Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/34352e3138312e34362e302f32332d3233203d3e20323637373938.roa
File:                     34352e3138312e34362e302f32332d3233203d3e20323637373938.roa (raw, json)
Hash identifier:          VoQg+VhYLJcY4ByBSYUoQzh53de1EMe1+O8Pz+b7KiY=
Subject key identifier:   63:22:2A:DA:AC:90:8B:FA:EA:90:21:9D:85:85:09:20:2F:BA:D9:EE
Certificate issuer:       /CN=44B7D6626292744063A0029B3E214C905150E05D
Certificate serial:       1FBB15D81CAE1A8F188F7BB9B64D6E43A604A922
Authority key identifier: 44:B7:D6:62:62:92:74:40:63:A0:02:9B:3E:21:4C:90:51:50:E0:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/34352e3138312e34362e302f32332d3233203d3e20323637373938.roa
Signing time:             Fri 20 Mar 2026 17:35:21 +0000
ROA not before:           Fri 20 Mar 2026 17:30:21 +0000
ROA not after:            Fri 19 Mar 2027 17:35:21 +0000
asID:                     267798
IP address blocks:        45.181.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/44B7D6626292744063A0029B3E214C905150E05D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/44B7D6626292744063A0029B3E214C905150E05D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bb:15:d8:1c:ae:1a:8f:18:8f:7b:b9:b6:4d:6e:43:a6:04:a9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44B7D6626292744063A0029B3E214C905150E05D
        Validity
            Not Before: Mar 20 17:30:21 2026 GMT
            Not After : Mar 19 17:35:21 2027 GMT
        Subject: CN=63222ADAAC908BFAEA90219D858509202FBAD9EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:47:37:65:90:82:be:ff:c6:b0:d9:1b:dd:a7:
                    45:3b:38:ba:45:79:fa:d5:00:44:f0:d4:26:e9:e9:
                    c7:6b:22:32:fb:d1:c3:3c:c1:f0:4a:26:54:f5:aa:
                    c5:3d:1e:ce:a0:67:5d:43:99:17:ad:d1:03:d2:7f:
                    59:6f:f7:6c:d1:91:ef:3f:d7:4d:20:33:2b:e7:4e:
                    10:24:50:18:6d:37:22:14:71:82:b3:d2:36:50:b6:
                    41:b7:82:0d:13:fb:00:a7:ca:c1:40:50:29:19:bd:
                    f8:24:54:08:ea:0e:29:26:6c:e7:c8:22:d6:5b:c0:
                    c9:2a:00:06:50:3b:93:82:5b:bb:8d:0b:89:2f:9a:
                    2f:ff:b0:8a:c3:a6:2d:79:7a:c6:99:03:12:29:09:
                    09:c6:10:f6:f6:56:62:72:4c:af:33:a3:50:58:6f:
                    f0:bc:a8:ca:42:22:44:ee:d3:f9:ff:91:81:4c:e5:
                    b3:c7:62:98:93:1b:5d:e9:99:83:5c:ab:77:4f:46:
                    13:76:06:40:5a:f7:e7:fd:fc:51:20:e3:a3:23:ab:
                    aa:57:cd:43:0d:d0:72:a9:f0:c3:9f:75:93:f6:43:
                    b3:05:37:73:01:3c:86:de:b7:00:38:90:dc:5b:82:
                    00:fd:fe:6a:93:12:1f:2f:ff:38:2d:76:f5:10:bb:
                    40:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:22:2A:DA:AC:90:8B:FA:EA:90:21:9D:85:85:09:20:2F:BA:D9:EE
            X509v3 Authority Key Identifier:
