Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC2BDAEA47C66552B469C146215EAAD08BC27B3CB28D3D6F402429D3D6B7FE79/0/34352e3138332e3137322e302f32322d3234203d3e20323639373637.roa
File:                     34352e3138332e3137322e302f32322d3234203d3e20323639373637.roa (raw, json)
Hash identifier:          aLyuPtdPp7/wGatuCU0LfrSYSvU4L9ZBehsJVAfQDg4=
Subject key identifier:   C4:91:C6:69:B7:F8:9C:6F:74:8F:82:16:C2:AA:2C:BA:B9:CF:FB:5B
Certificate issuer:       /CN=E04E019E98A3A6845A74FD9DA4FB7D010F9E5956
Certificate serial:       215AACFB57708ECF97DFC73B2E390D6A0BC5EE6D
Authority key identifier: E0:4E:01:9E:98:A3:A6:84:5A:74:FD:9D:A4:FB:7D:01:0F:9E:59:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E04E019E98A3A6845A74FD9DA4FB7D010F9E5956.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC2BDAEA47C66552B469C146215EAAD08BC27B3CB28D3D6F402429D3D6B7FE79/0/34352e3138332e3137322e302f32322d3234203d3e20323639373637.roa
Signing time:             Fri 20 Mar 2026 16:10:00 +0000
ROA not before:           Fri 20 Mar 2026 16:05:00 +0000
ROA not after:            Fri 19 Mar 2027 16:10:00 +0000
asID:                     269767
IP address blocks:        45.183.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC2BDAEA47C66552B469C146215EAAD08BC27B3CB28D3D6F402429D3D6B7FE79/0/E04E019E98A3A6845A74FD9DA4FB7D010F9E5956.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC2BDAEA47C66552B469C146215EAAD08BC27B3CB28D3D6F402429D3D6B7FE79/0/E04E019E98A3A6845A74FD9DA4FB7D010F9E5956.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E04E019E98A3A6845A74FD9DA4FB7D010F9E5956.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Mar 2026 16:11:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5a:ac:fb:57:70:8e:cf:97:df:c7:3b:2e:39:0d:6a:0b:c5:ee:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E04E019E98A3A6845A74FD9DA4FB7D010F9E5956
        Validity
            Not Before: Mar 20 16:05:00 2026 GMT
            Not After : Mar 19 16:10:00 2027 GMT
        Subject: CN=C491C669B7F89C6F748F8216C2AA2CBAB9CFFB5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8a:2e:c9:93:5d:f7:26:93:5d:b9:4f:96:80:
                    a3:11:b7:25:1a:d2:25:af:85:ab:78:77:ff:39:ef:
                    9d:53:6c:66:2a:0b:74:17:58:78:84:27:30:04:bb:
                    ec:aa:27:68:dd:1f:92:ae:d6:46:8f:2f:56:5b:97:
                    54:66:ab:1b:ce:5e:94:d4:a9:ec:a2:89:bf:d6:40:
                    7f:35:dc:53:a2:c4:6a:1f:10:5a:fb:56:72:2e:02:
                    97:25:d5:44:51:c5:65:d2:eb:9d:94:7d:11:ba:1e:
                    1b:86:9a:cd:2f:dd:1d:7f:12:b6:bc:6e:e3:5c:ac:
                    f1:7b:26:47:d4:e2:db:e5:ee:99:85:38:2d:c5:6e:
                    5d:a9:ab:c7:38:4d:21:0b:f0:16:6b:65:d1:bf:98:
                    64:2e:42:58:8c:90:46:c7:de:1f:f9:32:7f:36:72:
                    9a:da:0b:fa:ea:ac:8a:f6:45:91:78:06:3e:ce:5b:
                    eb:99:6a:7d:b5:3e:2a:8e:e8:4e:06:d2:4a:a8:19:
                    92:36:f9:cb:f4:59:9e:a3:a5:2c:20:41:54:f1:cb:
                    1d:95:1a:4c:cc:ee:af:7e:69:29:a2:7e:36:d1:cb:
                    62:2b:53:25:fb:41:7a:f1:f7:d1:5c:99:7a:68:26:
                    83:e4:e8:c1:c6:c7:f9:2e:8c:8f:2c:e6:f9:98:b1:
                    74:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:91:C6:69:B7:F8:9C:6F:74:8F:82:16:C2:AA:2C:BA:B9:CF:FB:5B
            X509v3 Authority Key Identifier:
                keyid:E0:4E:01:9E:98:A3:A6:84:5A:74:FD:9D:A4:FB:7D:01:0F:9E:59:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC2BDAEA47C66552B469C146215EAAD08BC27B3CB28D3D6F402429D3D6B7FE79/0/E04E019E98A3A6845A74FD9DA4FB7D010F9E5956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E04E019E98A3A6845A74FD9DA4FB7D010F9E5956.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC2BDAEA47C66552B469C146215EAAD08BC27B3CB28D3D6F402429D3D6B7FE79/0/34352e3138332e3137322e302f32322d3234203d3e20323639373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:3e:8d:ec:61:b3:8d:f8:a3:e0:a7:15:f4:07:df:d8:4d:74:
         2f:65:df:3b:df:d7:c0:d4:3c:e7:82:3a:54:67:71:72:8b:af:
         c7:c1:23:0c:e9:14:b2:cf:42:41:30:69:4b:65:90:d0:90:81:
         04:8e:d2:a5:8d:16:d1:b1:25:0e:44:d0:0f:e0:b1:5c:d6:46:
         c8:16:b6:4f:a8:a6:ed:a8:e8:55:a6:52:3a:54:36:be:fe:27:
         1f:06:e9:d3:00:f5:7c:39:6e:4a:01:29:84:c5:6c:d4:90:92:
         a1:c4:4c:fd:22:20:6f:a3:95:c7:4b:09:f8:0d:cf:28:e5:12:
         78:35:43:bf:4e:4a:72:82:a1:b2:b5:97:55:d8:ee:5f:35:d0:
         4f:c8:28:74:f9:13:63:7a:b2:3b:ee:9f:03:74:74:69:a6:d2:
         ba:e9:a9:25:c6:9d:68:fc:1f:19:72:08:eb:83:31:03:9d:8d:
         8a:4f:03:b0:4d:38:28:b5:19:5c:d1:b0:e5:4f:f5:77:de:54:
         f8:5a:2a:7c:d4:82:fe:9e:8d:36:af:9a:c1:fe:7d:59:a3:a3:
         48:98:11:74:06:e5:5b:8b:e0:6e:27:f9:db:ee:44:8e:83:71:
         36:7e:76:18:23:38:3a:83:6d:a8:18:7c:5c:49:91:3b:b1:3d:
         77:92:43:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:33:13 2026 by rpki-client