Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A0FB08AD1CC3CF28E449F4B551589B1C823288F290AF57FCF3D78F89B82D3CC9/0/34352e3232342e3138382e302f32322d3234203d3e20323635383533.roa
File:                     34352e3232342e3138382e302f32322d3234203d3e20323635383533.roa (raw, json)
Hash identifier:          cDqs+66s6Vu4GwlGPCruPxQ6IRzHWFttuAA+Qx4pKao=
Subject key identifier:   9E:5C:A8:42:C8:2D:F9:0C:EB:34:53:61:82:6E:D7:EC:B7:D2:7F:73
Certificate issuer:       /CN=91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6
Certificate serial:       3ECCD6DC79EAB439F75237869081E38A3553D037
Authority key identifier: 91:DB:B2:B4:BA:25:E4:71:DB:FD:1A:B6:84:91:63:BE:A0:77:E1:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0FB08AD1CC3CF28E449F4B551589B1C823288F290AF57FCF3D78F89B82D3CC9/0/34352e3232342e3138382e302f32322d3234203d3e20323635383533.roa
Signing time:             Thu 20 Aug 2026 11:26:13 +0000
ROA not before:           Thu 20 Aug 2026 11:21:13 +0000
ROA not after:            Thu 19 Aug 2027 11:26:13 +0000
asID:                     265853
IP address blocks:        45.224.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0FB08AD1CC3CF28E449F4B551589B1C823288F290AF57FCF3D78F89B82D3CC9/0/91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0FB08AD1CC3CF28E449F4B551589B1C823288F290AF57FCF3D78F89B82D3CC9/0/91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Sep 2026 23:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:cc:d6:dc:79:ea:b4:39:f7:52:37:86:90:81:e3:8a:35:53:d0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6
        Validity
            Not Before: Aug 20 11:21:13 2026 GMT
            Not After : Aug 19 11:26:13 2027 GMT
        Subject: CN=9E5CA842C82DF90CEB345361826ED7ECB7D27F73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:82:6b:5e:5f:84:b4:7e:39:71:55:1c:53:24:
                    36:cc:81:73:ed:1f:5b:91:92:fe:4b:c9:73:6d:2f:
                    4e:28:e7:09:16:2b:55:6e:81:ca:86:e6:3e:90:7c:
                    fd:d8:fd:58:e9:4b:9a:88:21:6c:9a:6d:9e:31:cb:
                    63:4b:4a:76:49:a5:90:9b:a7:0c:61:de:97:d3:d4:
                    d1:02:d0:c2:bc:15:e4:7f:db:ba:a6:22:34:29:f9:
                    f7:d8:7c:d5:08:72:6f:1b:78:08:c9:68:17:60:84:
                    ae:c1:f5:5e:07:d3:f4:1d:75:8b:80:6d:95:55:33:
                    0a:97:e4:7e:bc:a3:e3:5e:da:10:e4:ee:dd:65:8d:
                    76:43:6b:a2:d5:96:35:6b:9f:8d:bf:3a:0b:02:24:
                    29:28:a0:d6:f7:5a:a9:d2:5c:d1:fe:53:61:7e:cf:
                    11:ab:cf:28:fd:4e:79:43:f4:0d:06:f4:07:a4:0c:
                    9e:d9:8e:51:39:71:03:fd:8e:a3:25:24:67:e4:64:
                    06:0a:f6:8f:6f:e9:15:e6:75:8d:de:8d:33:14:ba:
                    da:c5:de:74:d6:95:a4:16:73:3e:fd:8c:36:b8:dc:
                    8c:4f:a6:e8:37:02:4e:c0:20:cd:6d:b9:0f:e6:f8:
                    88:66:de:bf:21:42:f2:1e:b3:39:a6:7a:13:42:17:
                    42:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5C:A8:42:C8:2D:F9:0C:EB:34:53:61:82:6E:D7:EC:B7:D2:7F:73
            X509v3 Authority Key Identifier:
                keyid:91:DB:B2:B4:BA:25:E4:71:DB:FD:1A:B6:84:91:63:BE:A0:77:E1:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0FB08AD1CC3CF28E449F4B551589B1C823288F290AF57FCF3D78F89B82D3CC9/0/91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0FB08AD1CC3CF28E449F4B551589B1C823288F290AF57FCF3D78F89B82D3CC9/0/34352e3232342e3138382e302f32322d3234203d3e20323635383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:61:0c:d9:a7:b0:07:9b:d1:aa:db:85:19:2a:b1:ed:37:35:
         54:7d:f9:73:71:15:ac:29:d3:87:01:9c:8a:2a:90:b2:f6:d7:
         5e:28:a6:49:0c:b4:de:e3:94:54:f2:d8:98:a6:52:9c:a3:41:
         04:e4:af:02:ba:db:6c:9b:2b:16:81:72:1f:d6:4c:e2:c2:13:
         a8:dc:93:14:27:41:f6:d7:fb:13:84:90:81:68:80:3a:56:4e:
         90:d5:f4:4c:4f:7e:5f:50:8f:9f:cd:b7:44:b0:df:7d:bd:5b:
         55:6b:f3:38:49:7a:cc:15:8f:9a:c2:f8:18:9c:40:99:e9:95:
         a1:e3:0a:26:af:29:68:24:2a:68:6e:e7:b7:4b:b4:52:d3:4d:
         6d:2b:66:97:79:bf:a4:da:c0:e1:ab:7d:d6:29:8a:31:12:6a:
         8c:36:ab:dd:7e:e1:96:a5:22:6a:cc:99:35:0e:07:78:dc:b2:
         c6:d1:d8:f3:98:9a:04:93:dc:8f:23:ce:01:b2:53:ec:3b:11:
         1e:3a:e9:f5:94:29:38:bc:c4:29:9e:4d:5a:12:20:df:db:bc:
         77:17:4d:50:40:72:fc:c6:b9:f0:78:89:38:a4:c6:34:af:18:
         0d:d2:05:1c:e1:f6:86:2a:da:db:df:a7:50:69:aa:8b:d2:2c:
         7e:17:b5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 20:42:49 2026 by rpki-client