Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/34352e3137302e3133322e31362f32382d3238203d3e20323635353534.roa
File:                     34352e3137302e3133322e31362f32382d3238203d3e20323635353534.roa (raw, json)
Hash identifier:          kvqde9sMOIW2iruwyndqExJ3XI4mycIn1r1n7Yz4roo=
Subject key identifier:   B4:EB:85:60:50:5C:9D:22:94:A4:45:77:AD:B6:04:FC:5E:BE:F4:75
Certificate issuer:       /CN=643132A8FE5198797F39AACB314EC77EE8C6D84D
Certificate serial:       04BE2694DEB11E101AA40092DACAEEC2E481E5ED
Authority key identifier: 64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/34352e3137302e3133322e31362f32382d3238203d3e20323635353534.roa
Signing time:             Thu 07 May 2026 10:25:00 +0000
ROA not before:           Thu 07 May 2026 10:20:00 +0000
ROA not after:            Thu 06 May 2027 10:25:00 +0000
asID:                     265554
IP address blocks:        45.170.132.16/28 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 18:34:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:be:26:94:de:b1:1e:10:1a:a4:00:92:da:ca:ee:c2:e4:81:e5:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643132A8FE5198797F39AACB314EC77EE8C6D84D
        Validity
            Not Before: May  7 10:20:00 2026 GMT
            Not After : May  6 10:25:00 2027 GMT
        Subject: CN=B4EB8560505C9D2294A44577ADB604FC5EBEF475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:32:02:53:88:16:f9:63:c9:70:8d:4e:3f:43:
                    48:52:11:76:a6:79:d4:f9:64:99:13:c0:58:dc:5e:
                    0d:44:0f:50:0d:85:58:94:9a:4e:e0:22:1c:ed:5f:
                    4e:d9:a5:dd:e7:e1:c6:04:3b:8d:8b:ab:38:da:0c:
                    69:2c:af:4a:f8:71:0e:4c:bc:58:f2:fd:b0:44:6e:
                    03:27:48:86:19:96:6a:de:60:e0:7b:b7:c2:ea:6e:
                    f4:69:ee:8c:f0:a8:51:9c:56:7f:53:68:7c:5f:d1:
                    50:2d:35:24:72:1f:91:9f:0a:4f:e2:9d:50:2a:f2:
                    c0:e1:60:73:a4:3d:dd:54:41:e6:e5:45:9a:a6:2e:
                    1d:95:ed:19:7b:bb:4f:2b:12:10:e8:4e:56:0c:f8:
                    10:96:3e:17:1c:3b:12:50:ee:6d:f8:43:59:86:a8:
                    21:3c:aa:c6:84:30:64:31:df:a5:15:90:d8:4f:6c:
                    0c:94:05:fc:74:f0:bd:3d:d2:97:fa:cc:b2:0d:3d:
                    4f:b2:53:66:f3:39:94:54:f2:d9:45:3d:8f:a6:45:
                    51:2d:d9:b8:95:d5:da:30:c8:bb:b1:5a:35:34:d8:
                    84:f4:0e:54:23:5e:82:a9:83:8a:00:06:81:f4:74:
                    9a:7d:e6:5c:75:b2:5b:19:42:4d:a7:be:ad:aa:07:
                    ba:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EB:85:60:50:5C:9D:22:94:A4:45:77:AD:B6:04:FC:5E:BE:F4:75
            X509v3 Authority Key Identifier:
                keyid:64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/34352e3137302e3133322e31362f32382d3238203d3e20323635353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.132.16/28

    Signature Algorithm: sha256WithRSAEncryption
         99:12:d5:bf:0a:22:f5:3b:82:c6:c2:18:13:28:58:ed:0b:91:
         35:24:8a:e3:7d:9c:8e:c8:b8:54:89:47:f4:ad:b7:7d:86:65:
         8c:e4:db:dd:16:53:c0:d0:1c:e2:ec:45:6b:72:54:f5:e1:0c:
         a0:17:d0:84:96:f3:30:ca:9e:ab:93:f3:e5:1f:f3:a6:38:b6:
         3d:eb:e3:46:3c:84:06:d2:94:df:88:84:67:9d:ab:16:8d:17:
         72:48:38:a8:e5:4d:7b:a0:76:b2:a2:35:59:58:d7:95:a0:de:
         b6:c9:1d:b6:31:43:00:e1:da:1d:8b:1c:3d:6c:6c:81:47:86:
         21:48:0b:e6:36:86:6a:c1:bf:ac:8b:f8:25:56:70:d0:c0:9b:
         c6:c2:88:a4:9d:29:96:15:ee:80:a3:5d:2d:49:ba:70:e3:86:
         93:6c:99:61:6e:aa:ed:d2:76:e1:3c:1d:6c:b4:e6:b1:06:cd:
         84:df:18:67:9d:14:c0:cb:ea:05:82:a2:42:a1:57:f5:2f:73:
         38:9d:5e:20:dc:45:4e:eb:7f:33:a8:87:c4:1e:90:8e:4f:02:
         20:d8:8b:50:0b:1c:9f:70:ac:0a:01:fe:92:56:95:7b:ee:12:
         fd:c8:f6:fd:97:d4:da:89:8b:b4:97:20:28:14:48:a7:e4:fa:
         59:7a:e3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:29:50 2026 by rpki-client