Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0FA9469509CC9FE9F7036C89AD8ADE54310556578A28D2AD9DB03851327846F/0/34352e3233352e3231322e302f32322d3234203d3e203237383535.roa
File:                     34352e3233352e3231322e302f32322d3234203d3e203237383535.roa (raw, json)
Hash identifier:          7vSCVkhC5XNjH1vwu2X+g+04pRPfnKGcXFIx1p6KaRk=
Subject key identifier:   14:5F:30:8E:4C:F5:2D:6B:53:F9:C4:6E:51:BA:1F:B1:B7:22:42:24
Certificate issuer:       /CN=8757D927DFA4B315CF6FB1395FE66CA8EB272638
Certificate serial:       59061B996D726F0A020957D96B01F50542E32B18
Authority key identifier: 87:57:D9:27:DF:A4:B3:15:CF:6F:B1:39:5F:E6:6C:A8:EB:27:26:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8757D927DFA4B315CF6FB1395FE66CA8EB272638.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0FA9469509CC9FE9F7036C89AD8ADE54310556578A28D2AD9DB03851327846F/0/34352e3233352e3231322e302f32322d3234203d3e203237383535.roa
Signing time:             Tue 16 Jun 2026 22:48:09 +0000
ROA not before:           Tue 16 Jun 2026 22:43:09 +0000
ROA not after:            Tue 15 Jun 2027 22:48:09 +0000
asID:                     27855
IP address blocks:        45.235.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0FA9469509CC9FE9F7036C89AD8ADE54310556578A28D2AD9DB03851327846F/0/8757D927DFA4B315CF6FB1395FE66CA8EB272638.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0FA9469509CC9FE9F7036C89AD8ADE54310556578A28D2AD9DB03851327846F/0/8757D927DFA4B315CF6FB1395FE66CA8EB272638.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8757D927DFA4B315CF6FB1395FE66CA8EB272638.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:06:1b:99:6d:72:6f:0a:02:09:57:d9:6b:01:f5:05:42:e3:2b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8757D927DFA4B315CF6FB1395FE66CA8EB272638
        Validity
            Not Before: Jun 16 22:43:09 2026 GMT
            Not After : Jun 15 22:48:09 2027 GMT
        Subject: CN=145F308E4CF52D6B53F9C46E51BA1FB1B7224224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:ff:f5:b2:13:09:a4:b3:c5:d3:44:86:ff:53:
                    77:a4:62:75:47:67:eb:8f:b0:ad:1b:d7:41:00:8a:
                    8e:6b:e9:8b:38:ca:65:0a:48:fb:11:4a:04:b8:e2:
                    b7:29:b7:13:92:ff:a7:84:53:16:91:bd:31:b1:fc:
                    15:7d:a3:69:94:bc:32:eb:77:f5:3e:16:eb:d8:4b:
                    fd:f6:f4:f2:a9:8f:6e:c8:80:33:5a:07:16:3b:0d:
                    f1:22:39:75:74:fc:59:7d:6c:4f:2c:67:7f:15:e5:
                    1d:39:bb:c7:aa:ff:13:30:42:31:67:d6:71:14:f1:
                    c4:97:4d:7b:54:86:08:65:b4:19:0c:0d:7d:fa:90:
                    18:53:60:40:2f:08:3f:17:9e:00:27:57:74:98:43:
                    22:06:c2:45:e8:22:3b:62:78:9b:75:0a:48:55:e3:
                    56:98:3b:9c:1c:cd:2c:d4:88:ba:1e:3f:15:31:bf:
                    31:42:20:76:69:c1:3d:58:a0:80:6b:13:44:72:05:
                    93:85:de:bd:4d:e6:96:76:8f:45:15:9e:4c:b5:32:
                    7c:7f:9d:0f:21:a2:bf:49:75:83:43:16:f1:a1:27:
                    06:2c:66:10:ce:eb:4c:15:67:49:49:70:50:ce:c6:
                    cf:66:18:df:4e:69:d3:c7:57:5a:ca:71:e6:c0:51:
                    3c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5F:30:8E:4C:F5:2D:6B:53:F9:C4:6E:51:BA:1F:B1:B7:22:42:24
            X509v3 Authority Key Identifier:
                keyid:87:57:D9:27:DF:A4:B3:15:CF:6F:B1:39:5F:E6:6C:A8:EB:27:26:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0FA9469509CC9FE9F7036C89AD8ADE54310556578A28D2AD9DB03851327846F/0/8757D927DFA4B315CF6FB1395FE66CA8EB272638.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8757D927DFA4B315CF6FB1395FE66CA8EB272638.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0FA9469509CC9FE9F7036C89AD8ADE54310556578A28D2AD9DB03851327846F/0/34352e3233352e3231322e302f32322d3234203d3e203237383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:03:7b:58:39:90:02:9e:3f:9a:77:7c:2a:65:13:d0:95:0a:
         57:0a:3c:24:9d:db:50:71:ed:d6:20:a1:73:2c:75:cb:3d:23:
         39:f1:69:84:7f:96:a8:fe:16:de:85:d1:fe:c6:19:9c:4c:40:
         b0:66:e7:5a:c6:f5:d7:86:cc:0b:55:20:40:84:1d:63:b9:3f:
         41:d0:6a:45:7f:4e:70:23:91:75:01:52:a5:71:7a:e7:a2:9d:
         78:49:3c:c6:c6:b0:bb:49:48:90:ce:fd:de:a8:e2:bf:ff:33:
         cf:a2:d4:82:5d:b8:c6:27:83:46:30:57:de:6e:f3:61:6b:e0:
         98:e5:e4:16:56:40:14:f4:94:ab:1a:40:37:b3:99:41:a7:1a:
         cd:ad:79:54:2c:24:9c:ad:6b:47:00:08:01:f6:65:1a:67:60:
         0c:17:88:90:46:c8:74:b2:8f:ab:61:1f:07:b8:a3:8d:61:83:
         e4:73:4f:c1:63:45:e4:2c:ed:42:d9:72:42:12:62:64:15:76:
         86:f4:83:4b:ba:55:ec:35:db:05:9d:9a:61:f6:e4:26:5c:c3:
         fb:7a:71:62:46:a9:ab:12:cd:f6:94:1a:e6:1b:35:50:10:57:
         e9:4d:8a:32:80:ce:58:ec:57:56:07:64:4d:21:7d:36:e3:aa:
         84:e2:12:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:27:46 2026 by rpki-client