Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/34352e3138392e3137342e302f32332d3233203d3e20323639383630.roa
File:                     34352e3138392e3137342e302f32332d3233203d3e20323639383630.roa (raw, json)
Hash identifier:          jL4WFy+3fyx++xJipguOBHs20Od04LH1+gPRdAsrWC4=
Subject key identifier:   20:A8:1C:3C:30:B9:E2:93:09:97:B8:D6:7F:CC:B9:BD:39:22:7B:64
Certificate issuer:       /CN=2A7D6F434E1C14422868C8C6E751B64D72719220
Certificate serial:       2CA2D55BB1873E825A94085945CB8503BD26335E
Authority key identifier: 2A:7D:6F:43:4E:1C:14:42:28:68:C8:C6:E7:51:B6:4D:72:71:92:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A7D6F434E1C14422868C8C6E751B64D72719220.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/34352e3138392e3137342e302f32332d3233203d3e20323639383630.roa
Signing time:             Sat 15 Aug 2026 21:25:01 +0000
ROA not before:           Sat 15 Aug 2026 21:20:01 +0000
ROA not after:            Sat 14 Aug 2027 21:25:01 +0000
asID:                     269860
IP address blocks:        45.189.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/2A7D6F434E1C14422868C8C6E751B64D72719220.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/2A7D6F434E1C14422868C8C6E751B64D72719220.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A7D6F434E1C14422868C8C6E751B64D72719220.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a2:d5:5b:b1:87:3e:82:5a:94:08:59:45:cb:85:03:bd:26:33:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A7D6F434E1C14422868C8C6E751B64D72719220
        Validity
            Not Before: Aug 15 21:20:01 2026 GMT
            Not After : Aug 14 21:25:01 2027 GMT
        Subject: CN=20A81C3C30B9E2930997B8D67FCCB9BD39227B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:2f:ff:25:21:b9:0a:08:ba:3d:81:a6:d4:
                    ca:ad:6a:ac:b5:2b:ef:fe:c6:d2:e9:2b:ee:3d:8c:
                    5a:33:42:94:a5:da:65:42:2d:b8:2a:da:60:b0:7d:
                    8c:72:d4:ae:55:51:fe:fa:85:60:14:6d:41:39:9f:
                    68:d5:b1:20:3f:8f:c6:53:3f:e6:0d:48:17:67:05:
                    e3:bd:2a:64:31:f9:23:6e:65:8c:92:44:bc:83:16:
                    62:f1:bd:69:9a:dc:2b:51:4d:5f:39:88:42:6b:a8:
                    08:cf:99:0c:0d:bd:a6:99:2b:7e:f9:04:2f:0d:9f:
                    93:90:a2:09:bd:5a:a5:70:97:08:6e:c8:9d:8b:79:
                    3b:16:f4:aa:45:f1:4e:a5:70:01:d3:61:84:7c:92:
                    b9:81:de:fd:7c:50:76:3e:13:c9:3a:ca:75:f4:1d:
                    67:7f:a8:2d:b7:3a:ea:46:1e:f0:16:a0:d1:74:76:
                    44:43:ce:99:26:10:43:4e:bd:fb:68:61:05:9e:56:
                    16:9a:2b:ba:6c:98:36:1c:24:ba:51:78:c0:d9:21:
                    05:b8:c2:fc:ac:bf:6c:8d:c8:be:8c:af:d9:07:d9:
                    06:79:19:f7:d3:2d:c0:b1:b2:46:da:94:eb:2a:e9:
                    2c:cd:42:11:eb:24:9a:89:26:0c:77:cc:70:be:c2:
                    76:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A8:1C:3C:30:B9:E2:93:09:97:B8:D6:7F:CC:B9:BD:39:22:7B:64
            X509v3 Authority Key Identifier:
                keyid:2A:7D:6F:43:4E:1C:14:42:28:68:C8:C6:E7:51:B6:4D:72:71:92:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/2A7D6F434E1C14422868C8C6E751B64D72719220.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A7D6F434E1C14422868C8C6E751B64D72719220.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E92D1CF4B4F07A6258DD833D499FA74BA6481DAF42B19B6B2446DB27419BD44C/0/34352e3138392e3137342e302f32332d3233203d3e20323639383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:5b:db:7e:6f:44:09:23:29:61:de:d2:bc:a7:7c:12:96:c6:
         de:7b:7d:0c:60:59:f7:d2:10:2b:3d:6c:a6:98:e1:e8:fa:25:
         d7:7b:ae:fb:7d:45:54:ee:72:b4:bb:f5:c6:0d:77:ad:40:38:
         3b:60:12:d7:0f:7d:e5:20:29:c8:5b:83:17:7b:a5:53:27:b5:
         46:85:7c:ec:cf:1b:4b:51:91:78:87:aa:56:d9:04:9d:63:e1:
         93:ac:5f:d3:22:9e:f8:7b:85:2a:c7:66:75:d9:fc:a4:2c:59:
         69:03:93:71:a8:d2:3c:1d:2f:5f:2e:e2:80:eb:65:fe:88:ba:
         f2:1a:48:84:53:0b:72:5c:a5:3b:f1:5f:b4:b2:8d:d4:4a:50:
         14:1d:5f:e9:6f:7f:94:89:41:ca:e8:c8:ee:e1:77:cd:b6:57:
         06:b9:dd:10:c2:75:61:ef:27:23:b6:67:77:02:a0:56:49:53:
         1c:f4:74:f0:88:66:b5:bb:2d:0a:04:62:c7:0c:0b:d7:02:90:
         4a:a2:ed:9f:0e:83:f7:72:68:52:f8:3d:7a:de:2e:82:1d:5d:
         b7:d0:05:40:e0:db:15:16:aa:a9:65:62:ff:1d:cb:b5:cb:2c:
         f4:e2:d0:89:15:eb:f1:86:9b:65:fc:4c:8c:85:c2:fb:53:f8:
         31:df:a0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:23:30 2026 by rpki-client