Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/34352e3136392e33362e302f32342d3234203d3e20323637373432.roa
File:                     34352e3136392e33362e302f32342d3234203d3e20323637373432.roa (raw, json)
Hash identifier:          a0EBlP1su5xGgDRcd/h2ftJyk90TLtCFyycJI8Z1Y5w=
Subject key identifier:   19:00:30:4C:14:0F:DF:DE:D9:E9:D1:12:A9:70:A5:58:7C:40:E7:A4
Certificate issuer:       /CN=99A57CEBEE8726CF20BD670F637543047A024742
Certificate serial:       41AD2F27177F652C7C9BB324A414E05ABE01A462
Authority key identifier: 99:A5:7C:EB:EE:87:26:CF:20:BD:67:0F:63:75:43:04:7A:02:47:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A57CEBEE8726CF20BD670F637543047A024742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/34352e3136392e33362e302f32342d3234203d3e20323637373432.roa
Signing time:             Thu 30 Apr 2026 14:40:24 +0000
ROA not before:           Thu 30 Apr 2026 14:35:24 +0000
ROA not after:            Thu 29 Apr 2027 14:40:24 +0000
asID:                     267742
IP address blocks:        45.169.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/99A57CEBEE8726CF20BD670F637543047A024742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/99A57CEBEE8726CF20BD670F637543047A024742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A57CEBEE8726CF20BD670F637543047A024742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 20:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ad:2f:27:17:7f:65:2c:7c:9b:b3:24:a4:14:e0:5a:be:01:a4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A57CEBEE8726CF20BD670F637543047A024742
        Validity
            Not Before: Apr 30 14:35:24 2026 GMT
            Not After : Apr 29 14:40:24 2027 GMT
        Subject: CN=1900304C140FDFDED9E9D112A970A5587C40E7A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ac:47:d9:48:ca:e3:69:15:85:0b:52:f0:a6:
                    54:fe:96:ce:40:d5:bc:1d:a4:10:ab:6d:4a:e5:9f:
                    3a:cd:3e:18:fe:17:39:5f:d1:f1:9b:e7:3e:5f:72:
                    20:d2:ae:f2:01:33:81:de:14:5d:0b:9a:6b:c7:33:
                    6f:a0:78:9a:f3:93:35:48:0e:25:6c:be:a6:c1:07:
                    1f:d9:f8:c4:cf:6a:83:a0:e1:16:bc:4d:54:9a:22:
                    54:e6:ad:72:ac:a9:81:97:6b:6f:9e:38:9b:dd:9c:
                    6a:f9:0f:1c:be:93:8d:e4:9b:cf:bb:60:84:a4:a2:
                    a0:17:c1:31:b7:bd:dd:57:d2:ab:3c:4b:a8:22:9b:
                    f3:d4:02:3c:3f:34:de:01:80:1c:d7:ab:89:2e:54:
                    a8:e3:9c:2f:39:1f:17:dc:73:e7:df:6b:40:0c:c8:
                    b5:ce:96:f7:26:fe:24:a8:57:8f:63:19:da:58:93:
                    be:2f:50:8f:23:f2:7c:7e:39:16:2d:05:a0:e2:bd:
                    9c:26:3a:4b:70:b9:bf:2a:93:be:51:ac:6f:44:5a:
                    99:c4:11:e3:00:e3:74:d6:8f:56:40:db:2d:0a:0c:
                    c3:19:1b:ac:e8:e7:0e:15:38:1e:ed:6d:81:6f:d7:
                    fd:fc:5f:d2:7d:f2:76:dd:52:b8:94:55:65:fd:37:
                    37:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:00:30:4C:14:0F:DF:DE:D9:E9:D1:12:A9:70:A5:58:7C:40:E7:A4
            X509v3 Authority Key Identifier:
                keyid:99:A5:7C:EB:EE:87:26:CF:20:BD:67:0F:63:75:43:04:7A:02:47:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/99A57CEBEE8726CF20BD670F637543047A024742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A57CEBEE8726CF20BD670F637543047A024742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/34352e3136392e33362e302f32342d3234203d3e20323637373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:72:e2:78:32:77:50:6d:a1:5b:28:19:62:4c:b6:99:af:3e:
         d3:ec:d2:d4:7e:2c:cd:2a:e9:ba:05:e4:a3:27:f0:dc:48:83:
         a5:9c:2a:9d:07:03:1d:65:8b:7e:32:1d:80:c5:a1:28:d6:7d:
         85:dc:b6:62:d6:16:93:36:d8:8a:31:9a:84:10:c6:d2:ca:c4:
         2c:3b:e0:b5:1b:7c:13:09:e7:29:66:7d:d8:04:c0:b1:86:16:
         b5:05:e5:68:94:4f:aa:0e:d8:fd:57:14:e5:4a:bf:ca:b9:d2:
         0d:c8:00:ea:62:d7:80:24:62:e8:76:4b:4e:16:4e:91:d4:01:
         5d:f9:e9:4d:94:05:54:f6:b1:6f:6b:d5:c7:91:89:19:51:2d:
         1f:07:72:89:93:a8:27:04:b7:97:a3:c0:62:80:79:45:50:30:
         93:d6:af:3c:6b:d9:f0:40:ed:b2:24:bb:32:61:4d:b3:35:95:
         2e:ad:5a:3d:79:55:72:34:d4:db:b3:c2:71:7f:c2:1c:82:18:
         1d:a3:37:0b:06:9a:af:ed:52:c1:43:1b:4b:ea:bd:8b:3d:0c:
         b4:8d:a8:43:ea:ae:bf:e0:60:2f:ef:06:d3:03:a4:ec:0d:a3:
         45:0b:9c:75:8f:4f:2c:b4:a4:59:27:11:a7:77:9a:58:76:e6:
         84:5e:17:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:55:03 2026 by rpki-client