Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/34352e3232392e38352e302f32342d3234203d3e20323636373035.roa
File:                     34352e3232392e38352e302f32342d3234203d3e20323636373035.roa (raw, json)
Hash identifier:          vPY9fFdWaVmg2m9JGrstpaaz+cYAR85DBk8MzWe+pKI=
Subject key identifier:   8E:F3:D4:8D:EC:49:37:4A:7A:86:6F:70:DA:8C:49:2B:31:28:80:C3
Certificate issuer:       /CN=09452D3964845A96D0C2242C6550EF5DDE90180A
Certificate serial:       6D220192272D0EE7481D0E156732F9623141BA86
Authority key identifier: 09:45:2D:39:64:84:5A:96:D0:C2:24:2C:65:50:EF:5D:DE:90:18:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09452D3964845A96D0C2242C6550EF5DDE90180A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/34352e3232392e38352e302f32342d3234203d3e20323636373035.roa
Signing time:             Tue 31 Mar 2026 20:45:00 +0000
ROA not before:           Tue 31 Mar 2026 20:40:00 +0000
ROA not after:            Tue 30 Mar 2027 20:45:00 +0000
asID:                     266705
IP address blocks:        45.229.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09452D3964845A96D0C2242C6550EF5DDE90180A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 07:56:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:22:01:92:27:2d:0e:e7:48:1d:0e:15:67:32:f9:62:31:41:ba:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09452D3964845A96D0C2242C6550EF5DDE90180A
        Validity
            Not Before: Mar 31 20:40:00 2026 GMT
            Not After : Mar 30 20:45:00 2027 GMT
        Subject: CN=8EF3D48DEC49374A7A866F70DA8C492B312880C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:29:fe:c3:af:8b:bc:76:14:cb:db:74:4f:26:
                    b7:5b:e2:c6:3a:a0:f8:cd:b7:9e:85:7e:c9:3e:d2:
                    9b:9f:61:cc:99:46:1e:ed:f2:a0:fb:8a:72:c6:35:
                    40:2d:bb:4a:15:0c:16:66:f0:12:c0:b2:dc:58:09:
                    ed:df:4f:cd:3c:6f:15:06:51:dc:26:c6:b2:c5:4a:
                    88:b5:5a:3c:13:74:c0:fd:30:0c:82:e0:ec:19:b7:
                    82:ec:85:49:f5:58:5d:7f:25:c1:7d:16:60:ff:71:
                    96:4e:23:27:34:87:e3:52:a2:7b:e1:90:bd:07:78:
                    77:17:27:a5:d7:a4:15:83:d6:10:4d:b0:20:70:5f:
                    6d:8f:22:b7:e8:69:5f:05:21:ec:2d:99:15:c2:ba:
                    5e:68:04:9b:87:6c:83:7e:74:52:26:e3:5d:d4:c0:
                    ad:b3:b5:6d:0d:07:7a:27:5c:9d:9a:b9:21:94:fb:
                    ea:73:d6:c1:70:39:c7:56:da:5d:a7:ca:c6:84:d9:
                    e6:94:25:f0:f4:a5:b2:dd:74:06:70:25:5d:28:e7:
                    7f:3b:b9:9a:62:51:db:b8:14:8d:92:0b:bb:73:09:
                    0d:ab:c2:34:eb:1a:39:d6:5c:2a:de:00:4f:42:6b:
                    db:b3:2c:76:ac:d9:a8:33:4e:bf:d1:c1:b3:e8:6a:
                    2c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F3:D4:8D:EC:49:37:4A:7A:86:6F:70:DA:8C:49:2B:31:28:80:C3
            X509v3 Authority Key Identifier:
                keyid:09:45:2D:39:64:84:5A:96:D0:C2:24:2C:65:50:EF:5D:DE:90:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/09452D3964845A96D0C2242C6550EF5DDE90180A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09452D3964845A96D0C2242C6550EF5DDE90180A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DD3C30270C294E5CEFBC66E8C8F486A1F207FCA398F02E62C36945B98832E4A/0/34352e3232392e38352e302f32342d3234203d3e20323636373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:5b:50:16:b2:50:49:23:d8:e6:0f:bf:15:20:60:fd:a0:ae:
         4f:f6:86:ea:0b:81:49:b9:e9:08:cc:fa:78:31:27:0c:4a:00:
         44:cc:1b:fd:f3:90:0d:e1:5f:6d:49:ab:d7:17:c5:2f:c3:66:
         f9:0e:5e:a3:6e:3c:06:35:3a:a5:93:20:98:e0:f9:9d:5a:66:
         11:c8:40:56:a9:3c:cf:dc:73:53:59:3e:fc:d6:ea:d6:dc:51:
         02:54:74:e8:7e:d9:7b:4b:cd:27:0b:f5:a5:00:44:4a:03:0c:
         c7:ad:b8:99:9a:0e:26:22:6a:93:22:2b:e1:4d:05:56:90:1f:
         9f:8f:55:3f:19:4b:95:51:bd:da:be:80:6f:6e:0f:fc:85:92:
         fc:8c:52:33:4c:52:97:c3:15:70:8b:e0:6e:8e:0b:9f:a5:64:
         c8:04:fb:4a:70:a7:48:a6:7b:c7:7b:ac:f9:de:b0:49:31:4d:
         bc:a5:30:e5:03:62:cf:7c:01:6c:5e:a8:e3:fd:56:0e:99:e6:
         88:a7:d2:06:e3:db:6c:a1:80:3a:0d:3d:dd:a0:17:f6:e5:99:
         de:a7:78:4f:42:00:a0:d3:66:73:4d:0f:ee:c9:0a:6a:f9:16:
         bc:a1:28:ab:47:f4:56:43:7f:2e:b7:65:15:95:ba:1c:06:f0:
         93:f1:04:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 07:24:47 2026 by rpki-client