Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/34352e3232372e3136322e302f32342d3234203d3e20323636363630.roa
File:                     34352e3232372e3136322e302f32342d3234203d3e20323636363630.roa (raw, json)
Hash identifier:          tjNqVxeIgYFvpBPwgxbiOi1FeCV3rkkCfNNTlxKGKcA=
Subject key identifier:   96:41:7D:93:F5:A1:A0:7E:C7:9B:92:B8:84:47:53:9D:4C:5B:0E:B0
Certificate issuer:       /CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
Certificate serial:       39364311D606AD240BBFA97F8F0FDB6C37452AAB
Authority key identifier: 67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/34352e3232372e3136322e302f32342d3234203d3e20323636363630.roa
Signing time:             Tue 29 Sep 2026 16:15:01 +0000
ROA not before:           Tue 29 Sep 2026 16:10:01 +0000
ROA not after:            Tue 28 Sep 2027 16:15:01 +0000
asID:                     266660
IP address blocks:        45.227.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Nov 2026 20:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:36:43:11:d6:06:ad:24:0b:bf:a9:7f:8f:0f:db:6c:37:45:2a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
        Validity
            Not Before: Sep 29 16:10:01 2026 GMT
            Not After : Sep 28 16:15:01 2027 GMT
        Subject: CN=96417D93F5A1A07EC79B92B88447539D4C5B0EB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b5:da:ad:51:42:46:44:c0:f7:21:4d:4b:af:
                    73:43:25:aa:05:e6:aa:2f:87:50:fb:be:20:96:4f:
                    48:03:9e:9f:59:1c:17:c6:a8:eb:9c:11:86:52:d6:
                    93:6f:54:ad:d0:1f:f0:6a:04:c4:7c:f4:ce:8c:27:
                    e0:0d:68:be:48:33:ca:23:03:38:8c:9f:c5:7f:d0:
                    28:98:a9:92:2d:fb:28:72:0e:31:cd:2e:12:86:75:
                    27:92:40:74:34:3b:c6:8e:53:73:bc:e3:d3:0d:67:
                    4f:35:0d:23:c3:36:22:69:69:36:6b:62:36:c1:b5:
                    9e:84:59:3e:1d:8b:a8:f0:f7:e7:21:90:4a:a8:5d:
                    77:10:41:72:70:53:50:c3:3c:fb:fc:d4:60:f9:56:
                    c2:55:0a:be:35:6d:b8:5b:6a:28:72:c2:07:d5:03:
                    65:ab:d4:b8:33:1a:ca:cf:7d:c8:32:2e:9a:1c:57:
                    b7:4f:21:00:c0:be:d1:bf:8d:bc:a6:57:7e:08:bd:
                    5c:3f:40:19:35:64:78:fa:6c:2a:0d:f4:2a:7f:24:
                    5e:7a:77:f7:8c:e9:69:24:1e:f6:54:b6:d1:54:65:
                    95:a8:e8:30:4f:e7:1c:4d:2c:93:4a:a0:dd:a6:74:
                    9a:58:e3:00:2a:be:50:35:c8:34:a1:6a:14:82:1e:
                    99:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:41:7D:93:F5:A1:A0:7E:C7:9B:92:B8:84:47:53:9D:4C:5B:0E:B0
            X509v3 Authority Key Identifier:
                keyid:67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/34352e3232372e3136322e302f32342d3234203d3e20323636363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:20:ff:3f:75:ca:87:55:7a:86:81:4d:50:0a:60:6c:cf:e0:
         32:4b:e1:b8:9f:cd:61:8d:44:c9:5f:ea:d6:c5:86:7d:b5:30:
         a5:b6:b4:82:a8:b6:a7:74:04:bf:e3:7d:14:59:e6:5b:5f:20:
         0d:91:a8:6c:21:49:0a:67:19:68:7a:cd:97:63:3f:ce:11:34:
         e8:c6:99:25:e4:d6:f1:b1:0f:8b:c4:10:14:c8:10:63:f4:5f:
         c7:11:7b:24:83:22:43:79:0a:15:2a:44:69:f7:51:5b:d3:30:
         22:78:69:5b:a8:02:f0:a6:9e:94:95:2d:1b:fb:84:98:24:5c:
         95:c3:a4:d6:c7:16:19:42:52:47:e0:0d:c7:fe:1a:57:55:20:
         0f:c1:a3:a6:07:5f:9e:15:69:01:2f:dc:54:b4:20:be:e6:b9:
         5c:7e:63:29:17:26:26:41:2e:ee:34:dc:5f:de:fc:1c:c7:ba:
         92:88:26:47:18:a7:e2:b8:e4:f7:d1:d8:00:1e:41:c9:46:9d:
         83:db:df:5c:9f:a9:6c:85:03:eb:26:ec:ac:c5:f5:4d:89:de:
         ae:d6:6a:93:be:89:f3:8a:49:8d:29:67:28:22:87:e4:9f:66:
         81:6d:41:c4:02:19:f3:e0:88:43:51:6d:3d:15:f2:9f:9c:2d:
         4c:52:aa:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 20:07:36 2026 by rpki-client