Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/38FB856094B35F314883DE8148F4C4789ACE862C93CF4F5EADC7D59C5EAEF17A/0/34352e3233392e3132342e302f32322d3234203d3e203237393833.roa
File:                     34352e3233392e3132342e302f32322d3234203d3e203237393833.roa (raw, json)
Hash identifier:          gWawIotRlENctbUi79OKGrOURQTDa4twpBKg9AKz8Lc=
Subject key identifier:   B5:0F:83:42:86:42:55:85:9A:C2:26:24:23:C3:F1:DE:E0:C2:47:8B
Certificate issuer:       /CN=A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527
Certificate serial:       50FAEE73EA66B2D3CE33545E2706BBF2CBA1320C
Authority key identifier: A2:FE:BF:4F:33:A7:2B:CC:78:25:B6:5C:7D:0E:B6:C1:30:CB:F5:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38FB856094B35F314883DE8148F4C4789ACE862C93CF4F5EADC7D59C5EAEF17A/0/34352e3233392e3132342e302f32322d3234203d3e203237393833.roa
Signing time:             Mon 07 Sep 2026 21:34:11 +0000
ROA not before:           Mon 07 Sep 2026 21:29:11 +0000
ROA not after:            Mon 06 Sep 2027 21:34:11 +0000
asID:                     27983
IP address blocks:        45.239.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/38FB856094B35F314883DE8148F4C4789ACE862C93CF4F5EADC7D59C5EAEF17A/0/A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.crl
                          rsync://repository.lacnic.net/rpki/lacnic/38FB856094B35F314883DE8148F4C4789ACE862C93CF4F5EADC7D59C5EAEF17A/0/A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fa:ee:73:ea:66:b2:d3:ce:33:54:5e:27:06:bb:f2:cb:a1:32:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527
        Validity
            Not Before: Sep  7 21:29:11 2026 GMT
            Not After : Sep  6 21:34:11 2027 GMT
        Subject: CN=B50F8342864255859AC2262423C3F1DEE0C2478B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:74:63:e7:87:a6:c2:93:5a:00:6e:b4:44:37:
                    ed:86:56:2c:d2:c9:da:ed:59:78:f8:ef:2c:9e:90:
                    65:5f:34:6c:69:9e:b2:49:5e:2a:2d:81:65:00:9a:
                    b1:2c:58:10:5c:02:97:16:c2:4b:dc:ed:8b:be:8a:
                    33:7f:3b:13:55:05:96:dd:ba:70:bb:96:d6:a8:34:
                    d7:b3:24:71:e9:a2:7e:4e:f7:f4:42:b2:84:10:9e:
                    52:1e:63:91:85:90:c2:15:b2:ee:d7:7e:c1:fe:fa:
                    aa:9d:d1:94:db:18:dd:70:d6:f3:d5:2d:ec:b7:b1:
                    01:06:33:4f:79:e2:05:f1:6a:c4:24:97:dd:37:00:
                    4e:05:cc:ad:1b:82:cd:35:f5:3d:f1:72:7f:ad:2e:
                    5a:a3:a2:f1:af:d1:e3:31:28:49:d6:f8:e9:21:32:
                    7c:27:fb:78:6d:86:c9:83:a1:76:a6:ed:96:29:ee:
                    a9:75:d1:b0:18:de:40:9d:de:69:6f:37:8b:81:5a:
                    e6:c0:55:8e:fc:6a:9c:ab:df:ac:6f:f1:ec:1a:29:
                    ae:41:8f:c4:73:9e:d4:bb:49:40:44:bf:db:de:e2:
                    00:86:6d:d6:d0:13:4c:7e:55:40:1c:a5:cf:36:83:
                    11:d4:61:87:e8:bb:7c:16:d6:eb:2d:88:f2:45:55:
                    9c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0F:83:42:86:42:55:85:9A:C2:26:24:23:C3:F1:DE:E0:C2:47:8B
            X509v3 Authority Key Identifier:
                keyid:A2:FE:BF:4F:33:A7:2B:CC:78:25:B6:5C:7D:0E:B6:C1:30:CB:F5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38FB856094B35F314883DE8148F4C4789ACE862C93CF4F5EADC7D59C5EAEF17A/0/A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2FEBF4F33A72BCC7825B65C7D0EB6C130CBF527.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38FB856094B35F314883DE8148F4C4789ACE862C93CF4F5EADC7D59C5EAEF17A/0/34352e3233392e3132342e302f32322d3234203d3e203237393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:da:bb:ee:ca:51:f7:b4:0d:39:fd:36:80:aa:9e:9c:d4:d1:
         a2:5e:17:f8:1c:a4:98:cd:e8:43:76:d8:7d:c5:5a:c4:f2:e6:
         99:4d:5b:0d:33:ee:e9:b3:36:b3:ec:5a:15:73:3f:e7:be:2a:
         0b:1a:91:a2:1d:5e:e2:56:4d:8d:c6:6f:e9:d4:4f:df:41:4b:
         5d:e1:55:e5:76:68:0e:61:ae:70:a1:5b:e7:b4:c7:b4:62:e0:
         da:1c:c0:e9:7b:65:f7:e3:b1:cf:87:4e:68:03:2a:8c:87:7b:
         35:00:b0:6b:92:d1:cd:12:e3:a4:f9:fd:0f:38:e6:4c:7b:82:
         3c:dd:ee:24:31:d9:f7:c3:cb:8c:1b:45:c4:74:49:2d:d0:72:
         ed:c4:00:25:aa:5e:68:e2:13:92:d7:98:2c:08:78:ef:bc:c8:
         de:84:62:5a:16:42:be:e9:eb:c9:43:79:4d:0a:67:8c:49:03:
         7f:71:d2:ae:ef:6d:dc:cf:d4:d2:3c:dd:52:eb:26:db:fd:b1:
         2a:ff:69:31:41:be:d7:1e:7d:27:1a:50:b5:b6:5b:38:65:19:
         cb:5a:0a:b3:25:9c:aa:8e:60:da:16:a4:2f:e3:95:05:01:14:
         b3:ba:05:c1:ca:f6:c9:9c:d5:ca:29:20:67:b9:e4:4c:89:ec:
         44:69:24:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:27:59 2026 by rpki-client