Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/34352e3233382e3138332e302f32342d3234203d3e20323636383630.roa
File:                     34352e3233382e3138332e302f32342d3234203d3e20323636383630.roa (raw, json)
Hash identifier:          yC4hBTf4h4r5D6mx7Z0CPoXqkx6Vd+mkMA1vhHOowQ8=
Subject key identifier:   0D:01:11:5B:65:91:61:6D:10:88:4F:7D:32:C6:DE:EC:F2:B2:75:E7
Certificate issuer:       /CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
Certificate serial:       44957CDCCB0F92AE7695E28CDF7654F905DAA3C2
Authority key identifier: C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/34352e3233382e3138332e302f32342d3234203d3e20323636383630.roa
Signing time:             Tue 11 Aug 2026 13:25:02 +0000
ROA not before:           Tue 11 Aug 2026 13:20:02 +0000
ROA not after:            Tue 10 Aug 2027 13:25:02 +0000
asID:                     266860
IP address blocks:        45.238.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:95:7c:dc:cb:0f:92:ae:76:95:e2:8c:df:76:54:f9:05:da:a3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
        Validity
            Not Before: Aug 11 13:20:02 2026 GMT
            Not After : Aug 10 13:25:02 2027 GMT
        Subject: CN=0D01115B6591616D10884F7D32C6DEECF2B275E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bd:8a:9a:ce:65:6a:af:5a:66:55:c1:18:d0:
                    4b:53:57:66:8f:12:6d:42:81:f1:99:ca:38:8a:5d:
                    64:44:98:20:c3:5d:ff:46:8d:30:e5:d0:98:16:31:
                    b0:0f:5f:93:4d:66:66:62:e9:1d:ff:32:eb:37:5a:
                    7f:78:86:61:c2:a1:8d:89:e8:54:0c:38:07:76:8f:
                    9c:41:58:04:57:f2:3d:88:54:44:9d:6a:69:fe:13:
                    aa:6b:3d:a4:61:4f:f3:6e:33:67:11:1a:5d:b5:1c:
                    91:2a:2c:dd:a5:13:61:aa:26:39:bd:8c:45:87:41:
                    c7:2d:46:88:a7:37:e5:90:88:e1:88:39:0f:4d:d5:
                    f8:7c:7c:7a:db:15:0f:2b:a4:98:d0:f7:b8:e5:47:
                    7b:82:ab:28:8d:c0:78:06:67:83:a5:71:c7:48:d5:
                    f3:1d:e1:80:8b:aa:21:7d:66:92:98:72:cf:b4:11:
                    ce:18:9e:7c:cf:6c:9c:df:60:0a:48:24:77:98:33:
                    00:28:55:5b:17:d7:64:0d:ad:3d:65:e5:f3:42:25:
                    6b:13:ea:c0:e4:b2:a2:92:49:6c:20:48:f8:bd:49:
                    22:c7:90:f8:26:32:11:a6:01:5f:46:19:39:e8:e6:
                    8e:18:94:91:91:6b:ba:55:8c:90:94:e8:c8:3f:2a:
                    b0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:01:11:5B:65:91:61:6D:10:88:4F:7D:32:C6:DE:EC:F2:B2:75:E7
            X509v3 Authority Key Identifier:
                keyid:C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/34352e3233382e3138332e302f32342d3234203d3e20323636383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:cb:ae:2c:dc:f2:b0:5d:87:f3:88:8a:34:21:9b:b0:56:4a:
