Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/34352e3139312e35302e302f32342d3234203d3e20323733393733.roa
File:                     34352e3139312e35302e302f32342d3234203d3e20323733393733.roa (raw, json)
Hash identifier:          d2mjFOH4hJh3zIlc47zBmKWT6XsIsaPShppg1lRzKaE=
Subject key identifier:   FE:88:EA:02:63:D2:2E:51:55:33:62:FD:86:78:DD:43:81:25:B3:6E
Certificate issuer:       /CN=5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D
Certificate serial:       2144ED05777A0A442C6BA5D01A554ADB0E9DAA36
Authority key identifier: 5E:20:38:E8:41:92:BA:FB:E7:BC:D3:AC:CA:5B:C5:B4:3E:61:DA:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/34352e3139312e35302e302f32342d3234203d3e20323733393733.roa
Signing time:             Wed 09 Sep 2026 13:34:46 +0000
ROA not before:           Wed 09 Sep 2026 13:29:46 +0000
ROA not after:            Wed 08 Sep 2027 13:34:46 +0000
asID:                     273973
IP address blocks:        45.191.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:44:ed:05:77:7a:0a:44:2c:6b:a5:d0:1a:55:4a:db:0e:9d:aa:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D
        Validity
            Not Before: Sep  9 13:29:46 2026 GMT
            Not After : Sep  8 13:34:46 2027 GMT
        Subject: CN=FE88EA0263D22E51553362FD8678DD438125B36E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d1:9a:d5:b6:fa:fa:6c:d4:ec:e6:7a:67:50:
                    ff:cc:1a:56:9a:75:6a:9a:28:bd:56:07:8a:b3:b3:
                    71:e4:ed:03:92:78:a1:b5:29:18:6b:50:4c:dd:af:
                    b2:e4:a2:aa:be:24:cf:cd:d8:91:b0:0e:c3:a5:9e:
                    3f:e2:92:84:b4:6f:e0:cf:c8:a2:1f:c4:87:0b:44:
                    7f:55:0e:7c:99:38:75:bc:36:9b:c7:57:2b:c1:1b:
                    f4:fc:3b:de:b3:5e:28:e7:b8:2e:1d:eb:06:72:4d:
                    a3:39:e2:f1:be:5a:b9:f7:7f:7c:1e:b2:1f:7e:b1:
                    e9:60:a4:8e:1d:c0:5a:a2:61:78:75:4e:0b:f2:98:
                    b5:27:a9:fa:60:c7:e1:26:da:6e:ec:8b:6b:3c:1e:
                    99:d1:f8:f7:f5:fc:19:a3:15:5a:02:fe:0f:f5:95:
                    cc:21:42:ad:70:6b:4c:89:7b:a7:0b:9f:7b:16:8a:
                    12:22:e7:92:a9:68:54:4a:cc:f2:c9:ff:b6:ab:ca:
                    c7:5f:a5:4f:47:9d:35:21:f6:8c:7b:56:5e:55:0c:
                    59:f6:0d:e9:79:b6:67:ac:60:08:2e:08:a6:08:3d:
                    e3:23:65:54:cf:78:68:bc:1c:3f:a2:10:c1:06:e5:
                    da:68:e2:c3:96:7f:05:a5:ef:88:9d:5c:0a:31:dd:
                    b1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:88:EA:02:63:D2:2E:51:55:33:62:FD:86:78:DD:43:81:25:B3:6E
            X509v3 Authority Key Identifier:
                keyid:5E:20:38:E8:41:92:BA:FB:E7:BC:D3:AC:CA:5B:C5:B4:3E:61:DA:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/34352e3139312e35302e302f32342d3234203d3e20323733393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:1b:55:5f:07:73:e3:06:4e:b8:0b:37:8e:69:ee:a6:b2:3b:
         41:a6:54:ad:e9:20:d3:40:87:8e:bd:f8:e9:09:a7:d5:da:fb:
         36:5e:34:a6:e4:b9:7f:b9:f2:25:26:c6:e0:ad:e9:26:cd:a0:
         e1:a0:16:54:33:b9:ba:70:a5:20:8c:9c:0c:5a:33:c5:60:c5:
         d0:4e:f6:0f:a5:78:98:34:c1:c6:43:f7:64:5d:c3:fc:2e:49:
         de:68:ea:5a:5e:c3:3a:b5:c3:65:1f:85:a4:f6:8b:9e:47:6b:
         f1:1d:16:e3:d4:c8:f9:d4:be:34:89:62:e0:9b:64:c7:81:7b:
         36:dc:6d:16:04:ec:d4:23:e1:c5:7a:53:22:93:8b:59:58:ee:
         d2:18:2a:28:e5:b1:c3:9a:be:63:ff:6b:a8:3a:e7:12:72:68:
         05:b5:20:9c:a4:27:67:a6:ec:b0:fa:5e:79:cc:dd:d3:0f:51:
         0c:79:2b:cc:58:17:6d:b6:2d:23:d7:2d:48:89:7b:38:40:6b:
         2e:1b:f3:95:78:5c:9b:ba:18:db:3a:fc:3f:32:57:de:44:d6:
         ec:62:75:59:e0:05:0b:e0:48:ad:0f:cd:c4:2c:b9:3f:9b:c1:
         90:7a:65:b5:cc:d0:ca:f1:ca:75:51:52:92:0c:b8:d3:57:90:
         a9:97:09:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:48:03 2026 by rpki-client