Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32322d3234203d3e20323633373137.roa
File:                     34352e3233392e34342e302f32322d3234203d3e20323633373137.roa (raw, json)
Hash identifier:          kRVdnDxDn+I3NBwC2DfS0YL3HVdZIM1TLJeXkJQFXg4=
Subject key identifier:   41:5B:7D:92:14:ED:A1:C4:C2:F4:C1:FD:2B:A6:4E:5E:0C:06:87:72
Certificate issuer:       /CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
Certificate serial:       05C2262FAE0C088420B98CC1E7828159E9E5639C
Authority key identifier: 8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32322d3234203d3e20323633373137.roa
Signing time:             Thu 05 Mar 2026 17:32:53 +0000
ROA not before:           Thu 05 Mar 2026 17:27:53 +0000
ROA not after:            Thu 04 Mar 2027 17:32:53 +0000
asID:                     263717
IP address blocks:        45.239.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Mar 2026 00:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c2:26:2f:ae:0c:08:84:20:b9:8c:c1:e7:82:81:59:e9:e5:63:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
        Validity
            Not Before: Mar  5 17:27:53 2026 GMT
            Not After : Mar  4 17:32:53 2027 GMT
        Subject: CN=415B7D9214EDA1C4C2F4C1FD2BA64E5E0C068772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1d:03:20:79:ea:f0:fd:b2:56:33:05:5b:20:
                    f0:39:ba:7a:fb:40:08:81:1a:32:27:7e:53:1a:7f:
                    6a:9c:0d:64:36:4f:ca:6c:1e:69:40:89:d8:a2:37:
                    dc:87:fc:b0:8e:ba:09:92:ae:76:36:91:a8:fd:8d:
                    82:ca:86:44:bf:9b:2e:3c:77:01:8b:ab:fd:25:f6:
                    66:91:17:8d:21:a5:5a:fa:45:d9:5f:cd:71:80:29:
                    1c:06:ca:c1:00:9a:a8:21:ae:8b:10:90:82:72:76:
                    9b:5a:a2:66:b0:d2:2f:d3:c3:e5:e9:54:5e:55:7d:
                    67:cf:64:d9:d6:6c:1b:70:c9:97:c5:48:22:06:9e:
                    cf:9e:74:c2:bf:8b:79:be:cf:50:20:47:86:a0:db:
                    b9:13:33:c1:71:f8:8f:72:8c:e1:6d:34:73:76:8e:
                    9a:7f:63:9b:91:5a:28:de:a2:f3:9a:34:b2:b0:ed:
                    48:8a:ac:c7:8b:5a:99:61:b6:65:85:0b:11:a1:73:
                    13:c3:2b:60:8f:e1:a5:1e:ae:78:00:48:01:df:76:
                    d5:11:0a:fd:c3:a9:45:38:66:53:cb:96:c4:ac:04:
                    ef:e7:33:1a:83:b4:4b:d8:bd:97:07:73:2d:50:65:
                    bf:c7:84:cc:f3:08:81:c1:53:2b:8a:b1:a4:a2:3e:
                    0a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5B:7D:92:14:ED:A1:C4:C2:F4:C1:FD:2B:A6:4E:5E:0C:06:87:72
            X509v3 Authority Key Identifier:
                keyid:8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32322d3234203d3e20323633373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:0d:32:ba:35:e3:ca:47:b7:14:9a:33:8c:50:91:af:99:36:
         f9:69:c1:4c:f9:3b:59:9d:ce:45:54:dc:39:e3:1c:97:50:49:
         3c:5a:aa:df:fd:04:ba:c3:8b:a1:be:ad:51:b0:6d:48:24:12:
         c3:7e:1d:e8:28:55:70:84:13:89:41:a7:7a:7b:8f:d8:5f:0b:
         1e:59:37:57:ba:72:7b:15:d7:e7:ea:04:46:fc:f3:ae:4f:bf:
         fc:36:99:40:6b:f1:d6:d1:1a:a5:d3:ec:93:9c:8d:e2:94:24:
         06:e6:22:7b:1c:aa:34:fc:4a:4b:43:a5:92:35:7e:b9:22:85:
         2a:43:2f:ba:20:84:2a:8f:be:20:65:e7:ec:e0:9e:99:7c:0a:
         7b:b2:56:08:b7:9b:65:67:20:6d:8d:a5:b8:cf:c2:39:13:32:
         40:70:4a:2e:0a:e8:c5:cc:5b:fa:f8:c5:99:a6:68:44:f7:19:
         03:05:58:f0:2f:26:a9:66:06:e9:ed:85:c9:ae:54:3c:6c:bd:
         5d:e7:39:b9:cc:68:a0:d2:6e:54:3c:cf:4d:f0:77:4f:14:ff:
         eb:41:56:3f:ce:fe:af:8e:a1:16:30:f1:42:ba:ee:2e:d8:e0:
         b2:f0:7a:8f:5a:99:a5:ca:23:3b:02:42:9a:1a:3e:5d:f7:f8:
         d5:77:4a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 17:02:26 2026 by rpki-client