Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/34352e3136322e32302e302f32332d3233203d3e20323637363930.roa
File:                     34352e3136322e32302e302f32332d3233203d3e20323637363930.roa (raw, json)
Hash identifier:          p1zXplgD2/hL4tDgyAK7z8JvHz1E2wLvcVT/KYf+K18=
Subject key identifier:   6F:82:C6:6A:A9:B4:B7:D2:1C:9B:14:B4:10:73:55:8C:D8:5D:93:B1
Certificate issuer:       /CN=5806F9DC062DA88DF39329EB68D1552E70F91A7A
Certificate serial:       0A87CD26A0215747B53768FE8ACE723943854322
Authority key identifier: 58:06:F9:DC:06:2D:A8:8D:F3:93:29:EB:68:D1:55:2E:70:F9:1A:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/34352e3136322e32302e302f32332d3233203d3e20323637363930.roa
Signing time:             Tue 24 Mar 2026 18:35:51 +0000
ROA not before:           Tue 24 Mar 2026 18:30:51 +0000
ROA not after:            Tue 23 Mar 2027 18:35:51 +0000
asID:                     267690
IP address blocks:        45.162.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:87:cd:26:a0:21:57:47:b5:37:68:fe:8a:ce:72:39:43:85:43:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806F9DC062DA88DF39329EB68D1552E70F91A7A
        Validity
            Not Before: Mar 24 18:30:51 2026 GMT
            Not After : Mar 23 18:35:51 2027 GMT
        Subject: CN=6F82C66AA9B4B7D21C9B14B41073558CD85D93B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1d:90:df:b5:d2:b0:46:c0:b2:55:6c:1d:1e:
                    4a:01:34:7c:96:31:7b:14:0b:94:71:d2:29:d2:ba:
                    54:75:4d:9c:ac:1e:1a:4d:fc:66:81:54:75:10:6c:
                    8c:c0:47:39:85:53:d0:18:79:58:95:0d:bb:e8:0b:
                    cc:ad:69:b0:0f:da:4a:c4:99:1d:fe:20:b4:34:16:
                    45:18:45:1a:02:ed:b1:62:ba:c5:72:4b:9a:69:00:
                    bc:1f:34:d2:4b:a0:64:c2:42:0a:f4:fd:d0:15:6e:
                    82:22:b5:d7:ed:87:76:08:b7:91:35:fd:8c:f1:60:
                    2e:70:59:b9:7e:94:cd:3e:e1:e8:b3:cf:2b:69:45:
                    fd:2b:79:24:58:b0:6f:44:66:a5:43:a6:09:24:49:
                    d3:e0:91:9c:6d:cd:fb:3a:45:a0:fe:d2:39:b5:a0:
                    4a:4d:76:fe:8f:b5:d9:1e:5d:66:45:89:6e:ce:ad:
                    f1:86:b0:d2:d1:f3:06:a3:39:5b:42:d8:84:54:ea:
                    8a:78:56:0c:64:b1:16:2c:14:69:e0:c3:a2:f7:3d:
                    24:5a:c6:e6:47:4b:54:1f:17:5e:18:3e:59:75:7f:
                    53:d5:ea:c8:46:2f:d0:80:15:1c:92:28:7d:be:03:
                    61:d6:e6:e4:42:4f:a0:4d:78:6f:54:59:58:64:22:
                    cc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:82:C6:6A:A9:B4:B7:D2:1C:9B:14:B4:10:73:55:8C:D8:5D:93:B1
            X509v3 Authority Key Identifier:
                keyid:58:06:F9:DC:06:2D:A8:8D:F3:93:29:EB:68:D1:55:2E:70:F9:1A:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/34352e3136322e32302e302f32332d3233203d3e20323637363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:f2:ee:04:43:37:2b:52:37:cd:ae:4a:b4:84:b1:24:0e:b6:
         9d:6f:aa:35:e3:37:5f:f1:83:92:2e:c5:43:9c:5c:f7:63:93:
         20:db:52:1e:21:f8:46:8b:f4:6c:bb:f2:c5:67:86:b8:6b:bb:
         ba:79:18:6b:5a:5b:1d:57:df:1f:8d:fc:c5:16:8d:26:af:1d:
         e0:55:ca:6b:62:60:dc:25:96:c4:36:ad:74:77:6e:19:f4:ec:
         23:b1:f7:7e:da:06:9a:f7:f3:b4:d6:d5:06:56:f9:33:0e:8d:
         98:2c:c4:41:a8:66:d5:cf:49:a1:4d:e5:a9:6d:b3:d2:17:f9:
         87:c1:2f:d1:7b:e8:67:9e:a6:99:30:af:4e:8a:45:1f:58:18:
         95:bf:e9:ee:c5:b5:a6:4a:51:91:80:af:1c:f0:21:74:2b:f7:
         44:6d:57:54:57:7c:f7:ad:82:63:c4:0e:c7:d0:69:a2:5a:68:
         86:88:40:31:39:8b:78:0c:c7:d0:89:18:42:65:86:b7:67:ae:
         a0:c3:08:62:37:36:aa:f4:39:11:f1:5f:1e:63:fb:7a:82:ee:
         31:e5:bf:55:25:f1:fc:fe:0c:61:38:cd:48:45:a7:b8:53:8f:
         50:ef:ad:80:6c:b0:bc:20:f5:d5:79:60:fc:4c:c0:87:ea:57:
         bd:8a:2d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:15:17 2026 by rpki-client