Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C7EF028B81D53846FFFE4DE4B9587AF5FA8545A2C8942E57E9E4091BD3E17C8A/0/34352e3233362e3233322e302f32322d3234203d3e20323636383231.roa
File:                     34352e3233362e3233322e302f32322d3234203d3e20323636383231.roa (raw, json)
Hash identifier:          xI3YjtAJQPGnkVkIY59Edra0WcLURLDLg4+FIbjqqyU=
Subject key identifier:   BA:8F:23:D2:9C:28:51:55:7A:59:3E:F1:1B:2A:1E:F0:EF:60:3D:3E
Certificate issuer:       /CN=07BA7ACF9BACB304E398EE7C10DEB2EDAC2D2F29
Certificate serial:       1D4640035096883A4A769E2FE53DBFD26831120B
Authority key identifier: 07:BA:7A:CF:9B:AC:B3:04:E3:98:EE:7C:10:DE:B2:ED:AC:2D:2F:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07BA7ACF9BACB304E398EE7C10DEB2EDAC2D2F29.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7EF028B81D53846FFFE4DE4B9587AF5FA8545A2C8942E57E9E4091BD3E17C8A/0/34352e3233362e3233322e302f32322d3234203d3e20323636383231.roa
Signing time:             Thu 27 Aug 2026 13:26:45 +0000
ROA not before:           Thu 27 Aug 2026 13:21:45 +0000
ROA not after:            Thu 26 Aug 2027 13:26:45 +0000
asID:                     266821
IP address blocks:        45.236.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7EF028B81D53846FFFE4DE4B9587AF5FA8545A2C8942E57E9E4091BD3E17C8A/0/07BA7ACF9BACB304E398EE7C10DEB2EDAC2D2F29.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7EF028B81D53846FFFE4DE4B9587AF5FA8545A2C8942E57E9E4091BD3E17C8A/0/07BA7ACF9BACB304E398EE7C10DEB2EDAC2D2F29.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07BA7ACF9BACB304E398EE7C10DEB2EDAC2D2F29.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 02:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:46:40:03:50:96:88:3a:4a:76:9e:2f:e5:3d:bf:d2:68:31:12:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07BA7ACF9BACB304E398EE7C10DEB2EDAC2D2F29
        Validity
            Not Before: Aug 27 13:21:45 2026 GMT
            Not After : Aug 26 13:26:45 2027 GMT
        Subject: CN=BA8F23D29C2851557A593EF11B2A1EF0EF603D3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:62:15:5f:6f:07:5d:04:38:bd:6d:1c:30:83:
                    8c:74:29:82:d6:31:45:31:fb:12:ba:27:c2:8e:e4:
                    e6:5f:0c:5b:ad:34:3e:fb:7b:39:8f:99:d4:1c:71:
                    65:2d:11:55:96:fd:2b:49:e9:2f:ee:18:9a:d4:57:
                    7d:bd:78:47:63:1c:28:c4:87:75:e0:03:1c:2a:b9:
                    fd:26:7c:25:27:50:a9:86:7b:8c:6d:ce:f1:6e:42:
                    b4:c3:e9:f4:18:be:89:68:8d:46:57:f5:92:f5:22:
                    e0:bf:4c:7b:c2:40:c3:5c:a2:11:39:e2:15:d8:74:
                    d0:fe:0d:c3:e8:cc:ef:e6:e7:5a:89:1e:5c:a1:25:
                    02:1a:b6:17:3b:2d:c2:d1:c6:4e:6d:bb:dd:d4:6f:
                    8d:92:42:b6:5a:19:91:2a:c0:69:3e:db:21:e0:0c:
                    ad:e7:c8:32:be:66:a7:27:c0:ec:62:eb:25:0c:56:
                    4e:78:54:28:a7:84:35:d2:4b:ef:32:2f:1b:93:1a:
                    b9:a4:d9:b4:a0:f7:ff:36:d7:95:6f:c4:ee:cd:4d:
                    fc:9c:cb:6f:f8:6b:54:4d:07:55:62:3f:57:1e:8f:
                    b0:2a:ea:5c:86:ed:2e:04:2c:70:92:a2:fb:9a:23:
                    4a:f3:53:3a:2e:4d:b7:cd:4b:3c:5f:de:d4:a7:d7:
                    fa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8F:23:D2:9C:28:51:55:7A:59:3E:F1:1B:2A:1E:F0:EF:60:3D:3E
            X509v3 Authority Key Identifier:
                keyid:07:BA:7A:CF:9B:AC:B3:04:E3:98:EE:7C:10:DE:B2:ED:AC:2D:2F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7EF028B81D53846FFFE4DE4B9587AF5FA8545A2C8942E57E9E4091BD3E17C8A/0/07BA7ACF9BACB304E398EE7C10DEB2EDAC2D2F29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07BA7ACF9BACB304E398EE7C10DEB2EDAC2D2F29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7EF028B81D53846FFFE4DE4B9587AF5FA8545A2C8942E57E9E4091BD3E17C8A/0/34352e3233362e3233322e302f32322d3234203d3e20323636383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:1b:a8:f1:c1:cb:09:a7:4d:c5:ee:8d:fd:76:57:f7:0c:13:
         1b:70:53:3a:60:3f:81:38:b6:67:43:57:91:f5:e8:ff:3d:9a:
         df:68:c5:8e:14:cb:f3:66:7a:f3:bb:f9:1e:88:24:93:ac:b7:
         83:a5:f5:ee:af:e3:e3:41:a4:0b:1f:bd:84:55:83:20:32:9c:
         d9:2e:85:1e:14:02:32:0a:4e:8a:fc:9c:b8:33:15:ee:3b:3e:
         55:29:f1:24:51:ef:bc:4c:ba:ab:b9:71:c4:9a:0d:90:d3:ef:
         c8:21:18:7c:b9:2e:8e:e6:83:91:8c:d9:15:57:14:28:8b:8d:
         6b:b7:31:eb:f3:59:71:4d:3a:b4:2f:7d:86:7c:8f:94:a8:ee:
         34:ff:c0:02:4f:fb:7a:0d:b5:b4:0f:99:fb:d6:7b:0a:c8:a3:
         91:16:e2:42:d9:dc:22:d0:6e:17:92:4a:3e:95:a2:2a:47:51:
         a4:94:81:d9:c8:f9:54:df:4d:4c:80:13:4b:40:c8:0b:86:9c:
         46:88:5e:94:20:31:e3:d8:46:b9:5f:36:7c:f8:da:41:33:44:
         a6:33:53:df:48:20:d3:1c:6e:78:51:d0:9e:76:47:3b:b1:5a:
         3d:de:76:34:ad:80:a4:97:93:00:59:d0:47:94:0e:0f:a3:27:
         35:e3:b8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 16:58:20 2026 by rpki-client