Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/34352e372e38342e302f32322d3234203d3e20323635373232.roa
File:                     34352e372e38342e302f32322d3234203d3e20323635373232.roa (raw, json)
Hash identifier:          quawec8eUsRfPfLmryIaiFe1KUZhgOk8BNUXUizEyfQ=
Subject key identifier:   3C:20:59:B2:99:24:F1:89:14:49:F1:40:12:C5:A0:8C:78:AB:0F:B2
Certificate issuer:       /CN=FB037DD6ACAA6389722AF82D5B43CBAFA3A33153
Certificate serial:       4CE9DC63D832DD6153B1C6A4252C973F15D234C7
Authority key identifier: FB:03:7D:D6:AC:AA:63:89:72:2A:F8:2D:5B:43:CB:AF:A3:A3:31:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/34352e372e38342e302f32322d3234203d3e20323635373232.roa
Signing time:             Sun 10 May 2026 20:41:58 +0000
ROA not before:           Sun 10 May 2026 20:36:58 +0000
ROA not after:            Sun 09 May 2027 20:41:58 +0000
asID:                     265722
IP address blocks:        45.7.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.crl
                          rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e9:dc:63:d8:32:dd:61:53:b1:c6:a4:25:2c:97:3f:15:d2:34:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB037DD6ACAA6389722AF82D5B43CBAFA3A33153
        Validity
            Not Before: May 10 20:36:58 2026 GMT
            Not After : May  9 20:41:58 2027 GMT
        Subject: CN=3C2059B29924F1891449F14012C5A08C78AB0FB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:33:2c:6c:ad:be:89:fc:de:92:3c:63:7c:22:
                    98:d2:f2:88:42:4b:f0:f4:d9:52:43:39:1e:19:95:
                    a1:d4:9a:d9:be:2e:97:02:8b:fb:a1:d6:40:38:c2:
                    1a:59:8f:f5:3e:ba:91:51:6d:10:67:ba:e8:d5:33:
                    06:4e:14:68:8b:4b:6e:8c:8d:c4:54:1f:ae:d9:20:
                    e1:ab:ba:8f:27:18:d9:14:12:f8:3b:77:0c:53:7c:
                    7f:75:d0:8c:72:28:8e:e2:46:ad:6f:b8:b8:e2:d5:
                    d6:e0:40:0b:8d:2e:b2:2c:0f:7b:2e:a5:ba:f1:64:
                    55:de:4a:8c:7b:94:a1:77:a9:43:cc:4f:71:00:ea:
                    0e:b7:0d:c1:49:8c:ca:63:b4:fd:9c:d8:88:da:d4:
                    b1:e5:bf:5a:06:9e:fe:d8:65:77:80:dd:b5:83:5d:
                    b6:5e:d6:88:cd:96:cb:be:e3:c5:5a:df:3d:58:99:
                    4a:ff:05:86:3a:db:97:e4:c2:a0:75:52:52:2c:81:
                    44:62:65:bb:ac:40:97:9d:f3:ec:77:b1:50:b7:38:
                    df:57:76:09:f9:2a:48:62:15:2d:f1:cc:5e:9c:9e:
                    71:16:29:4d:b0:fa:21:43:aa:cb:9d:db:0e:e0:0a:
                    f7:3e:14:50:3f:1d:b1:7b:c5:91:24:34:65:53:60:
                    41:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:20:59:B2:99:24:F1:89:14:49:F1:40:12:C5:A0:8C:78:AB:0F:B2
            X509v3 Authority Key Identifier:
                keyid:FB:03:7D:D6:AC:AA:63:89:72:2A:F8:2D:5B:43:CB:AF:A3:A3:31:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/34352e372e38342e302f32322d3234203d3e20323635373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:bc:24:b6:9b:63:8b:bb:0f:ef:e2:12:53:4a:06:80:48:53:
         49:46:c6:9b:72:0a:3d:21:cd:1c:62:3d:14:03:27:a3:12:1c:
         36:f4:e8:f0:53:cb:5f:85:b1:d7:a6:4b:03:8a:0b:f4:e4:0f:
         66:8f:cc:13:ac:86:7a:67:c5:ca:b7:a6:16:73:2e:2c:60:93:
         41:14:af:c2:43:55:65:7f:79:79:15:db:f2:35:a8:45:33:0d:
         47:a7:48:7f:26:b3:b6:4b:9d:f9:7e:5d:ce:b7:71:cd:7e:5f:
         07:ce:db:92:be:46:d8:c2:90:fd:68:90:f4:7e:64:0e:00:ea:
         13:a5:b1:4d:e1:e3:ab:49:ea:8c:ed:78:17:54:dd:4b:ac:66:
         16:7a:3b:f0:62:2a:2d:14:68:11:16:52:de:ae:f2:61:29:06:
         58:0d:51:58:73:c8:a0:0e:8b:5d:44:26:a7:5b:a0:a8:36:7b:
         09:48:7a:7c:c4:27:f9:ec:12:7d:97:2d:4b:0e:63:ea:42:f0:
         2d:28:95:06:c5:7e:ba:32:2b:e7:ef:08:87:c9:20:19:f1:d7:
         3e:5c:c7:ab:ec:77:1b:33:ae:5f:dd:01:ff:94:6c:1c:32:af:
         ed:44:2e:ac:5f:f8:a7:23:62:27:7c:c5:2c:b3:15:97:91:17:
         44:ce:dd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:29:39 2026 by rpki-client