Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/34352e3232392e38342e302f32342d3234203d3e20323636373035.roa
File:                     34352e3232392e38342e302f32342d3234203d3e20323636373035.roa (raw, json)
Hash identifier:          PgIjpLPWmZoYCmuO/HA9Kxixf5iAnY50TovVPg01jXA=
Subject key identifier:   1F:0A:45:8D:AD:0E:51:E6:7F:2D:16:44:F0:EC:A2:1B:7B:49:AF:59
Certificate issuer:       /CN=09452D3964845A96D0C2242C6550EF5DDE90180A
Certificate serial:       6A8189A54CD6EA3ECF41F8A4A9776E1548D88FE8
Authority key identifier: 09:45:2D:39:64:84:5A:96:D0:C2:24:2C:65:50:EF:5D:DE:90:18:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09452D3964845A96D0C2242C6550EF5DDE90180A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/34352e3232392e38342e302f32342d3234203d3e20323636373035.roa
Signing time:             Tue 31 Mar 2026 20:45:00 +0000
ROA not before:           Tue 31 Mar 2026 20:40:00 +0000
ROA not after:            Tue 30 Mar 2027 20:45:00 +0000
asID:                     266705
IP address blocks:        45.229.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09452D3964845A96D0C2242C6550EF5DDE90180A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 07:56:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:81:89:a5:4c:d6:ea:3e:cf:41:f8:a4:a9:77:6e:15:48:d8:8f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09452D3964845A96D0C2242C6550EF5DDE90180A
        Validity
            Not Before: Mar 31 20:40:00 2026 GMT
            Not After : Mar 30 20:45:00 2027 GMT
        Subject: CN=1F0A458DAD0E51E67F2D1644F0ECA21B7B49AF59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:f3:e8:60:d8:09:91:91:bb:98:86:b6:f0:
                    1f:28:54:49:ba:71:4f:0a:ac:b1:d7:7b:3e:54:a9:
                    b4:f3:c6:8a:46:17:35:49:bf:1c:13:5e:51:97:f6:
                    4a:0a:60:67:2a:d6:6e:dc:ef:cd:64:69:51:71:01:
                    db:1c:06:2b:20:02:f0:fc:64:b0:07:71:fe:fa:a6:
                    2f:6e:6c:e8:67:24:e3:87:60:3d:83:d9:ec:2c:cf:
                    52:3f:87:9b:71:b9:88:13:c7:0f:9b:fd:a7:b3:2d:
                    ad:22:3a:02:ba:83:f8:de:8a:a0:f1:0c:5a:85:9d:
                    1c:07:d5:3e:48:ea:bd:43:2d:c1:fd:d1:f3:1d:f7:
                    25:0e:65:53:37:0a:52:ce:88:f1:14:2c:0b:3e:81:
                    87:92:f0:da:b5:d9:91:36:19:c3:db:95:94:19:38:
                    46:83:b7:43:d6:36:a3:fb:76:ec:d5:27:2b:70:d4:
                    8f:26:75:e5:e2:88:14:14:42:1d:47:f4:73:ae:4e:
                    1f:e9:8a:76:cd:06:23:2b:49:fb:d3:5a:ee:67:fd:
                    80:fd:de:2d:6c:e2:19:2e:4a:b3:42:9a:0d:b8:eb:
                    1a:cf:10:f2:96:82:1e:71:cd:2c:c3:46:37:ce:1d:
                    89:ec:c5:48:45:7b:4b:c0:8c:50:44:e6:ad:a6:1d:
                    84:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0A:45:8D:AD:0E:51:E6:7F:2D:16:44:F0:EC:A2:1B:7B:49:AF:59
            X509v3 Authority Key Identifier:
                keyid:09:45:2D:39:64:84:5A:96:D0:C2:24:2C:65:50:EF:5D:DE:90:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09452D3964845A96D0C2242C6550EF5DDE90180A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/34352e3232392e38342e302f32342d3234203d3e20323636373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:41:2d:50:b8:b7:84:37:c7:93:6b:34:46:87:2a:a3:6b:86:
         68:55:dd:b0:4a:43:5f:bf:9d:6b:52:c5:5a:fb:35:63:57:ce:
         d7:2f:dc:72:63:aa:5a:b7:40:6b:6d:bc:77:b6:1b:6f:22:ca:
         ee:1c:8b:b7:8d:48:4c:64:aa:85:f0:97:f8:cb:f5:07:de:cf:
         99:17:74:ab:a5:65:42:4e:22:60:6b:e9:2e:2a:7e:3c:04:4b:
         57:1d:3f:6f:3a:cc:8e:ef:0b:df:b2:f0:37:e3:38:7f:91:79:
         41:16:48:a6:c0:bb:3c:db:bd:cc:cb:4a:2a:f9:c8:e6:f4:24:
         87:bb:2e:1e:b9:fa:af:88:94:85:5d:43:5a:67:df:53:ad:83:
         5e:c0:dc:36:66:63:51:3e:c6:ce:12:d0:02:fa:dd:d4:00:7d:
         ff:8e:fc:59:bc:aa:4e:0e:0d:ed:1e:2b:12:dc:82:70:dd:33:
         58:5c:93:7f:94:c6:97:76:13:3f:b2:da:ad:06:51:f6:f7:4e:
         b7:13:2b:a5:dd:e0:90:2f:e3:23:ef:cd:5f:9a:7e:4b:d4:bd:
         7d:4d:70:ca:b6:33:4f:c3:d3:53:f3:a0:00:93:6e:f4:01:c4:
         c8:99:3d:d7:6e:dc:4e:a8:ae:c0:55:2a:9e:04:92:0e:0c:c2:
         e6:c4:c5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 07:24:47 2026 by rpki-client