Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/34352e3232362e3230342e302f32322d3232203d3e20323635383633.roa
File:                     34352e3232362e3230342e302f32322d3232203d3e20323635383633.roa (raw, json)
Hash identifier:          2H9rDfqYNtErfrKVXEOyadBdjps1cO4ueK2tOlk3vUk=
Subject key identifier:   76:A7:66:3D:7C:D0:F2:CE:A2:90:E0:02:3B:AA:76:C7:C5:58:D0:F1
Certificate issuer:       /CN=61AC4D14594A2836E063EF44EC4E2248F46BFB74
Certificate serial:       26E1A4FDD19B417D329EA74E46C81A897BE26E4E
Authority key identifier: 61:AC:4D:14:59:4A:28:36:E0:63:EF:44:EC:4E:22:48:F4:6B:FB:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/34352e3232362e3230342e302f32322d3232203d3e20323635383633.roa
Signing time:             Wed 11 Mar 2026 22:50:02 +0000
ROA not before:           Wed 11 Mar 2026 22:45:02 +0000
ROA not after:            Wed 10 Mar 2027 22:50:02 +0000
asID:                     265863
IP address blocks:        45.226.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Mar 2026 00:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e1:a4:fd:d1:9b:41:7d:32:9e:a7:4e:46:c8:1a:89:7b:e2:6e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61AC4D14594A2836E063EF44EC4E2248F46BFB74
        Validity
            Not Before: Mar 11 22:45:02 2026 GMT
            Not After : Mar 10 22:50:02 2027 GMT
        Subject: CN=76A7663D7CD0F2CEA290E0023BAA76C7C558D0F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b3:fb:37:d8:4b:39:a3:3e:81:6b:eb:7a:f5:
                    61:8c:96:2f:cd:86:21:39:8b:4d:72:80:e7:61:99:
                    9e:a5:c9:d2:0e:ec:e1:23:cd:dc:52:0e:b8:2e:f9:
                    fe:c3:e4:78:a3:b2:a3:d1:2f:8f:93:2a:b0:53:9c:
                    12:60:7f:22:ca:0b:ba:50:93:59:d2:8a:8c:48:29:
                    95:3a:6a:71:c5:fe:27:1f:73:c0:ab:e9:b8:68:9e:
                    49:1c:0d:09:14:64:b5:89:7c:49:d6:86:22:9d:76:
                    0f:1f:8a:06:2d:f0:cd:ef:5c:db:73:90:d1:4f:af:
                    b4:f3:32:14:6d:87:30:e9:4a:79:05:2c:3c:16:86:
                    da:eb:81:93:02:17:5d:c0:7d:96:e2:42:74:da:0c:
                    e5:88:ca:e6:d7:ee:e7:05:ff:3c:13:f1:57:db:1a:
                    5f:aa:fb:ac:31:a0:db:50:ed:37:6c:28:16:33:46:
                    f2:dd:d8:eb:79:01:7a:13:ce:86:21:2b:27:16:16:
                    d0:1d:f4:86:33:a9:98:fc:64:97:0d:fe:16:07:cf:
                    e6:23:6a:fa:3c:f4:f5:c4:d7:47:ed:de:68:a9:3d:
                    b7:1b:bf:83:1a:f4:ef:94:72:01:3b:d2:d2:73:cc:
                    84:42:33:e4:ab:79:d5:c4:4b:6f:cb:b2:f6:02:7d:
                    24:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A7:66:3D:7C:D0:F2:CE:A2:90:E0:02:3B:AA:76:C7:C5:58:D0:F1
            X509v3 Authority Key Identifier:
                keyid:61:AC:4D:14:59:4A:28:36:E0:63:EF:44:EC:4E:22:48:F4:6B:FB:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/34352e3232362e3230342e302f32322d3232203d3e20323635383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:41:ac:1d:2f:7b:d3:34:96:bd:0c:54:27:db:12:25:ec:06:
