Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/512E07F7BC38AB3B278930700F88230AFFDEB4909C55D2E026ADC460D47720FC/0/34352e36352e3135322e302f32322d3234203d3e203632353530.roa
File:                     34352e36352e3135322e302f32322d3234203d3e203632353530.roa (raw, json)
Hash identifier:          uTNdbdtmarKmbXzqTIfWby09T/ofBSGDYGB0JHx9RVc=
Subject key identifier:   96:59:91:ED:54:A6:D0:5D:E9:84:20:B5:EC:73:1C:E4:94:AF:79:1E
Certificate issuer:       /CN=B58A91D7FD2F1B52629EB7C1361419BF83601DB1
Certificate serial:       205B039EAFE5BCEBD7238A74BAEFA805C4A6B417
Authority key identifier: B5:8A:91:D7:FD:2F:1B:52:62:9E:B7:C1:36:14:19:BF:83:60:1D:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B58A91D7FD2F1B52629EB7C1361419BF83601DB1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/512E07F7BC38AB3B278930700F88230AFFDEB4909C55D2E026ADC460D47720FC/0/34352e36352e3135322e302f32322d3234203d3e203632353530.roa
Signing time:             Sat 12 Sep 2026 04:35:00 +0000
ROA not before:           Sat 12 Sep 2026 04:30:00 +0000
ROA not after:            Sat 11 Sep 2027 04:35:00 +0000
asID:                     62550
IP address blocks:        45.65.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/512E07F7BC38AB3B278930700F88230AFFDEB4909C55D2E026ADC460D47720FC/0/B58A91D7FD2F1B52629EB7C1361419BF83601DB1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/512E07F7BC38AB3B278930700F88230AFFDEB4909C55D2E026ADC460D47720FC/0/B58A91D7FD2F1B52629EB7C1361419BF83601DB1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B58A91D7FD2F1B52629EB7C1361419BF83601DB1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5b:03:9e:af:e5:bc:eb:d7:23:8a:74:ba:ef:a8:05:c4:a6:b4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B58A91D7FD2F1B52629EB7C1361419BF83601DB1
        Validity
            Not Before: Sep 12 04:30:00 2026 GMT
            Not After : Sep 11 04:35:00 2027 GMT
        Subject: CN=965991ED54A6D05DE98420B5EC731CE494AF791E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:09:99:5c:d1:06:0e:8d:a3:bd:58:df:69:d4:
                    0c:31:78:8a:f9:4b:07:01:b5:15:06:d3:ed:f1:be:
                    a8:5c:4a:65:62:88:ad:9d:51:af:15:c0:89:23:6a:
                    5a:f8:a7:0b:72:5f:d0:ab:5f:b6:e2:f0:69:af:58:
                    ec:c5:51:d9:b9:4e:e3:d7:5d:15:d3:7a:9f:a5:40:
                    76:b7:9f:6e:0c:14:0b:10:9d:90:8e:cc:f1:62:f4:
                    23:95:e2:6f:bf:06:08:69:e5:9b:08:3d:4a:91:58:
                    e8:c1:81:55:94:81:f8:6d:95:41:e7:50:f1:e8:e6:
                    57:8b:99:8f:b3:f6:31:f0:5a:fb:dd:17:18:2e:f8:
                    40:34:53:1f:30:50:8a:69:3a:9a:44:b9:94:e0:3f:
                    eb:40:59:87:b1:1e:40:77:9d:de:57:4e:93:e7:66:
                    98:05:c8:19:28:64:19:87:27:b6:55:36:e7:68:50:
                    18:96:54:db:b5:91:04:38:0f:8f:60:ca:dd:27:c2:
                    e3:2b:99:76:02:c8:e2:7f:81:ab:6c:d8:44:c4:a5:
                    fb:b3:ad:e7:6a:c1:b7:d8:c7:fa:bd:eb:47:8c:6b:
                    9d:a3:7d:4b:98:ae:eb:b5:55:3f:ee:af:6d:cb:44:
                    5f:74:65:71:cb:5b:99:67:92:6d:c0:8f:59:ff:14:
                    c1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:59:91:ED:54:A6:D0:5D:E9:84:20:B5:EC:73:1C:E4:94:AF:79:1E
            X509v3 Authority Key Identifier:
                keyid:B5:8A:91:D7:FD:2F:1B:52:62:9E:B7:C1:36:14:19:BF:83:60:1D:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/512E07F7BC38AB3B278930700F88230AFFDEB4909C55D2E026ADC460D47720FC/0/B58A91D7FD2F1B52629EB7C1361419BF83601DB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B58A91D7FD2F1B52629EB7C1361419BF83601DB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/512E07F7BC38AB3B278930700F88230AFFDEB4909C55D2E026ADC460D47720FC/0/34352e36352e3135322e302f32322d3234203d3e203632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:6d:f3:2e:c7:01:57:f6:cc:f6:73:a0:aa:1e:26:07:d1:45:
         51:97:56:6a:92:0b:b1:af:7f:bf:97:3d:14:4e:e9:de:30:1c:
         39:0d:19:cb:c6:c7:a0:58:18:b0:c5:60:fe:00:8a:dd:ee:99:
         63:61:0d:38:50:b1:cf:27:ec:ee:ed:98:06:a5:68:5d:22:89:
         5e:6e:74:89:62:bd:85:37:72:09:13:9f:62:6d:ee:1e:bd:41:
         d3:b8:6a:2d:42:c8:37:07:9f:71:80:e0:6e:f3:5e:5a:5d:0f:
         55:90:8f:87:8b:d8:69:c1:ec:03:d0:6b:ba:85:8d:5f:ed:a4:
         fc:d0:f3:a0:62:b2:89:de:01:b0:35:49:2c:d8:bc:04:f4:87:
         a0:e2:51:41:e8:d1:bf:c9:28:72:c6:ba:c3:4e:29:a4:e2:3f:
         20:27:a2:7b:46:c6:cb:a6:c8:1d:4e:58:f8:24:6f:41:40:51:
         85:9b:25:15:76:5c:53:36:ee:36:21:80:f6:5d:74:f6:e5:70:
         7b:fb:b1:c9:e9:12:bb:eb:6c:3f:e3:cc:85:41:32:4d:47:9f:
         3d:f9:42:f5:58:15:87:cc:51:ed:72:2f:75:48:da:fd:b9:85:
         5d:79:d2:c9:5d:72:17:1b:25:89:fe:8b:e0:31:67:08:65:ec:
         4f:d3:f8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:05:56 2026 by rpki-client