Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/34352e3233352e34332e302f32342d3234203d3e20323636373734.roa
File:                     34352e3233352e34332e302f32342d3234203d3e20323636373734.roa (raw, json)
Hash identifier:          VSRsZWsKYI2Q8zbOS3TtlPZrsfhKyJuszxpQgIPzyxA=
Subject key identifier:   C5:61:C0:FB:CE:75:C1:F5:31:60:4A:31:1D:F7:48:E8:CF:17:E8:65
Certificate issuer:       /CN=1E862F205E27A89B1343A4D62B69B564737D0432
Certificate serial:       01DF8BF43CD9914B495E676579D59736335F6568
Authority key identifier: 1E:86:2F:20:5E:27:A8:9B:13:43:A4:D6:2B:69:B5:64:73:7D:04:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E862F205E27A89B1343A4D62B69B564737D0432.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/34352e3233352e34332e302f32342d3234203d3e20323636373734.roa
Signing time:             Tue 06 Oct 2026 21:38:55 +0000
ROA not before:           Tue 06 Oct 2026 21:33:55 +0000
ROA not after:            Tue 05 Oct 2027 21:38:55 +0000
asID:                     266774
IP address blocks:        45.235.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/1E862F205E27A89B1343A4D62B69B564737D0432.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/1E862F205E27A89B1343A4D62B69B564737D0432.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E862F205E27A89B1343A4D62B69B564737D0432.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 01:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:df:8b:f4:3c:d9:91:4b:49:5e:67:65:79:d5:97:36:33:5f:65:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E862F205E27A89B1343A4D62B69B564737D0432
        Validity
            Not Before: Oct  6 21:33:55 2026 GMT
            Not After : Oct  5 21:38:55 2027 GMT
        Subject: CN=C561C0FBCE75C1F531604A311DF748E8CF17E865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:72:57:a5:19:c8:de:f3:e6:36:c9:5c:4c:dd:
                    1d:67:cc:ad:4a:47:7a:26:79:06:c3:fa:a8:ef:57:
                    ec:f3:a1:64:c9:b4:0e:d3:aa:54:da:94:62:09:4e:
                    26:37:45:f2:76:1d:29:95:73:28:ba:aa:2b:f1:93:
                    36:68:2c:10:25:d0:8a:ef:8f:9d:2d:89:74:49:c2:
                    b4:e1:18:44:b9:f8:3e:37:30:7e:90:e4:08:40:aa:
                    9b:dd:cc:10:8c:3e:b3:58:b7:73:6e:8e:b1:fc:3b:
                    42:13:3a:20:e2:86:34:7c:bb:31:71:a4:b2:7e:b5:
                    1d:4e:0e:b4:37:bf:db:8c:77:fe:2c:7c:69:79:56:
                    cf:02:18:0c:ad:90:e7:8b:52:5e:5b:d2:fc:ff:2c:
                    ba:51:c7:bc:18:da:03:9d:2a:6b:6c:95:a5:93:65:
                    94:95:5e:83:de:ca:96:56:22:9d:97:1e:d2:4c:80:
                    ba:6f:c2:49:91:ca:20:0d:ff:5b:e4:16:36:bf:d4:
                    55:ba:78:89:7e:ae:f7:23:be:81:e3:cb:0f:1b:a2:
                    11:06:c7:fe:f5:c0:49:a9:a1:5c:55:d5:d6:8f:9f:
                    96:67:4b:85:8c:d1:8e:3d:df:c3:c8:74:26:f5:72:
                    71:5f:31:cd:1a:04:f2:5f:03:cd:7d:45:cf:3d:90:
                    3a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:61:C0:FB:CE:75:C1:F5:31:60:4A:31:1D:F7:48:E8:CF:17:E8:65
            X509v3 Authority Key Identifier:
                keyid:1E:86:2F:20:5E:27:A8:9B:13:43:A4:D6:2B:69:B5:64:73:7D:04:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/1E862F205E27A89B1343A4D62B69B564737D0432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E862F205E27A89B1343A4D62B69B564737D0432.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/34352e3233352e34332e302f32342d3234203d3e20323636373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:ff:10:b7:d0:4f:d1:64:0a:0e:9e:04:96:79:6f:7f:79:92:
         ef:00:dd:5b:d7:63:17:4e:57:00:da:9e:d2:cc:6f:86:d3:ed:
         c9:f7:7a:ae:e4:a2:db:ee:1c:21:02:b8:0e:f1:30:b6:32:d3:
         36:54:13:2b:c1:4a:05:db:ae:be:c2:01:f4:0f:23:da:1b:db:
         cc:8c:43:37:57:65:53:7b:2b:44:8e:10:60:a3:a3:8e:da:00:
         bb:f0:75:3d:bc:66:62:5c:3c:c4:cc:04:db:2a:ed:96:bf:4b:
         58:9b:22:0f:6c:b2:54:2e:33:14:14:52:f8:15:64:26:d8:95:
         69:ed:59:8c:19:dd:38:ff:dd:28:cc:a1:dd:3b:40:09:d4:6c:
         01:dd:11:0d:a7:fc:ee:40:be:71:bc:57:07:b4:5a:a7:eb:ab:
         27:5e:13:73:cd:6c:21:37:71:8e:3f:0c:82:b8:b7:aa:76:c8:
         b5:5c:93:f8:2b:57:d5:65:77:5f:05:aa:ca:c3:6a:31:cd:37:
         d8:cd:c4:a0:6d:5b:c3:fb:ae:1e:4f:91:27:2d:6d:fe:ff:85:
         39:07:fc:3b:af:9c:83:b4:28:5c:20:f6:91:a5:c0:84:a4:65:
         bb:2e:d4:97:6d:9c:69:ee:1c:cc:b7:e4:0e:44:9f:21:65:0b:
         d7:78:92:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 07:37:00 2026 by rpki-client