Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138312e302f32342d3234203d3e20323636373634.roa
File:                     34352e3233342e3138312e302f32342d3234203d3e20323636373634.roa (raw, json)
Hash identifier:          XjycvwwSuvG5osPjAM+mzE3t3CjnPwvb3ecZj9wadvY=
Subject key identifier:   FB:EC:B7:2B:1E:1E:EE:FA:3D:C6:D1:ED:FA:78:18:E2:BF:E8:85:4E
Certificate issuer:       /CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
Certificate serial:       2188F111497BCD7290E4C308B0DD55097015B56C
Authority key identifier: CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138312e302f32342d3234203d3e20323636373634.roa
Signing time:             Tue 08 Sep 2026 16:34:34 +0000
ROA not before:           Tue 08 Sep 2026 16:29:34 +0000
ROA not after:            Tue 07 Sep 2027 16:34:34 +0000
asID:                     266764
IP address blocks:        45.234.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:88:f1:11:49:7b:cd:72:90:e4:c3:08:b0:dd:55:09:70:15:b5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
        Validity
            Not Before: Sep  8 16:29:34 2026 GMT
            Not After : Sep  7 16:34:34 2027 GMT
        Subject: CN=FBECB72B1E1EEEFA3DC6D1EDFA7818E2BFE8854E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:71:c6:c8:7a:29:58:89:b1:db:27:9f:f0:
                    42:07:c7:a3:9f:0b:e4:37:cd:59:1d:d5:a8:32:19:
                    80:bd:9a:80:44:53:db:1c:ab:05:22:aa:35:e9:c4:
                    15:9a:93:b6:3b:80:db:03:89:65:10:ec:38:5b:4e:
                    18:db:cb:a3:fb:3b:e9:a7:6f:3e:a6:c1:2c:bd:a6:
                    72:f4:5d:27:26:6e:21:38:34:79:ce:ae:f3:34:06:
                    5b:81:e9:7c:cd:d3:51:a9:e8:9a:c2:8d:16:5f:5e:
                    cd:cf:5f:ce:13:3c:5b:ad:be:3d:60:c4:37:d9:74:
                    a3:82:fe:27:bd:c6:a7:34:b8:90:bd:23:8c:8b:50:
                    98:8f:84:c7:29:e0:d9:ab:7c:16:26:a2:5d:bb:9d:
                    ce:e7:41:a9:4c:bd:30:4c:99:8a:be:16:64:56:8a:
                    c9:34:a6:50:9f:1b:8e:14:b6:53:49:4f:b0:ef:79:
                    61:eb:08:82:af:af:90:05:f1:e0:8f:47:d9:a8:ef:
                    49:28:27:24:bd:d3:3c:15:11:61:ab:d5:50:4a:bb:
                    23:e4:7e:92:c7:6b:ca:2b:ee:7b:3d:e6:d2:f1:a1:
                    c1:b3:4c:af:ee:82:3e:28:ed:52:73:50:fd:37:6b:
                    91:1e:e7:8e:f8:19:0c:dd:c3:cb:0f:63:5c:58:e3:
                    0a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EC:B7:2B:1E:1E:EE:FA:3D:C6:D1:ED:FA:78:18:E2:BF:E8:85:4E
            X509v3 Authority Key Identifier:
                keyid:CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138312e302f32342d3234203d3e20323636373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:37:5f:91:25:c8:b6:38:f0:46:c2:aa:82:08:9a:75:84:09:
