Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F015F9CE3731804A5D0F4CB60A2DBE7D4EB26417FE060E6A8CCE818F8083C01E/0/34352e3233332e3233362e302f32332d3234203d3e20323636373733.roa
File:                     34352e3233332e3233362e302f32332d3234203d3e20323636373733.roa (raw, json)
Hash identifier:          gv4YoKfqXglf4rKpEE6E5Y5+UJixcwYhQ4gH/6e2MTo=
Subject key identifier:   29:DC:B5:58:E3:DF:AA:24:01:EB:41:25:92:E1:D4:EF:A4:C1:1B:00
Certificate issuer:       /CN=5925D79B29D86051E16C2D8734BC706F2511A76B
Certificate serial:       55BA1DB941D4E9A986A4D53D7336454EAAAA17DB
Authority key identifier: 59:25:D7:9B:29:D8:60:51:E1:6C:2D:87:34:BC:70:6F:25:11:A7:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5925D79B29D86051E16C2D8734BC706F2511A76B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F015F9CE3731804A5D0F4CB60A2DBE7D4EB26417FE060E6A8CCE818F8083C01E/0/34352e3233332e3233362e302f32332d3234203d3e20323636373733.roa
Signing time:             Thu 12 Mar 2026 21:33:41 +0000
ROA not before:           Thu 12 Mar 2026 21:28:41 +0000
ROA not after:            Thu 11 Mar 2027 21:33:41 +0000
asID:                     266773
IP address blocks:        45.233.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F015F9CE3731804A5D0F4CB60A2DBE7D4EB26417FE060E6A8CCE818F8083C01E/0/5925D79B29D86051E16C2D8734BC706F2511A76B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F015F9CE3731804A5D0F4CB60A2DBE7D4EB26417FE060E6A8CCE818F8083C01E/0/5925D79B29D86051E16C2D8734BC706F2511A76B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5925D79B29D86051E16C2D8734BC706F2511A76B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ba:1d:b9:41:d4:e9:a9:86:a4:d5:3d:73:36:45:4e:aa:aa:17:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5925D79B29D86051E16C2D8734BC706F2511A76B
        Validity
            Not Before: Mar 12 21:28:41 2026 GMT
            Not After : Mar 11 21:33:41 2027 GMT
        Subject: CN=29DCB558E3DFAA2401EB412592E1D4EFA4C11B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:16:f3:dd:1b:70:d7:6e:82:8a:f8:b6:b6:da:
                    0d:81:c2:b2:e7:cc:6e:30:1f:84:c5:8e:15:50:65:
                    65:da:b1:33:11:37:73:f5:ed:c6:70:73:7f:05:8f:
                    2e:9e:5a:d0:f7:13:fd:cf:4e:51:a4:43:f1:46:2d:
                    13:99:09:7c:6e:f0:1c:1e:62:80:61:3f:d0:ad:cc:
                    55:7d:86:c4:c3:72:6a:58:49:ca:1d:d4:dc:0f:64:
                    0b:ba:c7:60:9f:c1:29:07:44:2a:3c:54:fe:6d:07:
                    b9:d9:be:0a:7d:47:d7:ba:25:05:b1:e3:aa:5e:3a:
                    ce:f1:8c:03:35:52:8e:4c:d3:02:b1:5b:d2:b2:11:
                    59:6a:3c:ff:b4:fa:3d:06:0a:a5:e9:c6:50:e3:24:
                    3b:22:06:01:97:a9:59:38:86:8c:66:98:b1:66:5b:
                    95:68:c3:69:65:c9:3e:dd:17:c5:4c:c3:b4:78:89:
                    d8:67:87:db:ed:0a:cd:2c:c5:18:06:d5:5b:87:0d:
                    7d:47:0a:73:10:0c:85:a7:2f:e5:89:06:8a:6f:d2:
                    c1:32:f2:1a:ce:69:61:78:01:15:00:00:e8:d5:3c:
                    83:8e:a6:d3:90:36:28:d8:6e:2e:f0:16:68:d3:57:
                    71:77:75:69:db:be:9f:ba:2f:a1:4a:ba:7c:e4:db:
                    28:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DC:B5:58:E3:DF:AA:24:01:EB:41:25:92:E1:D4:EF:A4:C1:1B:00
            X509v3 Authority Key Identifier:
                keyid:59:25:D7:9B:29:D8:60:51:E1:6C:2D:87:34:BC:70:6F:25:11:A7:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F015F9CE3731804A5D0F4CB60A2DBE7D4EB26417FE060E6A8CCE818F8083C01E/0/5925D79B29D86051E16C2D8734BC706F2511A76B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5925D79B29D86051E16C2D8734BC706F2511A76B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F015F9CE3731804A5D0F4CB60A2DBE7D4EB26417FE060E6A8CCE818F8083C01E/0/34352e3233332e3233362e302f32332d3234203d3e20323636373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:2e:75:7e:87:3d:15:d9:f0:87:37:b3:93:ed:1f:6a:76:aa:
         6f:09:a3:0d:1e:97:09:cc:5c:7c:c1:b2:f1:01:16:83:d5:60:
         29:20:fb:a8:c7:49:5c:10:c7:f8:34:91:f1:1e:97:81:2e:55:
         a2:4d:97:a8:da:26:25:7c:eb:3d:19:25:05:bb:91:59:03:1f:
         a2:dd:65:a8:ac:4d:6b:3d:b9:5b:ef:40:76:b6:7d:7f:4f:a5:
         5f:ed:36:a4:42:9a:07:ce:cb:b5:44:f7:33:ef:ab:ca:c2:9a:
         fe:fe:8d:9f:1a:8a:04:a7:be:27:ba:28:6c:0c:51:5c:64:ac:
         80:d3:a7:3f:12:73:60:eb:c9:03:ab:84:5b:f0:07:7f:57:b6:
         b8:8e:32:3e:d0:cb:5d:9f:65:37:4e:f1:0f:cf:38:a9:5f:fd:
         2b:f6:cd:c3:c6:12:cc:33:2b:4a:dd:c4:e8:e0:b6:c1:16:23:
         5a:a1:39:48:da:98:f8:3b:d7:bb:cd:b3:02:14:ea:6f:2b:f5:
         35:1c:69:d9:bb:3b:9e:fa:6a:1e:45:17:40:b8:6f:7f:ff:df:
         6f:ee:11:05:3d:18:81:87:f4:c0:5a:b9:45:f6:b2:8a:b5:86:
         a2:79:92:01:b9:10:9b:85:02:13:01:dd:64:0e:95:ad:e5:65:
         fc:2c:20:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 03:36:57 2026 by rpki-client