Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/34352e3136322e3138342e302f32322d3234203d3e203634313631.roa
File:                     34352e3136322e3138342e302f32322d3234203d3e203634313631.roa (raw, json)
Hash identifier:          hM4ayhwoJtnCS3FrUvOZF68izt7JW9TlQekpT0eszlQ=
Subject key identifier:   83:6A:69:3F:26:CA:FE:1E:47:5C:90:66:D2:37:71:10:7B:67:58:7F
Certificate issuer:       /CN=E9BD71B0FDCC660140582C799E734F25C80A1196
Certificate serial:       0B547DDC0118A6FA4FFBD55926EC966F49F9B667
Authority key identifier: E9:BD:71:B0:FD:CC:66:01:40:58:2C:79:9E:73:4F:25:C8:0A:11:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/34352e3136322e3138342e302f32322d3234203d3e203634313631.roa
Signing time:             Wed 25 Mar 2026 16:35:54 +0000
ROA not before:           Wed 25 Mar 2026 16:30:54 +0000
ROA not after:            Wed 24 Mar 2027 16:35:54 +0000
asID:                     64161
IP address blocks:        45.162.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:54:7d:dc:01:18:a6:fa:4f:fb:d5:59:26:ec:96:6f:49:f9:b6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9BD71B0FDCC660140582C799E734F25C80A1196
        Validity
            Not Before: Mar 25 16:30:54 2026 GMT
            Not After : Mar 24 16:35:54 2027 GMT
        Subject: CN=836A693F26CAFE1E475C9066D23771107B67587F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ec:53:32:8b:f8:cf:9d:01:ac:94:e0:46:4e:
                    dc:cc:93:46:ee:6a:c7:fe:52:e7:db:9a:eb:77:84:
                    3a:fa:bf:cf:e3:d4:16:fc:a8:5a:fd:3f:20:98:3c:
                    57:75:96:02:81:83:8d:04:be:f8:d8:e3:d1:2e:2b:
                    55:e3:fb:5c:5b:de:b4:79:1c:40:da:a0:95:fb:ea:
                    04:58:32:c9:6a:92:a5:4e:16:bc:e1:33:75:e5:88:
                    df:f4:00:cf:dc:47:6c:6a:d3:de:c1:96:c6:44:81:
                    c4:ac:3d:fc:c9:52:0c:b4:46:8c:ac:d3:4c:06:00:
                    29:14:4d:ba:21:36:4c:c5:e8:4f:7b:ee:08:69:f5:
                    83:dc:dd:ba:f3:e8:57:74:1a:a5:b2:89:22:29:5f:
                    d2:b2:4d:f0:e0:f3:82:d8:26:e1:f0:80:05:cf:ec:
                    34:9c:c5:1a:39:9b:58:8b:12:42:ff:0a:84:97:cc:
                    52:e2:48:36:12:cd:c9:7a:f9:e6:0e:ea:0c:0e:2b:
                    74:fa:4f:11:e7:bd:ff:ff:7e:f9:4a:60:c9:e6:2c:
                    37:0f:8b:fc:91:fc:52:dc:b4:5d:63:b2:01:09:af:
                    98:d2:80:e9:16:0e:16:26:7f:91:fa:35:d9:a1:44:
                    a0:6c:89:6c:21:ec:0a:5f:36:b3:20:02:b8:71:f6:
                    0e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6A:69:3F:26:CA:FE:1E:47:5C:90:66:D2:37:71:10:7B:67:58:7F
            X509v3 Authority Key Identifier:
                keyid:E9:BD:71:B0:FD:CC:66:01:40:58:2C:79:9E:73:4F:25:C8:0A:11:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/34352e3136322e3138342e302f32322d3234203d3e203634313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:5b:fc:d1:46:0f:01:c4:85:4a:65:a0:e9:7e:20:12:2d:c7:
         5d:95:c3:44:3b:d3:89:6f:2c:9e:a2:70:f6:00:08:b0:16:e6:
         f0:d3:68:b7:c5:70:1a:c9:71:d4:0f:c6:72:06:52:13:46:b6:
         f2:64:e4:04:b5:fa:43:29:04:95:81:a7:72:77:ef:f0:15:d8:
         4f:97:47:b9:61:8a:7b:b8:95:f1:84:1b:9d:99:30:ee:aa:04:
         1b:34:65:00:e3:a1:73:4c:d7:18:00:cb:7f:58:e5:0a:ac:76:
         19:ac:71:e2:81:f7:3f:25:f6:c0:77:ed:60:13:3d:94:6b:57:
         3d:7d:56:c2:ec:41:f5:3f:0f:cb:04:c0:42:34:50:1e:47:21:
         49:8c:08:d8:d7:cd:ba:03:7c:d2:3b:97:db:2b:89:59:6d:d3:
         cf:5e:22:d3:ba:f2:15:39:cc:b5:66:8c:1e:79:62:bd:5b:5a:
         60:d8:36:01:05:81:0d:d5:3a:ad:c8:45:f3:f0:9b:6b:ee:93:
         ec:91:5c:0f:8e:50:aa:04:03:65:26:ef:34:6a:e0:c6:e5:a8:
         52:6c:1e:30:f4:05:51:20:67:ba:8f:82:f0:00:f3:d8:b1:31:
         a9:83:89:ab:1f:46:da:71:b9:fb:e8:3c:ab:50:ce:15:d1:c5:
         0f:3c:92:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:21:15 2026 by rpki-client