Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/34352e3136342e32322e302f32342d3234203d3e203238343233.roa
File:                     34352e3136342e32322e302f32342d3234203d3e203238343233.roa (raw, json)
Hash identifier:          nzyKnIKIISe/UrSpui0CPT44hI//cDpiy8iUynUn8js=
Subject key identifier:   48:32:4E:37:2D:6C:06:A1:64:11:0B:A2:86:15:A5:B1:FA:F9:C2:AF
Certificate issuer:       /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29
Certificate serial:       5B3B53A066951CA8C76C588D6172CEDFACFC89B5
Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/34352e3136342e32322e302f32342d3234203d3e203238343233.roa
Signing time:             Wed 08 Jul 2026 20:51:30 +0000
ROA not before:           Wed 08 Jul 2026 20:46:30 +0000
ROA not after:            Wed 07 Jul 2027 20:51:30 +0000
asID:                     28423
IP address blocks:        45.164.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Jul 2026 22:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:3b:53:a0:66:95:1c:a8:c7:6c:58:8d:61:72:ce:df:ac:fc:89:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29
        Validity
            Not Before: Jul  8 20:46:30 2026 GMT
            Not After : Jul  7 20:51:30 2027 GMT
        Subject: CN=48324E372D6C06A164110BA28615A5B1FAF9C2AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f6:9b:44:89:13:94:19:eb:c2:62:c2:38:79:
                    f0:f7:14:9a:b4:b2:15:a3:af:be:d4:c9:b1:2c:fc:
                    7a:5a:89:d2:c6:db:dd:1a:2b:b2:78:2d:7b:bc:a9:
                    5f:a2:f8:96:11:51:bc:a8:34:55:87:b3:30:e1:5a:
                    f1:85:f4:44:35:76:75:53:4e:55:07:ea:24:82:67:
                    dc:f2:60:2a:eb:7d:95:85:9d:2c:79:68:44:33:01:
                    e9:35:92:e1:c5:3f:0e:5c:16:d8:d8:ac:56:aa:de:
                    f7:63:55:e4:a1:73:29:91:81:38:c7:5a:3f:28:37:
                    ee:27:b5:f6:38:fc:ad:08:ce:44:92:66:7a:90:ab:
                    55:92:3d:cf:fe:08:71:ff:37:51:48:a4:43:6d:39:
                    83:30:d6:49:c1:e0:2e:bc:2c:9d:dc:e0:7b:22:bd:
                    9c:c8:06:05:95:7a:d8:e1:cd:17:e9:53:f3:f5:1f:
                    50:2a:64:27:6b:90:38:4c:c7:73:6a:8b:da:bc:e7:
                    21:5e:6d:cf:4b:13:a5:d6:73:a7:68:c9:43:27:b6:
                    e9:42:45:23:4e:6b:6e:5b:a9:7b:71:c8:16:44:c7:
                    5b:e5:73:56:d2:ff:24:0a:8a:03:55:3d:11:a5:97:
                    99:a2:fa:be:7c:76:36:80:ac:1c:46:a4:de:d3:a1:
                    b4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:32:4E:37:2D:6C:06:A1:64:11:0B:A2:86:15:A5:B1:FA:F9:C2:AF
            X509v3 Authority Key Identifier:
                keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/34352e3136342e32322e302f32342d3234203d3e203238343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:b4:44:fe:81:24:08:d7:0e:0e:54:49:22:3b:46:e0:ec:42:
         86:61:e1:ab:d7:01:cf:09:1f:25:bf:0b:c6:a6:89:2b:a6:b6:
         5d:04:28:38:a1:a4:5e:7d:c4:16:eb:f6:c6:da:72:89:2a:2c:
         3e:fb:ea:f1:71:07:d8:13:8b:14:a5:54:ad:8c:46:80:c9:e0:
         13:d6:d2:09:4c:d9:6f:7e:2a:d9:f0:f4:d6:d9:1b:9f:a2:10:
         94:58:31:8f:09:be:d5:09:34:06:54:ff:ac:b1:08:27:c9:93:
         58:37:30:fb:e7:06:ad:9a:13:e2:78:ae:4d:8c:b5:32:ee:a0:
         e5:e1:96:9d:6a:b5:6b:e5:3d:45:c9:bc:71:1b:81:33:56:48:
         60:fb:eb:85:a0:c2:01:be:50:47:04:e2:3a:09:38:95:f4:97:
         29:dc:15:07:1f:23:f0:26:a9:c2:02:5e:cf:ef:61:b2:f8:28:
         3c:4f:b6:3e:8b:e4:7d:89:12:cb:42:ca:46:bc:7f:99:54:ca:
         ee:18:30:cc:db:31:6c:ea:06:44:85:dc:7c:61:f6:fa:1c:15:
         40:09:d6:0e:c2:8e:6e:c6:8b:7a:d7:67:ea:d8:e8:48:55:40:
         c7:be:e9:c2:7e:82:fe:39:ba:a7:3f:b5:99:a1:8c:2f:6f:71:
         bd:f6:a7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 09:29:21 2026 by rpki-client