Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/539395D58A266C50B547F189A10B30E53E2412761968D76BBE24BA99C1C4935B/0/34352e3138302e3233352e302f32342d3234203d3e20323635353933.roa
File:                     34352e3138302e3233352e302f32342d3234203d3e20323635353933.roa (raw, json)
Hash identifier:          r+k0A9CjC2MBoUNjQ0NIIyqM3O+2c3rCr+uxgyRUNm0=
Subject key identifier:   D3:DD:57:A5:2B:25:59:3E:1D:12:A2:8C:6E:84:CA:8A:08:D4:52:42
Certificate issuer:       /CN=81B786FAB13C024EF8E909C47F225D9F57EB9D06
Certificate serial:       421EBA686CF56DE6ABA1056507E69638931BFCCD
Authority key identifier: 81:B7:86:FA:B1:3C:02:4E:F8:E9:09:C4:7F:22:5D:9F:57:EB:9D:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81B786FAB13C024EF8E909C47F225D9F57EB9D06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/539395D58A266C50B547F189A10B30E53E2412761968D76BBE24BA99C1C4935B/0/34352e3138302e3233352e302f32342d3234203d3e20323635353933.roa
Signing time:             Thu 12 Mar 2026 18:25:00 +0000
ROA not before:           Thu 12 Mar 2026 18:20:00 +0000
ROA not after:            Thu 11 Mar 2027 18:25:00 +0000
asID:                     265593
IP address blocks:        45.180.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/539395D58A266C50B547F189A10B30E53E2412761968D76BBE24BA99C1C4935B/0/81B786FAB13C024EF8E909C47F225D9F57EB9D06.crl
                          rsync://repository.lacnic.net/rpki/lacnic/539395D58A266C50B547F189A10B30E53E2412761968D76BBE24BA99C1C4935B/0/81B786FAB13C024EF8E909C47F225D9F57EB9D06.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81B786FAB13C024EF8E909C47F225D9F57EB9D06.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1e:ba:68:6c:f5:6d:e6:ab:a1:05:65:07:e6:96:38:93:1b:fc:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81B786FAB13C024EF8E909C47F225D9F57EB9D06
        Validity
            Not Before: Mar 12 18:20:00 2026 GMT
            Not After : Mar 11 18:25:00 2027 GMT
        Subject: CN=D3DD57A52B25593E1D12A28C6E84CA8A08D45242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:41:0b:10:57:50:a8:29:11:c8:4c:51:6e:7f:
                    2d:c1:8b:a9:7d:d1:7e:34:cb:4f:7d:5b:38:ef:0a:
                    77:53:21:c6:1c:b6:be:fe:4a:96:18:8c:37:eb:5e:
                    6c:5d:a9:a3:e4:bd:1f:18:79:a1:17:03:07:ff:48:
                    0b:e0:a4:de:bb:47:24:c2:77:dd:31:3d:99:d4:f5:
                    81:fe:c7:bb:11:18:93:0d:47:5c:30:a3:76:c1:e1:
                    83:b3:27:ec:0c:47:d4:6e:28:57:51:02:72:86:2d:
                    73:cd:4c:aa:93:ba:e3:d4:af:1b:f8:95:c0:9e:7e:
                    df:25:88:69:ce:7c:dc:aa:ae:41:14:e2:af:7c:15:
                    01:1e:64:de:5a:18:84:c4:10:6d:6e:5e:c6:06:43:
                    51:2d:32:9d:93:d4:3f:c3:0f:d0:69:93:a9:84:ba:
                    45:fc:51:55:29:49:52:e2:95:5d:f0:62:50:b0:8a:
                    ec:25:37:ba:25:08:05:bb:0b:b6:30:34:d1:3a:8e:
                    c5:93:6a:d4:48:9e:9f:71:09:8c:38:ae:da:d8:5e:
                    67:e2:8c:95:a7:17:9d:06:1d:91:54:b2:e9:24:43:
                    6b:63:48:3e:d7:27:ab:34:82:ce:b7:d2:d3:58:d0:
                    4d:fe:8e:3b:7b:04:ca:16:e9:b5:3c:d0:85:77:0c:
                    64:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DD:57:A5:2B:25:59:3E:1D:12:A2:8C:6E:84:CA:8A:08:D4:52:42
            X509v3 Authority Key Identifier:
                keyid:81:B7:86:FA:B1:3C:02:4E:F8:E9:09:C4:7F:22:5D:9F:57:EB:9D:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/539395D58A266C50B547F189A10B30E53E2412761968D76BBE24BA99C1C4935B/0/81B786FAB13C024EF8E909C47F225D9F57EB9D06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81B786FAB13C024EF8E909C47F225D9F57EB9D06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/539395D58A266C50B547F189A10B30E53E2412761968D76BBE24BA99C1C4935B/0/34352e3138302e3233352e302f32342d3234203d3e20323635353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:b4:cb:6b:3a:d8:8b:04:0f:57:1e:2a:97:e3:e7:ad:a4:1e:
         81:33:05:3e:72:49:90:28:a3:4b:59:da:13:93:c2:16:c2:70:
         48:2b:e5:22:49:18:7b:fe:71:6d:d5:b9:e1:d5:a0:d2:36:3a:
         af:66:93:22:6c:52:6b:e8:02:3d:f7:39:e1:1c:18:e2:8e:26:
         00:1a:6e:95:ab:6b:27:a0:b3:35:65:ab:d4:7f:1b:4d:05:82:
         20:90:ca:10:92:63:20:ec:2b:ec:d5:a2:ea:06:bf:ef:4a:95:
         d6:f2:73:6d:fc:c0:84:fd:e3:00:ef:87:75:93:ca:fe:0a:47:
         e1:be:b3:12:fc:8f:52:f9:d8:c3:ca:c6:a6:06:13:62:4f:64:
         80:d7:37:62:2e:3e:4b:3d:a8:4c:f3:26:5f:6b:5a:84:db:c7:
         26:a6:83:c7:ab:0d:b9:1e:da:f7:b5:0f:9d:4c:71:c5:e3:d9:
         6a:ff:b4:32:c1:e4:f1:6e:51:b2:88:f1:87:ee:20:50:6f:f1:
         cc:27:85:ec:b1:72:de:49:8c:51:54:69:0d:55:b9:a7:45:35:
         60:8e:0e:13:54:84:a0:43:db:d5:fb:e1:12:a6:cc:46:95:38:
         ea:39:9c:05:ff:db:b9:74:51:2b:f9:87:f4:04:a7:8d:9c:cb:
         a1:f3:73:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 05:07:07 2026 by rpki-client