Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/34352e3136302e33322e302f32322d3232203d3e20323636383736.roa
File:                     34352e3136302e33322e302f32322d3232203d3e20323636383736.roa (raw, json)
Hash identifier:          YZvERIVuE2JHds4mUHP/GdGvAYD+boAtNCfMOdtNd0A=
Subject key identifier:   D6:25:3A:6A:41:35:91:A0:37:B7:E4:04:DD:EA:25:E4:C2:07:F2:7F
Certificate issuer:       /CN=9A0A973B46C2B2B4900ED226E666340849864C77
Certificate serial:       4170D57E0A5A4C40D8086CFA280B767FA8837D3F
Authority key identifier: 9A:0A:97:3B:46:C2:B2:B4:90:0E:D2:26:E6:66:34:08:49:86:4C:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A0A973B46C2B2B4900ED226E666340849864C77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/34352e3136302e33322e302f32322d3232203d3e20323636383736.roa
Signing time:             Thu 03 Sep 2026 12:33:27 +0000
ROA not before:           Thu 03 Sep 2026 12:28:27 +0000
ROA not after:            Thu 02 Sep 2027 12:33:27 +0000
asID:                     266876
IP address blocks:        45.160.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/9A0A973B46C2B2B4900ED226E666340849864C77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/9A0A973B46C2B2B4900ED226E666340849864C77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A0A973B46C2B2B4900ED226E666340849864C77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Sep 2026 18:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:70:d5:7e:0a:5a:4c:40:d8:08:6c:fa:28:0b:76:7f:a8:83:7d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A0A973B46C2B2B4900ED226E666340849864C77
        Validity
            Not Before: Sep  3 12:28:27 2026 GMT
            Not After : Sep  2 12:33:27 2027 GMT
        Subject: CN=D6253A6A413591A037B7E404DDEA25E4C207F27F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:22:15:81:57:c6:8e:32:5b:52:f4:28:a2:40:
                    4f:fa:ac:fc:58:c8:db:e8:f2:bf:28:c3:32:5e:af:
                    91:73:18:69:e8:ae:66:a3:a7:2e:0d:a6:89:a0:7e:
                    4b:03:05:b5:a6:21:f5:bd:55:0f:ee:51:1b:f0:f3:
                    b7:f6:13:11:1d:e8:9e:d4:aa:21:f9:b4:57:aa:5c:
                    8b:eb:a4:72:2b:24:3e:1d:d2:12:5d:2e:2b:a5:7d:
                    d4:3d:7a:76:d7:04:06:29:b7:dd:69:61:85:08:7a:
                    74:62:0b:2b:8b:d2:27:51:c7:a5:47:4a:29:82:18:
                    c5:cb:33:40:8a:ab:34:a8:5f:d3:8b:90:7c:7a:43:
                    88:2a:c1:13:d7:ca:b9:f6:9d:8b:2a:bf:94:4e:ef:
                    99:63:65:ea:1c:7c:f4:86:67:71:fa:2c:f7:40:43:
                    15:cf:97:dd:b4:0b:d4:5e:49:49:95:10:42:b1:be:
                    ef:2e:a1:71:e0:b0:07:fe:d2:88:17:ca:d2:e5:85:
                    68:0b:ed:cc:98:2c:76:f8:f6:cd:76:6b:55:18:86:
                    a6:1c:15:1f:37:fb:ff:f1:8f:fd:3c:b0:e1:3a:80:
                    4a:cd:f6:6e:79:de:3b:3b:c0:48:18:73:c0:bf:91:
                    32:ba:ef:f4:dc:81:8d:fb:ea:cd:53:f7:88:c9:1c:
                    99:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:25:3A:6A:41:35:91:A0:37:B7:E4:04:DD:EA:25:E4:C2:07:F2:7F
            X509v3 Authority Key Identifier:
                keyid:9A:0A:97:3B:46:C2:B2:B4:90:0E:D2:26:E6:66:34:08:49:86:4C:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/9A0A973B46C2B2B4900ED226E666340849864C77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A0A973B46C2B2B4900ED226E666340849864C77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/34352e3136302e33322e302f32322d3232203d3e20323636383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:ac:90:3a:bb:46:37:58:1b:f9:cc:fd:37:bf:22:a0:08:6b:
         6a:c6:3f:ac:21:09:95:96:2b:4a:70:0e:d6:9a:a0:4f:7d:01:
         da:75:67:25:6d:7c:ea:5d:52:93:22:fc:6b:6d:5c:4f:7a:b2:
         f5:2d:b8:8e:23:02:91:dc:25:ce:42:27:4b:b0:82:ed:97:32:
         e2:70:f7:e8:6e:23:af:40:dc:b8:8c:83:cb:89:39:3b:e3:a3:
         0d:a8:2f:6d:e0:95:bc:1d:1a:5d:64:92:43:98:8b:bd:9a:cd:
         00:df:ca:0f:ae:1a:42:50:54:5e:66:77:30:c6:fc:ec:c0:cb:
         eb:e3:c7:6f:b0:32:ba:86:e9:e8:d2:d0:b2:b9:06:ce:12:55:
         93:6b:57:1a:5d:ef:c4:fb:13:1f:5f:59:0b:33:97:ff:c6:7e:
         4e:f0:13:c6:f2:c1:5e:77:2e:e8:68:c9:8e:90:6b:14:d8:70:
         61:12:9e:8f:5d:21:2f:b2:5d:ad:de:34:be:94:52:24:31:49:
         fe:0c:79:e1:95:b9:9e:1b:24:89:7b:7e:22:fe:e9:b5:fc:c6:
         2b:e3:47:c0:e8:bd:59:26:fe:0a:96:16:45:97:72:60:b4:65:
         1c:e2:80:d9:c8:70:aa:c8:f5:e5:9b:49:aa:6c:1a:25:c9:30:
         a1:2e:92:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 23:38:28 2026 by rpki-client