Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/539395D58A266C50B547F189A10B30E53E2412761968D76BBE24BA99C1C4935B/0/34352e3138302e3233342e302f32342d3234203d3e20323635353933.roa
File:                     34352e3138302e3233342e302f32342d3234203d3e20323635353933.roa (raw, json)
Hash identifier:          cZeGpbiCoWViAFIZ5Z9CrYd4sBoQ/V4GyWizJOJAJKI=
Subject key identifier:   89:BA:52:72:17:5F:05:28:A1:F5:6E:57:46:26:E2:81:AF:7A:49:6E
Certificate issuer:       /CN=81B786FAB13C024EF8E909C47F225D9F57EB9D06
Certificate serial:       69544BC88CB624C79B1042CD07B3A5482A8193AA
Authority key identifier: 81:B7:86:FA:B1:3C:02:4E:F8:E9:09:C4:7F:22:5D:9F:57:EB:9D:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81B786FAB13C024EF8E909C47F225D9F57EB9D06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/539395D58A266C50B547F189A10B30E53E2412761968D76BBE24BA99C1C4935B/0/34352e3138302e3233342e302f32342d3234203d3e20323635353933.roa
Signing time:             Thu 12 Mar 2026 18:25:01 +0000
ROA not before:           Thu 12 Mar 2026 18:20:01 +0000
ROA not after:            Thu 11 Mar 2027 18:25:01 +0000
asID:                     265593
IP address blocks:        45.180.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/539395D58A266C50B547F189A10B30E53E2412761968D76BBE24BA99C1C4935B/0/81B786FAB13C024EF8E909C47F225D9F57EB9D06.crl
                          rsync://repository.lacnic.net/rpki/lacnic/539395D58A266C50B547F189A10B30E53E2412761968D76BBE24BA99C1C4935B/0/81B786FAB13C024EF8E909C47F225D9F57EB9D06.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81B786FAB13C024EF8E909C47F225D9F57EB9D06.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:54:4b:c8:8c:b6:24:c7:9b:10:42:cd:07:b3:a5:48:2a:81:93:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81B786FAB13C024EF8E909C47F225D9F57EB9D06
        Validity
            Not Before: Mar 12 18:20:01 2026 GMT
            Not After : Mar 11 18:25:01 2027 GMT
        Subject: CN=89BA5272175F0528A1F56E574626E281AF7A496E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6a:f9:6d:48:98:ff:2c:fe:a9:36:41:77:eb:
                    93:40:37:f4:16:56:f4:e2:95:d8:79:f1:54:d1:45:
                    f3:ed:c6:ee:fe:5a:6d:e5:a5:8c:c1:de:e1:e7:e0:
                    c1:c4:a7:dc:fe:be:f3:84:53:0d:71:51:9c:70:fc:
                    72:ad:ec:3f:14:6a:7e:f2:f2:bc:fd:f3:d5:d3:a6:
                    12:54:85:a0:41:e5:b0:0f:11:da:9d:e1:19:88:2d:
                    e8:7a:eb:46:33:9e:18:c9:04:2e:34:8a:12:58:86:
                    99:86:b6:c7:6a:68:03:74:ef:51:fe:c4:bb:53:83:
                    16:56:4b:1a:de:41:1a:54:b3:9f:e6:b5:2c:f3:6d:
                    48:17:a5:88:96:d3:25:8a:48:a6:a9:54:42:72:f9:
                    02:36:3f:ae:7f:d3:98:71:14:c8:b2:c9:73:db:4e:
                    c1:2e:17:bc:71:7b:34:76:6c:60:bf:28:99:2f:e2:
                    75:e2:ff:25:e9:25:3d:c1:7f:b3:88:91:c3:6e:49:
                    36:c1:57:5d:5e:c5:65:89:56:68:a9:7e:20:6c:d5:
                    02:2e:68:14:85:ab:b7:70:7d:04:f7:b4:48:7d:ea:
                    04:12:9f:1e:35:06:4d:1b:fc:be:54:58:8f:a2:b8:
                    0c:76:8c:d6:71:c1:a0:f3:2d:89:2b:95:30:e7:9c:
                    ba:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BA:52:72:17:5F:05:28:A1:F5:6E:57:46:26:E2:81:AF:7A:49:6E
            X509v3 Authority Key Identifier:
                keyid:81:B7:86:FA:B1:3C:02:4E:F8:E9:09:C4:7F:22:5D:9F:57:EB:9D:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/539395D58A266C50B547F189A10B30E53E2412761968D76BBE24BA99C1C4935B/0/81B786FAB13C024EF8E909C47F225D9F57EB9D06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81B786FAB13C024EF8E909C47F225D9F57EB9D06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/539395D58A266C50B547F189A10B30E53E2412761968D76BBE24BA99C1C4935B/0/34352e3138302e3233342e302f32342d3234203d3e20323635353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:32:b6:43:28:a1:c7:b0:95:16:cf:cd:e3:bb:28:02:d5:14:
         57:61:ee:95:68:9a:c2:20:aa:34:5c:61:55:f1:42:87:1a:56:
         d8:dc:70:8f:d0:1e:e3:cd:52:91:bb:8a:44:61:44:a0:f2:2a:
         47:8e:dd:1a:2c:ae:7f:9f:f0:ff:6e:aa:38:df:12:a0:79:59:
         a8:61:53:c4:a1:73:78:08:70:2c:e9:2f:dc:31:9f:2e:12:17:
         16:61:b3:4d:e4:21:e7:9b:a7:89:e4:86:bf:68:b9:b5:b8:e1:
         25:5e:6b:48:0f:64:f1:c0:07:63:38:11:a0:c6:dc:f7:2f:7b:
         f1:ed:93:01:28:3f:a3:9b:7e:e9:dd:f8:54:56:be:7c:b9:f5:
         e3:9c:0c:7f:45:d4:fd:39:9d:4b:d2:66:61:21:26:77:86:f8:
         65:b5:18:c3:19:f6:1e:ef:05:ce:d3:b2:a0:2c:f9:bf:c8:ac:
         90:19:5f:c2:31:15:b4:f3:33:64:f4:4c:b0:0a:fd:a2:f3:a4:
         33:3f:c5:67:e9:a0:00:03:c1:27:de:e1:bb:4d:93:c9:8b:cf:
         e7:3a:85:1b:9e:a9:95:db:20:1c:18:17:0e:ad:30:26:a5:ef:
         3b:27:35:09:ee:bd:b6:d8:d0:6a:05:ab:db:5f:5d:03:69:fd:
         62:68:d8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 05:06:02 2026 by rpki-client