Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E5F61B4A649E3C28E43BDD384B1AB917811314A8F25DB1CF7F995D0C7A1A3D0C/0/34352e3232362e3131322e302f32322d3232203d3e20323635383631.roa
File:                     34352e3232362e3131322e302f32322d3232203d3e20323635383631.roa (raw, json)
Hash identifier:          nwIFA+m2FNr/MOrEAl0jNQlfkO2dfk4rlBRD/CoT+8M=
Subject key identifier:   5A:B1:CE:63:CE:3B:98:ED:A2:BD:89:21:CF:AD:1A:0F:6C:FB:6E:34
Certificate issuer:       /CN=DB26E88C7390227494021E2EEF569C0DB192B472
Certificate serial:       56F2AC841DEDA12EC15C80DB39183ACAF2740A45
Authority key identifier: DB:26:E8:8C:73:90:22:74:94:02:1E:2E:EF:56:9C:0D:B1:92:B4:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB26E88C7390227494021E2EEF569C0DB192B472.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E5F61B4A649E3C28E43BDD384B1AB917811314A8F25DB1CF7F995D0C7A1A3D0C/0/34352e3232362e3131322e302f32322d3232203d3e20323635383631.roa
Signing time:             Tue 23 Jun 2026 03:05:00 +0000
ROA not before:           Tue 23 Jun 2026 03:00:00 +0000
ROA not after:            Tue 22 Jun 2027 03:05:00 +0000
asID:                     265861
IP address blocks:        45.226.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E5F61B4A649E3C28E43BDD384B1AB917811314A8F25DB1CF7F995D0C7A1A3D0C/0/DB26E88C7390227494021E2EEF569C0DB192B472.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5F61B4A649E3C28E43BDD384B1AB917811314A8F25DB1CF7F995D0C7A1A3D0C/0/DB26E88C7390227494021E2EEF569C0DB192B472.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB26E88C7390227494021E2EEF569C0DB192B472.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f2:ac:84:1d:ed:a1:2e:c1:5c:80:db:39:18:3a:ca:f2:74:0a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB26E88C7390227494021E2EEF569C0DB192B472
        Validity
            Not Before: Jun 23 03:00:00 2026 GMT
            Not After : Jun 22 03:05:00 2027 GMT
        Subject: CN=5AB1CE63CE3B98EDA2BD8921CFAD1A0F6CFB6E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bf:b7:e3:fd:f4:a1:93:85:1e:50:2c:bb:48:
                    f3:2e:dd:56:d6:c6:c7:cf:80:9a:17:4f:3a:c7:26:
                    4b:3e:d8:27:a5:cf:d6:e5:7c:da:7c:db:0d:7e:33:
                    b6:0f:af:57:95:28:f7:bc:b9:f6:0e:47:f1:bd:12:
                    78:fb:62:62:ae:40:6d:74:82:fd:8c:3a:84:a6:c6:
                    0a:c0:e9:81:3c:ab:27:8b:d6:db:a4:aa:0b:d2:f0:
                    81:00:c7:79:24:2f:af:93:25:e4:de:d6:82:af:2d:
                    a6:4a:ea:03:a2:5e:af:06:6e:bb:36:fa:7b:36:20:
                    e2:20:17:ba:f7:15:4a:76:e9:15:b8:ca:60:d7:1f:
                    58:1f:2a:9b:e3:8e:fb:46:4e:5b:e6:70:f6:3a:85:
                    d7:a1:92:2f:95:d6:d5:3c:44:b3:f4:64:d0:6b:ef:
                    0d:07:f4:f7:d3:0d:af:b1:40:8f:64:d0:3d:4b:af:
                    c5:cf:23:65:ba:8d:ba:77:37:2b:90:d5:51:8e:3c:
                    15:c4:71:17:62:cb:5e:62:d9:75:17:17:63:b8:52:
                    da:ba:25:49:ae:4f:67:fd:19:b5:bd:f9:c6:88:18:
                    97:8b:87:93:ce:b3:d3:06:1a:31:f8:01:ca:05:7c:
                    e2:f9:46:0a:ce:ef:ab:d7:87:34:45:f6:67:06:8c:
                    b6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B1:CE:63:CE:3B:98:ED:A2:BD:89:21:CF:AD:1A:0F:6C:FB:6E:34
            X509v3 Authority Key Identifier:
                keyid:DB:26:E8:8C:73:90:22:74:94:02:1E:2E:EF:56:9C:0D:B1:92:B4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E5F61B4A649E3C28E43BDD384B1AB917811314A8F25DB1CF7F995D0C7A1A3D0C/0/DB26E88C7390227494021E2EEF569C0DB192B472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB26E88C7390227494021E2EEF569C0DB192B472.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E5F61B4A649E3C28E43BDD384B1AB917811314A8F25DB1CF7F995D0C7A1A3D0C/0/34352e3232362e3131322e302f32322d3232203d3e20323635383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:65:a6:13:21:18:88:b6:1e:4c:15:f4:aa:d2:80:7e:d3:84:
         e5:87:37:4d:ce:9e:a5:92:90:da:2c:fa:1b:fe:bd:31:d0:b3:
         89:90:35:d9:ce:85:a2:19:99:d2:4c:9d:56:c4:15:a3:d8:61:
         e5:0c:4a:b4:de:2b:c6:5e:e8:1c:ae:ce:b4:df:35:70:11:ee:
         4a:c9:28:73:36:72:a3:d3:67:52:c7:90:c4:dd:36:9e:de:f2:
         de:9b:66:8b:39:6b:b3:c0:05:ea:d5:a5:c4:32:f8:76:16:76:
         95:b5:b9:2a:43:e9:f0:9b:1a:6d:5b:f8:48:59:58:4d:a2:dd:
         54:a2:37:0b:83:ab:9f:aa:47:76:d6:76:30:df:26:88:45:72:
         a7:db:03:e8:be:e7:38:36:b8:4c:9d:35:be:46:21:2c:70:55:
         d5:36:67:a6:60:21:85:b8:89:3c:a0:4d:29:c3:fe:82:55:9a:
         d5:a3:44:78:04:82:53:26:23:47:ad:38:7f:dc:3f:30:b4:f7:
         3f:71:b3:2f:28:f6:d5:bd:72:d0:81:27:59:a5:ee:87:ae:99:
         85:4e:f5:7e:b3:17:15:10:7b:ac:39:8a:56:9e:41:ea:36:ca:
         1a:33:01:ba:32:c7:89:81:e1:1e:c1:f3:ca:0c:dd:3b:f8:dd:
         56:78:4c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:54:43 2026 by rpki-client