Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5300C1D7EFC4F90E837112EB8840378D0A2CA3AEDCA5E111144BACD61C144A92/0/34352e3136372e3139322e302f32322d3232203d3e2032363637373333.roa
File:                     34352e3136372e3139322e302f32322d3232203d3e2032363637373333.roa (raw, json)
Hash identifier:          qlDexFS1JlLinb8YZsEePENSf22N2h+pN/IDmn2Wu+I=
Subject key identifier:   35:EB:34:EB:BE:9C:BE:DF:97:DD:BB:D7:4D:24:2A:36:AA:1E:EE:97
Certificate issuer:       /CN=54D7EE69523D3779807321281B145BDDA5C28116
Certificate serial:       0ABB8D0ACB04A86A04389A38E4E69AFD15AEB7AA
Authority key identifier: 54:D7:EE:69:52:3D:37:79:80:73:21:28:1B:14:5B:DD:A5:C2:81:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54D7EE69523D3779807321281B145BDDA5C28116.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5300C1D7EFC4F90E837112EB8840378D0A2CA3AEDCA5E111144BACD61C144A92/0/34352e3136372e3139322e302f32322d3232203d3e2032363637373333.roa
Signing time:             Tue 06 Jan 2026 19:15:51 +0000
ROA not before:           Tue 06 Jan 2026 19:10:51 +0000
ROA not after:            Tue 05 Jan 2027 19:15:51 +0000
asID:                     2667733
IP address blocks:        45.167.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5300C1D7EFC4F90E837112EB8840378D0A2CA3AEDCA5E111144BACD61C144A92/0/54D7EE69523D3779807321281B145BDDA5C28116.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5300C1D7EFC4F90E837112EB8840378D0A2CA3AEDCA5E111144BACD61C144A92/0/54D7EE69523D3779807321281B145BDDA5C28116.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54D7EE69523D3779807321281B145BDDA5C28116.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 22:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:bb:8d:0a:cb:04:a8:6a:04:38:9a:38:e4:e6:9a:fd:15:ae:b7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54D7EE69523D3779807321281B145BDDA5C28116
        Validity
            Not Before: Jan  6 19:10:51 2026 GMT
            Not After : Jan  5 19:15:51 2027 GMT
        Subject: CN=35EB34EBBE9CBEDF97DDBBD74D242A36AA1EEE97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:01:1e:9a:2c:88:67:1e:bf:3a:34:e0:f1:39:
                    30:c4:98:56:02:2b:e2:26:95:23:10:2a:de:fb:3e:
                    4a:e4:de:28:ed:cf:49:c9:ae:79:c3:a3:1e:08:3e:
                    81:65:62:3d:1a:e3:b4:7f:6d:4d:be:c8:29:47:51:
                    be:89:3a:71:53:22:6b:76:98:65:8f:ae:72:ac:84:
                    94:3c:e9:d3:7e:52:f5:61:7a:bc:81:f5:43:03:f6:
                    bb:0c:ee:16:9f:7a:68:09:f6:1f:ab:d3:d5:75:c9:
                    7b:cd:79:ea:fc:f7:c0:ae:c2:ef:90:45:19:a0:82:
                    b3:3a:24:cf:82:80:c4:c2:34:47:6d:f6:01:b6:20:
                    d2:ea:b9:e8:c1:0b:40:45:e2:a9:ea:05:38:6d:19:
                    e3:ca:11:6f:29:d2:c6:6d:8e:91:21:ef:95:d2:96:
                    72:a2:63:9e:66:06:36:ac:c0:b7:94:b8:08:af:2a:
                    4d:37:4e:2d:f9:70:85:14:13:2f:bd:d5:6b:36:ba:
                    a4:04:44:22:59:f4:4e:12:22:1f:d2:76:12:aa:cd:
                    63:67:09:58:5c:6c:f2:5d:1e:66:4d:8c:3e:b7:79:
                    ba:5e:57:53:89:4c:e0:39:45:ed:9d:13:ad:0f:11:
                    6f:c1:97:d6:db:0d:05:c2:1d:a2:1e:a8:5a:34:b6:
                    c6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EB:34:EB:BE:9C:BE:DF:97:DD:BB:D7:4D:24:2A:36:AA:1E:EE:97
            X509v3 Authority Key Identifier:
