Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/34352e3233302e3132372e302f32342d3234203d3e20323633313537.roa
File:                     34352e3233302e3132372e302f32342d3234203d3e20323633313537.roa (raw, json)
Hash identifier:          HcSNN5bXl4U8NFg8DTwsSmyyovi/eKFy8+5fGYxEPew=
Subject key identifier:   54:B8:A3:19:88:E9:20:75:7E:BE:BF:FE:DE:49:F7:F2:9E:2A:CF:74
Certificate issuer:       /CN=CD3DD97368EF3155FD117CD3038DE90CAB31E1F6
Certificate serial:       12E04B374EB5B8D73EAC6F68CD99496A14824699
Authority key identifier: CD:3D:D9:73:68:EF:31:55:FD:11:7C:D3:03:8D:E9:0C:AB:31:E1:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/34352e3233302e3132372e302f32342d3234203d3e20323633313537.roa
Signing time:             Tue 01 Sep 2026 18:25:00 +0000
ROA not before:           Tue 01 Sep 2026 18:20:00 +0000
ROA not after:            Tue 31 Aug 2027 18:25:00 +0000
asID:                     263157
IP address blocks:        45.230.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e0:4b:37:4e:b5:b8:d7:3e:ac:6f:68:cd:99:49:6a:14:82:46:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD3DD97368EF3155FD117CD3038DE90CAB31E1F6
        Validity
            Not Before: Sep  1 18:20:00 2026 GMT
            Not After : Aug 31 18:25:00 2027 GMT
        Subject: CN=54B8A31988E920757EBEBFFEDE49F7F29E2ACF74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:05:75:56:70:7d:1d:a0:39:2b:5d:bb:8d:a0:
                    83:6a:4d:36:9c:25:51:cb:7f:94:c3:84:99:84:78:
                    9c:af:82:50:8d:3d:b6:93:19:13:fd:80:bb:b5:14:
                    8a:e5:ca:34:4b:5f:77:a0:28:d5:19:a3:5e:63:89:
                    f5:4c:1f:45:ec:04:82:d7:4e:c4:4d:ad:fb:59:17:
                    ba:75:e6:e3:21:a6:b0:ef:60:9c:d9:91:e7:54:f5:
                    e2:d6:ac:a6:0f:d1:4b:6e:36:07:85:13:e1:e9:86:
                    49:83:fc:db:0c:c5:79:92:07:23:ca:35:18:e4:ba:
                    6f:d1:d0:77:b4:ac:a1:77:db:f4:a8:51:e8:74:39:
                    86:98:42:fd:d4:90:3c:75:55:a4:54:43:95:32:9c:
                    75:68:8f:02:b8:dd:17:e6:1f:d3:b5:e6:59:e8:28:
                    95:68:0a:e5:dc:07:9f:b2:ab:84:e5:c0:a6:de:38:
                    5f:7a:95:ac:99:b1:00:92:51:c1:f8:f2:06:b7:71:
                    6b:11:07:95:86:89:39:c4:74:7c:ba:e8:14:77:68:
                    a0:59:a4:62:5a:5d:8d:d0:6e:b7:43:ab:a1:17:6c:
                    0c:cd:0a:1b:62:31:8d:0a:08:90:d6:66:cb:28:1f:
                    54:9a:d2:23:fb:63:b9:1d:67:5a:0b:a2:4a:ff:77:
                    45:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B8:A3:19:88:E9:20:75:7E:BE:BF:FE:DE:49:F7:F2:9E:2A:CF:74
            X509v3 Authority Key Identifier:
                keyid:CD:3D:D9:73:68:EF:31:55:FD:11:7C:D3:03:8D:E9:0C:AB:31:E1:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/34352e3233302e3132372e302f32342d3234203d3e20323633313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:6b:f4:25:b1:e1:d7:57:56:cd:eb:aa:fc:ed:0a:63:92:b7:
         2f:18:b2:50:57:97:98:4b:76:7b:7a:cf:0c:47:d9:2c:f5:34:
         71:88:6c:3d:dc:1c:0c:26:bb:d5:a0:82:84:63:87:a1:c6:8c:
         61:c8:a3:92:d3:fa:1a:49:18:70:21:33:8f:3d:dd:ea:a8:4c:
         31:6d:80:e8:5d:9c:c2:39:04:0a:5b:24:57:41:3b:ab:98:90:
         87:fa:62:fb:d4:02:46:73:ba:3b:5e:a4:99:65:90:b6:6e:36:
         d5:90:84:de:f2:2e:bd:48:63:9d:73:5e:30:16:aa:94:36:34:
         36:4b:ed:21:99:22:37:e2:7d:45:ee:f7:da:d0:3e:7a:19:c3:
         59:17:05:42:46:17:d6:5c:64:2c:ec:ee:be:b3:67:42:e5:bc:
         21:29:33:83:a8:4f:e8:22:35:63:81:f6:58:79:70:33:6e:5b:
         79:b5:16:2e:26:6a:1e:9f:42:0d:5f:4c:7a:61:95:a7:2b:bf:
         44:e6:82:d2:bf:3e:80:aa:98:52:ca:e5:cc:c6:1e:d2:f7:40:
         25:f7:f0:36:ff:63:72:f1:30:3d:34:de:b5:43:d0:69:9e:c8:
         14:2d:8e:17:5c:1b:b7:7f:e8:c8:62:17:8d:aa:44:bb:66:03:
         f8:57:50:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:07:45 2026 by rpki-client