Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/AB685B5F3E0E50B92C73F3A290CFE52647E17C750B00C9D2B511CB17928A9F3E/0/34352e352e302e302f32322d3234203d3e20323635363837.roa
File:                     34352e352e302e302f32322d3234203d3e20323635363837.roa (raw, json)
Hash identifier:          Qi9QTmO7yJuGtnile9bE76EK4mVfYok8y5pXF/bnP+M=
Subject key identifier:   5B:1A:85:9C:0A:D8:BD:8B:B4:BD:BF:C4:57:C9:88:A4:07:EF:FC:CE
Certificate issuer:       /CN=6853E15E3106DDBC2E82BF3D8768DF539AE3FCD1
Certificate serial:       030D7095DD50CC8B0931B3F92E056842B747BD05
Authority key identifier: 68:53:E1:5E:31:06:DD:BC:2E:82:BF:3D:87:68:DF:53:9A:E3:FC:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6853E15E3106DDBC2E82BF3D8768DF539AE3FCD1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB685B5F3E0E50B92C73F3A290CFE52647E17C750B00C9D2B511CB17928A9F3E/0/34352e352e302e302f32322d3234203d3e20323635363837.roa
Signing time:             Wed 12 Aug 2026 16:50:00 +0000
ROA not before:           Wed 12 Aug 2026 16:45:00 +0000
ROA not after:            Wed 11 Aug 2027 16:50:00 +0000
asID:                     265687
IP address blocks:        45.5.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB685B5F3E0E50B92C73F3A290CFE52647E17C750B00C9D2B511CB17928A9F3E/0/6853E15E3106DDBC2E82BF3D8768DF539AE3FCD1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB685B5F3E0E50B92C73F3A290CFE52647E17C750B00C9D2B511CB17928A9F3E/0/6853E15E3106DDBC2E82BF3D8768DF539AE3FCD1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6853E15E3106DDBC2E82BF3D8768DF539AE3FCD1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0d:70:95:dd:50:cc:8b:09:31:b3:f9:2e:05:68:42:b7:47:bd:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6853E15E3106DDBC2E82BF3D8768DF539AE3FCD1
        Validity
            Not Before: Aug 12 16:45:00 2026 GMT
            Not After : Aug 11 16:50:00 2027 GMT
        Subject: CN=5B1A859C0AD8BD8BB4BDBFC457C988A407EFFCCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bb:6c:c6:6f:7c:cc:44:05:25:80:ac:9f:11:
                    50:0f:d2:99:24:59:39:a6:90:40:24:06:cb:e3:ab:
                    18:cb:95:a9:71:00:8f:5c:ca:89:0b:c7:67:57:47:
                    9e:b7:6d:9c:d4:3e:eb:43:33:fe:d5:8a:19:59:c1:
                    0c:cd:97:f4:37:a3:1c:64:c4:f7:e6:21:6e:96:0e:
                    79:4f:1d:73:5e:70:0a:ca:89:d8:65:c2:33:b0:56:
                    af:7b:38:79:71:c3:05:91:9f:cd:aa:cb:18:01:80:
                    45:d0:ba:95:78:80:dd:16:8e:0d:0d:32:05:b2:ce:
                    cb:6a:7a:bd:55:ae:3d:fc:3a:cd:ed:17:49:7c:a6:
                    70:7f:86:a3:dd:03:0d:57:e8:2b:93:4c:25:d7:ba:
                    09:4f:0f:1f:1b:86:7c:45:35:e0:7b:a1:8d:a1:d6:
                    b4:0b:d2:f1:2b:48:f9:98:ea:2c:c2:a5:51:ad:cd:
                    36:6b:f8:09:a7:1f:82:55:7d:9f:8a:b3:ff:2a:c3:
                    9f:ba:f4:64:91:39:c0:25:3b:21:c0:f4:f5:25:e2:
                    9a:ed:88:90:b4:78:52:43:25:dc:41:b3:6c:9c:77:
                    dd:c3:c0:3c:7d:18:db:45:2d:f5:57:b0:33:f7:bd:
                    f7:72:a9:2b:c0:06:aa:37:06:8b:e1:9f:c3:4e:6a:
                    ca:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1A:85:9C:0A:D8:BD:8B:B4:BD:BF:C4:57:C9:88:A4:07:EF:FC:CE
            X509v3 Authority Key Identifier:
                keyid:68:53:E1:5E:31:06:DD:BC:2E:82:BF:3D:87:68:DF:53:9A:E3:FC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB685B5F3E0E50B92C73F3A290CFE52647E17C750B00C9D2B511CB17928A9F3E/0/6853E15E3106DDBC2E82BF3D8768DF539AE3FCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6853E15E3106DDBC2E82BF3D8768DF539AE3FCD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB685B5F3E0E50B92C73F3A290CFE52647E17C750B00C9D2B511CB17928A9F3E/0/34352e352e302e302f32322d3234203d3e20323635363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:bf:22:55:c1:5c:ec:21:dc:49:04:8f:5e:53:38:42:28:bb:
         a2:1c:60:69:d3:e2:d8:bf:29:22:8a:82:cd:6d:a3:fc:d5:69:
         ef:4a:f1:b8:30:bd:4d:4c:fe:d6:3a:34:c5:9d:1b:94:90:15:
         40:e4:b0:3e:5d:03:21:71:63:de:28:17:f3:51:f9:fb:6a:68:
         99:d7:a5:e0:2c:a0:e5:26:99:78:f7:cc:ed:4a:85:2c:a3:97:
         f9:dd:5d:a1:5b:c2:50:99:d5:40:bc:9e:37:a9:2c:6d:64:4b:
         00:68:a8:f8:16:13:44:80:3d:e9:0f:3a:17:88:e2:b6:9f:5c:
         7d:2e:22:82:9a:fa:72:53:e8:79:b5:8c:52:25:31:22:5e:98:
         5a:16:7a:f4:16:29:c7:80:b8:dd:d4:59:e7:00:0c:67:68:08:
         42:b0:b7:a7:c2:1c:17:bb:c0:50:43:be:2f:2a:f9:47:8f:3e:
         95:50:21:18:9e:ea:15:dd:a1:31:67:1a:bf:2e:79:44:35:2c:
         a6:bb:64:ce:ed:b6:ba:4d:da:57:9b:a2:ee:ff:e6:be:32:02:
         f0:8e:7b:75:ee:f0:78:51:9a:b2:b6:c5:d4:15:80:27:db:74:
         dc:78:9f:58:b6:c4:d9:42:c8:5d:4a:37:f5:b9:db:f4:cf:f3:
         a0:38:3b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:32:28 2026 by rpki-client