                keyid:54:D7:EE:69:52:3D:37:79:80:73:21:28:1B:14:5B:DD:A5:C2:81:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5300C1D7EFC4F90E837112EB8840378D0A2CA3AEDCA5E111144BACD61C144A92/0/54D7EE69523D3779807321281B145BDDA5C28116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54D7EE69523D3779807321281B145BDDA5C28116.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5300C1D7EFC4F90E837112EB8840378D0A2CA3AEDCA5E111144BACD61C144A92/0/34352e3136372e3139322e302f32322d3232203d3e2032363637373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:c7:fa:70:ac:f2:cd:ad:36:f1:8c:b5:ad:00:42:5f:a8:99:
         d6:70:09:49:4a:1c:92:03:c2:c4:99:40:ac:a8:ae:c6:71:76:
         f2:cf:7f:f0:73:2f:dd:20:4b:ce:a6:0e:37:ef:b6:33:50:a8:
         84:0a:65:b5:21:98:20:62:5d:e5:d4:68:ed:3c:e0:b9:69:65:
         c2:8d:6e:97:53:60:65:aa:68:02:c3:62:64:17:8e:ac:27:38:
         1c:a7:c2:aa:79:19:31:ab:ab:a2:bc:6a:3e:51:e1:b8:ab:82:
         49:21:c1:40:4f:79:5e:89:dd:0d:92:d3:42:ed:38:12:05:29:
         31:c5:2f:b8:52:1d:28:a9:7d:dd:28:6e:83:16:b7:76:2d:33:
         23:e6:79:2c:68:55:b4:5e:63:1d:9b:37:07:21:aa:c0:1a:09:
         b3:49:4d:46:8e:fc:8d:0f:5d:cf:b9:75:14:cc:1e:2c:9a:ff:
         ef:4f:3f:b7:f0:7c:06:9f:38:3f:eb:8a:08:8c:4a:7f:0f:79:
         e2:04:0c:8d:8b:5e:f1:72:b6:25:99:87:82:40:2f:54:fb:84:
         79:dc:5d:f0:4a:19:2b:bb:a3:e0:e2:74:7b:01:fd:9a:6a:a0:
         2c:a7:ca:e1:1e:95:a5:bf:a9:b9:c4:7f:e2:61:6d:11:5c:1d:
         dd:34:04:51
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUCruNCssEqGoEOJo45Oaa/RWut6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTREN0VFNjk1MjNEMzc3OTgwNzMyMTI4MUIxNDVCRERB
NUMyODExNjAeFw0yNjAxMDYxOTEwNTFaFw0yNzAxMDUxOTE1NTFaMDMxMTAvBgNV
BAMTKDM1RUIzNEVCQkU5Q0JFREY5N0REQkJENzREMjQyQTM2QUExRUVFOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXAR6aLIhnHr86NODxOTDEmFYC
K+ImlSMQKt77Pkrk3ijtz0nJrnnDox4IPoFlYj0a47R/bU2+yClHUb6JOnFTImt2
mGWPrnKshJQ86dN+UvVheryB9UMD9rsM7hafemgJ9h+r09V1yXvNeer898Cuwu+Q
RRmggrM6JM+CgMTCNEdt9gG2INLquejBC0BF4qnqBThtGePKEW8p0sZtjpEh75XS
lnKiY55mBjaswLeUuAivKk03Ti35cIUUEy+91Ws2uqQERCJZ9E4SIh/SdhKqzWNn
CVhcbPJdHmZNjD63ebpeV1OJTOA5Re2dE60PEW/Bl9bbDQXCHaIeqFo0tsYvAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUNes0676cvt+X3bvXTSQqNqoe7pcwHwYDVR0j
BBgwFoAUVNfuaVI9N3mAcyEoGxRb3aXCgRYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MzAwQzFEN0VGQzRGOTBFODM3MTEyRUI4ODQwMzc4RDBB
MkNBM0FFRENBNUUxMTExNDRCQUNENjFDMTQ0QTkyLzAvNTREN0VFNjk1MjNEMzc3
OTgwNzMyMTI4MUIxNDVCRERBNUMyODExNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NEQ3RUU2OTUyM0QzNzc5ODA3
MzIxMjgxQjE0NUJEREE1QzI4MTE2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTMwMEMxRDdFRkM0RjkwRTgzNzExMkVCODg0MDM3OEQwQTJDQTNBRURD
QTVFMTExMTQ0QkFDRDYxQzE0NEE5Mi8wLzM0MzUyZTMxMzYzNzJlMzEzOTMyMmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM2MzczNzMzMzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIt
p8AwDQYJKoZIhvcNAQELBQADggEBAF/H+nCs8s2tNvGMta0AQl+omdZwCUlKHJID
wsSZQKyorsZxdvLPf/BzL90gS86mDjfvtjNQqIQKZbUhmCBiXeXUaO084LlpZcKN
bpdTYGWqaALDYmQXjqwnOBynwqp5GTGrq6K8aj5R4birgkkhwUBPeV6J3Q2S00Lt
OBIFKTHFL7hSHSipfd0oboMWt3YtMyPmeSxoVbReYx2bNwchqsAaCbNJTUaO/I0P
Xc+5dRTMHiya/+9PP7fwfAafOD/rigiMSn8PeeIEDI2LXvFytiWZh4JAL1T7hHnc
XfBKGSu7o+DidHsB/ZpqoCynyuEelaW/qbnEf+JhbRFcHd00BFE=
-----END CERTIFICATE-----
Generated at Tue Mar 3 07:17:23 2026 by rpki-client