Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/34352e362e3234382e302f32322d3232203d3e2031.roa
File:                     34352e362e3234382e302f32322d3232203d3e2031.roa (raw, json)
Hash identifier:          UzkjVcOU1cq2YQUYeX9BRtZFndf2c74K+cGIi4yt49s=
Subject key identifier:   4F:CA:46:D9:BE:75:AC:BC:E1:64:85:8B:9E:2C:17:84:A3:5B:8B:10
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       54DAE8DE815B79F911F375E6A9CEBA19AA00F614
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/34352e362e3234382e302f32322d3232203d3e2031.roa
Signing time:             Mon 10 Aug 2026 19:24:54 +0000
ROA not before:           Mon 10 Aug 2026 19:19:54 +0000
ROA not after:            Mon 09 Aug 2027 19:24:54 +0000
asID:                     1
IP address blocks:        45.6.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:da:e8:de:81:5b:79:f9:11:f3:75:e6:a9:ce:ba:19:aa:00:f6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Aug 10 19:19:54 2026 GMT
            Not After : Aug  9 19:24:54 2027 GMT
        Subject: CN=4FCA46D9BE75ACBCE164858B9E2C1784A35B8B10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f6:f6:b7:c4:ef:a0:45:a3:13:d9:41:ad:0b:
                    0a:29:31:0f:3d:5f:be:12:50:74:b8:aa:76:f2:0a:
                    00:63:90:9e:76:cf:02:0c:ab:bd:e1:54:bd:d5:58:
                    1a:ef:2e:48:28:50:50:27:39:06:4a:79:45:5f:e2:
                    73:f9:b9:02:16:f7:8f:cc:17:7f:03:78:e7:2e:ab:
                    0d:31:b6:d6:5f:98:44:75:6b:3a:08:f3:cb:c7:82:
                    58:b6:4b:cf:4e:f3:9a:37:f9:8f:1b:c6:8e:4d:ef:
                    88:96:f4:ba:c7:96:b5:53:a4:82:b5:59:bb:4c:30:
                    e0:ae:6e:d8:1f:ef:4c:12:29:90:69:9a:8b:bf:d1:
                    5c:d9:a9:19:b7:2f:05:94:35:c4:39:2c:f8:ae:18:
                    14:7c:1a:1c:33:48:8c:c9:5e:16:94:a5:d5:7b:8c:
                    e8:cb:b9:e3:da:df:93:5a:d7:74:be:a6:46:bb:1c:
                    56:b9:b1:b2:08:83:73:80:57:37:f7:5c:0d:06:30:
                    2a:28:85:d1:ab:54:d0:00:47:ad:0e:2d:95:d8:dc:
                    f9:b9:f1:5b:99:3b:32:40:ac:c9:8e:c6:d3:0d:1f:
                    62:10:b1:36:fe:2c:19:20:26:3f:7a:55:14:fe:f0:
                    11:fb:12:98:91:c6:47:b0:f1:30:94:43:21:65:49:
                    e9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CA:46:D9:BE:75:AC:BC:E1:64:85:8B:9E:2C:17:84:A3:5B:8B:10
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/34352e362e3234382e302f32322d3232203d3e2031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:8a:bd:bf:d7:46:bf:b2:f6:8d:4f:81:8e:fe:97:d8:2a:3a:
         df:d2:1e:2e:f3:4d:d5:be:8e:02:dd:be:3a:23:9b:8d:2e:6d:
