Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/34352e3136322e3138342e302f32322d3232203d3e203136363239.roa
File:                     34352e3136322e3138342e302f32322d3232203d3e203136363239.roa (raw, json)
Hash identifier:          ZvS+pvyj7uhX5d4YKmsZIsUM0XdrO9s4dV5F7cw7Y2M=
Subject key identifier:   19:88:AB:36:15:2C:A1:38:3E:FC:DB:D7:18:C4:75:CF:5F:5E:CE:11
Certificate issuer:       /CN=E9BD71B0FDCC660140582C799E734F25C80A1196
Certificate serial:       5A6C20651FD3453468EAE1E6EF59769CD5B71074
Authority key identifier: E9:BD:71:B0:FD:CC:66:01:40:58:2C:79:9E:73:4F:25:C8:0A:11:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/34352e3136322e3138342e302f32322d3232203d3e203136363239.roa
Signing time:             Sat 16 May 2026 01:42:47 +0000
ROA not before:           Sat 16 May 2026 01:37:47 +0000
ROA not after:            Sat 15 May 2027 01:42:47 +0000
asID:                     16629
IP address blocks:        45.162.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6c:20:65:1f:d3:45:34:68:ea:e1:e6:ef:59:76:9c:d5:b7:10:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9BD71B0FDCC660140582C799E734F25C80A1196
        Validity
            Not Before: May 16 01:37:47 2026 GMT
            Not After : May 15 01:42:47 2027 GMT
        Subject: CN=1988AB36152CA1383EFCDBD718C475CF5F5ECE11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:40:4d:6d:5c:dd:94:31:24:1f:ea:56:f1:a0:
                    b9:dc:04:f7:95:12:d0:5b:19:ab:35:92:0e:de:14:
                    6e:dd:af:b0:ee:a5:5b:29:60:2d:02:73:e2:5c:fb:
                    2e:0c:98:0e:b0:9e:72:17:2b:75:6d:43:10:15:ce:
                    6d:b5:b1:0d:05:71:bb:f7:4c:3b:01:32:e7:ca:1f:
                    0e:08:44:71:5e:39:f7:61:cd:26:26:78:6d:05:0c:
                    e8:cf:e3:07:17:27:fc:5f:27:89:2f:08:b5:14:27:
                    78:9e:ea:9c:1f:3f:5b:98:2a:71:b1:bf:34:4c:a3:
                    29:5c:a5:4c:a4:af:34:78:79:39:d5:9b:cb:35:5a:
                    67:e4:09:97:8e:bb:da:95:d1:40:b8:ed:0d:77:d5:
                    e2:c5:b5:6e:4e:72:87:6e:d3:4a:a9:55:ad:92:a9:
                    53:60:45:79:8a:95:75:14:2c:1e:17:84:ad:06:85:
                    03:10:e1:2a:b1:3e:ca:3f:c9:30:62:3e:07:77:9b:
                    d5:c2:5e:13:39:a8:d1:76:e4:b7:9d:3a:cd:6e:f9:
                    e2:94:65:28:81:f3:04:b4:30:36:00:a3:33:c4:e7:
                    3d:a2:f7:54:04:26:85:2a:3b:59:ad:cb:c5:25:2c:
                    fc:e7:d7:61:c6:28:e4:e6:81:69:33:d9:4a:e3:5f:
                    b0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:88:AB:36:15:2C:A1:38:3E:FC:DB:D7:18:C4:75:CF:5F:5E:CE:11
            X509v3 Authority Key Identifier:
                keyid:E9:BD:71:B0:FD:CC:66:01:40:58:2C:79:9E:73:4F:25:C8:0A:11:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/34352e3136322e3138342e302f32322d3232203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:58:c2:e1:6a:1c:79:27:32:e5:8d:de:66:3f:49:7c:3e:d7:
         23:a6:b6:7b:2a:6f:35:55:a7:0a:fe:35:a1:77:cd:22:aa:bb:
         5a:32:09:0b:50:8a:2a:ea:98:95:e0:73:53:b4:2c:fe:dd:74:
         d6:74:25:5e:2a:59:17:05:39:2c:12:87:9a:07:06:e4:54:14:
         a7:af:46:e3:30:01:9a:de:5f:88:a2:b0:8e:31:d8:9b:51:27:
         83:97:30:c2:8d:42:16:52:51:f1:e0:49:d0:b2:a8:46:34:5b:
         57:9e:d3:2f:8e:4c:5a:0a:e2:65:b8:47:1a:33:0f:89:16:f9:
         44:06:85:0b:49:ed:6d:ac:07:0d:94:ac:31:a1:d5:9f:af:cf:
         47:bd:56:67:03:5a:94:6d:94:9c:b6:70:2d:f4:84:88:81:ab:
         c4:9b:e3:f4:21:14:77:11:ca:fd:90:33:57:8c:a8:45:ce:ad:
         a7:30:28:9f:57:a2:0f:d9:1f:44:e1:4b:25:d4:57:48:3d:99:
         65:ff:c4:ff:71:c7:45:d5:77:30:0e:e0:18:aa:98:05:22:51:
         00:bd:ab:41:07:7a:e4:03:b9:52:f4:cb:65:8c:bd:8e:a4:7c:
         0b:d1:81:33:cc:67:dd:56:3d:d0:9d:46:5f:6a:70:67:0d:50:
         30:7f:8d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:36:56 2026 by rpki-client