         e4:f9:e7:85:c4:f0:8c:93:4e:a0:0c:06:cc:40:f8:28:bf:4b:
         40:3d:ba:8e:49:2c:d3:ce:29:db:ec:bb:19:3d:c4:f5:64:5c:
         9c:b3:b6:ef:3c:5d:45:47:58:b9:a2:ac:ec:14:c8:6f:9d:1f:
         2e:24:ec:80:27:c2:5d:84:0a:4f:f9:24:74:f6:d8:da:d2:14:
         57:a5:59:22:f2:43:5e:7a:5a:7c:1d:fe:16:1f:7b:f5:aa:84:
         02:1a:a8:0e:ce:2a:bb:9f:27:cd:f1:2c:44:94:71:14:a5:5d:
         cc:9f:a2:21:bb:fe:10:70:a8:aa:bf:2d:8d:f2:f5:ac:f0:eb:
         18:44:35:c6:be:11:f0:3a:f8:87:32:17:c4:8d:df:6e:36:79:
         d7:0b:0d:07:43:30:53:20:92:8c:ed:d0:30:e3:90:05:3c:2e:
         7f:48:90:db:51:d8:31:23:60:56:5e:21:50:f9:77:92:ba:42:
         9a:39:c5:92:ec:51:f7:2b:3b:e0:22:8c:99:c0:49:e9:c7:ad:
         c8:48:3c:d1:14:ce:c9:f6:b4:74:d3:d5:bd:4a:8f:89:19:7c:
         7d:d4:d5:bb:6d:13:b9:73:7f:f3:52:3f:e9:1a:61:55:92:b2:
         f8:27:74:ae
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIYjxEUl7zXKQ5MMIsN1VCXAVtWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E2RkE4NzZFQzNGQkI3QjA0MzEwQUJDNEIzMTIzQUZC
RTg4QTIwQzAeFw0yNjA5MDgxNjI5MzRaFw0yNzA5MDcxNjM0MzRaMDMxMTAvBgNV
BAMTKEZCRUNCNzJCMUUxRUVFRkEzREM2RDFFREZBNzgxOEUyQkZFODg1NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAoXHGyHopWImx2yef8EIHx6Of
C+Q3zVkd1agyGYC9moBEU9scqwUiqjXpxBWak7Y7gNsDiWUQ7DhbThjby6P7O+mn
bz6mwSy9pnL0XScmbiE4NHnOrvM0BluB6XzN01Gp6JrCjRZfXs3PX84TPFutvj1g
xDfZdKOC/ie9xqc0uJC9I4yLUJiPhMcp4NmrfBYmol27nc7nQalMvTBMmYq+FmRW
isk0plCfG44UtlNJT7DveWHrCIKvr5AF8eCPR9mo70koJyS90zwVEWGr1VBKuyPk
fpLHa8or7ns95tLxocGzTK/ugj4o7VJzUP03a5Ee5474GQzdw8sPY1xY4wrTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU++y3Kx4e7vo9xtHt+ngY4r/ohU4wHwYDVR0j
BBgwFoAUym+oduw/u3sEMQq8SzEjr76IogwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQ0ZGMjc3NjlBNDM5NjA1REEyN0Q3Mjk1QjJBODY1MDRC
NUI2RjZBQjRBQjhDNERENDQwNTJERTA3ODAxMzcxLzAvQ0E2RkE4NzZFQzNGQkI3
QjA0MzEwQUJDNEIzMTIzQUZCRTg4QTIwQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTZGQTg3NkVDM0ZCQjdCMDQz
MTBBQkM0QjMxMjNBRkJFODhBMjBDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRENGRjI3NzY5QTQzOTYwNURBMjdENzI5NUIyQTg2NTA0QjVCNkY2QUI0
QUI4QzRERDQ0MDUyREUwNzgwMTM3MS8wLzM0MzUyZTMyMzMzNDJlMzEzODMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzczNjM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeq1
MA0GCSqGSIb3DQEBCwUAA4IBAQByN1+RJci2OPBGwqqCCJp1hAnk+eeFxPCMk06g
DAbMQPgov0tAPbqOSSzTzinb7LsZPcT1ZFycs7bvPF1FR1i5oqzsFMhvnR8uJOyA
J8JdhApP+SR09tja0hRXpVki8kNeelp8Hf4WH3v1qoQCGqgOziq7nyfN8SxElHEU
pV3Mn6Ihu/4QcKiqvy2N8vWs8OsYRDXGvhHwOviHMhfEjd9uNnnXCw0HQzBTIJKM
7dAw45AFPC5/SJDbUdgxI2BWXiFQ+XeSukKaOcWS7FH3KzvgIoyZwEnpx63ISDzR
FM7J9rR009W9So+JGXx91NW7bRO5c3/zUj/pGmFVkrL4J3Su
-----END CERTIFICATE-----
Generated at Sat Sep 19 01:41:24 2026 by rpki-client