Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/34352e3233382e3138302e302f32342d3234203d3e20323636383630.roa
File:                     34352e3233382e3138302e302f32342d3234203d3e20323636383630.roa (raw, json)
Hash identifier:          P2aUr7PMaNlGvkTj5g+dokAOOsG5Qj/qaz5LfM/XzUo=
Subject key identifier:   5F:47:5A:DE:C2:EA:D9:4C:00:CD:CC:E3:BF:4E:36:A3:D1:44:EF:BC
Certificate issuer:       /CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
Certificate serial:       0FDD2EB604FAD893112544B2639EB423B4742F8F
Authority key identifier: C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/34352e3233382e3138302e302f32342d3234203d3e20323636383630.roa
Signing time:             Thu 13 Aug 2026 14:25:13 +0000
ROA not before:           Thu 13 Aug 2026 14:20:13 +0000
ROA not after:            Thu 12 Aug 2027 14:25:13 +0000
asID:                     266860
IP address blocks:        45.238.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:dd:2e:b6:04:fa:d8:93:11:25:44:b2:63:9e:b4:23:b4:74:2f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
        Validity
            Not Before: Aug 13 14:20:13 2026 GMT
            Not After : Aug 12 14:25:13 2027 GMT
        Subject: CN=5F475ADEC2EAD94C00CDCCE3BF4E36A3D144EFBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fd:00:f3:b2:1a:b2:86:c1:1d:a6:3b:50:80:
                    1b:6e:df:7b:33:92:cd:88:c4:43:a2:7a:c3:d8:cc:
                    91:93:4e:c5:06:ae:50:24:5d:6b:53:8f:7c:81:a7:
                    1b:37:aa:51:31:c4:78:a0:df:79:99:d1:f8:69:51:
                    be:c7:a8:66:b9:c3:e4:19:66:38:01:bb:59:a2:44:
                    8c:6e:51:6b:89:15:30:59:0d:eb:bf:97:39:28:91:
                    9c:bc:88:6a:11:90:dc:88:e3:af:cd:11:f5:8b:4c:
                    10:4b:19:c3:ec:f7:20:89:ef:87:32:32:73:b5:9c:
                    21:60:ad:e5:cb:38:48:40:56:a9:1b:fe:4d:d1:97:
                    fb:e6:5c:80:56:fb:9a:9a:df:67:bb:17:6f:c3:bc:
                    13:9f:e7:3e:52:d8:dd:3e:40:09:2f:58:11:97:6c:
                    2a:4b:46:80:54:a5:0e:f5:8c:46:23:e4:59:eb:ed:
                    c0:7c:47:eb:58:4e:3d:fd:5b:ab:9a:e1:7c:12:78:
                    cf:48:a1:06:f1:14:1b:a9:8f:44:7b:cf:f4:96:f5:
                    4b:25:d2:34:a1:d8:a1:60:8a:4a:a5:1c:e5:7f:b4:
                    7d:0f:df:22:fd:28:3a:ee:49:85:0f:c6:53:7e:18:
                    55:58:03:04:4f:3a:31:c9:f4:5d:ef:d5:65:76:58:
                    c1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:47:5A:DE:C2:EA:D9:4C:00:CD:CC:E3:BF:4E:36:A3:D1:44:EF:BC
            X509v3 Authority Key Identifier:
                keyid:C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/34352e3233382e3138302e302f32342d3234203d3e20323636383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:24:d2:9a:60:ce:b0:74:f0:26:7e:99:92:6f:34:04:4e:2e:
