Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/34352e3233342e33322e302f32342d3234203d3e20323636373639.roa
File:                     34352e3233342e33322e302f32342d3234203d3e20323636373639.roa (raw, json)
Hash identifier:          OlyRu+Hz4fP6F6IGk5cr5RWRMG2HAtyvz4zc/4E9Mdw=
Subject key identifier:   49:EB:ED:04:D1:6B:B9:E3:5D:E5:12:03:8A:6B:C4:7E:96:34:1F:9F
Certificate issuer:       /CN=1F892BE2BF480CEC044B44BE95FB21F16BB4734C
Certificate serial:       5920AB03FA0BD136C714E6D7EA186C7E2A3D39C0
Authority key identifier: 1F:89:2B:E2:BF:48:0C:EC:04:4B:44:BE:95:FB:21:F1:6B:B4:73:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/34352e3233342e33322e302f32342d3234203d3e20323636373639.roa
Signing time:             Thu 17 Sep 2026 17:36:01 +0000
ROA not before:           Thu 17 Sep 2026 17:31:01 +0000
ROA not after:            Thu 16 Sep 2027 17:36:01 +0000
asID:                     266769
IP address blocks:        45.234.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 23:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:20:ab:03:fa:0b:d1:36:c7:14:e6:d7:ea:18:6c:7e:2a:3d:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F892BE2BF480CEC044B44BE95FB21F16BB4734C
        Validity
            Not Before: Sep 17 17:31:01 2026 GMT
            Not After : Sep 16 17:36:01 2027 GMT
        Subject: CN=49EBED04D16BB9E35DE512038A6BC47E96341F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:32:d4:e1:10:79:75:a0:45:68:9a:8a:37:28:
                    f7:75:ee:a0:01:ff:16:ea:ec:37:ff:85:53:cb:47:
                    d5:e1:b9:ab:98:ad:93:e3:0f:83:bc:9c:5b:e4:90:
                    c9:17:32:9d:2a:81:ba:60:9d:06:12:41:fc:c7:93:
                    e2:91:33:96:fe:14:60:7c:62:e2:11:05:59:bc:4b:
                    78:cb:d2:cd:45:1e:a1:c9:0d:5e:68:20:1c:1a:69:
                    46:d2:f2:18:70:43:57:20:8e:95:d9:f1:5f:81:8d:
                    a0:0d:c5:81:fc:07:a2:08:f1:c5:43:71:e8:50:c8:
                    ee:e3:6d:f7:a3:3a:f4:ca:66:66:70:b6:a2:eb:e3:
                    c9:7f:e7:52:16:b4:bb:3c:2a:4b:d5:c3:de:39:f3:
                    f6:4f:01:27:89:8a:3e:bb:e6:22:01:fb:f8:04:a0:
                    2d:d3:37:ec:62:1c:aa:d3:eb:66:62:04:3f:8a:16:
                    8e:34:ec:7a:91:b7:ab:28:48:80:b0:39:ae:f1:c4:
                    43:d7:f1:76:c6:53:37:0f:af:17:61:4c:63:c2:7e:
                    b7:ad:ad:1c:b0:a1:31:a5:21:de:7e:5f:d3:82:25:
                    dd:cc:c7:1d:6c:52:c2:bd:3a:89:23:28:76:a1:5a:
                    f0:2d:e1:e5:01:d1:5e:91:e3:8e:96:68:da:ab:a8:
                    e8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EB:ED:04:D1:6B:B9:E3:5D:E5:12:03:8A:6B:C4:7E:96:34:1F:9F
            X509v3 Authority Key Identifier:
                keyid:1F:89:2B:E2:BF:48:0C:EC:04:4B:44:BE:95:FB:21:F1:6B:B4:73:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/34352e3233342e33322e302f32342d3234203d3e20323636373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:dc:cb:88:ad:a3:76:7c:9e:7e:b9:4b:e4:15:78:18:8a:e2:
         7c:9b:bc:b7:32:8e:c6:5c:f1:eb:d9:fc:53:6e:de:f4:d8:dd:
         be:4b:4b:01:32:85:78:80:57:ee:97:41:94:d4:25:aa:a9:b5:
         28:15:58:cc:89:a7:a5:af:93:0f:a9:52:e0:7b:3e:33:42:d0:
         9e:3d:c0:ea:8f:d5:db:c8:a4:38:2e:05:65:ed:6f:b2:da:23:
         03:ac:eb:d5:fc:2d:bb:f2:b1:7b:9c:35:8a:17:b6:24:58:f3:
         54:98:0f:84:8d:da:ff:48:3e:b8:d0:18:ba:27:6f:0c:18:b4:
         26:c6:3a:ef:4b:69:1f:a6:2e:d4:39:bc:8a:22:d0:fc:4c:13:
         58:15:29:b2:b3:8f:e5:4b:13:05:c3:91:f5:93:da:c9:8d:1d:
         fe:b9:a8:67:16:81:99:c5:ac:7b:6e:9a:e4:26:d4:e2:13:b3:
         c1:4e:f7:1b:25:20:1f:d9:8b:ba:d9:9f:dd:d7:f2:7c:88:3b:
         f9:1e:ad:d4:03:c0:8f:a4:87:75:8f:54:89:89:30:98:e9:ca:
         95:3e:e5:ef:8b:36:1a:8e:ed:e5:af:18:85:53:e4:49:18:bd:
         51:20:73:0b:44:3a:03:cb:55:40:07:d9:d3:35:3a:58:7c:02:
         b6:4f:31:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:35:09 2026 by rpki-client