Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/34352e3138312e34342e302f32332d3233203d3e20323637373938.roa
File:                     34352e3138312e34342e302f32332d3233203d3e20323637373938.roa (raw, json)
Hash identifier:          VgZGyGeP+HiCMH/reTFSsNIPhBOmxhceGjcTDOFMIJA=
Subject key identifier:   DE:EB:BB:5D:50:F9:28:EF:A5:18:2B:41:AB:75:9A:F0:6E:99:68:CB
Certificate issuer:       /CN=44B7D6626292744063A0029B3E214C905150E05D
Certificate serial:       48A16CE1BFDD0A8CA44DAF06416CBB14C74B229F
Authority key identifier: 44:B7:D6:62:62:92:74:40:63:A0:02:9B:3E:21:4C:90:51:50:E0:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/34352e3138312e34342e302f32332d3233203d3e20323637373938.roa
Signing time:             Fri 20 Mar 2026 17:35:21 +0000
ROA not before:           Fri 20 Mar 2026 17:30:21 +0000
ROA not after:            Fri 19 Mar 2027 17:35:21 +0000
asID:                     267798
IP address blocks:        45.181.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/44B7D6626292744063A0029B3E214C905150E05D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/44B7D6626292744063A0029B3E214C905150E05D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a1:6c:e1:bf:dd:0a:8c:a4:4d:af:06:41:6c:bb:14:c7:4b:22:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44B7D6626292744063A0029B3E214C905150E05D
        Validity
            Not Before: Mar 20 17:30:21 2026 GMT
            Not After : Mar 19 17:35:21 2027 GMT
        Subject: CN=DEEBBB5D50F928EFA5182B41AB759AF06E9968CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ad:48:44:4a:30:d1:fd:46:7a:07:48:03:c4:
                    3f:d7:37:42:25:83:9a:be:08:cf:c2:e0:29:dc:b6:
                    fa:3c:5b:c9:ca:c6:81:1a:eb:e1:97:31:df:93:0d:
                    ac:d7:69:48:2b:25:6b:a8:8b:47:4c:13:1e:c9:26:
                    a1:a9:1e:5e:3c:1d:76:8b:63:aa:4a:10:68:9d:19:
                    4d:6c:35:f0:df:7d:ec:16:07:dc:29:f5:ad:01:1e:
                    cf:b1:b8:5c:d2:5b:3b:76:06:f4:07:0b:3c:c5:ed:
                    30:18:b3:b0:21:01:25:9a:7e:20:d8:c6:cd:7d:11:
                    12:7d:a5:e1:a6:58:12:ca:6b:bb:2d:8f:7e:93:db:
                    44:ed:4b:0b:da:fa:73:5f:75:9f:72:d4:cd:90:4d:
                    cd:c6:3d:82:b0:0c:60:99:0a:0d:1a:c8:79:9a:60:
                    17:5d:97:c0:f7:46:e9:18:12:b8:34:6d:8b:ed:d3:
                    db:75:34:c8:f2:0a:95:6a:aa:c0:5d:65:03:b2:0e:
                    b0:db:21:af:da:84:98:bf:1d:66:68:91:85:fc:11:
                    40:a0:7d:d9:90:0a:25:82:a3:a5:57:86:f0:9c:01:
                    3b:88:68:53:e5:e4:41:8e:31:18:36:48:c1:cd:a4:
                    42:33:88:41:c8:8a:90:45:0c:e7:51:55:5e:7c:c1:
                    e3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EB:BB:5D:50:F9:28:EF:A5:18:2B:41:AB:75:9A:F0:6E:99:68:CB
            X509v3 Authority Key Identifier:
                keyid:44:B7:D6:62:62:92:74:40:63:A0:02:9B:3E:21:4C:90:51:50:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/44B7D6626292744063A0029B3E214C905150E05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/34352e3138312e34342e302f32332d3233203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:4b:4d:70:f1:fb:b0:b3:e3:4d:69:8f:af:df:03:12:0c:b5:
         86:8a:c6:c0:b4:43:7d:db:68:2f:d2:b1:0b:ff:ba:fc:f4:0b:
         d8:ce:f8:77:65:13:47:8c:06:15:5b:88:e2:ad:ee:af:4f:03:
         a3:0a:af:1d:98:9a:7a:fd:2b:33:61:fb:eb:76:5e:2a:f2:83:
         0c:c5:44:a2:76:e3:dc:5d:57:6f:f4:4b:4d:96:29:ac:da:d4:
         09:d9:06:0f:71:c0:8c:4a:4a:ec:a3:d3:6f:58:e0:d7:bb:6d:
         fe:54:a9:d6:4a:1f:79:a8:f2:84:14:00:54:04:aa:b2:6b:3e:
         92:7a:06:a4:54:3c:d3:e0:7e:20:79:fa:6e:65:e7:80:45:5a:
         11:63:b5:a0:2f:e9:f4:af:83:19:5f:6e:eb:da:b6:fc:fc:c8:
         5f:73:03:30:2c:bc:44:6b:0c:45:9f:f4:7a:4d:41:93:53:c4:
         02:6f:42:de:29:fd:dc:c5:75:45:5c:92:2c:a3:2e:c0:35:52:
         5d:b1:83:e7:64:07:e8:2d:4e:38:f9:9e:63:57:0f:04:c9:10:
         ae:85:70:53:ff:b8:08:b7:d2:ca:a3:4b:1d:37:92:57:a7:bc:
         ed:3a:57:91:27:7b:f2:ba:9b:f1:65:a2:b1:6c:78:fa:f0:bc:
         65:1d:e4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:22:49 2026 by rpki-client