         50:14:30:f2:a6:f4:b1:ad:a3:3e:bd:99:a1:54:95:25:43:c8:
         46:0d:7d:70:cf:8c:96:bd:26:6e:23:b7:85:0f:0e:e0:a7:d6:
         1b:24:47:c0:92:8a:5e:85:c3:e3:9d:b6:e3:ea:4f:5c:8e:6e:
         37:6c:fa:5e:4a:84:80:47:af:19:90:0f:1a:c5:91:1b:18:ab:
         67:92:f9:7e:a4:95:05:cc:a6:b6:ee:c0:e9:c2:f2:6c:c5:4b:
         5c:0f:d3:47:f5:d8:15:c4:9d:51:b1:8e:66:38:d7:f5:37:55:
         6f:28:5f:4c:48:c6:75:1a:ff:9f:47:24:68:3e:57:be:02:0a:
         83:9d:43:fe:09:c3:2e:78:a3:06:c0:6f:43:75:38:ba:fc:9a:
         9f:ae:92:18:98:d5:45:85:a2:15:e2:30:bc:62:2e:4d:fc:b5:
         8c:9d:b8:1a:b2:41:f5:52:3e:91:22:50:34:f3:1c:9c:12:dc:
         f8:f0:a6:95:ac:9a:fd:fa:ef:d5:e4:ea:c3:04:00:17:dc:0e:
         9d:aa:d6:79:3a:10:09:ae:0b:d4:97:4f:e9:47:c9:60:c2:0f:
         d3:32:0c:9b:e7:f4:2e:1a:23:b3:47:6a:06:13:58:b3:82:b3:
         32:b1:1b:10
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUD90utgT62JMRJUSyY560I7R0L48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBEQ0NBRDRFOTg1N0Q1QzZFNjQ1REYyNkQyQzU5NjE0
QjFCODQwOTAeFw0yNjA4MTMxNDIwMTNaFw0yNzA4MTIxNDI1MTNaMDMxMTAvBgNV
BAMTKDVGNDc1QURFQzJFQUQ5NEMwMENEQ0NFM0JGNEUzNkEzRDE0NEVGQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd/QDzshqyhsEdpjtQgBtu33sz
ks2IxEOiesPYzJGTTsUGrlAkXWtTj3yBpxs3qlExxHig33mZ0fhpUb7HqGa5w+QZ
ZjgBu1miRIxuUWuJFTBZDeu/lzkokZy8iGoRkNyI46/NEfWLTBBLGcPs9yCJ74cy
MnO1nCFgreXLOEhAVqkb/k3Rl/vmXIBW+5qa32e7F2/DvBOf5z5S2N0+QAkvWBGX
bCpLRoBUpQ71jEYj5Fnr7cB8R+tYTj39W6ua4XwSeM9IoQbxFBupj0R7z/SW9Usl
0jSh2KFgikqlHOV/tH0P3yL9KDruSYUPxlN+GFVYAwRPOjHJ9F3v1WV2WME5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUX0da3sLq2UwAzczjv042o9FE77wwHwYDVR0j
BBgwFoAUwNzK1OmFfVxuZF3ybSxZYUsbhAkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RUE0NUQyNUExRTdCN0IwNzRDREVEQjdDN0JDQ0RCNzhC
NDA1MTJCRTU1QTc2QjE4QTkxMDkxNEIzOUVGNjIxLzAvQzBEQ0NBRDRFOTg1N0Q1
QzZFNjQ1REYyNkQyQzU5NjE0QjFCODQwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMERDQ0FENEU5ODU3RDVDNkU2
NDVERjI2RDJDNTk2MTRCMUI4NDA5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUVBNDVEMjVBMUU3QjdCMDc0Q0RFREI3QzdCQ0NEQjc4QjQwNTEyQkU1
NUE3NkIxOEE5MTA5MTRCMzlFRjYyMS8wLzM0MzUyZTMyMzMzODJlMzEzODMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzgzNjMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALe60
MA0GCSqGSIb3DQEBCwUAA4IBAQA2JNKaYM6wdPAmfpmSbzQETi5QFDDypvSxraM+
vZmhVJUlQ8hGDX1wz4yWvSZuI7eFDw7gp9YbJEfAkopehcPjnbbj6k9cjm43bPpe
SoSAR68ZkA8axZEbGKtnkvl+pJUFzKa27sDpwvJsxUtcD9NH9dgVxJ1RsY5mONf1
N1VvKF9MSMZ1Gv+fRyRoPle+AgqDnUP+CcMueKMGwG9DdTi6/JqfrpIYmNVFhaIV
4jC8Yi5N/LWMnbgaskH1Uj6RIlA08xycEtz48KaVrJr9+u/V5OrDBAAX3A6dqtZ5
OhAJrgvUl0/pR8lgwg/TMgyb5/QuGiOzR2oGE1izgrMysRsQ
-----END CERTIFICATE-----
Generated at Fri Sep 18 19:18:57 2026 by rpki-client