Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/31F46FC9D622680A19738AE95B7C6401E05770F90D4CE094F5736F50BED5C7FE/0/34352e3138382e3231322e302f32322d3234203d3e20323633373536.roa
File:                     34352e3138382e3231322e302f32322d3234203d3e20323633373536.roa (raw, json)
Hash identifier:          vfdLcprQPHMFRwv4ZxF9Kf43ww8SsD5YGFWUk7L0Vcw=
Subject key identifier:   8F:84:97:CD:8E:6C:16:A9:62:EA:40:0E:79:BD:1F:37:E2:8C:99:3A
Certificate issuer:       /CN=09AEFE60DFE764717F1BA27B10346D8ED3439F05
Certificate serial:       3FBD554005CC210DDF43E1EF362969DA8B8470B9
Authority key identifier: 09:AE:FE:60:DF:E7:64:71:7F:1B:A2:7B:10:34:6D:8E:D3:43:9F:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09AEFE60DFE764717F1BA27B10346D8ED3439F05.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/31F46FC9D622680A19738AE95B7C6401E05770F90D4CE094F5736F50BED5C7FE/0/34352e3138382e3231322e302f32322d3234203d3e20323633373536.roa
Signing time:             Wed 14 Oct 2026 17:05:00 +0000
ROA not before:           Wed 14 Oct 2026 17:00:00 +0000
ROA not after:            Wed 13 Oct 2027 17:05:00 +0000
asID:                     263756
IP address blocks:        45.188.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/31F46FC9D622680A19738AE95B7C6401E05770F90D4CE094F5736F50BED5C7FE/0/09AEFE60DFE764717F1BA27B10346D8ED3439F05.crl
                          rsync://repository.lacnic.net/rpki/lacnic/31F46FC9D622680A19738AE95B7C6401E05770F90D4CE094F5736F50BED5C7FE/0/09AEFE60DFE764717F1BA27B10346D8ED3439F05.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09AEFE60DFE764717F1BA27B10346D8ED3439F05.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 06:47:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:bd:55:40:05:cc:21:0d:df:43:e1:ef:36:29:69:da:8b:84:70:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09AEFE60DFE764717F1BA27B10346D8ED3439F05
        Validity
            Not Before: Oct 14 17:00:00 2026 GMT
            Not After : Oct 13 17:05:00 2027 GMT
        Subject: CN=8F8497CD8E6C16A962EA400E79BD1F37E28C993A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8a:15:c3:10:19:b6:db:da:7b:6b:09:d0:d7:
                    17:c6:0e:da:7c:d7:c8:57:25:e3:d8:d3:6e:68:0f:
                    27:18:33:3a:c1:7e:aa:de:d7:09:f8:e8:d7:62:65:
                    8d:7a:ce:89:92:40:6f:68:4d:01:57:1d:9a:3b:26:
                    b2:64:59:a1:ba:cd:3b:39:35:b1:77:ca:51:0a:b4:
                    e8:9f:6b:6a:92:f1:26:a9:af:af:96:c0:01:bf:a0:
                    a3:d4:89:0a:7c:f5:1c:8a:f1:e3:b3:c1:ae:93:20:
                    22:cb:f7:ca:97:57:58:0d:95:d6:97:c8:50:c6:a4:
                    c7:19:20:1b:28:ce:fd:bb:6b:ce:0d:f3:6b:c3:40:
                    94:31:99:b8:e1:60:9f:05:55:bb:52:c0:ee:6f:fc:
                    3f:e0:4a:74:9e:88:95:39:5f:fd:66:8a:e5:df:1f:
                    8b:55:d1:9e:fa:09:67:1a:df:e3:48:16:43:d3:a1:
                    8c:6d:f9:33:69:89:dc:0f:da:4a:79:b9:c6:ab:be:
                    e3:55:4c:eb:44:b1:2b:c3:04:e5:56:5a:85:f3:7f:
                    72:19:38:06:3d:8c:cf:96:b9:9d:98:8b:66:e3:67:
                    72:4d:de:08:fb:6e:32:27:31:09:42:00:8c:1f:0d:
                    50:81:10:c4:44:b9:c5:91:52:96:fb:7c:f1:7d:20:
                    e7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:84:97:CD:8E:6C:16:A9:62:EA:40:0E:79:BD:1F:37:E2:8C:99:3A
            X509v3 Authority Key Identifier:
                keyid:09:AE:FE:60:DF:E7:64:71:7F:1B:A2:7B:10:34:6D:8E:D3:43:9F:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/31F46FC9D622680A19738AE95B7C6401E05770F90D4CE094F5736F50BED5C7FE/0/09AEFE60DFE764717F1BA27B10346D8ED3439F05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09AEFE60DFE764717F1BA27B10346D8ED3439F05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/31F46FC9D622680A19738AE95B7C6401E05770F90D4CE094F5736F50BED5C7FE/0/34352e3138382e3231322e302f32322d3234203d3e20323633373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:94:c5:8d:dd:15:68:80:e7:e9:05:ab:e1:36:24:c4:cf:b7:
         a6:ed:e3:68:cc:ab:da:45:9d:bd:b9:fa:fe:94:db:a5:c5:3d:
         f0:9c:73:96:9f:a5:9b:22:88:bb:d7:c6:44:9f:23:6f:a5:f1:
         af:11:5d:e1:4c:30:4f:a4:c4:2a:c8:99:92:75:65:f8:2d:c1:
         dc:a8:57:81:4c:4d:1a:42:66:2a:4b:f0:88:74:cf:23:26:a6:
         16:4f:74:80:71:a0:e2:72:12:6f:de:20:4d:fc:a3:ea:93:d6:
         e8:72:2e:f1:d1:27:82:48:56:5e:f3:f3:2b:63:bd:6a:b0:e0:
         ba:89:2c:72:1f:1c:1a:4c:74:50:3c:40:07:10:60:19:81:24:
         2c:0e:b6:ec:d4:f1:23:d5:9e:dc:53:e4:20:29:3c:55:4f:95:
         09:e4:0e:fd:20:e3:5a:84:e7:9c:1f:39:0e:66:ce:c5:24:07:
         3f:06:47:ad:c0:5a:86:c5:7e:04:e9:43:4f:15:d8:65:29:0c:
         bf:f4:95:f4:39:8b:90:d9:69:4b:16:83:d4:0b:9e:eb:37:3f:
         f4:e9:5c:25:b2:78:97:37:a6:70:3b:82:30:cf:a2:f9:5c:4d:
         ac:f7:3b:4b:d2:7a:9b:d9:23:05:03:96:b6:9c:81:c7:6b:c2:
         7b:e2:23:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:13:48 2026 by rpki-client