Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232322e302f32332d3233203d3e20323637383233.roa
File:                     34352e3137322e3232322e302f32332d3233203d3e20323637383233.roa (raw, json)
Hash identifier:          tMZ0cPFtOYZDdMZw5V3NdR32ruSvzQBfetUpu/xSinU=
Subject key identifier:   82:E7:BC:1B:8D:73:67:E6:7F:1D:3C:4A:EC:E2:84:EE:FB:A6:C9:40
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       2F10150DCA5D8FF6A401BE105DFCA1939086A0AD
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232322e302f32332d3233203d3e20323637383233.roa
Signing time:             Mon 24 Aug 2026 20:15:00 +0000
ROA not before:           Mon 24 Aug 2026 20:10:00 +0000
ROA not after:            Mon 23 Aug 2027 20:15:00 +0000
asID:                     267823
IP address blocks:        45.172.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:10:15:0d:ca:5d:8f:f6:a4:01:be:10:5d:fc:a1:93:90:86:a0:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Aug 24 20:10:00 2026 GMT
            Not After : Aug 23 20:15:00 2027 GMT
        Subject: CN=82E7BC1B8D7367E67F1D3C4AECE284EEFBA6C940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:96:9c:ac:eb:43:1d:84:30:01:8d:59:7d:63:
                    a9:bd:0d:db:b9:db:9f:3c:c5:95:4a:96:5b:c4:80:
                    1f:7a:1e:54:79:f3:30:33:cf:8f:85:91:5d:e2:5c:
                    24:99:3c:ee:09:5e:cb:d9:ab:8f:46:c3:96:c9:c5:
                    1d:74:4b:84:bf:6c:3e:04:f9:d1:2b:5e:8b:f8:92:
                    35:91:d5:86:47:f9:d5:d7:d0:e2:df:5d:c1:46:0f:
                    42:e0:a9:ae:44:0c:88:ce:26:33:35:05:87:ba:68:
                    54:c8:83:f3:41:82:d2:d1:40:4e:10:9f:dc:b9:f0:
                    c5:3d:4d:8c:af:23:e3:5c:93:7c:ff:41:7e:d2:ec:
                    b7:ab:f3:2a:77:e8:a0:99:eb:a2:5f:e8:35:8c:48:
                    10:26:6e:64:e0:b2:f0:49:fc:1c:c7:7f:2b:a9:93:
                    46:fe:58:97:09:06:ab:00:3c:42:17:17:42:b8:49:
                    32:0e:88:de:67:0e:99:07:ee:0b:89:06:11:35:04:
                    28:e5:50:8a:31:85:11:23:5a:68:30:c6:74:83:48:
                    d1:8b:67:cb:68:93:c7:95:91:1d:73:c2:56:88:95:
                    1b:2c:dc:dd:32:6f:3f:1f:cd:05:e4:71:6b:f2:02:
                    51:41:7b:66:a1:0c:e7:35:0d:49:f2:84:e2:42:76:
                    6f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E7:BC:1B:8D:73:67:E6:7F:1D:3C:4A:EC:E2:84:EE:FB:A6:C9:40
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232322e302f32332d3233203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:bc:11:aa:26:fd:f6:a8:d7:d1:fe:a9:93:f1:43:c2:fc:6c:
         f4:f0:9a:c6:32:00:f4:fb:9d:a7:4b:6c:e3:a0:82:bf:b0:a1:
         0d:bd:8b:3e:47:97:fd:a5:47:4d:b4:0f:6a:b8:73:41:94:c8:
         d2:19:61:7b:de:a0:09:6d:b2:cc:1a:c0:3d:9d:bf:b3:22:f0:
         e4:8f:cd:1b:8e:6d:ee:cb:2a:0e:1a:ea:bd:58:5d:ac:0f:08:
         65:3c:c0:36:e2:f7:1c:4e:81:cd:56:42:87:b4:d9:11:7f:2b:
         c5:c7:6a:4d:4c:8d:49:fd:d3:ef:75:af:4c:ae:6d:d4:7b:0e:
         85:dc:4e:75:e1:0c:ba:5a:7f:ee:7e:51:0c:b5:b7:3d:24:61:
         9c:f1:a3:8d:85:eb:4e:70:8e:14:6c:6d:c2:63:16:2a:7e:41:
         5e:fc:1e:57:3b:74:91:57:72:61:fe:66:1b:6c:89:5e:2e:60:
         86:46:2e:00:c0:a0:ca:0d:77:fb:7f:da:68:90:0b:4f:41:3a:
         b8:0f:43:40:16:5f:22:76:99:bb:a6:e7:28:ba:a0:4d:78:93:
         5f:27:64:67:12:82:ff:73:c6:b6:80:09:06:38:97:e8:9e:47:
         f3:78:4a:ca:02:90:76:91:7c:3d:4a:5d:9e:6a:04:13:5b:f2:
         69:d4:de:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:33:24 2026 by rpki-client