Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/34352e3233312e3231342e302f32342d3234203d3e20323636373638.roa
File:                     34352e3233312e3231342e302f32342d3234203d3e20323636373638.roa (raw, json)
Hash identifier:          EJMqeZeWAh/Ked7WgL0sGQfbTRo5jbYdnZgXooU3R0g=
Subject key identifier:   38:56:21:90:9E:13:E7:BF:8B:0B:0A:96:98:E6:AE:8A:D0:6E:8F:78
Certificate issuer:       /CN=445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F
Certificate serial:       12808E76156A53EDD2504A3E959B5439B622703B
Authority key identifier: 44:5E:B5:AB:EE:7D:EC:22:09:4F:11:C6:A6:DC:E5:68:ED:16:D5:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/34352e3233312e3231342e302f32342d3234203d3e20323636373638.roa
Signing time:             Tue 04 Aug 2026 21:19:55 +0000
ROA not before:           Tue 04 Aug 2026 21:14:55 +0000
ROA not after:            Tue 03 Aug 2027 21:19:55 +0000
asID:                     266768
IP address blocks:        45.231.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:80:8e:76:15:6a:53:ed:d2:50:4a:3e:95:9b:54:39:b6:22:70:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F
        Validity
            Not Before: Aug  4 21:14:55 2026 GMT
            Not After : Aug  3 21:19:55 2027 GMT
        Subject: CN=385621909E13E7BF8B0B0A9698E6AE8AD06E8F78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1d:48:43:95:19:49:fa:e3:d0:7f:5c:d2:81:
                    83:43:d6:93:26:e9:12:49:3e:b2:e0:f7:f6:14:52:
                    a8:cc:bb:00:3c:0f:e5:a4:98:db:e0:3f:98:80:72:
                    7a:b5:c2:28:88:b3:c5:71:b0:4f:3d:24:99:da:4d:
                    f7:53:93:d9:03:30:9f:8c:3f:9e:3d:a0:90:b5:b8:
                    5d:01:f0:b3:7d:42:b2:b7:f6:48:9f:8c:59:0b:23:
                    fa:ce:5b:b5:47:a2:31:cb:b5:68:6f:b9:13:93:6a:
                    49:7c:c2:e1:76:35:38:c4:3a:da:58:50:f6:dd:85:
                    e1:6e:69:b7:ab:a2:40:93:57:3e:57:99:ef:d5:c5:
                    26:e3:b3:d4:27:95:86:42:3c:89:a2:d3:c2:2a:ad:
                    7b:58:c5:1a:8c:43:db:b1:2a:93:f8:da:90:74:62:
                    72:2d:50:ae:77:5d:82:c7:d2:09:78:1b:cf:db:93:
                    35:3f:1e:0b:2e:50:bb:74:0d:3d:8c:ae:84:04:28:
                    43:d1:b5:09:fd:1a:1f:05:d4:1f:3a:7f:98:37:aa:
                    4f:15:8a:85:95:f2:52:9c:c7:2b:6c:a2:5c:fb:29:
                    d4:e4:3a:d5:c5:f5:81:47:65:ec:15:01:60:5e:bb:
                    c8:46:86:31:9b:16:a8:2f:22:81:3d:4f:24:84:dc:
                    df:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:56:21:90:9E:13:E7:BF:8B:0B:0A:96:98:E6:AE:8A:D0:6E:8F:78
            X509v3 Authority Key Identifier:
                keyid:44:5E:B5:AB:EE:7D:EC:22:09:4F:11:C6:A6:DC:E5:68:ED:16:D5:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/34352e3233312e3231342e302f32342d3234203d3e20323636373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:8a:8a:d8:ce:1d:3d:65:88:54:c3:24:35:92:c0:65:4f:4b:
         90:59:e4:d5:1c:23:ff:23:cb:bc:09:63:6d:18:34:19:15:ba:
         19:16:c7:d5:62:f9:c2:31:d9:8c:5c:bd:b0:01:4d:04:a4:0e:
         19:19:8b:87:ca:cf:b3:2e:b4:f8:78:f2:ca:de:0e:a7:96:79:
         6a:18:c9:52:30:11:3b:83:de:21:36:51:ad:bd:83:db:f4:7b:
         ee:80:e1:f3:5e:41:54:e3:ba:58:d0:bf:55:44:27:0d:45:3f:
         8f:46:e9:7c:71:00:19:b4:94:8d:b8:82:ad:b3:e1:f4:b0:ad:
         c3:5d:bf:4d:14:4c:e6:7c:fa:6e:5b:93:08:ba:6d:8b:20:2c:
         76:a9:b9:f8:45:18:8a:69:9b:d5:0f:c8:38:4a:cb:e9:b5:a1:
         b0:51:44:94:da:48:f9:5c:ca:4d:ee:f1:2e:6c:f2:fd:3b:6d:
         36:df:9b:32:98:de:d7:fe:0d:fb:09:8e:2f:8d:ac:5f:4a:24:
         5b:a4:52:81:6d:11:c2:40:c2:ea:d8:10:e3:30:92:d1:f7:a8:
         a6:73:ec:a0:da:70:d1:28:df:52:4b:74:29:39:19:78:d2:6c:
         f9:db:59:00:56:04:fb:79:13:ba:3a:80:43:53:2d:f5:0e:d6:
         6e:41:05:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:26:16 2026 by rpki-client