Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/34352e3136302e33332e302f32342d3234203d3e20323636383736.roa
File:                     34352e3136302e33332e302f32342d3234203d3e20323636383736.roa (raw, json)
Hash identifier:          QNDg/b4UIyrv4DiTAXFe8AzvuBe2crLtyozDtll5lB0=
Subject key identifier:   12:94:F1:2A:30:0E:B9:25:70:9B:6D:1F:C5:10:07:FA:F1:E1:42:17
Certificate issuer:       /CN=9A0A973B46C2B2B4900ED226E666340849864C77
Certificate serial:       9323C43B6E524BB282ED98296CB4432DCDA1EC
Authority key identifier: 9A:0A:97:3B:46:C2:B2:B4:90:0E:D2:26:E6:66:34:08:49:86:4C:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A0A973B46C2B2B4900ED226E666340849864C77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/34352e3136302e33332e302f32342d3234203d3e20323636383736.roa
Signing time:             Thu 03 Sep 2026 12:33:27 +0000
ROA not before:           Thu 03 Sep 2026 12:28:27 +0000
ROA not after:            Thu 02 Sep 2027 12:33:27 +0000
asID:                     266876
IP address blocks:        45.160.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/9A0A973B46C2B2B4900ED226E666340849864C77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/9A0A973B46C2B2B4900ED226E666340849864C77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A0A973B46C2B2B4900ED226E666340849864C77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Sep 2026 18:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            93:23:c4:3b:6e:52:4b:b2:82:ed:98:29:6c:b4:43:2d:cd:a1:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A0A973B46C2B2B4900ED226E666340849864C77
        Validity
            Not Before: Sep  3 12:28:27 2026 GMT
            Not After : Sep  2 12:33:27 2027 GMT
        Subject: CN=1294F12A300EB925709B6D1FC51007FAF1E14217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:c7:15:39:3d:8f:69:68:4e:c3:08:94:95:
                    8a:a7:b6:8c:5c:51:15:98:38:4c:bb:e9:8d:f1:a5:
                    3d:99:92:75:6f:7f:38:b9:6f:3d:7c:fe:0d:65:e7:
                    55:9e:3b:c1:2f:eb:07:95:58:a1:52:ab:32:49:c6:
                    37:49:4e:49:ff:00:39:30:e2:87:fe:6d:6f:e7:5b:
                    61:f3:05:be:ed:b7:50:29:5b:10:c2:25:93:3e:59:
                    cf:a5:0a:cd:9f:1c:93:ad:a2:78:9f:1c:49:2a:36:
                    2a:db:30:e9:24:73:6b:72:0c:a1:b2:19:e5:86:57:
                    1b:b2:67:74:81:58:1e:5e:8b:3a:2a:75:32:79:8b:
                    c8:09:59:cd:0b:9d:3b:b8:02:63:fe:8a:54:ae:dd:
                    e1:54:7d:3c:6e:31:2c:ec:31:6d:f5:c6:e2:78:9e:
                    06:1b:3b:67:eb:fd:9f:8c:0b:ef:dc:8e:fd:a8:bc:
                    57:30:f8:23:d4:a5:8c:d2:6e:ad:d1:c0:04:4c:d0:
                    b7:a4:05:3c:5a:b1:de:f6:8c:56:00:11:bc:14:31:
                    2a:3a:14:08:b8:a7:de:1d:d4:37:04:e9:d3:76:d1:
                    ed:e8:e8:e3:7d:e0:ed:39:73:69:49:24:12:1d:f6:
                    e1:66:5e:af:d8:84:a9:31:72:7d:06:01:3e:d8:46:
                    4a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:94:F1:2A:30:0E:B9:25:70:9B:6D:1F:C5:10:07:FA:F1:E1:42:17
            X509v3 Authority Key Identifier:
                keyid:9A:0A:97:3B:46:C2:B2:B4:90:0E:D2:26:E6:66:34:08:49:86:4C:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/9A0A973B46C2B2B4900ED226E666340849864C77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A0A973B46C2B2B4900ED226E666340849864C77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/34352e3136302e33332e302f32342d3234203d3e20323636383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:0d:6d:ee:c9:1f:6d:2a:a0:9e:60:2e:05:f8:3f:c5:f9:99:
         76:5a:e7:3f:26:ba:6e:4d:ed:06:b8:89:eb:7a:77:28:ae:ad:
         cd:33:c3:9a:5d:59:b3:b6:2b:c5:34:e3:1a:bb:0c:58:8e:52:
         73:9d:a3:4f:45:ef:b9:ca:49:13:5d:64:ad:c3:45:f0:4c:65:
         62:d6:32:90:d6:fd:6d:69:e9:ff:76:c8:65:a8:c8:18:b7:33:
         cc:66:c9:59:1d:c2:21:4f:c5:65:32:ed:95:31:f9:c9:e6:bc:
         74:5c:fc:dd:dd:15:0e:4e:2b:cd:a5:9c:ff:e5:a3:3d:02:e6:
         82:b4:fb:d5:7d:19:d8:9c:fc:38:db:9f:c7:65:3f:1a:62:39:
         c3:d6:31:10:15:e4:16:40:6e:20:c4:1e:5f:7f:2d:c7:38:5e:
         ee:0d:72:91:d2:83:76:31:a9:b5:9b:d3:cb:f7:6e:b3:6b:ae:
         08:f5:90:e3:f8:59:1f:d9:5c:1e:57:05:8e:e8:b8:09:a6:a4:
         1d:dd:6d:34:08:78:f9:17:53:98:7b:ba:36:ab:23:2b:05:78:
         c7:78:de:7e:31:91:9d:fa:75:26:bc:df:d0:a0:35:9b:6f:99:
         fb:83:ce:69:18:04:10:cd:70:bf:a1:ce:0c:e5:43:d7:e8:0f:
         a9:3a:dd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 23:38:12 2026 by rpki-client