Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/34352e3232392e3139332e302f32342d3239203d3e20323639383935.roa
File:                     34352e3232392e3139332e302f32342d3239203d3e20323639383935.roa (raw, json)
Hash identifier:          c0WfXohjqkQfF2XgoPcUXb47++FZixjD5eDU+6duItU=
Subject key identifier:   A3:7E:E9:C5:F8:F6:0E:61:CE:6D:3B:FA:C4:D1:41:73:39:FE:BD:12
Certificate issuer:       /CN=096026F2035C01DFDDA491A54F0110D751D4B655
Certificate serial:       52B68C9E66893C5FD6DF7953A703D3C40E4CBE9A
Authority key identifier: 09:60:26:F2:03:5C:01:DF:DD:A4:91:A5:4F:01:10:D7:51:D4:B6:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096026F2035C01DFDDA491A54F0110D751D4B655.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/34352e3232392e3139332e302f32342d3239203d3e20323639383935.roa
Signing time:             Fri 11 Sep 2026 02:15:00 +0000
ROA not before:           Fri 11 Sep 2026 02:10:00 +0000
ROA not after:            Fri 10 Sep 2027 02:15:00 +0000
asID:                     269895
IP address blocks:        45.229.193.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/096026F2035C01DFDDA491A54F0110D751D4B655.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/096026F2035C01DFDDA491A54F0110D751D4B655.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096026F2035C01DFDDA491A54F0110D751D4B655.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 05:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b6:8c:9e:66:89:3c:5f:d6:df:79:53:a7:03:d3:c4:0e:4c:be:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096026F2035C01DFDDA491A54F0110D751D4B655
        Validity
            Not Before: Sep 11 02:10:00 2026 GMT
            Not After : Sep 10 02:15:00 2027 GMT
        Subject: CN=A37EE9C5F8F60E61CE6D3BFAC4D1417339FEBD12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:63:3b:d9:b4:0a:13:e8:d3:01:b7:13:2f:bd:
                    63:04:f7:33:97:32:3c:2e:7e:05:1b:a0:56:d3:e1:
                    b9:12:8d:77:68:11:e1:c6:ab:3a:6c:a3:f7:0a:ec:
                    8b:ff:79:99:e1:29:40:a4:43:62:d7:8e:ae:d4:25:
                    9a:3a:93:1a:74:51:d6:71:a4:70:72:53:43:50:39:
                    83:5b:db:ae:23:f6:40:a8:8d:4c:5d:9f:6e:ad:46:
                    4e:d7:9b:b6:57:8c:70:34:8a:3e:62:a7:19:e4:78:
                    21:17:1f:e9:8c:15:01:1a:4e:c6:a0:81:c4:a0:1e:
                    c7:70:8d:cf:21:88:36:a8:fc:9a:8e:0f:77:76:e2:
                    c9:9d:2d:d3:b1:b4:f6:83:20:1d:06:e5:bc:8f:00:
                    15:d0:87:f3:0b:e0:58:52:4e:ee:fc:e4:dd:ee:43:
                    cf:4a:bc:a8:97:16:b5:ca:9e:fe:4c:25:1e:57:76:
                    f1:36:31:87:00:60:50:36:01:52:ce:c8:56:62:01:
                    13:2a:c4:d5:09:29:9e:ed:9e:d5:a0:85:39:6c:7d:
                    17:0d:f5:22:9f:8a:57:9d:dc:90:2f:ca:12:1c:fc:
                    64:31:dc:16:1c:f4:2c:d0:e9:22:b5:4b:6d:ed:71:
                    b6:36:61:53:84:5b:07:2a:df:08:7a:9c:db:6c:b3:
                    2c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7E:E9:C5:F8:F6:0E:61:CE:6D:3B:FA:C4:D1:41:73:39:FE:BD:12
            X509v3 Authority Key Identifier:
                keyid:09:60:26:F2:03:5C:01:DF:DD:A4:91:A5:4F:01:10:D7:51:D4:B6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/096026F2035C01DFDDA491A54F0110D751D4B655.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096026F2035C01DFDDA491A54F0110D751D4B655.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/34352e3232392e3139332e302f32342d3239203d3e20323639383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:04:c2:b6:12:d0:92:bf:b1:c9:08:5b:a3:05:36:e1:4e:53:
         06:f1:4d:61:7b:9b:d2:da:c8:70:5b:84:8a:08:e7:84:91:86:
         86:55:8a:b5:30:9d:d1:96:bd:3f:a9:f8:0a:74:7e:01:eb:d1:
         ac:f5:4b:71:d2:96:c4:bc:9f:cd:33:70:51:0d:a8:04:7f:30:
         8f:df:65:3b:4a:07:ca:be:47:1d:97:54:49:6d:fc:2e:0d:cc:
         9b:56:b4:6b:83:a7:ba:1c:e3:2b:6e:e3:b1:83:98:17:b7:48:
         83:e6:09:4c:4c:1b:dd:5d:4d:f0:ed:5e:14:14:5e:53:fa:b6:
         ac:3b:b3:16:8c:cd:16:d8:74:58:7c:e9:9d:fb:ca:6e:8c:56:
         4a:88:08:ea:32:74:4e:bf:7e:f5:5a:a8:d9:8a:70:77:27:8f:
         e6:05:62:35:04:70:ca:f3:7d:59:dc:06:7e:e4:ea:c3:22:46:
         11:27:ff:60:1a:6e:b5:7d:72:e9:55:d6:a6:bd:76:3b:3c:70:
         f4:8e:25:57:7b:e9:62:c8:63:a8:41:e3:76:30:b4:e7:bf:15:
         c2:97:ea:4d:8c:5c:94:6d:35:2b:7a:11:44:56:57:49:cb:a9:
         38:ef:35:1a:9f:7b:87:e4:16:7e:0b:99:92:b6:b7:ec:c0:5a:
         41:b9:0c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:47:37 2026 by rpki-client