Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/34352e3139302e3138302e302f32322d3234203d3e20323635363138.roa
File:                     34352e3139302e3138302e302f32322d3234203d3e20323635363138.roa (raw, json)
Hash identifier:          wTOyNzoCO5ZqiBtFnDsbxOeajaPi+Hoo10vpt1ihoew=
Subject key identifier:   6E:0F:F4:BF:98:B2:2B:01:4A:73:61:6F:9D:1A:79:D5:B0:9F:6A:57
Certificate issuer:       /CN=CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA
Certificate serial:       41659F9188F60AC2FE95676F36E5B3976ABFEB68
Authority key identifier: CD:A0:1D:15:7A:F5:B5:BA:05:DE:A9:23:DA:DF:3E:D1:DB:59:C2:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/34352e3139302e3138302e302f32322d3234203d3e20323635363138.roa
Signing time:             Sat 05 Sep 2026 04:55:00 +0000
ROA not before:           Sat 05 Sep 2026 04:50:00 +0000
ROA not after:            Sat 04 Sep 2027 04:55:00 +0000
asID:                     265618
IP address blocks:        45.190.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:65:9f:91:88:f6:0a:c2:fe:95:67:6f:36:e5:b3:97:6a:bf:eb:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA
        Validity
            Not Before: Sep  5 04:50:00 2026 GMT
            Not After : Sep  4 04:55:00 2027 GMT
        Subject: CN=6E0FF4BF98B22B014A73616F9D1A79D5B09F6A57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c1:f8:fa:50:b8:64:84:52:b3:90:8f:df:d4:
                    dc:a3:e9:bd:95:f0:77:0c:cb:3e:24:2c:00:48:12:
                    b6:2c:32:62:15:7d:fb:e6:29:df:a5:fe:db:92:42:
                    c8:75:dc:73:f3:72:39:ed:da:f9:dd:2e:37:df:28:
                    c3:f9:10:ba:bc:9d:97:fa:d8:7b:43:bf:cf:41:b7:
                    5f:28:ab:5a:b7:cf:4a:cd:26:b8:99:57:71:73:ee:
                    0b:d8:74:5a:09:d9:d0:00:a5:99:bc:8a:11:fb:2f:
                    6b:c3:b0:84:fa:44:ec:0e:d3:6d:7b:73:f5:d0:14:
                    34:ad:92:22:63:a4:41:a7:dd:7a:5f:3b:a2:70:5f:
                    5a:30:e2:b2:7e:cd:3c:7d:20:84:50:b1:7d:81:a6:
                    e1:0c:98:d0:7f:0d:52:53:03:9e:56:c6:19:7c:20:
                    d2:32:18:35:7b:0b:8f:59:d6:dd:29:29:14:31:b6:
                    a2:f5:b8:b6:8d:0f:3a:cb:2d:33:13:86:31:47:c6:
                    f0:81:13:8f:f3:4d:98:a5:b3:0f:f9:cf:2c:92:d3:
                    9d:18:9d:08:5c:cd:68:dc:53:b4:95:73:0a:95:99:
                    cb:84:dd:19:9d:00:c4:b1:28:30:62:38:dd:49:07:
                    63:4b:3b:50:3e:c6:41:32:bc:c0:b3:29:be:2d:49:
                    29:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0F:F4:BF:98:B2:2B:01:4A:73:61:6F:9D:1A:79:D5:B0:9F:6A:57
            X509v3 Authority Key Identifier:
                keyid:CD:A0:1D:15:7A:F5:B5:BA:05:DE:A9:23:DA:DF:3E:D1:DB:59:C2:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01D157AF5B5BA05DEA923DADF3ED1DB59C2FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D01DC693D39B9CCCBF4C840581CF29441BCCE05F4C633F3323B758ADDB8A4486/0/34352e3139302e3138302e302f32322d3234203d3e20323635363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:97:38:52:a1:8c:20:db:32:d4:f3:55:d0:55:0a:11:98:93:
