Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233332e302f32342d3234203d3e203532343638.roa
File:                     34352e3232382e3233332e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          PlrOCkw10M73+If/fBhQ6uBPV7sJj+OycArqdeH9SgA=
Subject key identifier:   F7:52:0F:51:95:B9:8C:BE:E8:E7:46:FE:D0:F2:49:6B:21:5F:B3:AB
Certificate issuer:       /CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
Certificate serial:       0644EAD482013B8CF8A9E58D48BE4AB4AEC1CCF9
Authority key identifier: F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233332e302f32342d3234203d3e203532343638.roa
Signing time:             Mon 19 Oct 2026 19:42:00 +0000
ROA not before:           Mon 19 Oct 2026 19:37:00 +0000
ROA not after:            Mon 18 Oct 2027 19:42:00 +0000
asID:                     52468
IP address blocks:        45.228.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 23:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:44:ea:d4:82:01:3b:8c:f8:a9:e5:8d:48:be:4a:b4:ae:c1:cc:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
        Validity
            Not Before: Oct 19 19:37:00 2026 GMT
            Not After : Oct 18 19:42:00 2027 GMT
        Subject: CN=F7520F5195B98CBEE8E746FED0F2496B215FB3AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:62:31:c0:db:ee:35:b8:10:cf:f0:3d:a2:d0:
                    02:91:f1:c9:2a:80:90:b5:58:52:ad:10:09:cb:5a:
                    1b:3e:8a:43:48:e9:76:a8:67:49:de:dd:57:53:b4:
                    ae:6b:72:24:df:fa:2d:ad:38:37:ca:48:ea:49:7e:
                    19:cd:fd:d8:36:1a:17:ec:a6:a2:29:cb:4b:41:62:
                    9e:1d:3c:50:d4:2d:3a:80:0e:39:ea:fd:6a:b1:bd:
                    17:a9:76:b5:1c:3d:fe:1d:a2:f0:87:ca:dd:24:1e:
                    32:5d:75:57:04:a1:b1:47:ac:b6:55:f6:66:c6:50:
                    a2:35:af:25:8e:66:4b:cf:54:4b:fa:c7:8c:ca:9e:
                    3c:6b:52:8e:fb:4e:66:12:80:a5:bc:0d:90:55:93:
                    a7:c2:28:09:0a:64:2d:30:aa:97:2b:a6:b6:a9:92:
                    93:e4:a1:29:6c:e2:f1:70:fc:7b:4d:14:45:e6:87:
                    67:71:75:c3:0d:b2:17:f0:81:89:c3:e1:dd:28:ba:
                    87:1f:ab:7d:99:f0:14:42:a9:86:27:bb:75:3d:26:
                    91:ee:36:a2:40:92:81:eb:ac:62:a8:f3:d3:18:e7:
                    5b:bf:18:97:0f:a0:49:5a:fb:9d:cf:03:98:fc:54:
                    de:b9:6f:2f:c0:8d:80:f4:b6:af:84:70:fb:c8:d9:
                    3e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:52:0F:51:95:B9:8C:BE:E8:E7:46:FE:D0:F2:49:6B:21:5F:B3:AB
            X509v3 Authority Key Identifier:
                keyid:F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233332e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:35:57:4e:55:23:24:bb:f2:ac:0f:07:f3:f0:1f:bf:dc:67:
         d5:6a:a8:9b:f7:8d:c6:38:a2:ae:cb:2f:d6:b9:db:ed:05:d0:
         18:0b:de:82:04:05:41:32:05:dc:3b:f8:bc:3e:2f:10:fe:1f:
         c5:56:75:d7:1b:24:92:71:8f:6e:ab:01:14:66:ab:7d:e3:0b:
         8d:08:87:6d:2e:77:d8:0c:0b:b3:89:54:79:02:36:85:12:e2:
         4b:a4:56:3d:e4:ef:0d:49:92:0d:5f:58:74:33:8a:b3:16:90:
         e3:2a:4e:7f:db:64:35:c7:15:72:89:7b:f0:7b:f7:92:a7:9c:
         f4:13:5d:ef:13:fa:eb:ca:1f:d1:d7:d8:05:b8:14:3e:2c:de:
         00:d9:fd:59:e0:94:4e:29:eb:c5:09:1c:70:cb:4c:1d:8f:71:
         a9:98:4a:ff:d7:04:18:b8:24:ff:87:91:76:e4:74:6a:59:4f:
         b1:f8:ad:9e:68:61:60:21:53:b1:f8:53:1d:8e:41:5a:a0:95:
         4a:35:9e:4f:7a:9d:a9:81:21:d9:84:57:af:19:16:47:f2:1c:
         47:93:60:2a:58:0d:6e:23:ea:94:7d:ef:f9:9f:ea:f0:bf:96:
         dd:47:03:4b:6a:83:42:f0:4b:5d:14:d7:c2:a9:ec:51:93:5a:
         e1:53:2e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 17:30:44 2026 by rpki-client