Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/34352e3232372e352e302f32342d3234203d3e20323636363639.roa
File:                     34352e3232372e352e302f32342d3234203d3e20323636363639.roa (raw, json)
Hash identifier:          9yD7vzhwo8KbfxB3Z2ng21lrc0OAal7ANBkbmJBarM4=
Subject key identifier:   E6:97:5F:B9:E8:2F:6C:C3:9F:FE:E0:8F:58:B3:B3:11:F6:5D:24:C8
Certificate issuer:       /CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
Certificate serial:       21C1846CC6B140F597E9525D7B21661B7B1ED5D2
Authority key identifier: AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/34352e3232372e352e302f32342d3234203d3e20323636363639.roa
Signing time:             Mon 07 Sep 2026 17:34:10 +0000
ROA not before:           Mon 07 Sep 2026 17:29:10 +0000
ROA not after:            Mon 06 Sep 2027 17:34:10 +0000
asID:                     266669
IP address blocks:        45.227.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c1:84:6c:c6:b1:40:f5:97:e9:52:5d:7b:21:66:1b:7b:1e:d5:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
        Validity
            Not Before: Sep  7 17:29:10 2026 GMT
            Not After : Sep  6 17:34:10 2027 GMT
        Subject: CN=E6975FB9E82F6CC39FFEE08F58B3B311F65D24C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bb:7a:f7:f4:d3:e8:a2:24:e3:b4:09:94:c4:
                    fb:3e:91:42:f0:a3:d6:24:82:5e:06:00:1b:26:8a:
                    6f:ec:cf:5a:b3:61:e1:c0:d8:4b:4f:58:87:ab:09:
                    ae:0f:d8:22:08:09:98:1e:2a:3b:31:15:96:a7:0b:
                    f9:f6:0c:ea:2e:11:9c:e8:4f:3e:64:da:d3:c5:44:
                    2a:af:72:27:9f:21:cf:e2:84:d9:be:85:24:b4:c1:
                    54:fc:98:f0:4d:34:2c:9f:6d:07:ca:f6:60:fc:0e:
                    6d:98:69:86:29:fe:44:9a:62:e7:52:ac:50:fc:99:
                    72:ef:03:a0:73:ab:8f:9b:5e:82:d8:da:f8:39:49:
                    e8:8e:1b:6d:32:4a:7f:e5:4d:d0:c4:46:6b:24:31:
                    61:1d:55:72:46:4f:00:49:d8:36:07:3b:57:21:79:
                    22:08:b1:6d:14:a3:c4:89:dd:19:0b:e7:b0:bd:0d:
                    28:5c:42:ca:3e:e5:43:74:d0:ee:8f:3f:d2:cc:b0:
                    16:35:a1:69:c9:97:aa:c2:1c:19:78:2e:bc:b2:9a:
                    4b:5d:b9:4a:3f:a9:88:3d:06:70:04:bf:40:f6:9d:
                    0e:0d:30:b5:63:a0:26:22:ec:f6:e7:41:7d:60:05:
                    14:84:85:4b:e1:54:5a:1d:a9:8b:6d:61:b1:a9:b6:
                    f5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:97:5F:B9:E8:2F:6C:C3:9F:FE:E0:8F:58:B3:B3:11:F6:5D:24:C8
            X509v3 Authority Key Identifier:
                keyid:AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/34352e3232372e352e302f32342d3234203d3e20323636363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:e4:50:14:98:d0:b4:f2:7d:0c:f9:6b:a7:09:de:be:3c:7e:
         f9:d3:8d:08:97:30:3a:43:7b:63:f1:9e:4f:cc:96:b0:93:16:
         67:a2:35:47:af:43:72:de:fa:e0:39:e9:6f:e0:fb:53:34:bf:
         27:d5:cf:9a:48:34:b3:36:ac:ef:f3:46:a2:12:c3:22:23:df:
         2a:01:d9:da:27:7f:fc:79:11:7d:92:87:2b:60:57:fd:b4:8c:
         f6:8a:b5:56:fb:78:13:1d:c9:db:66:58:00:c3:2e:65:e5:77:
         9b:9a:fa:cf:03:26:0a:b7:fd:59:cc:4b:5a:7e:fc:85:a6:34:
         cf:a4:3e:3b:fd:53:66:38:a2:87:65:04:5a:dc:79:79:19:13:
         4e:d2:f7:b3:34:71:db:7d:1e:18:af:e3:e0:03:ab:87:87:ee:
         7f:0b:59:28:a4:d2:47:f7:d3:c7:8c:10:1b:f7:8b:18:a0:f2:
         e7:d8:26:d0:a1:76:f6:8a:a4:cf:03:93:da:2a:c7:53:5c:ec:
         ea:12:1f:81:f2:42:8c:3d:e5:3b:46:84:e9:64:79:ed:4a:d1:
         a3:c1:71:89:a6:89:ed:74:31:a6:6e:02:3b:19:f4:18:ee:36:
         c5:3d:19:55:fc:d1:32:46:32:1b:0d:60:31:bb:24:3c:7a:92:
         b8:39:0e:c2
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUIcGEbMaxQPWX6VJdeyFmG3se1dIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE3MTg5Qzc1RTlCRkNCNDFBMzc2QUYzMzMwM0Y2MkU4
MDlBRDFERjAeFw0yNjA5MDcxNzI5MTBaFw0yNzA5MDYxNzM0MTBaMDMxMTAvBgNV
BAMTKEU2OTc1RkI5RTgyRjZDQzM5RkZFRTA4RjU4QjNCMzExRjY1RDI0QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRu3r39NPooiTjtAmUxPs+kULw
o9Ykgl4GABsmim/sz1qzYeHA2EtPWIerCa4P2CIICZgeKjsxFZanC/n2DOouEZzo
Tz5k2tPFRCqvciefIc/ihNm+hSS0wVT8mPBNNCyfbQfK9mD8Dm2YaYYp/kSaYudS
rFD8mXLvA6Bzq4+bXoLY2vg5SeiOG20ySn/lTdDERmskMWEdVXJGTwBJ2DYHO1ch
eSIIsW0Uo8SJ3RkL57C9DShcQso+5UN00O6PP9LMsBY1oWnJl6rCHBl4Lryymktd
uUo/qYg9BnAEv0D2nQ4NMLVjoCYi7PbnQX1gBRSEhUvhVFodqYttYbGptvWtAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU5pdfuegvbMOf/uCPWLOzEfZdJMgwHwYDVR0j
BBgwFoAUqnGJx16b/LQaN2rzMwP2LoCa0d8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMEVENEMwN0VCNjY2ODdCMDIxMkM1NTMzMkQwRkJEMTc2
NDBDODlGNEE4RjYwOTZDNzY5RkFEOEI4MTlFQkZFLzAvQUE3MTg5Qzc1RTlCRkNC
NDFBMzc2QUYzMzMwM0Y2MkU4MDlBRDFERi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTcxODlDNzVFOUJGQ0I0MUEz
NzZBRjMzMzAzRjYyRTgwOUFEMURGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjBFRDRDMDdFQjY2Njg3QjAyMTJDNTUzMzJEMEZCRDE3NjQwQzg5RjRB
OEY2MDk2Qzc2OUZBRDhCODE5RUJGRS8wLzM0MzUyZTMyMzIzNzJlMzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzNjM2Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt4wUwDQYJ
KoZIhvcNAQELBQADggEBAMLkUBSY0LTyfQz5a6cJ3r48fvnTjQiXMDpDe2Pxnk/M
lrCTFmeiNUevQ3Le+uA56W/g+1M0vyfVz5pINLM2rO/zRqISwyIj3yoB2donf/x5
EX2ShytgV/20jPaKtVb7eBMdydtmWADDLmXld5ua+s8DJgq3/VnMS1p+/IWmNM+k
Pjv9U2Y4oodlBFrceXkZE07S97M0cdt9Hhiv4+ADq4eH7n8LWSik0kf308eMEBv3
ixig8ufYJtChdvaKpM8Dk9oqx1Nc7OoSH4HyQow95TtGhOlkee1K0aPBcYmmie10
MaZuAjsZ9BjuNsU9GVX80TJGMhsNYDG7JDx6krg5DsI=
-----END CERTIFICATE-----
Generated at Fri Sep 18 21:32:18 2026 by rpki-client