Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32322d3234203d3e20323636383538.roa
File:                     34352e3233392e34342e302f32322d3234203d3e20323636383538.roa (raw, json)
Hash identifier:          bBgmwpjR/0rNqmACM4zDoZySSRxOss6bEO6Tz+QPWAE=
Subject key identifier:   63:18:9E:F2:FA:DB:7F:90:94:58:88:62:1F:C7:CF:2D:9B:A1:19:BF
Certificate issuer:       /CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
Certificate serial:       7E40E454E3CDBB79A7DA9084C139A1FF6D955916
Authority key identifier: 8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32322d3234203d3e20323636383538.roa
Signing time:             Thu 05 Mar 2026 19:33:04 +0000
ROA not before:           Thu 05 Mar 2026 19:28:04 +0000
ROA not after:            Thu 04 Mar 2027 19:33:04 +0000
asID:                     266858
IP address blocks:        45.239.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 15:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:40:e4:54:e3:cd:bb:79:a7:da:90:84:c1:39:a1:ff:6d:95:59:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
        Validity
            Not Before: Mar  5 19:28:04 2026 GMT
            Not After : Mar  4 19:33:04 2027 GMT
        Subject: CN=63189EF2FADB7F90945888621FC7CF2D9BA119BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e7:1a:11:56:ec:ba:44:b9:2e:9f:09:b7:d1:
                    36:03:0b:99:08:3b:de:df:67:f7:49:24:27:74:5e:
                    05:ec:47:c1:6c:52:8d:ad:82:22:57:dc:a4:90:3e:
                    30:ce:94:58:3a:c9:a1:f1:66:41:6b:0b:c1:52:98:
                    cf:39:c2:e6:c9:e7:1b:e5:6a:cd:34:8d:70:95:5a:
                    35:df:c9:9e:5f:94:d3:07:65:ba:2a:c5:b3:90:6b:
                    18:f9:2c:82:0b:86:a6:7f:62:a1:84:33:d0:d9:55:
                    cf:82:50:73:ff:87:46:11:f2:62:28:46:9c:f8:68:
                    90:d8:50:de:00:f1:15:65:ce:a4:a7:d6:96:8f:9d:
                    01:c3:9a:cf:cf:24:e8:46:54:fe:11:78:3e:35:c5:
                    fd:a1:7a:f3:fc:c3:b9:5e:47:a0:29:41:aa:4e:10:
                    59:d3:81:df:65:24:8c:77:40:2e:7e:d5:12:e0:90:
                    86:d6:76:81:d6:c0:6e:45:ef:4f:ee:d8:44:d2:17:
                    f6:43:5d:dc:e4:d4:e3:f9:6d:52:6d:63:b4:28:f1:
                    4c:00:ec:8f:60:f0:53:50:9d:eb:1f:1a:4c:53:4b:
                    65:ad:2f:e3:5b:51:1f:f1:27:94:f7:1f:89:f0:57:
                    33:41:e4:ae:2a:47:25:3c:ad:f1:50:43:e1:f9:82:
                    16:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:18:9E:F2:FA:DB:7F:90:94:58:88:62:1F:C7:CF:2D:9B:A1:19:BF
            X509v3 Authority Key Identifier:
                keyid:8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32322d3234203d3e20323636383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:89:bb:38:34:41:9d:03:9b:b4:a9:57:61:78:d5:75:c2:2c:
         04:65:b9:6f:49:77:21:1b:18:f9:90:23:02:56:b0:30:22:ff:
         b8:0c:36:54:eb:fa:ef:0e:29:36:c0:0d:1f:67:e2:02:08:dc:
         f5:74:c6:a7:c1:91:b0:ba:83:de:07:e7:52:25:fb:db:1e:4b:
         dd:bd:0e:6f:dc:91:db:37:60:bd:59:2c:ff:2b:7b:39:f2:c2:
         84:10:0f:19:a3:ee:eb:61:46:01:89:b8:38:85:12:23:f8:06:
         6c:7c:e1:88:e4:0d:08:6e:f6:46:82:83:97:f7:f4:81:5b:9c:
         98:5c:36:96:4a:15:cb:58:78:02:10:2f:24:b0:0b:f5:b6:c2:
         15:22:1d:54:15:15:6c:4a:86:ff:3a:01:36:0a:ce:38:24:9a:
         ea:a6:3b:22:33:8f:f8:dd:f9:a9:51:92:f8:4d:db:07:32:e9:
         57:d6:74:b9:d2:f5:d9:42:ff:64:29:a0:e7:47:47:60:8b:fa:
         e3:0a:1b:4d:3a:28:88:31:e6:95:39:8e:b9:33:6b:77:9b:24:
         77:3f:15:19:54:1c:e5:18:28:7d:79:2b:9c:e8:41:06:3e:c5:
         3c:4c:3d:9b:6e:0c:78:3a:e4:f4:e7:a5:2d:3b:ba:0c:a6:07:
         3f:f8:ef:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:46:35 2026 by rpki-client