Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/34352e3136392e3134342e302f32322d3234203d3e20323731373935.roa
File:                     34352e3136392e3134342e302f32322d3234203d3e20323731373935.roa (raw, json)
Hash identifier:          Doh3B25+EIPMUzeU4WMKzTcGiYs325jzsr58Nqj3n2U=
Subject key identifier:   C6:74:D3:3B:4B:99:C7:7B:AE:D4:C6:41:2E:E6:45:AB:A7:19:C6:92
Certificate issuer:       /CN=DD2D25C642478D5D4DCAB0135DBBD87109D394CC
Certificate serial:       7F0BFA16C6EF5AB66B4C1C1F1296A0E1D2C32163
Authority key identifier: DD:2D:25:C6:42:47:8D:5D:4D:CA:B0:13:5D:BB:D8:71:09:D3:94:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/34352e3136392e3134342e302f32322d3234203d3e20323731373935.roa
Signing time:             Wed 04 Mar 2026 23:32:49 +0000
ROA not before:           Wed 04 Mar 2026 23:27:49 +0000
ROA not after:            Wed 03 Mar 2027 23:32:49 +0000
asID:                     271795
IP address blocks:        45.169.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0b:fa:16:c6:ef:5a:b6:6b:4c:1c:1f:12:96:a0:e1:d2:c3:21:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD2D25C642478D5D4DCAB0135DBBD87109D394CC
        Validity
            Not Before: Mar  4 23:27:49 2026 GMT
            Not After : Mar  3 23:32:49 2027 GMT
        Subject: CN=C674D33B4B99C77BAED4C6412EE645ABA719C692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e7:5f:5a:dc:c5:8f:55:9d:dc:91:87:ac:0f:
                    96:45:af:a4:e5:42:7f:52:27:7e:a6:51:72:cf:5a:
                    e1:78:90:39:7d:6c:cb:e1:c5:26:a9:90:f5:c4:f8:
                    af:40:8c:8a:3f:c4:eb:57:d1:8c:70:7a:64:dd:51:
                    25:e7:02:d5:9a:2b:fb:21:6f:8b:fe:89:49:35:b9:
                    21:66:63:df:1a:b0:39:40:22:4b:4b:1f:33:9b:a2:
                    6c:20:68:61:da:7b:bb:46:ec:bf:60:eb:20:b5:47:
                    55:41:c3:33:d5:f9:3f:74:06:0c:db:5f:98:20:88:
                    21:96:f5:ca:45:25:39:bf:19:fe:db:fb:af:6b:f6:
                    eb:ef:60:0e:74:2e:d3:4d:46:46:12:b8:56:40:46:
                    4b:28:c2:66:f5:4a:1b:25:36:8d:03:e0:ad:af:fd:
                    9f:96:0b:6d:7d:8c:8d:7b:50:53:b9:d3:f8:ae:fc:
                    35:9a:83:07:1c:6a:0f:71:e0:9c:3a:bb:0a:99:d3:
                    b7:3a:00:b8:3a:fd:e1:f8:77:8b:91:5d:a3:86:04:
                    17:0e:c0:73:d4:4d:ab:15:f5:54:aa:bc:cf:62:1f:
                    ab:a9:fa:97:71:d4:2b:1b:00:66:e3:21:f4:ed:d4:
                    98:38:2a:aa:63:d7:f4:fe:1f:9b:4f:5e:a3:45:a9:
                    95:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:74:D3:3B:4B:99:C7:7B:AE:D4:C6:41:2E:E6:45:AB:A7:19:C6:92
            X509v3 Authority Key Identifier:
                keyid:DD:2D:25:C6:42:47:8D:5D:4D:CA:B0:13:5D:BB:D8:71:09:D3:94:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/34352e3136392e3134342e302f32322d3234203d3e20323731373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:aa:80:b0:3d:12:88:b1:08:30:54:3e:02:7c:40:56:18:fb:
         2e:f8:fa:ed:3d:64:ce:4f:17:88:db:88:db:54:4a:47:b6:4d:
         21:d6:8c:bf:e4:64:fa:a5:4d:9e:57:df:d7:ed:ed:48:a6:e0:
         64:33:0a:92:f8:5e:e5:76:3e:64:ca:81:0d:5a:2d:09:ed:1d:
         49:89:95:0b:6d:cf:e7:bc:f3:0e:34:02:57:9e:21:0e:70:73:
         2b:57:a2:f3:d8:bc:2d:99:27:7e:24:a0:53:a8:36:64:23:94:
         a6:0a:a7:43:00:6e:2b:04:70:b7:fe:1e:e7:1f:2a:65:28:98:
         5b:e2:2c:c0:cd:0e:1d:cd:dd:d1:ba:58:7f:2f:d0:a6:50:1e:
         f5:47:df:94:ae:6d:3c:96:fd:01:e9:f0:9d:53:1a:90:40:bf:
         c6:80:2c:72:b7:0e:6e:37:06:0c:59:70:a5:31:f0:33:e0:97:
         bb:6e:f2:c2:bb:87:99:8f:bd:78:10:80:20:45:32:93:e9:69:
         f1:a1:43:b6:5f:f2:c0:ca:49:86:b1:63:05:c5:90:fd:59:95:
         ab:c6:2c:f1:db:f7:66:70:63:ce:05:4e:88:a6:9a:56:76:c3:
         54:d4:17:da:73:f3:15:ab:64:98:11:c2:4b:47:81:7d:1b:39:
         17:de:45:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:19:35 2026 by rpki-client