         78:16:70:39:3d:b4:48:11:72:5a:38:41:52:17:c2:12:05:ae:
         18:96:3e:8f:f5:9d:f2:60:fc:0c:63:d4:b1:b6:23:41:74:9e:
         17:dd:a8:b5:03:7d:e5:3e:79:2c:c4:17:24:92:1e:04:99:69:
         10:da:54:4e:4b:c3:d1:ab:ef:fd:4a:aa:93:77:b0:64:87:7c:
         9a:86:6a:1d:4e:4f:37:88:0a:f5:00:94:84:f6:f9:51:36:00:
         d1:1d:dd:da:9e:fc:4b:3e:fc:6b:30:0a:3c:3c:89:e5:08:e9:
         64:d4:e3:57:d0:39:56:e8:64:18:76:01:b1:62:b2:e5:10:32:
         b3:97:68:a5:b4:eb:ad:15:02:b5:75:3b:c8:9d:b5:36:f4:f0:
         fb:24:1a:29:49:04:a9:9f:67:17:ef:50:a3:54:c2:10:c8:8b:
         00:51:84:1f:22:4c:eb:9b:18:29:fa:e6:6e:75:05:0a:93:31:
         25:2f:9a:57:f9:7d:60:7a:5f:9f:05:f6:bb:4f:20:55:70:ca:
         9e:a9:c8:c0:9d:d9:bf:94:fc:e2:76:96:6c:ae:d1:16:40:9f:
         80:2f:75:36:c1:1c:52:fa:80:25:cf:07:19:58:d3:b8:30:dc:
         a2:ca:40:98
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQWWfkYj2CsL+lWdvNuWzl2q/62gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RBMDFEMTU3QUY1QjVCQTA1REVBOTIzREFERjNFRDFE
QjU5QzJGQTAeFw0yNjA5MDUwNDUwMDBaFw0yNzA5MDQwNDU1MDBaMDMxMTAvBgNV
BAMTKDZFMEZGNEJGOThCMjJCMDE0QTczNjE2RjlEMUE3OUQ1QjA5RjZBNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQwfj6ULhkhFKzkI/f1Nyj6b2V
8HcMyz4kLABIErYsMmIVffvmKd+l/tuSQsh13HPzcjnt2vndLjffKMP5ELq8nZf6
2HtDv89Bt18oq1q3z0rNJriZV3Fz7gvYdFoJ2dAApZm8ihH7L2vDsIT6ROwO0217
c/XQFDStkiJjpEGn3XpfO6JwX1ow4rJ+zTx9IIRQsX2BpuEMmNB/DVJTA55Wxhl8
INIyGDV7C49Z1t0pKRQxtqL1uLaNDzrLLTMThjFHxvCBE4/zTZilsw/5zyyS050Y
nQhczWjcU7SVcwqVmcuE3RmdAMSxKDBiON1JB2NLO1A+xkEyvMCzKb4tSSnVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUbg/0v5iyKwFKc2FvnRp51bCfalcwHwYDVR0j
BBgwFoAUzaAdFXr1tboF3qkj2t8+0dtZwvowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMDFEQzY5M0QzOUI5Q0NDQkY0Qzg0MDU4MUNGMjk0NDFC
Q0NFMDVGNEM2MzNGMzMyM0I3NThBRERCOEE0NDg2LzAvQ0RBMDFEMTU3QUY1QjVC
QTA1REVBOTIzREFERjNFRDFEQjU5QzJGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DREEwMUQxNTdBRjVCNUJBMDVE
RUE5MjNEQURGM0VEMURCNTlDMkZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDAxREM2OTNEMzlCOUNDQ0JGNEM4NDA1ODFDRjI5NDQxQkNDRTA1RjRD
NjMzRjMzMjNCNzU4QUREQjhBNDQ4Ni8wLzM0MzUyZTMxMzkzMDJlMzEzODMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzMTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLb60
MA0GCSqGSIb3DQEBCwUAA4IBAQA/lzhSoYwg2zLU81XQVQoRmJN4FnA5PbRIEXJa
OEFSF8ISBa4Ylj6P9Z3yYPwMY9SxtiNBdJ4X3ai1A33lPnksxBckkh4EmWkQ2lRO
S8PRq+/9SqqTd7Bkh3yahmodTk83iAr1AJSE9vlRNgDRHd3anvxLPvxrMAo8PInl
COlk1ONX0DlW6GQYdgGxYrLlEDKzl2iltOutFQK1dTvInbU29PD7JBopSQSpn2cX
71CjVMIQyIsAUYQfIkzrmxgp+uZudQUKkzElL5pX+X1gel+fBfa7TyBVcMqeqcjA
ndm/lPzidpZsrtEWQJ+AL3U2wRxS+oAlzwcZWNO4MNyiykCY
-----END CERTIFICATE-----
Generated at Fri Sep 11 15:40:37 2026 by rpki-client