Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71BC955BC6CF398D8E13B7889968D428499D9023F008B06A84D5B0B2652924BC/0/34352e3232372e31322e302f32322d3234203d3e20323636373430.roa
File:                     34352e3232372e31322e302f32322d3234203d3e20323636373430.roa (raw, json)
Hash identifier:          JXBgh+3JAWCr9lQMi1Lf54LckphBEM0HaqVE2WdZ7rk=
Subject key identifier:   D7:12:24:A2:6F:EF:BF:6E:11:76:58:B7:4C:A4:ED:5E:4A:04:23:27
Certificate issuer:       /CN=469ADC0E10C743F085B15D99E799CAFCF6C0F689
Certificate serial:       18154805B68BFBF446F044DCB9C52640D34140CF
Authority key identifier: 46:9A:DC:0E:10:C7:43:F0:85:B1:5D:99:E7:99:CA:FC:F6:C0:F6:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/469ADC0E10C743F085B15D99E799CAFCF6C0F689.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71BC955BC6CF398D8E13B7889968D428499D9023F008B06A84D5B0B2652924BC/0/34352e3232372e31322e302f32322d3234203d3e20323636373430.roa
Signing time:             Tue 14 Jul 2026 22:54:57 +0000
ROA not before:           Tue 14 Jul 2026 22:49:57 +0000
ROA not after:            Tue 13 Jul 2027 22:54:57 +0000
asID:                     266740
IP address blocks:        45.227.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71BC955BC6CF398D8E13B7889968D428499D9023F008B06A84D5B0B2652924BC/0/469ADC0E10C743F085B15D99E799CAFCF6C0F689.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71BC955BC6CF398D8E13B7889968D428499D9023F008B06A84D5B0B2652924BC/0/469ADC0E10C743F085B15D99E799CAFCF6C0F689.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/469ADC0E10C743F085B15D99E799CAFCF6C0F689.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 00:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:15:48:05:b6:8b:fb:f4:46:f0:44:dc:b9:c5:26:40:d3:41:40:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469ADC0E10C743F085B15D99E799CAFCF6C0F689
        Validity
            Not Before: Jul 14 22:49:57 2026 GMT
            Not After : Jul 13 22:54:57 2027 GMT
        Subject: CN=D71224A26FEFBF6E117658B74CA4ED5E4A042327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e2:55:90:9b:ab:32:0a:d6:3f:7a:fd:eb:9e:
                    2d:ba:86:0d:ac:cb:27:24:c1:69:68:4f:a1:74:9d:
                    b9:48:e1:0c:f5:9e:31:c3:45:13:71:0c:66:17:9c:
                    a3:98:95:9b:5b:0e:2a:04:4d:15:c3:4e:ec:f9:a5:
                    d1:9e:8c:13:d7:77:17:ba:28:3b:9c:60:eb:3c:99:
                    7a:46:82:67:75:47:50:fe:ad:da:a0:0f:6d:37:6b:
                    e6:2e:dc:08:99:3c:c1:5e:21:6b:8e:1c:ad:90:28:
                    dd:b5:17:b3:25:35:ed:3b:7a:34:eb:85:70:05:f4:
                    42:86:64:5c:eb:5b:21:ac:0a:f5:6e:bf:f5:20:da:
                    b2:c0:fc:4c:9e:29:2c:d7:80:07:d7:d0:0b:f3:0a:
                    ee:a1:ee:33:9b:82:fd:1e:66:7f:39:72:bd:26:df:
                    1a:53:4b:4a:ae:4c:b3:c6:2e:55:0d:cc:9a:3a:c9:
                    81:aa:db:a8:ce:a8:4b:a1:c0:a0:c0:49:63:ff:23:
                    fb:38:51:01:83:8c:80:1d:54:20:dc:46:02:98:4b:
                    77:f9:d5:9d:01:82:9f:5d:b8:cf:ce:77:f8:b0:91:
                    1c:b5:42:26:18:9c:4e:24:1a:fd:69:c0:08:35:4b:
                    10:64:ed:26:8b:eb:0d:a0:12:5d:19:da:3a:de:ec:
                    0f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:12:24:A2:6F:EF:BF:6E:11:76:58:B7:4C:A4:ED:5E:4A:04:23:27
            X509v3 Authority Key Identifier:
                keyid:46:9A:DC:0E:10:C7:43:F0:85:B1:5D:99:E7:99:CA:FC:F6:C0:F6:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71BC955BC6CF398D8E13B7889968D428499D9023F008B06A84D5B0B2652924BC/0/469ADC0E10C743F085B15D99E799CAFCF6C0F689.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/469ADC0E10C743F085B15D99E799CAFCF6C0F689.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71BC955BC6CF398D8E13B7889968D428499D9023F008B06A84D5B0B2652924BC/0/34352e3232372e31322e302f32322d3234203d3e20323636373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:9e:61:02:fd:23:b5:dd:40:15:66:fb:09:17:9d:ba:89:4c:
         d8:ce:f5:02:df:7f:ef:72:1f:f8:c5:02:27:66:0b:6f:85:83:
         3e:20:b3:e9:e4:55:0d:fc:0b:48:79:bb:3c:ae:4c:33:ab:64:
         8e:c4:ef:ec:b1:5e:12:2e:85:81:0b:74:7b:66:01:68:ab:be:
         ec:4e:6f:69:26:54:82:b9:d9:83:61:7e:d7:46:12:e7:67:18:
         2e:1a:69:59:7e:bc:38:70:c6:e5:82:5e:4c:7e:f5:b9:bf:1e:
         3f:49:8b:a9:02:82:3a:a3:63:89:e9:ad:60:84:53:3b:18:7a:
         ba:03:4c:6f:b8:99:54:dd:11:4c:ba:a5:18:2b:2b:e6:99:3d:
         62:5d:30:8e:22:ce:99:2d:98:f1:77:02:b6:35:a7:aa:85:ed:
         e5:dd:87:ec:39:11:69:04:77:6c:f5:7f:e5:d8:1b:55:0f:06:
         96:7a:3a:38:09:8d:cd:7f:db:c3:ad:65:0d:b0:9e:ae:f4:9b:
         76:7c:b6:c3:c9:f6:78:68:6b:f7:69:c5:e9:eb:89:f5:e5:40:
         0d:5e:32:d9:4c:a3:37:50:38:33:68:17:3c:3d:8c:9d:9e:7a:
         c3:93:b9:c3:03:9c:74:ee:46:48:cf:74:7e:70:a1:3c:11:60:
         f2:b8:1d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:33:44 2026 by rpki-client