         8a:a7:c4:fb:0e:96:c3:39:6e:7a:15:e7:14:34:e5:cf:eb:1d:
         c9:27:3a:a3:f5:e9:fd:df:4e:ce:dd:83:e4:e3:07:bb:5f:d2:
         62:bb:76:3b:a4:ea:8d:77:7f:19:c9:e7:4d:73:74:5e:62:6d:
         bc:bf:6e:d2:73:2f:84:1a:70:7c:22:75:f9:7f:aa:d6:9b:69:
         f3:cd:d2:26:50:94:c8:53:c0:3f:59:be:66:7f:03:ef:b2:2c:
         c0:84:51:85:03:0f:c6:4f:13:6d:92:7f:72:1c:5d:44:c2:75:
         4b:3d:86:15:9a:6a:20:3c:4f:32:cf:ec:e3:7b:2e:26:56:e7:
         d9:50:15:ab:00:0c:ce:e8:93:48:26:e3:87:da:59:2e:de:a7:
         28:80:7d:be:73:c2:f1:c1:74:5a:b2:7c:a9:28:9b:1e:82:8e:
         88:3e:49:b4:1e:2e:a6:b4:51:7a:83:70:12:47:9c:00:33:03:
         6a:cb:5b:18:47:3f:55:98:cd:91:31:73:2b:fe:57:f8:fe:6f:
         05:82:64:b6:0d:d3:94:48:47:e3:fd:39:dc:44:cf:86:27:83:
         07:16:66:7b
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUVNro3oFbefkR83Xmqc66GaoA9hQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1NkI5MDExQUU4QzlBREREOTY4MDNERUNFMUQxRjkz
MDZEODFERTAeFw0yNjA4MTAxOTE5NTRaFw0yNzA4MDkxOTI0NTRaMDMxMTAvBgNV
BAMTKDRGQ0E0NkQ5QkU3NUFDQkNFMTY0ODU4QjlFMkMxNzg0QTM1QjhCMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF9va3xO+gRaMT2UGtCwopMQ89
X74SUHS4qnbyCgBjkJ52zwIMq73hVL3VWBrvLkgoUFAnOQZKeUVf4nP5uQIW94/M
F38DeOcuqw0xttZfmER1azoI88vHgli2S89O85o3+Y8bxo5N74iW9LrHlrVTpIK1
WbtMMOCubtgf70wSKZBpmou/0VzZqRm3LwWUNcQ5LPiuGBR8GhwzSIzJXhaUpdV7
jOjLuePa35Na13S+pka7HFa5sbIIg3OAVzf3XA0GMCoohdGrVNAAR60OLZXY3Pm5
8VuZOzJArMmOxtMNH2IQsTb+LBkgJj96VRT+8BH7EpiRxkew8TCUQyFlSemHAgMB
AAGjggK8MIICuDAdBgNVHQ4EFgQUT8pG2b51rLzhZIWLniwXhKNbixAwHwYDVR0j
BBgwFoAUH1a5ARroya3dloA97OHR+TBtgd4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QUMzM0Q0QUM4NDQ0MzlEOTQ1RjJGQTlGN0JCNzhGMDY0
NjhFMjJDOEJGNTgzNEE1NjhDQzAwMDQ5QUMzQTdCLzAvMUY1NkI5MDExQUU4QzlB
REREOTY4MDNERUNFMUQxRjkzMDZEODFERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjU2QjkwMTFBRThDOUFEREQ5
NjgwM0RFQ0UxRDFGOTMwNkQ4MURFLmNlcjCBuwYIKwYBBQUHAQsEga4wgaswgagG
CCsGAQUFBzALhoGbcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUFDMzNENEFDODQ0NDM5RDk0NUYyRkE5RjdCQjc4RjA2NDY4RTIyQzhC
RjU4MzRBNTY4Q0MwMDA0OUFDM0E3Qi8wLzM0MzUyZTM2MmUzMjM0MzgyZTMwMmYz
MjMyMmQzMjMyMjAzZDNlMjAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi0G+DANBgkqhkiG9w0BAQsF
AAOCAQEAeoq9v9dGv7L2jU+Bjv6X2Co639IeLvNN1b6OAt2+OiObjS5tiqfE+w6W
wzluehXnFDTlz+sdySc6o/Xp/d9Ozt2D5OMHu1/SYrt2O6TqjXd/GcnnTXN0XmJt
vL9u0nMvhBpwfCJ1+X+q1ptp883SJlCUyFPAP1m+Zn8D77IswIRRhQMPxk8TbZJ/
chxdRMJ1Sz2GFZpqIDxPMs/s43suJlbn2VAVqwAMzuiTSCbjh9pZLt6nKIB9vnPC
8cF0WrJ8qSibHoKOiD5JtB4uprRReoNwEkecADMDastbGEc/VZjNkTFzK/5X+P5v
BYJktg3TlEhH4/053ETPhieDBxZmew==
-----END CERTIFICATE-----
Generated at Tue Oct 13 16:56:28 2026 by rpki-client