Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/34352e3139312e34342e302f32342d3234203d3e2033383136.roa
File:                     34352e3139312e34342e302f32342d3234203d3e2033383136.roa (raw, json)
Hash identifier:          ZyIAqHGIGfvd6qcdxhrereEOiI6ES/alM7+5/QpfIBE=
Subject key identifier:   AA:AA:1B:BF:FF:5F:40:29:93:9E:86:14:DA:47:BC:27:30:13:46:A1
Certificate issuer:       /CN=C88E06CCAFF9CD22AA83801DCA00A03F91548D6E
Certificate serial:       25F34C2F7BC896F897C96034A0E6E391F923C556
Authority key identifier: C8:8E:06:CC:AF:F9:CD:22:AA:83:80:1D:CA:00:A0:3F:91:54:8D:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/34352e3139312e34342e302f32342d3234203d3e2033383136.roa
Signing time:             Tue 19 May 2026 23:43:16 +0000
ROA not before:           Tue 19 May 2026 23:38:16 +0000
ROA not after:            Tue 18 May 2027 23:43:16 +0000
asID:                     3816
IP address blocks:        45.191.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f3:4c:2f:7b:c8:96:f8:97:c9:60:34:a0:e6:e3:91:f9:23:c5:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C88E06CCAFF9CD22AA83801DCA00A03F91548D6E
        Validity
            Not Before: May 19 23:38:16 2026 GMT
            Not After : May 18 23:43:16 2027 GMT
        Subject: CN=AAAA1BBFFF5F4029939E8614DA47BC27301346A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:06:52:10:5d:93:7e:57:0e:5a:86:45:db:aa:
                    f4:f9:e7:14:06:79:5d:2a:32:99:14:0b:86:7d:47:
                    9b:54:79:e0:ce:15:fd:bd:25:32:8c:dd:ae:04:aa:
                    78:10:2b:de:b4:88:fe:00:a0:e9:5d:5a:fc:e3:fe:
                    78:bb:6a:e7:94:a7:76:fb:ce:37:aa:7b:bb:9d:e3:
                    34:a6:a0:08:7b:08:c0:70:8e:50:96:8f:59:13:67:
                    6c:97:41:28:54:18:5a:9a:0b:e2:65:c3:58:fd:6c:
                    a0:6c:4b:4e:97:85:6b:ca:f5:b0:62:79:d6:cf:c2:
                    c2:bc:f7:98:4d:4f:2d:cb:71:84:e3:45:ac:46:33:
                    76:e4:77:fc:a3:1e:54:f8:04:9b:de:c4:5d:e5:4f:
                    a9:8d:06:67:4e:33:05:86:13:02:15:31:c9:f9:b1:
                    d2:c8:a9:d4:5f:ed:ff:74:48:87:4e:33:c0:f1:a2:
                    d9:fd:ef:93:95:e9:ba:f0:e2:b9:f4:63:d5:86:27:
                    40:9b:45:a9:2e:22:24:de:3a:b9:3a:39:74:d6:bc:
                    e6:7f:30:ba:0a:52:40:47:77:cd:b0:71:5f:cb:c5:
                    bf:4b:76:dd:8f:c5:8c:d7:1b:5d:9c:65:c2:b2:66:
                    c8:58:8a:ad:5f:69:dd:0a:c7:42:0e:e4:1c:f8:64:
                    b9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AA:1B:BF:FF:5F:40:29:93:9E:86:14:DA:47:BC:27:30:13:46:A1
            X509v3 Authority Key Identifier:
                keyid:C8:8E:06:CC:AF:F9:CD:22:AA:83:80:1D:CA:00:A0:3F:91:54:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/34352e3139312e34342e302f32342d3234203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:a2:46:44:cb:39:5b:e7:25:76:4d:f7:a2:44:50:32:aa:44:
         60:aa:c4:73:2b:42:87:7f:15:e3:f1:e5:ab:1b:43:44:53:77:
         be:13:92:97:9f:60:1a:91:6f:7e:58:bf:ec:29:b0:a2:42:2f:
         1e:84:a0:6f:03:22:b8:4b:d5:87:a1:4d:62:21:9a:5e:cf:a7:
         68:3a:9f:5b:88:0a:06:35:9b:43:53:97:18:45:98:ba:09:d2:
         a5:ba:1a:8b:cc:05:6f:e4:4f:cd:99:fb:fc:e7:fb:87:df:d2:
         d1:bf:ff:83:a4:b5:69:ec:25:8f:13:10:84:68:24:e4:54:f6:
         de:9a:db:e1:62:46:ba:b9:ca:90:12:24:d3:9b:50:39:f0:9f:
         fd:47:db:9b:9c:a8:d5:e8:48:9a:6b:f1:24:77:50:d8:d9:5a:
         85:a5:61:fd:9e:f9:09:66:4b:14:59:d5:d4:86:1e:89:e5:3e:
         24:af:ee:23:0a:0b:93:7a:c7:f4:63:6e:ea:23:3c:57:9a:08:
         64:03:13:89:85:34:70:5b:a7:92:53:e5:0d:ca:9e:52:3e:1a:
         a8:59:b2:52:34:45:3e:aa:cc:6b:8b:18:2e:a5:9a:cd:33:2e:
         3f:78:b6:d8:2c:6b:cc:a0:b4:df:89:0a:ed:00:b7:ea:70:8a:
         0f:4d:4b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:49:15 2026 by rpki-client