Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138332e302f32342d3234203d3e20323637373034.roa
File:                     34352e3136322e3138332e302f32342d3234203d3e20323637373034.roa (raw, json)
Hash identifier:          UxGxFWyXlK1lKI5p4V5OM1/YFbFWPKXXiU+GXZQt+9Y=
Subject key identifier:   B0:2A:FF:6F:4A:7E:8E:6F:37:80:0D:5D:74:B2:F2:01:E9:70:6D:06
Certificate issuer:       /CN=BD9037968409387615A2867C81BDF4EE88009203
Certificate serial:       64233C2D1ADFC383130EA288A43AA337CCFCC30C
Authority key identifier: BD:90:37:96:84:09:38:76:15:A2:86:7C:81:BD:F4:EE:88:00:92:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138332e302f32342d3234203d3e20323637373034.roa
Signing time:             Thu 30 Apr 2026 19:40:30 +0000
ROA not before:           Thu 30 Apr 2026 19:35:30 +0000
ROA not after:            Thu 29 Apr 2027 19:40:30 +0000
asID:                     267704
IP address blocks:        45.162.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 18 May 2026 06:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:23:3c:2d:1a:df:c3:83:13:0e:a2:88:a4:3a:a3:37:cc:fc:c3:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD9037968409387615A2867C81BDF4EE88009203
        Validity
            Not Before: Apr 30 19:35:30 2026 GMT
            Not After : Apr 29 19:40:30 2027 GMT
        Subject: CN=B02AFF6F4A7E8E6F37800D5D74B2F201E9706D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:38:f7:b4:6f:f7:68:8f:ff:2a:4e:3b:55:
                    0d:f8:da:3b:5e:64:c5:0a:c7:c6:b8:d7:bf:82:fa:
                    9a:df:83:13:fa:60:b4:b0:eb:72:d8:e8:19:4b:38:
                    0c:96:eb:e2:c7:e0:af:bf:64:6a:f4:9c:f0:d5:45:
                    76:f7:bb:8a:38:e0:d2:fe:97:e9:78:27:95:06:72:
                    f2:f2:77:b2:30:e3:b9:52:08:bd:07:47:79:5b:fb:
                    0d:8e:e6:cd:3f:27:81:98:40:f5:c6:c3:db:7d:eb:
                    5c:dc:4f:50:81:14:a6:fb:1f:4e:2e:bc:18:a2:64:
                    f3:d4:2c:8d:1f:a3:eb:99:75:7c:6f:21:de:04:d2:
                    53:52:8d:0b:b2:03:42:54:d6:7e:bd:d6:14:44:b0:
                    d1:56:97:93:37:f4:5c:0a:fd:03:b8:db:01:df:8a:
                    ab:80:a2:bc:7a:78:24:e3:72:0d:db:20:bf:36:b4:
                    d0:fb:e0:fc:8f:0e:23:2c:09:53:e1:b8:7e:3e:f8:
                    03:73:1c:7f:fb:be:87:f4:b2:0a:2d:f5:bd:b0:57:
                    53:b1:67:fd:60:9c:a2:45:6b:ae:cb:88:1d:ef:7e:
                    3c:76:b9:c2:89:11:84:95:7c:e2:82:1d:21:3e:9a:
                    ad:4c:1d:8d:ef:b7:e7:d4:2b:aa:7f:c3:26:02:36:
                    7b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2A:FF:6F:4A:7E:8E:6F:37:80:0D:5D:74:B2:F2:01:E9:70:6D:06
            X509v3 Authority Key Identifier:
                keyid:BD:90:37:96:84:09:38:76:15:A2:86:7C:81:BD:F4:EE:88:00:92:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138332e302f32342d3234203d3e20323637373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:ca:15:38:8f:e3:43:80:1c:f5:6c:6f:fe:0d:94:4b:40:29:
         f7:77:00:3d:ee:8a:0c:3a:20:09:03:75:50:36:39:24:35:49:
         89:cf:15:7d:00:22:73:f6:3f:5d:4b:1a:f7:1d:dc:ec:d9:d0:
         c7:a1:da:9e:53:63:2e:b9:2e:ea:47:ad:ad:28:fd:e4:4c:63:
         00:2d:ac:7f:75:d7:e3:37:23:7f:64:c8:27:58:bd:bc:d5:31:
         a8:cf:b0:d9:35:7c:76:6a:ac:6a:bd:b5:5c:9b:f8:9a:2b:dd:
         67:f8:7f:19:2c:f0:4c:27:68:31:e5:b2:1a:ac:5f:5d:64:52:
         24:e6:e4:9f:fd:ca:bf:8b:42:f4:47:7e:31:76:a3:e2:ee:e1:
         92:58:0d:4c:98:c4:b0:f4:31:9a:e4:6b:58:65:40:f9:bd:96:
         6e:0d:e9:30:e8:43:fd:26:25:8d:77:fd:91:35:58:f8:aa:be:
         5c:f3:31:c0:e6:7a:8b:c0:bf:4f:3f:60:fe:1a:b4:ef:05:95:
         28:2a:30:9a:7b:15:cc:56:3a:ef:c9:cb:70:04:d6:eb:88:2e:
         e2:49:46:5c:38:2c:1b:00:8a:72:59:41:28:a3:1d:a8:69:e0:
         48:ee:8b:1c:c6:20:cb:ba:ac:05:97:2a:2a:3b:24:4b:b5:85:
         69:12:2e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:00:08 2026 by rpki-client