88:3a:
                    40:66:a4:17:56:ea:e2:20:b5:12:1e:e7:b4:8c:36:
                    0c:03:84:50:37:06:83:61:86:36:af:9c:9b:04:42:
                    50:03:5e:2f:5a:b9:f6:73:6b:39:c2:e9:9b:e0:80:
                    ea:9e:d8:d4:1b:a0:13:21:d4:bb:80:9e:b0:d2:16:
                    88:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B2:7B:04:04:6B:67:62:55:B7:5B:19:42:83:22:6B:B6:EE:7A:2B
            X509v3 Authority Key Identifier:
                keyid:A9:4C:C4:8F:8E:23:43:C3:27:10:8F:4A:E2:78:50:31:FC:A4:2F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BB91DF4D3A1B4F40F8D6ADE94FEAFCAB943DD914AB823C11175020CA4B64E23/0/A94CC48F8E2343C327108F4AE2785031FCA42F2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A94CC48F8E2343C327108F4AE2785031FCA42F2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BB91DF4D3A1B4F40F8D6ADE94FEAFCAB943DD914AB823C11175020CA4B64E23/0/34352e3137302e34382e302f32322d3232203d3e20323735303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:f5:5d:67:37:03:3a:11:be:58:15:2b:ae:8c:49:40:b1:bb:
         82:fd:53:ab:b3:06:7b:f3:34:a9:a5:eb:2e:71:5a:53:c5:a6:
         f5:ca:89:f7:c3:9e:e8:1d:c1:1d:53:3c:f9:02:4c:89:9e:c2:
         53:10:89:00:2a:0a:7c:8b:54:68:32:33:88:29:57:4b:3a:75:
         45:76:a8:c5:92:7b:d2:66:53:64:5d:b6:4c:6a:82:5f:ad:fd:
         2d:c7:3b:91:ad:d6:4c:23:ad:32:38:2a:2d:75:c4:18:aa:57:
         3c:c4:c2:9b:a0:8e:21:32:5e:7a:b6:43:4f:a9:f2:4b:95:9c:
         1f:43:db:4c:25:b8:88:29:b9:cf:ae:c3:3e:ea:2c:6c:9b:46:
         b1:e9:0b:e9:e4:11:21:d1:4d:1a:f2:b9:8b:3c:6f:5d:f4:d9:
         71:78:e9:01:5c:21:6c:70:70:94:78:61:1c:3c:a2:a7:13:50:
         84:05:90:d3:91:a8:1e:a9:06:b7:65:ee:9a:0e:1a:8a:bd:71:
         50:92:95:63:d0:bd:b3:06:9d:7f:73:72:dc:9e:a7:36:17:cc:
         ac:f4:87:9f:d2:24:09:c1:96:3b:95:80:d7:9c:c5:19:fe:6d:
         64:af:51:2a:10:43:9c:11:62:6f:fd:59:79:7d:de:dd:c1:d0:
         8a:e7:37:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:05:40 2026 by rpki-client