Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/34352e3233342e33332e302f32342d3234203d3e20323636373639.roa
File:                     34352e3233342e33332e302f32342d3234203d3e20323636373639.roa (raw, json)
Hash identifier:          Arx0PqDcVbJvcmAVjPOUksDtMzaSJdUHpCs3GBKIKys=
Subject key identifier:   D8:D4:16:1C:48:BC:51:DF:08:2A:25:37:EF:51:80:D4:89:A2:1D:83
Certificate issuer:       /CN=1F892BE2BF480CEC044B44BE95FB21F16BB4734C
Certificate serial:       65B8F7BE531C6E3A4763351C8888021C033B38F7
Authority key identifier: 1F:89:2B:E2:BF:48:0C:EC:04:4B:44:BE:95:FB:21:F1:6B:B4:73:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/34352e3233342e33332e302f32342d3234203d3e20323636373639.roa
Signing time:             Thu 17 Sep 2026 17:36:00 +0000
ROA not before:           Thu 17 Sep 2026 17:31:00 +0000
ROA not after:            Thu 16 Sep 2027 17:36:00 +0000
asID:                     266769
IP address blocks:        45.234.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 23:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b8:f7:be:53:1c:6e:3a:47:63:35:1c:88:88:02:1c:03:3b:38:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F892BE2BF480CEC044B44BE95FB21F16BB4734C
        Validity
            Not Before: Sep 17 17:31:00 2026 GMT
            Not After : Sep 16 17:36:00 2027 GMT
        Subject: CN=D8D4161C48BC51DF082A2537EF5180D489A21D83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5f:b5:ab:d9:13:0c:12:af:3a:d8:00:fe:fc:
                    fa:d4:dd:39:ea:26:d9:b7:6f:18:87:0e:5a:21:6d:
                    65:3d:19:70:8a:59:6c:4e:36:19:23:87:57:bc:a7:
                    4d:44:3a:07:56:87:87:6c:75:48:1d:1e:36:e8:61:
                    41:4c:93:8c:75:84:9d:f6:d1:30:b5:fb:9e:03:3a:
                    6a:2f:2c:f2:af:c7:1e:d4:d9:57:bb:59:a8:1e:b5:
                    ce:33:b8:93:13:db:9f:c8:ce:08:e9:50:64:33:4b:
                    89:92:93:eb:61:bd:5c:f3:2d:48:72:5e:f0:0d:ed:
                    d2:ed:6c:7b:b8:35:20:6b:fc:89:99:e7:42:b3:5f:
                    d1:4c:27:c0:1f:e0:2e:ec:21:a8:bb:4b:a9:5a:ce:
                    02:c2:7a:d4:ea:ca:7d:86:2d:81:2f:b6:a5:92:a5:
                    51:ca:cb:7f:94:3a:55:16:ee:b0:f7:9c:2d:19:75:
                    85:fc:00:e5:a1:3b:4e:29:90:ce:b7:2a:a5:e1:c1:
                    da:4f:f8:30:a4:2e:01:09:5e:d8:ae:f0:e5:b4:c9:
                    e7:1c:ae:f6:f5:da:bc:08:f0:64:37:86:48:bf:2c:
                    4f:ed:af:e9:2b:04:ad:e9:67:3b:fc:63:3a:0e:b5:
                    15:c5:84:ac:60:f4:67:4f:d8:3f:34:17:d1:e4:5d:
                    d3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D4:16:1C:48:BC:51:DF:08:2A:25:37:EF:51:80:D4:89:A2:1D:83
            X509v3 Authority Key Identifier:
                keyid:1F:89:2B:E2:BF:48:0C:EC:04:4B:44:BE:95:FB:21:F1:6B:B4:73:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F892BE2BF480CEC044B44BE95FB21F16BB4734C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C3A490791936DF2A05C8D25B1E739EA9415294B2F093AFA2C74607661B533FA/0/34352e3233342e33332e302f32342d3234203d3e20323636373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:7f:49:77:92:cd:57:29:7e:7e:af:0e:7a:5f:53:ef:81:56:
         3a:b5:a8:34:50:bc:4d:80:d9:b7:c3:5a:36:9c:75:5a:c9:04:
         d4:42:f0:7f:9c:98:c3:08:68:4a:6a:90:35:c3:35:c0:25:d6:
         8d:f0:c8:68:59:49:ea:01:91:a2:8b:48:16:91:a5:eb:95:e4:
         cb:1a:92:bc:69:1f:7c:f6:2b:80:94:84:e9:f3:1c:e9:3a:68:
         43:10:5d:ca:af:55:d2:09:d6:71:da:09:95:b4:12:0e:35:8a:
         52:83:23:b4:43:aa:09:16:fd:5c:93:62:a6:12:e5:15:24:49:
         af:20:d9:1d:3c:df:92:1d:8d:af:3c:b8:d0:2a:09:da:93:01:
         e1:8d:46:33:9d:85:85:79:3d:2b:78:97:d1:41:48:9e:cd:21:
         ab:d0:c3:50:fa:d1:85:8b:a9:91:39:94:95:61:0a:d7:1e:3c:
         9f:b4:c1:98:ed:eb:37:a1:39:70:1a:4a:9d:72:e9:70:58:8f:
         13:fa:29:92:40:90:75:a7:ee:f8:5f:33:4b:b9:dc:77:68:ac:
         7d:33:e2:41:96:d0:fd:b7:e1:bf:44:c7:9c:31:39:67:44:f6:
         4b:15:21:f2:df:72:44:a8:20:15:16:cd:ee:f1:c1:e5:b3:46:
         e5:55:32:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:31:06 2026 by rpki-client