Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/34352e3137342e36382e302f32322d3234203d3e20323635353737.roa
File:                     34352e3137342e36382e302f32322d3234203d3e20323635353737.roa (raw, json)
Hash identifier:          8MHKLwG3yca3yag8uwZyPmkZL5ShWF9If60vPti4u74=
Subject key identifier:   52:D4:06:92:95:32:63:0C:F8:6F:BA:B9:E1:D4:E9:C9:D5:F3:E9:A1
Certificate issuer:       /CN=1F5CA749B97B7504F973D98D5934B365BE819355
Certificate serial:       548CFC88352BFE98D49C698A44AD6FB6C7EEA71A
Authority key identifier: 1F:5C:A7:49:B9:7B:75:04:F9:73:D9:8D:59:34:B3:65:BE:81:93:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/34352e3137342e36382e302f32322d3234203d3e20323635353737.roa
Signing time:             Sat 09 May 2026 03:41:48 +0000
ROA not before:           Sat 09 May 2026 03:36:48 +0000
ROA not after:            Sat 08 May 2027 03:41:48 +0000
asID:                     265577
IP address blocks:        45.174.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.crl
                          rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 08:52:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8c:fc:88:35:2b:fe:98:d4:9c:69:8a:44:ad:6f:b6:c7:ee:a7:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5CA749B97B7504F973D98D5934B365BE819355
        Validity
            Not Before: May  9 03:36:48 2026 GMT
            Not After : May  8 03:41:48 2027 GMT
        Subject: CN=52D406929532630CF86FBAB9E1D4E9C9D5F3E9A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:63:80:b2:b2:f0:e8:e6:89:a0:4e:4f:e2:
                    8c:bc:97:86:5b:20:56:14:5a:c0:9f:9d:69:39:b9:
                    bb:2b:c5:86:49:af:6f:fe:74:39:f1:61:ea:3d:bf:
                    51:1d:69:95:25:d0:27:71:df:a4:dd:1d:91:06:bf:
                    89:99:71:23:18:1e:c8:48:3d:9e:37:ec:37:cc:a0:
                    00:75:32:cb:bb:84:4b:54:e1:c4:dd:f1:8b:36:0d:
                    89:6a:9e:86:ff:d7:20:fc:63:cb:d7:46:ae:05:ef:
                    53:4d:e5:ea:52:87:ef:f2:83:bf:ed:5a:70:1d:5b:
                    8f:35:48:9a:6d:49:c4:6e:b0:f9:4f:94:09:e0:1e:
                    c8:47:d4:23:a1:81:0d:6c:07:c3:2a:db:1a:7c:78:
                    1e:02:20:bb:ae:3a:e1:94:fb:43:be:b6:a5:66:e2:
                    2e:7d:99:ac:d8:b5:eb:b6:83:2f:27:1a:88:c0:13:
                    12:2d:4a:83:fd:01:36:a2:41:d2:7d:ab:19:a2:7d:
                    f6:f2:35:76:18:2a:e5:01:fd:11:a0:fb:3a:f2:d6:
                    60:cd:f4:1c:be:b8:cf:57:ac:54:1c:d7:72:74:93:
                    bd:ce:fe:fd:44:71:f9:25:da:17:41:0e:83:df:bf:
                    0c:8b:ba:d4:8d:b9:cc:61:16:0c:a1:e6:6b:58:bf:
                    60:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D4:06:92:95:32:63:0C:F8:6F:BA:B9:E1:D4:E9:C9:D5:F3:E9:A1
            X509v3 Authority Key Identifier:
                keyid:1F:5C:A7:49:B9:7B:75:04:F9:73:D9:8D:59:34:B3:65:BE:81:93:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/1F5CA749B97B7504F973D98D5934B365BE819355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5CA749B97B7504F973D98D5934B365BE819355.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/246B007AB641C2DEB93002CC8E27F704790167C195CC16FA06E6ED7BB8D54212/0/34352e3137342e36382e302f32322d3234203d3e20323635353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:38:3d:2b:68:78:40:c8:7f:3a:de:4c:08:a4:c5:ee:82:34:
         fb:9d:6e:e0:64:36:36:26:07:5a:18:5f:f9:3e:6d:b4:c6:65:
         66:61:44:f6:27:6f:c2:7c:af:53:8d:02:b3:5a:5c:69:25:bf:
         2e:9c:fc:30:7a:dd:33:7a:ee:50:94:8a:25:2b:ab:d5:ce:e6:
         4b:30:ab:20:b1:ff:d2:67:cb:c4:9f:59:37:60:e0:93:4e:08:
         08:d1:ca:3e:a8:57:0d:34:b4:16:20:1a:e0:9f:03:8c:30:75:
         9e:ed:c4:8e:e3:30:a2:76:5c:0c:f6:1d:0a:d6:50:fb:81:c7:
         78:e4:1e:eb:9e:4f:c4:e6:fc:3e:4f:de:2c:66:32:f2:30:4d:
         11:3a:d8:21:bb:cc:e0:4f:82:3a:aa:de:b1:58:d5:b6:9a:b0:
         aa:d0:d9:5c:96:19:2d:e2:48:69:b0:be:65:7e:ef:23:ff:e0:
         f9:1e:5f:86:e0:7c:79:8b:c6:6d:03:3a:f2:b5:7b:89:4c:49:
         4a:2d:eb:34:7e:24:ee:50:8c:e2:f8:ea:ae:13:2f:a2:5c:0c:
         3a:f4:09:34:46:73:30:29:ff:df:d1:42:9c:94:63:c6:79:e1:
         c3:bd:33:9a:d1:d6:6b:2b:8c:cf:57:4f:72:e0:29:59:f6:15:
         bc:36:65:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:19:27 2026 by rpki-client