Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/34352e3138392e3137322e302f32322d3232203d3e20323639383630.roa
File:                     34352e3138392e3137322e302f32322d3232203d3e20323639383630.roa (raw, json)
Hash identifier:          UVv4lO4RprFW7U9dHT1L11dxyusFTtDgenQ+iCsd7DA=
Subject key identifier:   E0:B3:01:3E:6F:CC:3F:28:72:65:FC:42:17:11:3F:15:6A:06:1B:3A
Certificate issuer:       /CN=2A7D6F434E1C14422868C8C6E751B64D72719220
Certificate serial:       0F27A87683D7233F0AF616E92997035CD7725C76
Authority key identifier: 2A:7D:6F:43:4E:1C:14:42:28:68:C8:C6:E7:51:B6:4D:72:71:92:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A7D6F434E1C14422868C8C6E751B64D72719220.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/34352e3138392e3137322e302f32322d3232203d3e20323639383630.roa
Signing time:             Sat 15 Aug 2026 21:25:00 +0000
ROA not before:           Sat 15 Aug 2026 21:20:00 +0000
ROA not after:            Sat 14 Aug 2027 21:25:00 +0000
asID:                     269860
IP address blocks:        45.189.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/2A7D6F434E1C14422868C8C6E751B64D72719220.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/2A7D6F434E1C14422868C8C6E751B64D72719220.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A7D6F434E1C14422868C8C6E751B64D72719220.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:27:a8:76:83:d7:23:3f:0a:f6:16:e9:29:97:03:5c:d7:72:5c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A7D6F434E1C14422868C8C6E751B64D72719220
        Validity
            Not Before: Aug 15 21:20:00 2026 GMT
            Not After : Aug 14 21:25:00 2027 GMT
        Subject: CN=E0B3013E6FCC3F287265FC4217113F156A061B3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:00:17:78:03:2d:fc:0d:88:bb:2c:d6:17:
                    64:43:e5:7b:60:52:5c:b2:1d:8f:1d:d2:03:29:e9:
                    0e:6f:53:d5:cc:e3:ff:b3:d4:25:42:95:eb:a9:99:
                    15:e0:d2:0c:7c:71:18:4d:56:c6:2b:bc:13:f1:7c:
                    d4:65:ec:83:25:be:7f:49:8e:b3:7d:9e:03:ad:f8:
                    e1:eb:3a:a4:a7:d4:e2:c5:bc:29:82:68:7a:80:f1:
                    3b:db:17:b5:55:90:4a:9b:a1:df:38:4b:43:61:e9:
                    4f:00:c3:fa:61:9e:61:b5:70:37:44:1b:81:79:8f:
                    2c:4b:9c:5e:fe:8a:22:b0:16:fd:51:7b:63:26:ae:
                    cd:57:7e:a5:c3:b3:70:a7:c8:e1:7d:41:17:ee:9a:
                    86:a8:b9:eb:94:5f:67:31:d8:8c:1b:15:2e:be:aa:
                    61:f3:a7:46:85:73:53:44:c9:30:18:d1:a6:7f:87:
                    96:36:87:3d:61:a2:94:c8:c2:0e:55:53:50:05:7e:
                    0b:2c:cb:54:4b:11:5c:e2:f0:6a:c9:cc:ba:34:d1:
                    06:89:ab:a7:ca:a5:be:e1:04:3e:86:97:92:dc:d2:
                    c8:9d:3e:12:59:46:3b:f5:a2:6e:0a:b6:a5:83:ef:
                    24:0d:05:7b:31:07:74:6e:7c:f3:30:4f:64:42:01:
                    34:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B3:01:3E:6F:CC:3F:28:72:65:FC:42:17:11:3F:15:6A:06:1B:3A
            X509v3 Authority Key Identifier:
                keyid:2A:7D:6F:43:4E:1C:14:42:28:68:C8:C6:E7:51:B6:4D:72:71:92:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/2A7D6F434E1C14422868C8C6E751B64D72719220.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A7D6F434E1C14422868C8C6E751B64D72719220.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/34352e3138392e3137322e302f32322d3232203d3e20323639383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:0c:3e:b6:56:b5:e9:c6:f1:63:57:6b:1e:5e:25:81:2f:87:
         35:d0:f9:55:d3:77:e8:2b:a7:45:95:92:93:e2:62:3d:da:d8:
         11:3c:71:3d:d6:d8:a2:0f:34:f9:3d:79:04:93:9d:a3:34:0a:
         15:a7:36:c0:1e:7f:59:2e:ad:d6:1a:02:b0:13:50:e5:14:fd:
         a7:a8:24:5f:f6:94:2e:2f:f0:2f:91:ec:c5:e9:25:7e:36:37:
         56:20:2a:72:9d:31:f6:e4:04:b2:3f:11:ae:80:91:5f:9d:0d:
         ab:30:11:0b:29:27:21:36:b4:11:21:d4:be:97:d1:50:e2:ac:
         75:47:4d:ae:f0:ce:32:f5:0a:6b:63:f6:f0:1e:52:a5:20:7c:
         8a:cb:37:9a:c3:a2:8e:25:ed:9b:46:8e:5e:ff:45:f7:1f:ec:
         18:24:51:a7:5d:c6:f4:32:a8:f0:e6:1e:47:2f:3d:80:a7:9f:
         c9:44:91:e8:39:25:b2:f9:46:9e:8a:84:6e:5f:78:34:00:45:
         e2:48:4a:a6:7d:b2:03:1a:f3:40:36:b3:9e:5a:2d:3a:6f:91:
         73:c8:5c:26:7a:a0:79:80:a2:3b:94:29:8f:4d:c4:9e:98:d1:
         8c:4b:78:b7:65:2a:88:ff:24:cd:78:49:36:b3:b7:6b:5a:48:
         c1:9d:32:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:23:31 2026 by rpki-client