         6f:09:81:a4:53:b0:d5:fb:59:c9:e7:a6:9a:e4:58:5c:e4:f5:
         c6:e1:6d:52:56:72:d4:7c:5e:b2:ce:13:94:c7:9b:bc:17:e5:
         f1:6c:37:f2:7a:d3:10:6a:21:56:49:0c:a1:53:c1:60:cc:2f:
         4d:02:ab:a1:0c:fd:ee:68:82:3d:e0:fe:03:c1:97:82:7d:f9:
         69:92:9e:0d:67:4a:6c:2c:d6:1c:50:9c:1d:b4:d2:1f:17:27:
         97:2a:6f:ad:d0:f6:87:88:d6:29:f4:72:be:85:81:1f:46:4f:
         a2:99:be:e9:39:a5:16:ac:53:52:ef:49:42:81:63:f4:98:c7:
         a9:ef:9f:d1:f2:e6:a5:2a:97:7d:ba:fb:be:1d:5a:fc:0d:10:
         05:d1:b2:03:d1:3c:8a:69:d9:cc:8f:35:28:03:24:b8:e8:6d:
         b3:5f:fd:46:ea:5a:fa:7c:e1:88:c6:7b:73:16:ed:cf:56:04:
         7c:2e:01:8f:0f:02:64:b4:75:8e:60:33:77:24:a1:10:59:c9:
         29:86:e4:ee:2e:d9:d6:20:76:0d:a8:4a:e6:60:72:22:98:d8:
         59:ba:22:4b:c4:44:d1:d3:94:e4:67:27:c2:1e:b0:8b:be:6d:
         76:67:22:f0
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIURJV83MsPkq52leKM33ZU+QXao8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBEQ0NBRDRFOTg1N0Q1QzZFNjQ1REYyNkQyQzU5NjE0
QjFCODQwOTAeFw0yNjA4MTExMzIwMDJaFw0yNzA4MTAxMzI1MDJaMDMxMTAvBgNV
BAMTKDBEMDExMTVCNjU5MTYxNkQxMDg4NEY3RDMyQzZERUVDRjJCMjc1RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vYqazmVqr1pmVcEY0EtTV2aP
Em1CgfGZyjiKXWREmCDDXf9GjTDl0JgWMbAPX5NNZmZi6R3/Mus3Wn94hmHCoY2J
6FQMOAd2j5xBWARX8j2IVESdamn+E6prPaRhT/NuM2cRGl21HJEqLN2lE2GqJjm9
jEWHQcctRoinN+WQiOGIOQ9N1fh8fHrbFQ8rpJjQ97jlR3uCqyiNwHgGZ4OlccdI
1fMd4YCLqiF9ZpKYcs+0Ec4YnnzPbJzfYApIJHeYMwAoVVsX12QNrT1l5fNCJWsT
6sDksqKSSWwgSPi9SSLHkPgmMhGmAV9GGTno5o4YlJGRa7pVjJCU6Mg/KrDdAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUDQERW2WRYW0QiE99Msbe7PKydecwHwYDVR0j
BBgwFoAUwNzK1OmFfVxuZF3ybSxZYUsbhAkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RUE0NUQyNUExRTdCN0IwNzRDREVEQjdDN0JDQ0RCNzhC
NDA1MTJCRTU1QTc2QjE4QTkxMDkxNEIzOUVGNjIxLzAvQzBEQ0NBRDRFOTg1N0Q1
QzZFNjQ1REYyNkQyQzU5NjE0QjFCODQwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMERDQ0FENEU5ODU3RDVDNkU2
NDVERjI2RDJDNTk2MTRCMUI4NDA5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUVBNDVEMjVBMUU3QjdCMDc0Q0RFREI3QzdCQ0NEQjc4QjQwNTEyQkU1
NUE3NkIxOEE5MTA5MTRCMzlFRjYyMS8wLzM0MzUyZTMyMzMzODJlMzEzODMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzgzNjMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALe63
MA0GCSqGSIb3DQEBCwUAA4IBAQCNy64s3PKwXYfziIo0IZuwVkpvCYGkU7DV+1nJ
56aa5Fhc5PXG4W1SVnLUfF6yzhOUx5u8F+XxbDfyetMQaiFWSQyhU8FgzC9NAquh
DP3uaII94P4DwZeCfflpkp4NZ0psLNYcUJwdtNIfFyeXKm+t0PaHiNYp9HK+hYEf
Rk+imb7pOaUWrFNS70lCgWP0mMep75/R8ualKpd9uvu+HVr8DRAF0bID0TyKadnM
jzUoAyS46G2zX/1G6lr6fOGIxntzFu3PVgR8LgGPDwJktHWOYDN3JKEQWckphuTu
LtnWIHYNqErmYHIimNhZuiJLxETR05TkZyfCHrCLvm12ZyLw
-----END CERTIFICATE-----
Generated at Fri Sep 18 22:35:27 2026 by rpki-client