Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/34352e3233312e3231352e302f32342d3234203d3e20323636373638.roa
File:                     34352e3233312e3231352e302f32342d3234203d3e20323636373638.roa (raw, json)
Hash identifier:          TrCPswKBA4m9Wxc21OJ8t74g9s4kWdpMG2CRs4N5Zhs=
Subject key identifier:   8A:CB:68:75:C4:47:1B:42:AB:D9:15:BC:23:40:89:63:E4:1A:71:23
Certificate issuer:       /CN=445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F
Certificate serial:       2912B2625C8A569E2FD08A2DF2926D36B84C6559
Authority key identifier: 44:5E:B5:AB:EE:7D:EC:22:09:4F:11:C6:A6:DC:E5:68:ED:16:D5:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/34352e3233312e3231352e302f32342d3234203d3e20323636373638.roa
Signing time:             Tue 04 Aug 2026 21:19:55 +0000
ROA not before:           Tue 04 Aug 2026 21:14:55 +0000
ROA not after:            Tue 03 Aug 2027 21:19:55 +0000
asID:                     266768
IP address blocks:        45.231.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:12:b2:62:5c:8a:56:9e:2f:d0:8a:2d:f2:92:6d:36:b8:4c:65:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F
        Validity
            Not Before: Aug  4 21:14:55 2026 GMT
            Not After : Aug  3 21:19:55 2027 GMT
        Subject: CN=8ACB6875C4471B42ABD915BC23408963E41A7123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4c:81:16:89:ce:a0:e5:30:58:f4:f1:6e:91:
                    44:aa:d1:c3:49:34:04:08:2b:74:ba:1b:80:39:1a:
                    98:c9:49:e1:e8:f8:25:06:9d:8f:d9:3a:a2:64:e3:
                    67:e3:63:02:27:63:c2:26:c1:9b:b1:cf:f6:ea:fd:
                    d3:c3:df:64:d2:28:f3:e3:8f:83:99:e0:dc:6e:54:
                    be:7d:d3:3b:a8:4c:bf:80:25:3c:44:e9:44:ce:be:
                    fb:27:29:e7:ce:87:f8:10:1d:c4:85:43:66:88:b2:
                    44:02:09:59:50:52:a3:69:0c:df:81:63:1b:5f:a0:
                    bd:2d:42:73:83:6e:cd:c8:38:ba:26:0e:ae:f7:75:
                    73:dd:7b:e0:95:cc:08:ff:90:5b:b4:5b:6e:f1:b8:
                    8c:46:bf:36:f4:9e:9e:d2:18:98:fe:7a:90:2c:bf:
                    42:71:67:97:22:04:29:52:f1:79:94:45:6a:9c:9e:
                    8a:a3:2f:94:af:21:0c:da:53:96:34:52:35:34:80:
                    93:36:5b:89:a2:c7:7a:f7:6e:ef:cf:03:b3:3e:f4:
                    c0:12:91:fc:43:9d:c8:ec:e3:a6:6b:dc:36:59:67:
                    88:77:ac:c9:f8:3b:6b:0f:23:25:be:2d:14:f5:81:
                    4c:4a:4e:b9:79:ed:f3:95:61:8e:34:ad:ee:00:10:
                    48:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CB:68:75:C4:47:1B:42:AB:D9:15:BC:23:40:89:63:E4:1A:71:23
            X509v3 Authority Key Identifier:
                keyid:44:5E:B5:AB:EE:7D:EC:22:09:4F:11:C6:A6:DC:E5:68:ED:16:D5:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/34352e3233312e3231352e302f32342d3234203d3e20323636373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:7d:a8:08:65:81:a1:8a:40:fc:a6:29:c5:ab:2f:d2:f5:24:
         f8:a2:eb:b4:d2:4e:3b:58:ee:59:db:f2:df:c2:79:db:a2:ed:
         8f:21:64:e9:de:51:bb:66:4d:e9:2e:a4:a5:58:df:e2:50:06:
         52:10:9d:c9:ce:61:fd:66:e1:29:11:95:8c:1a:6d:b6:47:37:
         32:52:d6:55:0f:2d:43:a1:1f:43:6e:ec:ae:97:99:6a:fb:49:
         19:33:a7:93:51:dc:2d:82:e3:97:56:0f:2a:9b:1a:25:b6:04:
         04:ac:39:90:f5:5b:47:11:0e:21:ac:82:42:37:b7:25:58:44:
         4d:bd:cd:ea:80:e8:a3:7b:0a:41:b2:65:3b:86:12:f7:3e:9e:
         28:87:c1:3e:de:cd:a0:71:eb:d1:2d:9a:c5:ae:25:c4:fb:d3:
         88:b2:b5:e0:ca:89:02:5e:f2:5c:36:4b:30:ab:a3:41:80:cf:
         88:5a:9a:db:f4:a2:96:49:8a:32:07:0b:57:2c:f0:a9:6f:c7:
         67:f5:1d:b9:1e:44:42:60:b4:7c:5b:5d:bb:40:32:7d:97:80:
         ca:99:0d:46:d6:9f:80:d9:2b:65:83:af:8a:b0:16:13:8e:f8:
         93:44:c3:e5:ee:b9:43:ad:4b:76:27:2c:dc:90:ab:22:d5:98:
         dc:72:9d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:28:46 2026 by rpki-client