Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6CE112AA778D7A1E197C0DBF0EEC17060CFEF80F72FDE0319E174FF4EA9DBE5/0/34352e3232342e382e302f32322d3234203d3e20323635383435.roa
File:                     34352e3232342e382e302f32322d3234203d3e20323635383435.roa (raw, json)
Hash identifier:          ZpgS8MBwj8sYUZU3rod9x1ltCki2i2j2jg3tMVbzG5U=
Subject key identifier:   AC:33:10:CB:06:47:C0:2D:12:53:75:78:9D:1A:F2:6C:FA:7A:15:7E
Certificate issuer:       /CN=F5FCAA8EED4BED6778F4CE2DC5811CE1551F8FCC
Certificate serial:       33838D86DD90E893D9F1424A4FB69F28C3EE2959
Authority key identifier: F5:FC:AA:8E:ED:4B:ED:67:78:F4:CE:2D:C5:81:1C:E1:55:1F:8F:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FCAA8EED4BED6778F4CE2DC5811CE1551F8FCC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B6CE112AA778D7A1E197C0DBF0EEC17060CFEF80F72FDE0319E174FF4EA9DBE5/0/34352e3232342e382e302f32322d3234203d3e20323635383435.roa
Signing time:             Mon 11 May 2026 01:41:59 +0000
ROA not before:           Mon 11 May 2026 01:36:59 +0000
ROA not after:            Mon 10 May 2027 01:41:59 +0000
asID:                     265845
IP address blocks:        45.224.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B6CE112AA778D7A1E197C0DBF0EEC17060CFEF80F72FDE0319E174FF4EA9DBE5/0/F5FCAA8EED4BED6778F4CE2DC5811CE1551F8FCC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B6CE112AA778D7A1E197C0DBF0EEC17060CFEF80F72FDE0319E174FF4EA9DBE5/0/F5FCAA8EED4BED6778F4CE2DC5811CE1551F8FCC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FCAA8EED4BED6778F4CE2DC5811CE1551F8FCC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:83:8d:86:dd:90:e8:93:d9:f1:42:4a:4f:b6:9f:28:c3:ee:29:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5FCAA8EED4BED6778F4CE2DC5811CE1551F8FCC
        Validity
            Not Before: May 11 01:36:59 2026 GMT
            Not After : May 10 01:41:59 2027 GMT
        Subject: CN=AC3310CB0647C02D125375789D1AF26CFA7A157E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e1:6b:14:6c:4d:1b:12:72:26:71:d4:16:14:
                    63:1a:5c:1c:18:e2:9a:1a:cb:8c:d3:2b:50:78:a3:
                    84:f1:fa:87:c7:f4:df:3c:0d:21:91:3d:9d:47:94:
                    2b:3f:d6:5b:f8:ce:2a:59:b6:ab:e4:b9:e5:93:ef:
                    fa:ad:cd:99:2b:a2:3f:77:50:c0:6a:a9:9d:8b:fa:
                    31:ae:ce:14:cf:e3:39:5e:53:aa:f4:ea:74:9a:5a:
                    cb:8a:8b:a4:aa:06:bc:31:80:0a:63:64:03:a7:4e:
                    b9:1d:72:2c:d2:30:f2:35:90:2d:75:25:5d:9f:93:
                    2f:18:83:26:47:a7:aa:d2:68:18:77:8a:59:51:8d:
                    ec:26:fb:bb:21:6c:57:2b:d0:17:21:8a:a2:ca:f1:
                    d9:09:0d:73:9d:ad:12:e1:df:b7:b1:ae:5d:f2:e1:
                    7b:42:63:6f:2d:22:59:ed:af:1c:4d:19:f3:f2:88:
                    a2:64:43:4f:2d:45:d9:81:2a:4c:4c:54:df:1a:a5:
                    1a:e9:f9:f2:db:b6:97:2d:c4:9f:55:ef:57:eb:a6:
                    2a:a2:65:9a:a8:ca:e9:76:cc:4f:e9:87:39:df:25:
                    41:85:1e:5c:4c:95:3e:23:c5:1f:61:58:1f:63:57:
                    49:15:95:2f:a7:0c:64:ac:7c:17:bd:56:64:c4:37:
                    5c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:33:10:CB:06:47:C0:2D:12:53:75:78:9D:1A:F2:6C:FA:7A:15:7E
            X509v3 Authority Key Identifier:
                keyid:F5:FC:AA:8E:ED:4B:ED:67:78:F4:CE:2D:C5:81:1C:E1:55:1F:8F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B6CE112AA778D7A1E197C0DBF0EEC17060CFEF80F72FDE0319E174FF4EA9DBE5/0/F5FCAA8EED4BED6778F4CE2DC5811CE1551F8FCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FCAA8EED4BED6778F4CE2DC5811CE1551F8FCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6CE112AA778D7A1E197C0DBF0EEC17060CFEF80F72FDE0319E174FF4EA9DBE5/0/34352e3232342e382e302f32322d3234203d3e20323635383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:50:4e:38:8b:a9:80:d0:46:a9:85:e9:2c:71:3b:7f:0d:bf:
         38:72:a3:a5:75:24:c3:2f:55:65:89:b8:93:c7:90:ab:80:e1:
         b8:c5:f1:00:d4:d4:6e:a8:c4:25:f5:0b:60:c8:0c:e4:fd:8a:
         62:29:f3:a8:c8:dd:0a:e1:82:81:88:cb:de:ed:b3:a6:20:5d:
         1e:59:04:e1:c8:58:d9:4c:da:c5:5e:91:2f:49:76:bb:00:b8:
         28:36:c3:6f:c0:cc:38:b3:48:63:07:25:19:b0:4d:2a:82:e3:
         f0:d7:42:0d:54:28:21:32:f2:99:7e:45:c6:2f:bb:7c:11:13:
         27:3e:5d:c2:e9:bc:11:08:2e:39:24:a4:39:e8:5c:64:37:86:
         cf:b0:68:1c:64:b4:50:90:e3:33:6d:4f:38:33:a1:d2:ff:c6:
         15:f4:c3:6c:81:b2:85:e7:cc:ce:7f:38:d0:71:8c:25:e1:37:
         04:56:49:5f:b5:9e:50:bc:26:13:4a:0c:34:8e:36:7f:f5:d1:
         6b:60:74:18:91:e1:dc:92:36:f1:a8:0b:84:92:43:b6:ce:6d:
         93:cf:89:5d:35:91:6d:8b:2f:d1:bb:15:e7:26:32:4c:52:ee:
         47:a5:84:5c:f3:49:52:cf:d7:8d:69:e0:23:d6:32:ad:6c:4f:
         53:90:e7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:10:31 2026 by rpki-client