Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131362e302f32322d3234203d3e203532343638.roa
File:                     34352e352e3131362e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          Yg5e+E+uG8mOL1zc9KKJIlIDCei62CCSCMJ8nVW6ToY=
Subject key identifier:   90:B2:F1:AD:F7:FA:BA:FB:07:73:59:9E:C1:D5:0F:87:47:48:14:BD
Certificate issuer:       /CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
Certificate serial:       66AB77E3A5D70E2137A46A1F9141EFF1F4F1588B
Authority key identifier: F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131362e302f32322d3234203d3e203532343638.roa
Signing time:             Mon 19 Oct 2026 19:42:01 +0000
ROA not before:           Mon 19 Oct 2026 19:37:01 +0000
ROA not after:            Mon 18 Oct 2027 19:42:01 +0000
asID:                     52468
IP address blocks:        45.5.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 23:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ab:77:e3:a5:d7:0e:21:37:a4:6a:1f:91:41:ef:f1:f4:f1:58:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
        Validity
            Not Before: Oct 19 19:37:01 2026 GMT
            Not After : Oct 18 19:42:01 2027 GMT
        Subject: CN=90B2F1ADF7FABAFB0773599EC1D50F87474814BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c5:91:27:72:86:45:fc:ce:81:bf:4f:bf:75:
                    3c:02:fa:45:a6:e9:5b:f5:b3:8b:78:33:77:3d:9b:
                    e0:64:02:70:7c:18:ac:16:3d:d9:d3:ff:3d:cf:c8:
                    69:8a:35:3d:e7:12:da:1d:f4:ca:48:28:cd:72:d0:
                    12:e2:92:ff:28:20:d1:67:67:d3:1d:ad:b4:4a:5e:
                    b8:37:ff:6c:12:1f:27:d6:ca:14:1d:96:70:bc:d4:
                    f3:8d:47:94:1b:2d:98:4b:5d:8f:93:04:95:70:8e:
                    b6:fe:9e:3a:62:7f:e5:70:51:b8:7e:82:c5:72:65:
                    94:28:b7:7e:7b:4b:76:4e:12:2e:70:8f:07:9f:ef:
                    4c:a1:cf:aa:94:44:44:e6:7e:6d:41:68:5e:eb:b0:
                    65:6a:74:3a:19:a9:06:9a:81:23:21:ae:fd:9e:8d:
                    0b:50:eb:37:4f:81:88:cc:1b:ee:b0:3a:e9:58:f4:
                    66:c4:21:5f:d7:2a:1f:fe:a5:a8:c4:37:c7:ea:17:
                    bf:bc:1f:70:3c:36:df:7a:b1:71:bd:35:98:13:3c:
                    e4:37:aa:a9:04:a1:16:f9:b5:62:bf:fb:f7:ff:0c:
                    b8:d3:f5:2f:69:f3:78:86:3f:41:d2:cd:97:73:78:
                    f9:e3:73:4f:8d:d1:85:e8:89:b6:d5:3f:d4:4f:55:
                    81:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B2:F1:AD:F7:FA:BA:FB:07:73:59:9E:C1:D5:0F:87:47:48:14:BD
            X509v3 Authority Key Identifier:
                keyid:F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131362e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:b5:9e:1f:e4:b1:a6:87:c8:36:1d:9c:d6:30:c6:54:e8:ba:
         22:4c:d9:13:32:2a:31:ac:36:34:07:7c:05:b8:9e:04:b2:09:
         9a:d4:5e:d2:d9:c5:3a:78:40:de:6a:57:af:63:2d:93:e9:2a:
         15:05:c6:93:42:3d:13:9e:0e:d8:1a:85:e5:33:6a:c4:aa:0d:
         e3:fa:e0:4d:46:a4:ca:18:82:1d:4b:ec:73:d6:2a:29:7b:57:
         06:83:71:a1:c5:75:86:c0:c5:9e:75:26:54:9a:84:71:aa:74:
         26:f1:f8:69:16:c1:ff:39:bc:bc:3b:e5:06:0a:a6:ba:78:ec:
         9c:06:58:ce:43:a9:d3:91:b0:3d:89:e6:8f:c8:36:cb:78:e7:
         d3:2d:bb:b3:48:f5:e5:73:8b:5b:38:11:c4:af:11:08:71:46:
         51:96:f8:84:1e:fc:62:61:15:c6:fb:bf:52:2e:09:98:cc:72:
         d9:fc:24:49:16:15:07:8b:27:5c:c3:fc:f2:93:ad:90:ad:07:
         c6:2c:8f:87:33:55:32:de:39:2c:b5:67:e1:7c:5b:23:84:dc:
         3d:34:f5:0c:09:e0:87:bf:5b:9c:7a:3c:ea:bd:26:46:c8:f9:
         00:50:b6:02:c7:d0:58:ab:0a:6a:db:81:10:61:e0:66:5f:e2:
         8a:a8:3b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:17:41 2026 by rpki-client