Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E124E8EE1406F821CB49B59D4D07D8400613D970E100F3594C958C193216EEC2/0/34352e3138332e3138342e302f32322d3234203d3e20323639373937.roa
File:                     34352e3138332e3138342e302f32322d3234203d3e20323639373937.roa (raw, json)
Hash identifier:          k6mgorfSy6trGBG8sSUv1TIdzSjtXEdAnie3lm05iLQ=
Subject key identifier:   D3:A2:35:F6:9E:75:CC:30:A2:D9:6B:E5:FC:7A:B3:E7:1C:54:68:EA
Certificate issuer:       /CN=0BFDBB6B822E6C27D75EE6B589E89C528951B18A
Certificate serial:       7BAC2051ABB277C98E1F098FB7A2B693D6B8D0DF
Authority key identifier: 0B:FD:BB:6B:82:2E:6C:27:D7:5E:E6:B5:89:E8:9C:52:89:51:B1:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BFDBB6B822E6C27D75EE6B589E89C528951B18A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E124E8EE1406F821CB49B59D4D07D8400613D970E100F3594C958C193216EEC2/0/34352e3138332e3138342e302f32322d3234203d3e20323639373937.roa
Signing time:             Mon 10 Aug 2026 19:24:55 +0000
ROA not before:           Mon 10 Aug 2026 19:19:55 +0000
ROA not after:            Mon 09 Aug 2027 19:24:55 +0000
asID:                     269797
IP address blocks:        45.183.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E124E8EE1406F821CB49B59D4D07D8400613D970E100F3594C958C193216EEC2/0/0BFDBB6B822E6C27D75EE6B589E89C528951B18A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E124E8EE1406F821CB49B59D4D07D8400613D970E100F3594C958C193216EEC2/0/0BFDBB6B822E6C27D75EE6B589E89C528951B18A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BFDBB6B822E6C27D75EE6B589E89C528951B18A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ac:20:51:ab:b2:77:c9:8e:1f:09:8f:b7:a2:b6:93:d6:b8:d0:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BFDBB6B822E6C27D75EE6B589E89C528951B18A
        Validity
            Not Before: Aug 10 19:19:55 2026 GMT
            Not After : Aug  9 19:24:55 2027 GMT
        Subject: CN=D3A235F69E75CC30A2D96BE5FC7AB3E71C5468EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bf:99:99:80:96:2f:07:d6:e7:60:08:99:74:
                    f9:38:4b:1a:2c:f1:98:b3:fb:fe:ac:99:c4:2c:d0:
                    58:7a:72:9a:ad:8b:e9:0f:a7:12:18:c7:cd:d1:d8:
                    f5:8a:3c:e5:ae:eb:61:40:ba:8d:49:7c:bd:54:fd:
                    b1:91:e2:78:8c:fd:5c:f5:eb:c8:ae:ee:17:2d:76:
                    96:3c:f4:f3:92:cf:a8:57:ee:b3:40:16:b8:2f:94:
                    d8:91:b4:95:95:31:ed:45:5c:3d:7b:dc:38:b8:b3:
                    68:6c:90:ae:90:d8:d4:1a:78:2a:3d:1f:a4:8a:2d:
                    a3:4e:88:17:4d:3d:50:19:4f:a9:22:0f:0a:ee:be:
                    04:74:15:5c:96:13:46:17:5f:88:3d:80:47:2f:e3:
                    3c:20:b8:41:8d:e7:07:8a:60:c1:79:e1:56:bd:e3:
                    07:0b:31:0b:05:8f:94:45:00:83:3b:1d:4e:a4:35:
                    87:f6:49:09:4b:3a:b6:23:84:df:22:81:3f:75:ab:
                    37:6c:4d:fe:10:91:15:b4:b4:74:c3:45:8e:be:63:
                    27:07:b9:aa:48:64:ab:82:b5:aa:37:29:3a:b2:da:
                    dd:cd:d9:22:c9:78:ef:55:2b:27:ae:eb:6c:9a:4f:
                    e2:48:fc:e7:1e:09:f3:57:28:04:f3:c3:f9:0f:a2:
                    fd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A2:35:F6:9E:75:CC:30:A2:D9:6B:E5:FC:7A:B3:E7:1C:54:68:EA
            X509v3 Authority Key Identifier:
                keyid:0B:FD:BB:6B:82:2E:6C:27:D7:5E:E6:B5:89:E8:9C:52:89:51:B1:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E124E8EE1406F821CB49B59D4D07D8400613D970E100F3594C958C193216EEC2/0/0BFDBB6B822E6C27D75EE6B589E89C528951B18A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BFDBB6B822E6C27D75EE6B589E89C528951B18A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E124E8EE1406F821CB49B59D4D07D8400613D970E100F3594C958C193216EEC2/0/34352e3138332e3138342e302f32322d3234203d3e20323639373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:d1:b6:83:4f:c5:eb:4b:fc:2c:d7:fb:98:5f:c4:de:86:1c:
         02:89:93:15:9a:ee:7e:0b:44:dd:8e:14:64:f2:c8:be:d9:29:
         b1:da:cf:63:12:c5:34:ac:71:44:c0:c4:2d:af:ab:df:c1:8f:
         76:4b:3f:a5:5e:d9:0a:ef:b6:0b:b2:65:1f:b1:df:71:76:d0:
         e3:32:37:31:35:c3:82:02:5a:90:95:36:af:0b:7c:67:8c:28:
         9d:17:47:b1:db:12:e8:0a:43:a2:b0:cb:ca:22:96:e1:bc:70:
         d9:5c:da:71:bd:ad:4e:1a:96:82:17:90:d8:c3:e9:da:97:3f:
         f3:6f:1f:2e:c2:90:81:22:40:b4:c4:e7:38:2c:54:cf:ed:5e:
         b8:e1:1b:25:84:5e:50:76:f3:38:5e:89:7f:02:66:2e:32:eb:
         a6:97:c4:56:9a:d5:51:7f:df:38:89:b0:7c:d1:f5:12:67:ee:
         b1:89:5f:01:9d:12:e4:2b:f7:81:b6:38:da:d1:d3:04:19:23:
         d2:a3:02:1a:f6:b1:ba:80:2a:00:be:99:de:0f:a5:e3:35:57:
         00:49:ca:af:d5:bf:a2:0d:58:e7:b2:28:a5:9d:bf:1a:22:fe:
         04:a3:e3:6b:46:0a:e1:6c:0d:6e:67:49:f8:62:7f:31:d7:00:
         2c:29:07:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:45:27 2026 by rpki-client