Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/34352e362e3234382e302f32312d3232203d3e203238303032.roa
File:                     34352e362e3234382e302f32312d3232203d3e203238303032.roa (raw, json)
Hash identifier:          vIrYSO4vi2s2HcecaoYyVJsf8MWxnow4KXsttzJR/V4=
Subject key identifier:   CE:1D:0E:E7:D9:4C:93:97:3E:93:FD:7A:B3:FC:33:53:19:33:C6:8A
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       51689751E2377D52BA495FA21A95BEFAA4228A70
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/34352e362e3234382e302f32312d3232203d3e203238303032.roa
Signing time:             Thu 05 Mar 2026 17:32:52 +0000
ROA not before:           Thu 05 Mar 2026 17:27:52 +0000
ROA not after:            Thu 04 Mar 2027 17:32:52 +0000
asID:                     28002
IP address blocks:        45.6.248.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 08:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:68:97:51:e2:37:7d:52:ba:49:5f:a2:1a:95:be:fa:a4:22:8a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:27:52 2026 GMT
            Not After : Mar  4 17:32:52 2027 GMT
        Subject: CN=CE1D0EE7D94C93973E93FD7AB3FC33531933C68A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e5:39:76:89:91:87:07:f2:70:52:da:1b:f9:
                    97:c9:81:5d:fd:da:e5:a2:8a:51:54:e2:0c:5b:96:
                    b0:9a:f5:c2:4e:88:f6:63:69:dc:a7:3a:6b:9b:bb:
                    91:d0:af:d0:49:85:60:7d:a8:fd:98:cd:fe:64:68:
                    0a:93:32:6d:bc:48:fd:08:ad:a6:96:f4:96:83:15:
                    fd:0e:dd:36:e1:ca:ea:d4:34:55:89:a9:8c:3e:43:
                    12:79:bf:ec:a9:7d:73:39:13:09:50:82:cd:6b:42:
                    6a:d5:24:50:05:57:db:06:dc:e6:98:51:59:24:da:
                    4b:ae:a4:d4:ec:fa:68:0e:a5:17:e9:99:fa:68:72:
                    87:fb:07:75:ef:0b:0d:70:c3:3d:7e:19:f7:1a:d0:
                    14:ea:1c:bb:1e:bf:43:7f:18:d0:c3:90:42:66:d9:
                    b7:95:bb:aa:87:31:75:db:69:28:b1:f8:84:88:3c:
                    e8:7d:15:95:28:18:47:bf:80:8a:54:0a:21:c4:9c:
                    64:93:37:77:37:51:10:f5:8c:a9:a0:cf:6d:f0:8a:
                    b1:00:2f:d1:23:6d:3f:7f:f1:c7:69:ad:86:58:62:
                    71:87:9b:9b:03:ba:11:14:72:20:9c:63:b5:e0:51:
                    96:b8:7f:fc:7b:2a:7d:e1:95:60:48:b5:c6:0d:ee:
                    99:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1D:0E:E7:D9:4C:93:97:3E:93:FD:7A:B3:FC:33:53:19:33:C6:8A
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/34352e362e3234382e302f32312d3232203d3e203238303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6b:9d:dc:58:5e:b0:18:7d:aa:30:e1:ab:1d:ac:4e:0d:64:d9:
         bc:b5:7f:58:54:96:f1:4b:70:e6:5a:88:5d:20:e6:e3:00:98:
         62:3f:1e:5d:9b:ca:8a:ec:44:64:31:56:f1:d8:03:53:05:19:
         45:7b:17:8f:3d:92:f0:c9:64:20:b1:f5:c3:fb:9a:d8:1c:91:
         e1:4b:9c:1c:6b:ae:7b:96:ad:73:2c:29:60:d3:7e:62:e3:2b:
         9a:3f:bd:35:f7:f6:43:4b:f3:aa:c3:1e:18:92:5e:ee:85:b1:
         ac:24:c2:73:f5:c5:74:8d:af:a7:2e:49:d9:ce:5a:f3:63:b9:
         08:5a:08:7d:84:b7:96:67:28:65:f4:33:cc:f3:7e:1f:c5:cf:
         ca:36:42:43:36:8d:9c:eb:22:3e:79:57:31:e0:80:c4:25:ae:
         1e:a1:c8:54:05:46:2d:c6:8c:ea:70:46:ee:f4:19:4a:d5:53:
         bd:13:ec:8d:2b:50:15:77:c5:4a:8f:5e:86:41:95:cb:79:f9:
         0d:9f:2d:11:fe:a4:e5:33:cd:db:8f:9d:98:61:ee:b8:48:24:
         a3:0a:59:26:29:25:2c:47:b6:6e:5e:95:9c:dd:5a:d6:e8:ab:
         9b:18:13:dd:b2:16:20:f8:6a:86:c5:5c:fa:a2:58:5e:69:82:
         a7:cb:37:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:57:42 2026 by rpki-client