Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4FF4E360FA5AA65B38880D0FD2F73B4AAF8FED36ACE02A776A3294553A6E4C60/0/34352e3233362e38322e302f32342d3234203d3e20323636373934.roa
File:                     34352e3233362e38322e302f32342d3234203d3e20323636373934.roa (raw, json)
Hash identifier:          L1Uks7TmR32gghLeqsihxulusDzbHBlFa1jfvo0HNkI=
Subject key identifier:   0D:6E:26:D7:52:E3:9D:8D:36:C3:B7:2E:C5:70:86:99:D8:18:E3:5E
Certificate issuer:       /CN=9FE81A9D6A9B36D6B8E8F02955BEF63C3210C9E0
Certificate serial:       48D085463CA965CA9074D383E9EE24C0DAABF016
Authority key identifier: 9F:E8:1A:9D:6A:9B:36:D6:B8:E8:F0:29:55:BE:F6:3C:32:10:C9:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9FE81A9D6A9B36D6B8E8F02955BEF63C3210C9E0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FF4E360FA5AA65B38880D0FD2F73B4AAF8FED36ACE02A776A3294553A6E4C60/0/34352e3233362e38322e302f32342d3234203d3e20323636373934.roa
Signing time:             Thu 17 Sep 2026 16:36:00 +0000
ROA not before:           Thu 17 Sep 2026 16:31:00 +0000
ROA not after:            Thu 16 Sep 2027 16:36:00 +0000
asID:                     266794
IP address blocks:        45.236.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FF4E360FA5AA65B38880D0FD2F73B4AAF8FED36ACE02A776A3294553A6E4C60/0/9FE81A9D6A9B36D6B8E8F02955BEF63C3210C9E0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FF4E360FA5AA65B38880D0FD2F73B4AAF8FED36ACE02A776A3294553A6E4C60/0/9FE81A9D6A9B36D6B8E8F02955BEF63C3210C9E0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9FE81A9D6A9B36D6B8E8F02955BEF63C3210C9E0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 00:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d0:85:46:3c:a9:65:ca:90:74:d3:83:e9:ee:24:c0:da:ab:f0:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE81A9D6A9B36D6B8E8F02955BEF63C3210C9E0
        Validity
            Not Before: Sep 17 16:31:00 2026 GMT
            Not After : Sep 16 16:36:00 2027 GMT
        Subject: CN=0D6E26D752E39D8D36C3B72EC5708699D818E35E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0c:fb:a4:e4:3b:9b:33:29:b6:43:65:39:8e:
                    e6:41:b8:ec:f3:10:af:ec:f1:37:67:22:38:48:59:
                    e7:4b:7f:3a:c8:16:5a:7c:5e:6a:28:f9:94:a6:51:
                    8b:f2:da:83:bb:e2:0d:bc:f4:6b:b9:96:a1:15:d7:
                    ff:81:13:26:1b:f4:c9:b3:30:4b:86:1e:70:4d:d1:
                    79:8b:21:13:a8:cc:b2:0d:8e:70:65:bf:9c:4e:02:
                    37:ad:09:28:e8:7c:54:cf:31:7d:cf:33:dd:87:b3:
                    44:5b:a4:cf:1a:ee:9f:40:8d:e5:cf:3a:6c:06:49:
                    4e:df:e3:21:66:af:5d:70:59:85:bb:7b:67:1e:25:
                    f5:eb:6f:32:c1:bb:51:92:ca:7c:af:98:c6:c9:1b:
                    ec:0c:cf:f2:7c:90:e2:6e:51:34:9a:9e:6b:ec:a8:
                    78:45:cb:f0:d2:62:f5:8d:07:46:e1:82:98:79:6c:
                    52:da:85:63:eb:a7:02:67:26:d6:cd:62:74:a2:f1:
                    11:a1:d9:cb:bc:22:cd:06:75:fe:9d:0d:1e:50:c4:
                    b5:ed:c6:f1:5c:f1:cb:b2:f8:22:04:5e:f3:28:1e:
                    b4:fe:af:31:e9:7a:f9:57:1f:6b:82:ce:ea:a8:ce:
                    20:1b:c8:5b:8b:21:80:00:ef:49:b5:7e:e5:96:5d:
                    33:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6E:26:D7:52:E3:9D:8D:36:C3:B7:2E:C5:70:86:99:D8:18:E3:5E
            X509v3 Authority Key Identifier:
                keyid:9F:E8:1A:9D:6A:9B:36:D6:B8:E8:F0:29:55:BE:F6:3C:32:10:C9:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FF4E360FA5AA65B38880D0FD2F73B4AAF8FED36ACE02A776A3294553A6E4C60/0/9FE81A9D6A9B36D6B8E8F02955BEF63C3210C9E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9FE81A9D6A9B36D6B8E8F02955BEF63C3210C9E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FF4E360FA5AA65B38880D0FD2F73B4AAF8FED36ACE02A776A3294553A6E4C60/0/34352e3233362e38322e302f32342d3234203d3e20323636373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:2f:ff:9a:f8:f9:a5:4d:ea:a0:72:63:0a:b3:60:67:b1:e1:
         be:6c:ed:ad:9e:39:79:79:1c:7d:19:a7:ba:b5:9c:21:e5:22:
         a2:b4:46:36:10:30:23:e0:24:6e:c7:f5:51:1d:f8:60:55:f9:
         a2:18:9a:d3:57:e4:93:e5:7b:a2:0f:fa:8d:92:2a:f0:19:75:
         45:a8:36:c7:dd:c2:84:a3:07:14:5b:5c:0d:30:ec:8f:bc:f4:
         20:3f:13:aa:70:f4:4c:db:9b:35:ef:33:7a:49:21:40:42:36:
         36:27:bc:f0:ea:17:7c:f3:9a:a7:bc:4d:3d:64:25:67:ed:59:
         b7:6e:2a:cc:f6:96:c7:23:02:a2:18:8a:a6:a4:58:95:0d:6b:
         99:89:b1:d1:8e:a3:77:33:34:34:69:d5:bd:87:e3:32:2a:52:
         ad:29:de:14:9f:3b:27:81:f8:69:5d:38:5d:ee:bc:1e:28:44:
         2d:ad:23:ad:10:76:84:80:52:39:da:2d:25:48:db:e3:08:2c:
         1f:9e:ea:a8:b0:4c:91:f0:8f:bf:53:d1:ca:4c:a0:3f:f0:c7:
         4c:cc:8e:73:30:76:2a:6c:4f:af:0b:6c:a1:37:1b:5c:6e:c3:
         98:8b:13:eb:a9:83:63:9a:68:19:9a:5b:5f:75:9b:67:38:a8:
         76:cf:ad:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:32:14 2026 by rpki-client