Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FC5E38C9FAC91C8AC34C08F14BB861396884F936A6F3F778AFF960B1098F9537/0/34352e3233322e31322e302f32322d3234203d3e203237393833.roa
File:                     34352e3233322e31322e302f32322d3234203d3e203237393833.roa (raw, json)
Hash identifier:          AB+qiH8E4mXw9+H5Tw4S1MYSvAO2rkCCAB9si5FgwCo=
Subject key identifier:   13:99:D9:4A:B8:AD:2D:EE:1E:7D:26:3A:9B:B8:B4:E7:AE:BC:81:AA
Certificate issuer:       /CN=029E3AECBE7776F2507F11AFD86F7B297DB6E303
Certificate serial:       0411ABE756AB03CCE68A05FC31413D399E48C942
Authority key identifier: 02:9E:3A:EC:BE:77:76:F2:50:7F:11:AF:D8:6F:7B:29:7D:B6:E3:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029E3AECBE7776F2507F11AFD86F7B297DB6E303.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC5E38C9FAC91C8AC34C08F14BB861396884F936A6F3F778AFF960B1098F9537/0/34352e3233322e31322e302f32322d3234203d3e203237393833.roa
Signing time:             Wed 16 Sep 2026 16:35:49 +0000
ROA not before:           Wed 16 Sep 2026 16:30:49 +0000
ROA not after:            Wed 15 Sep 2027 16:35:49 +0000
asID:                     27983
IP address blocks:        45.232.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC5E38C9FAC91C8AC34C08F14BB861396884F936A6F3F778AFF960B1098F9537/0/029E3AECBE7776F2507F11AFD86F7B297DB6E303.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC5E38C9FAC91C8AC34C08F14BB861396884F936A6F3F778AFF960B1098F9537/0/029E3AECBE7776F2507F11AFD86F7B297DB6E303.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029E3AECBE7776F2507F11AFD86F7B297DB6E303.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 04:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:11:ab:e7:56:ab:03:cc:e6:8a:05:fc:31:41:3d:39:9e:48:c9:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=029E3AECBE7776F2507F11AFD86F7B297DB6E303
        Validity
            Not Before: Sep 16 16:30:49 2026 GMT
            Not After : Sep 15 16:35:49 2027 GMT
        Subject: CN=1399D94AB8AD2DEE1E7D263A9BB8B4E7AEBC81AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f6:a3:5e:4a:b3:f0:1e:14:30:e0:e6:17:2c:
                    95:3f:f2:f9:de:fb:53:c1:83:21:d1:40:c0:03:4f:
                    e9:95:6d:fe:75:a7:c6:56:d4:0e:d6:bc:b7:75:53:
                    6c:46:2b:bc:26:18:ee:d3:d3:ed:a7:8c:b1:f6:66:
                    d9:bd:70:a6:39:0c:65:5a:95:d6:07:89:3c:08:52:
                    2f:c2:e4:b5:7a:31:a1:09:d8:c7:08:1c:84:a0:69:
                    18:c1:51:4e:f0:6e:4a:69:89:11:4d:e6:e5:ee:28:
                    fb:0d:8c:82:07:81:ba:f1:d2:91:d5:7f:ad:66:52:
                    b4:9f:4d:9c:7b:bc:e9:eb:6f:a9:5e:49:6c:ec:d8:
                    a5:c5:a8:6a:be:b3:ed:b0:b4:13:65:8f:2a:43:90:
                    2a:52:2a:e4:52:c3:5e:a2:b8:0d:29:9b:3c:6d:7b:
                    6f:de:b9:cb:6e:87:0c:eb:52:3d:61:87:da:73:da:
                    33:ec:c0:c3:1f:84:81:2c:a3:87:e5:53:07:48:aa:
                    60:ed:5e:b5:9d:51:b5:c4:65:c4:56:ad:28:e4:dc:
                    9d:ec:51:3e:5f:9f:75:0f:9c:fc:b6:b1:0d:19:e7:
                    e3:65:eb:a9:98:75:d0:84:d6:e0:9f:0d:75:56:59:
                    b9:71:f2:1f:cf:8a:17:f4:a0:bc:fe:f9:b5:9a:2e:
                    95:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:99:D9:4A:B8:AD:2D:EE:1E:7D:26:3A:9B:B8:B4:E7:AE:BC:81:AA
            X509v3 Authority Key Identifier:
                keyid:02:9E:3A:EC:BE:77:76:F2:50:7F:11:AF:D8:6F:7B:29:7D:B6:E3:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC5E38C9FAC91C8AC34C08F14BB861396884F936A6F3F778AFF960B1098F9537/0/029E3AECBE7776F2507F11AFD86F7B297DB6E303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029E3AECBE7776F2507F11AFD86F7B297DB6E303.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC5E38C9FAC91C8AC34C08F14BB861396884F936A6F3F778AFF960B1098F9537/0/34352e3233322e31322e302f32322d3234203d3e203237393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:51:fb:c3:b1:db:95:a7:50:c6:e7:fa:78:1a:65:c1:a9:31:
         7b:3f:16:5e:d0:d9:43:55:b5:80:c0:db:23:f2:5d:77:8d:16:
         38:d0:d0:d8:50:43:dc:03:38:14:46:36:6a:bb:c2:03:62:48:
         c8:e0:7c:29:33:c6:58:4b:c3:fd:0b:8b:15:26:d0:53:44:30:
         c6:e2:93:88:9e:62:c4:c5:2a:91:7c:77:5e:05:2b:4b:80:9e:
         8c:7f:76:3c:0b:b4:98:78:94:c2:94:f7:7d:96:4f:69:ad:fa:
         2d:41:dd:b0:79:50:4a:3b:f4:93:78:40:26:d2:8e:f3:71:58:
         e9:fa:a0:ae:cc:da:b7:c2:c7:fe:90:bb:62:a6:39:36:90:94:
         b9:da:55:67:11:d2:de:16:f8:11:34:70:07:dc:36:29:1b:28:
         55:dc:e4:56:18:53:06:95:90:53:a6:5e:c5:f1:14:85:bc:8e:
         e0:ea:c8:c5:f7:9f:d6:15:45:97:1f:f2:da:b8:fd:32:db:74:
         51:fc:81:e3:c6:64:bc:17:6c:3d:26:48:21:67:11:82:56:32:
         ba:a3:e9:bd:92:8e:5f:d8:8b:e0:09:c4:87:83:10:4a:69:cf:
         74:52:1b:01:f5:3d:cb:ab:87:13:f1:ba:7b:03:b1:13:b5:1a:
         09:99:25:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:49:17 2026 by rpki-client