                keyid:44:B7:D6:62:62:92:74:40:63:A0:02:9B:3E:21:4C:90:51:50:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/44B7D6626292744063A0029B3E214C905150E05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/34352e3138312e34362e302f32332d3233203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:5e:5f:a4:d2:32:cc:43:51:65:75:44:83:34:b2:90:b3:cb:
         ab:80:9b:66:b0:09:ce:ff:9d:ac:88:6f:64:d7:04:f8:b7:34:
         18:66:29:77:de:c3:9d:6b:20:ae:bc:fa:c3:df:2d:dd:a0:c6:
         1c:48:62:d0:e7:59:55:ca:d6:b7:9e:c7:45:4f:ec:99:c6:3f:
         41:f4:db:b2:c9:13:06:cd:1f:1a:17:92:0d:90:86:17:42:9a:
         a5:1c:0f:df:33:7e:00:b2:18:8a:11:fc:c8:43:db:d0:88:22:
         90:33:5d:bf:86:7c:02:3a:1f:dd:dc:77:6b:bb:2b:28:8d:da:
         10:75:11:de:22:04:46:d9:fc:87:f0:5b:f5:10:89:42:bd:c3:
         fb:20:0b:b8:71:90:a5:25:e4:b7:3d:f0:fb:a9:18:eb:ff:01:
         c8:3e:9c:c0:4b:b3:ab:8c:9e:9a:69:37:7e:2a:2b:ab:72:5a:
         89:8c:fa:46:6f:f0:ba:a0:e3:59:74:75:fa:a0:54:6e:74:d5:
         17:ba:49:7b:df:17:58:7a:ca:e9:e0:d2:56:59:2f:b4:0f:ec:
         82:92:52:38:1f:4d:37:96:a2:51:7c:b1:14:f0:6f:04:06:4b:
         5a:ad:32:0f:90:55:75:5b:5c:9c:e3:14:e5:78:ac:38:ae:c2:
         f5:b9:28:05
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUH7sV2ByuGo8Yj3u5tk1uQ6YEqSIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRCN0Q2NjI2MjkyNzQ0MDYzQTAwMjlCM0UyMTRDOTA1
MTUwRTA1RDAeFw0yNjAzMjAxNzMwMjFaFw0yNzAzMTkxNzM1MjFaMDMxMTAvBgNV
BAMTKDYzMjIyQURBQUM5MDhCRkFFQTkwMjE5RDg1ODUwOTIwMkZCQUQ5RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfRzdlkIK+/8aw2Rvdp0U7OLpF
efrVAETw1Cbp6cdrIjL70cM8wfBKJlT1qsU9Hs6gZ11DmRet0QPSf1lv92zRke8/
100gMyvnThAkUBhtNyIUcYKz0jZQtkG3gg0T+wCnysFAUCkZvfgkVAjqDikmbOfI
ItZbwMkqAAZQO5OCW7uNC4kvmi//sIrDpi15esaZAxIpCQnGEPb2VmJyTK8zo1BY
b/C8qMpCIkTu0/n/kYFM5bPHYpiTG13pmYNcq3dPRhN2BkBa9+f9/FEg46Mjq6pX
zUMN0HKp8MOfdZP2Q7MFN3MBPIbetwA4kNxbggD9/mqTEh8v/zgtdvUQu0DLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUYyIq2qyQi/rqkCGdhYUJIC+62e4wHwYDVR0j
BBgwFoAURLfWYmKSdEBjoAKbPiFMkFFQ4F0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85OTBGRjlBRDUzMTA1NzRENjU0Q0E0NjlDM0M2OTc5QjIz
RDkzNEZDNUFFNjEwRkIxODZGMDZEQTY1MThCQTRBLzAvNDRCN0Q2NjI2MjkyNzQ0
MDYzQTAwMjlCM0UyMTRDOTA1MTUwRTA1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NEI3RDY2MjYyOTI3NDQwNjNB
MDAyOUIzRTIxNEM5MDUxNTBFMDVELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTkwRkY5QUQ1MzEwNTc0RDY1NENBNDY5QzNDNjk3OUIyM0Q5MzRGQzVB
RTYxMEZCMTg2RjA2REE2NTE4QkE0QS8wLzM0MzUyZTMxMzgzMTJlMzQzNjJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNzM3MzkzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS21LjAN
BgkqhkiG9w0BAQsFAAOCAQEAA15fpNIyzENRZXVEgzSykLPLq4CbZrAJzv+drIhv
ZNcE+Lc0GGYpd97DnWsgrrz6w98t3aDGHEhi0OdZVcrWt57HRU/smcY/QfTbsskT
Bs0fGheSDZCGF0KapRwP3zN+ALIYihH8yEPb0IgikDNdv4Z8Ajof3dx3a7srKI3a
EHUR3iIERtn8h/Bb9RCJQr3D+yALuHGQpSXktz3w+6kY6/8ByD6cwEuzq4yemmk3
fiorq3JaiYz6Rm/wuqDjWXR1+qBUbnTVF7pJe98XWHrK6eDSVlkvtA/sgpJSOB9N
N5aiUXyxFPBvBAZLWq0yD5BVdVtcnOMU5XisOK7C9bkoBQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 07:10:25 2026 by rpki-client