         ef:c2:3c:8d:de:17:64:00:3d:3d:9e:14:cc:07:b3:dc:c3:9e:
         42:cf:7a:8a:44:3e:44:a1:ae:a3:58:f9:85:64:f8:5a:1a:d5:
         9b:45:85:82:5d:a1:f4:43:03:73:04:82:63:4b:eb:a5:57:ee:
         df:03:ff:39:f8:db:ed:35:d3:98:00:67:52:91:3f:31:eb:29:
         aa:6b:23:2d:ed:87:62:95:d1:b8:8a:15:bf:c1:27:af:25:00:
         d9:08:8e:a6:88:6a:38:d8:50:12:64:67:d4:44:6b:79:e6:af:
         85:80:7c:77:5e:0b:17:45:92:4d:f7:af:60:0d:1e:7c:12:09:
         e0:2c:6e:26:6b:ce:68:3e:f9:20:6d:97:aa:70:c0:8a:8d:76:
         ca:6b:9e:44:3a:d0:c8:6c:26:1f:be:05:55:92:30:80:2c:d0:
         ca:60:e7:3f:90:90:45:91:f1:c1:f8:12:c3:f6:27:c6:4d:c2:
         54:db:71:79:b0:26:c7:49:16:d3:d0:31:d4:95:15:64:0e:7f:
         72:68:79:97:68:01:90:27:d0:52:d3:dd:26:1b:62:a2:86:68:
         14:3d:41:bb:f0:c9:b2:5d:67:d5:33:e8:a0:57:32:e6:fc:3b:
         5c:84:43:5d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJuGk/dGbQX0ynqdORsgaiXvibk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFBQzREMTQ1OTRBMjgzNkUwNjNFRjQ0RUM0RTIyNDhG
NDZCRkI3NDAeFw0yNjAzMTEyMjQ1MDJaFw0yNzAzMTAyMjUwMDJaMDMxMTAvBgNV
BAMTKDc2QTc2NjNEN0NEMEYyQ0VBMjkwRTAwMjNCQUE3NkM3QzU1OEQwRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrs/s32Es5oz6Ba+t69WGMli/N
hiE5i01ygOdhmZ6lydIO7OEjzdxSDrgu+f7D5HijsqPRL4+TKrBTnBJgfyLKC7pQ
k1nSioxIKZU6anHF/icfc8Cr6bhonkkcDQkUZLWJfEnWhiKddg8figYt8M3vXNtz
kNFPr7TzMhRthzDpSnkFLDwWhtrrgZMCF13AfZbiQnTaDOWIyubX7ucF/zwT8Vfb
Gl+q+6wxoNtQ7TdsKBYzRvLd2Ot5AXoTzoYhKycWFtAd9IYzqZj8ZJcN/hYHz+Yj
avo89PXE10ft3mipPbcbv4Ma9O+UcgE70tJzzIRCM+SredXES2/LsvYCfSTBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUdqdmPXzQ8s6ikOACO6p2x8VY0PEwHwYDVR0j
BBgwFoAUYaxNFFlKKDbgY+9E7E4iSPRr+3QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQTYzMUI0Mjk0REU5QTg5QjAwQ0Q3RTA5QUYwMjM4QzE2
RTI5RjU4QjJBNzEwNjk4N0MyOTlGNTNDNTQ2RTVBLzAvNjFBQzREMTQ1OTRBMjgz
NkUwNjNFRjQ0RUM0RTIyNDhGNDZCRkI3NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MUFDNEQxNDU5NEEyODM2RTA2
M0VGNDRFQzRFMjI0OEY0NkJGQjc0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0E2MzFCNDI5NERFOUE4OUIwMENEN0UwOUFGMDIzOEMxNkUyOUY1OEIy
QTcxMDY5ODdDMjk5RjUzQzU0NkU1QS8wLzM0MzUyZTMyMzIzNjJlMzIzMDM0MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM1MzgzNjMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLeLM
MA0GCSqGSIb3DQEBCwUAA4IBAQDQQawdL3vTNJa9DFQn2xIl7AbvwjyN3hdkAD09
nhTMB7Pcw55Cz3qKRD5Eoa6jWPmFZPhaGtWbRYWCXaH0QwNzBIJjS+ulV+7fA/85
+NvtNdOYAGdSkT8x6ymqayMt7YdildG4ihW/wSevJQDZCI6miGo42FASZGfURGt5
5q+FgHx3XgsXRZJN969gDR58EgngLG4ma85oPvkgbZeqcMCKjXbKa55EOtDIbCYf
vgVVkjCALNDKYOc/kJBFkfHB+BLD9ifGTcJU23F5sCbHSRbT0DHUlRVkDn9yaHmX
aAGQJ9BS090mG2KihmgUPUG78MmyXWfVM+igVzLm/DtchENd
-----END CERTIFICATE-----
Generated at Thu Mar 12 05:01:10 2026 by rpki-client