Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/34352e3138392e3134382e302f32322d3234203d3e203238343335.roa
File:                     34352e3138392e3134382e302f32322d3234203d3e203238343335.roa (raw, json)
Hash identifier:          pbdOE5nuPAPSHuDtqCOqemR1jjWg4ToM5Vj4yAULbhs=
Subject key identifier:   08:58:60:42:44:1C:D6:9A:B6:0D:92:91:A2:01:6F:2E:B7:FC:91:99
Certificate issuer:       /CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
Certificate serial:       2A373320762C0E4B1412277C099AA325572A4F22
Authority key identifier: 96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/34352e3138392e3134382e302f32322d3234203d3e203238343335.roa
Signing time:             Mon 02 Mar 2026 22:40:00 +0000
ROA not before:           Mon 02 Mar 2026 22:35:00 +0000
ROA not after:            Mon 01 Mar 2027 22:40:00 +0000
asID:                     28435
IP address blocks:        45.189.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Mar 2026 23:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:37:33:20:76:2c:0e:4b:14:12:27:7c:09:9a:a3:25:57:2a:4f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
        Validity
            Not Before: Mar  2 22:35:00 2026 GMT
            Not After : Mar  1 22:40:00 2027 GMT
        Subject: CN=08586042441CD69AB60D9291A2016F2EB7FC9199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:47:37:1a:ec:24:a3:5b:53:f8:06:68:90:c2:
                    6e:82:59:82:da:27:1f:b8:4f:df:23:97:cc:6c:a8:
                    59:af:0c:61:8c:1a:d7:ca:e1:59:fc:b7:55:6c:73:
                    aa:58:25:26:18:99:ad:a3:0e:b9:0c:68:4d:66:6e:
                    ae:84:3d:00:f5:73:aa:ae:46:a5:7d:43:1d:34:43:
                    6d:57:6f:45:c9:fd:d8:63:65:72:1d:50:1a:7e:32:
                    78:84:cc:8e:1d:41:ff:62:ff:c1:1b:eb:c1:eb:49:
                    dc:76:48:ba:c4:2f:30:f2:a6:ab:62:17:3e:04:55:
                    d5:bc:75:3f:17:b6:8b:53:45:ba:68:44:d4:b8:38:
                    99:cc:26:b8:e0:fa:b3:01:b8:c7:4f:0b:d1:75:46:
                    ca:ea:ef:13:70:d1:58:1d:18:f7:1c:cc:10:1a:06:
                    ae:5a:71:6b:9e:2a:3c:cd:ea:c2:ce:e3:a1:5c:9b:
                    09:2f:ed:f7:d5:bf:ee:c8:e7:f1:7a:59:77:17:8a:
                    d7:9a:5c:cf:00:41:3b:fb:c6:d5:3e:f4:94:fc:0c:
                    3d:a3:7d:98:48:7c:9f:98:9b:2a:a4:23:14:7b:37:
                    33:ba:15:9e:7e:b3:5a:45:c0:3a:5c:f5:de:f4:24:
                    b4:e0:b4:e3:32:b8:0f:8c:7b:34:cd:b7:23:36:7b:
                    d9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:58:60:42:44:1C:D6:9A:B6:0D:92:91:A2:01:6F:2E:B7:FC:91:99
            X509v3 Authority Key Identifier:
                keyid:96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/34352e3138392e3134382e302f32322d3234203d3e203238343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:54:33:15:95:43:b4:5c:8c:be:86:d8:83:e7:1d:21:5d:06:
         87:e5:8d:60:5a:70:dd:43:9c:55:64:14:dc:50:2e:ee:4c:d4:
         92:96:96:8c:22:99:9d:06:20:02:ca:e0:df:37:62:a3:d5:cf:
         f2:6e:a4:7e:ed:8b:99:d9:a5:9c:e5:7a:87:1a:5d:61:b2:28:
         c3:cc:50:68:d2:c5:f8:f1:e8:9b:36:cf:84:b3:63:42:46:54:
         3d:c2:a8:e1:67:f9:e7:13:bb:39:a6:0d:ab:8d:f4:6c:8a:5c:
         4c:09:35:58:77:59:68:74:cf:58:bb:2e:51:62:08:36:29:dd:
         90:97:da:90:10:89:27:91:0f:2a:1b:fa:9b:e0:df:19:ce:b6:
         47:0f:e5:84:b9:7c:98:d7:bc:4e:a0:19:e0:02:1e:56:44:f1:
         5c:47:1f:9f:60:48:21:06:c2:fa:63:db:d9:40:3e:1c:3a:02:
         17:40:c6:81:e1:80:2e:63:ae:f2:c4:27:1d:a9:ec:a3:c3:86:
         84:3b:a9:df:fe:e1:10:b0:35:49:ee:1a:3c:1f:1b:ca:d0:01:
         c6:6e:4e:16:24:2a:6b:de:54:1e:2b:d2:45:5a:e0:92:44:90:
         6b:f4:4a:d3:f5:4c:9e:6c:fe:6e:44:32:33:4a:3b:20:44:7c:
         a2:56:9c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 18:11:54 2026 by rpki-client