Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/34352e3136322e3133352e302f32342d3234203d3e20323636373731.roa
File:                     34352e3136322e3133352e302f32342d3234203d3e20323636373731.roa (raw, json)
Hash identifier:          y7RU1fKY30Jmv7cptX7PjbJ30DVpEIDFxWL+5xtAsZo=
Subject key identifier:   A4:93:A0:91:34:A4:86:9A:E4:E0:DC:59:A8:19:82:C9:21:A3:E6:34
Certificate issuer:       /CN=B4FABCBFF83288B64BE540323B458825C54A4663
Certificate serial:       3E91C9F42B0407BA415571D6EE43BD8F686495D5
Authority key identifier: B4:FA:BC:BF:F8:32:88:B6:4B:E5:40:32:3B:45:88:25:C5:4A:46:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/34352e3136322e3133352e302f32342d3234203d3e20323636373731.roa
Signing time:             Tue 24 Mar 2026 20:40:00 +0000
ROA not before:           Tue 24 Mar 2026 20:35:00 +0000
ROA not after:            Tue 23 Mar 2027 20:40:00 +0000
asID:                     266771
IP address blocks:        45.162.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 15:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:91:c9:f4:2b:04:07:ba:41:55:71:d6:ee:43:bd:8f:68:64:95:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4FABCBFF83288B64BE540323B458825C54A4663
        Validity
            Not Before: Mar 24 20:35:00 2026 GMT
            Not After : Mar 23 20:40:00 2027 GMT
        Subject: CN=A493A09134A4869AE4E0DC59A81982C921A3E634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:66:e1:33:ed:53:c2:55:ea:1f:b9:01:03:
                    d4:2a:54:df:08:29:60:d8:c4:75:d3:9a:4b:30:ea:
                    1c:63:f5:97:bf:cc:08:1e:6c:bf:d2:88:01:3b:f2:
                    61:9f:72:d0:45:5c:a0:af:a4:65:6e:db:a7:6d:7a:
                    84:4c:88:64:6c:34:fd:a8:fb:29:27:8e:af:bd:1c:
                    4b:a8:f8:0a:73:be:ae:2c:14:00:b0:8b:67:3d:bd:
                    6e:68:d3:6d:55:43:82:51:ac:98:c8:e0:74:f8:1f:
                    e4:fe:3f:a1:cd:87:44:51:f0:b5:3b:3d:ca:c7:1c:
                    4a:13:35:e3:53:cf:8e:2c:42:5f:1c:91:c2:a7:24:
                    4e:78:24:91:b0:c0:eb:75:10:2c:8c:99:e6:b4:09:
                    83:9a:b9:ae:fa:c4:76:10:5e:b5:0c:4e:9b:17:8f:
                    64:d7:26:d4:5c:e0:28:50:df:8b:52:d4:b5:0e:80:
                    e9:ff:52:3c:b1:39:b1:74:fb:59:64:cb:39:00:97:
                    a8:1a:a0:78:cd:9f:e2:3a:fc:2c:30:27:5d:29:7f:
                    32:7b:ae:a4:ed:72:9a:d0:d6:63:8f:a6:4f:98:1f:
                    56:60:8a:2f:5a:33:ed:72:47:ee:23:62:38:96:16:
                    c3:a9:df:f9:a3:b0:5d:81:10:cd:54:dd:d8:e1:85:
                    d1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:93:A0:91:34:A4:86:9A:E4:E0:DC:59:A8:19:82:C9:21:A3:E6:34
            X509v3 Authority Key Identifier:
                keyid:B4:FA:BC:BF:F8:32:88:B6:4B:E5:40:32:3B:45:88:25:C5:4A:46:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/34352e3136322e3133352e302f32342d3234203d3e20323636373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:72:5a:8e:14:02:58:4c:ce:96:46:8f:e4:2e:9b:25:c8:8e:
         34:99:86:f9:2c:f7:d2:0d:c0:4d:7a:35:d1:90:9b:92:79:99:
         6a:a9:66:b1:5e:63:59:96:2c:87:84:5b:1f:5c:f9:1f:55:33:
         fd:31:ec:48:46:01:1d:26:fb:15:a5:15:42:ba:fb:79:c3:1c:
         b7:c1:f3:2e:b7:d4:34:71:d8:f4:06:e1:b1:96:8f:b8:32:37:
         a0:4b:aa:24:9d:d1:49:48:85:4c:20:1b:4f:7d:c9:d4:8c:13:
         ba:dc:df:68:db:d2:70:37:dc:88:ed:90:22:a8:b5:20:1c:00:
         0f:e6:8a:6f:f5:e1:12:99:76:e3:79:fa:08:dd:1a:45:3b:e3:
         c0:df:28:d2:c3:d5:ce:48:bc:30:73:63:ab:dc:47:97:a3:09:
         19:a6:7f:80:cf:0e:5c:31:59:f9:5b:de:9a:8c:eb:ab:65:75:
         56:8a:48:a6:40:91:3d:fe:d6:52:e7:96:e6:3f:37:c3:ec:a7:
         e1:ff:66:84:6f:4a:4b:fc:2a:a8:20:4e:b1:cf:a0:01:ef:ed:
         71:40:18:66:f1:95:85:61:06:01:74:c1:c2:60:61:6d:0a:15:
         42:99:5a:55:b0:43:00:3f:f9:8a:72:c7:25:71:52:29:8c:6d:
         99:1d:55:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:49:01 2026 by rpki-client