Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/34352e3138332e36322e302f32342d3234203d3e203634313635.roa
File:                     34352e3138332e36322e302f32342d3234203d3e203634313635.roa (raw, json)
Hash identifier:          7QqnGOqsVqd+fXsRRnjgQ9HdXyfSYHo2d8hO5WvQfqY=
Subject key identifier:   63:FB:21:7D:75:9C:7A:28:E9:67:C8:AA:0F:86:AF:68:2B:6F:A1:48
Certificate issuer:       /CN=352876AA3B7BD34529C4806D306052CF8D3D5515
Certificate serial:       33A16536C166E322F052AE4E7707CF6ECD03C8EB
Authority key identifier: 35:28:76:AA:3B:7B:D3:45:29:C4:80:6D:30:60:52:CF:8D:3D:55:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/352876AA3B7BD34529C4806D306052CF8D3D5515.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/34352e3138332e36322e302f32342d3234203d3e203634313635.roa
Signing time:             Fri 11 Sep 2026 03:34:56 +0000
ROA not before:           Fri 11 Sep 2026 03:29:56 +0000
ROA not after:            Fri 10 Sep 2027 03:34:56 +0000
asID:                     64165
IP address blocks:        45.183.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.crl
                          rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/352876AA3B7BD34529C4806D306052CF8D3D5515.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 02:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a1:65:36:c1:66:e3:22:f0:52:ae:4e:77:07:cf:6e:cd:03:c8:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=352876AA3B7BD34529C4806D306052CF8D3D5515
        Validity
            Not Before: Sep 11 03:29:56 2026 GMT
            Not After : Sep 10 03:34:56 2027 GMT
        Subject: CN=63FB217D759C7A28E967C8AA0F86AF682B6FA148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:84:63:5c:12:f1:ed:27:f7:00:ab:41:1f:
                    a3:48:7e:52:6c:f0:00:bd:0a:f7:0a:6e:92:a3:f6:
                    ee:28:91:9c:87:41:d9:8a:5a:91:5b:2b:87:c0:32:
                    d2:30:6c:17:7b:dd:cf:d2:89:5b:bd:b3:a1:23:10:
                    9c:e5:44:bd:f4:76:3b:a4:73:ca:a5:bb:82:8e:02:
                    93:16:cf:ec:d4:2f:bd:ac:95:d4:a8:ad:e4:4e:99:
                    91:de:92:de:5a:0f:81:c3:5b:62:01:be:da:f9:f7:
                    df:d7:7b:d5:7e:2d:99:6b:d0:97:c3:7e:75:f1:ce:
                    6f:6f:d6:a8:af:7e:c0:6e:7e:62:9e:2e:bf:ed:23:
                    9e:16:a7:56:4c:4f:0e:fa:62:1c:52:6d:5e:8b:6b:
                    62:f8:99:57:05:f8:6b:82:10:14:26:f2:5e:80:2f:
                    99:a6:09:d5:b3:59:fc:eb:60:e2:e2:aa:97:8c:58:
                    34:09:47:91:b2:66:00:75:6a:97:31:ca:6b:15:57:
                    17:a1:45:ac:a4:0e:58:9e:26:b5:80:a6:06:40:c5:
                    ac:e7:8b:7d:49:7b:9d:41:d8:88:64:2b:3b:fa:36:
                    9b:de:b2:6a:73:44:a4:9c:14:a5:17:b9:63:3a:35:
                    b5:db:69:ef:fb:20:11:d0:34:db:57:28:ad:a7:2e:
                    82:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FB:21:7D:75:9C:7A:28:E9:67:C8:AA:0F:86:AF:68:2B:6F:A1:48
            X509v3 Authority Key Identifier:
                keyid:35:28:76:AA:3B:7B:D3:45:29:C4:80:6D:30:60:52:CF:8D:3D:55:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/352876AA3B7BD34529C4806D306052CF8D3D5515.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/34352e3138332e36322e302f32342d3234203d3e203634313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:86:d3:49:f3:b0:b7:7a:46:79:8c:bf:6a:b0:3a:77:b4:60:
         36:58:6a:66:5e:fc:65:05:1f:aa:7e:10:f9:86:a0:17:b1:b7:
         69:2a:a7:57:a6:96:db:73:e3:03:ae:75:32:a9:db:50:83:70:
         a4:30:ae:b1:66:96:2a:d5:25:67:d8:27:0f:93:1b:30:3f:ac:
         97:2d:aa:9b:f0:c6:72:3d:7f:c2:64:27:ab:c9:bd:3d:8f:51:
         94:76:7e:b2:66:07:89:ff:90:07:c4:2e:a9:af:b3:78:69:17:
         47:6a:52:ee:20:34:ea:d1:e4:ad:14:f3:ad:e4:8a:5a:ab:26:
         4c:55:f2:19:85:d1:37:28:2f:51:6a:17:e9:b3:33:bd:82:c7:
         7d:2a:e0:86:a6:a2:6c:12:7c:9c:c6:46:53:b1:f0:0a:e2:41:
         dd:07:6f:c2:08:b7:3d:8c:07:b2:b5:b1:3a:05:b8:45:dd:e2:
         24:83:ae:da:af:c3:c5:cc:fb:a4:7d:df:1b:4c:8a:2d:63:18:
         c3:1e:58:f5:96:82:4e:f6:f2:19:11:b6:60:a0:ea:24:a0:5b:
         7f:34:1f:84:ce:05:aa:a9:b7:17:d2:f7:6c:ad:f0:01:73:d8:
         e0:b0:7a:5d:ec:01:02:d9:31:75:77:97:0f:eb:20:b4:34:a0:
         2b:37:cf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:56:22 2026 by rpki-client