Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E5F61B4A649E3C28E43BDD384B1AB917811314A8F25DB1CF7F995D0C7A1A3D0C/0/34352e3232362e3131322e302f32322d3232203d3e20323635383631.roa
File:                     34352e3232362e3131322e302f32322d3232203d3e20323635383631.roa (raw, json)
Hash identifier:          T2tIPyMy4kGo7CGxtutg8pPXYQoeMy+nM5fKALwIBAM=
Subject key identifier:   F1:F4:E4:91:AF:8C:1B:C4:5C:CD:96:4B:7E:75:F2:23:55:89:F4:03
Certificate issuer:       /CN=DB26E88C7390227494021E2EEF569C0DB192B472
Certificate serial:       4B7F3B71ED668C71FCF693B0D150E89FFFC85E96
Authority key identifier: DB:26:E8:8C:73:90:22:74:94:02:1E:2E:EF:56:9C:0D:B1:92:B4:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB26E88C7390227494021E2EEF569C0DB192B472.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E5F61B4A649E3C28E43BDD384B1AB917811314A8F25DB1CF7F995D0C7A1A3D0C/0/34352e3232362e3131322e302f32322d3232203d3e20323635383631.roa
Signing time:             Tue 23 Sep 2025 15:05:00 +0000
ROA not before:           Tue 23 Sep 2025 15:00:00 +0000
ROA not after:            Tue 22 Sep 2026 15:05:00 +0000
asID:                     265861
IP address blocks:        45.226.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E5F61B4A649E3C28E43BDD384B1AB917811314A8F25DB1CF7F995D0C7A1A3D0C/0/DB26E88C7390227494021E2EEF569C0DB192B472.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5F61B4A649E3C28E43BDD384B1AB917811314A8F25DB1CF7F995D0C7A1A3D0C/0/DB26E88C7390227494021E2EEF569C0DB192B472.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB26E88C7390227494021E2EEF569C0DB192B472.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:7f:3b:71:ed:66:8c:71:fc:f6:93:b0:d1:50:e8:9f:ff:c8:5e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB26E88C7390227494021E2EEF569C0DB192B472
        Validity
            Not Before: Sep 23 15:00:00 2025 GMT
            Not After : Sep 22 15:05:00 2026 GMT
        Subject: CN=F1F4E491AF8C1BC45CCD964B7E75F2235589F403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:00:06:f9:d0:a7:09:80:81:b1:6b:33:9b:fa:
                    45:f5:68:e2:b6:6b:2d:5e:31:ab:39:ee:f6:1d:00:
                    93:ae:81:dc:8b:0b:1c:d0:0f:4c:8e:0a:38:3a:b0:
                    2f:d9:42:59:4f:65:ef:45:a6:ec:d3:ae:ca:57:7b:
                    1c:92:6c:d7:17:53:17:12:67:0e:d3:d0:74:63:81:
                    0d:c6:e8:ea:40:8f:fc:3f:7a:a9:e2:80:ef:f5:b0:
                    c6:d3:98:5c:06:79:69:5c:ee:73:92:c0:8f:78:cc:
                    29:e3:3d:1a:f7:81:a2:6a:e4:01:b1:14:aa:20:9a:
                    93:67:ff:54:19:54:bb:6c:c9:3b:f2:f8:23:cd:9a:
                    27:ac:f3:57:7b:9c:a5:36:95:10:b6:a9:70:59:d8:
                    3f:77:23:5e:e6:8d:30:e1:3c:d9:82:5c:89:95:82:
                    2c:72:0e:85:3e:89:60:61:0f:e8:b8:cd:11:67:2f:
                    c6:87:44:c0:b1:55:b7:e0:f8:31:30:c5:00:15:64:
                    27:79:5d:39:18:6e:49:ab:99:d8:76:c0:d3:90:53:
                    b2:df:13:91:b1:0e:fe:0d:53:17:5e:25:a2:a6:99:
                    2e:39:7b:53:fd:6d:b6:d4:bc:03:da:4e:8f:43:b8:
                    22:5b:91:47:90:d4:1e:5a:b5:24:de:18:08:70:72:
                    d9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F4:E4:91:AF:8C:1B:C4:5C:CD:96:4B:7E:75:F2:23:55:89:F4:03
            X509v3 Authority Key Identifier:
                keyid:DB:26:E8:8C:73:90:22:74:94:02:1E:2E:EF:56:9C:0D:B1:92:B4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E5F61B4A649E3C28E43BDD384B1AB917811314A8F25DB1CF7F995D0C7A1A3D0C/0/DB26E88C7390227494021E2EEF569C0DB192B472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB26E88C7390227494021E2EEF569C0DB192B472.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E5F61B4A649E3C28E43BDD384B1AB917811314A8F25DB1CF7F995D0C7A1A3D0C/0/34352e3232362e3131322e302f32322d3232203d3e20323635383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:08:d4:31:b8:9d:51:1b:68:dc:c6:d6:09:54:8d:3c:d3:e2:
         07:f3:d2:be:a8:1e:5c:7b:25:5f:19:28:26:ca:dd:9b:2e:ca:
         e8:ac:9f:3d:0d:bd:57:fa:23:8e:c4:8e:e6:a3:ff:4d:9d:b8:
         91:8d:66:9b:c0:b7:34:6b:7e:4b:ea:2c:7d:32:ad:6d:ac:0e:
         d9:f0:ee:45:30:36:23:f3:4c:bf:36:0b:ca:15:3d:de:5d:85:
         b8:10:c2:df:b0:60:e5:9f:9d:2a:02:76:91:c0:71:ce:63:8d:
         65:09:c6:04:dc:c6:6b:00:2e:12:00:81:e7:2a:58:56:c6:9a:
         6f:a6:11:d3:89:f2:f6:5e:22:45:a1:15:c7:37:df:0d:a3:c6:
         6e:31:85:4a:4f:40:52:76:c6:75:9a:58:d3:82:83:5c:ee:80:
         d7:fe:39:3d:9d:4b:2b:c8:a6:45:7e:b6:c1:76:24:3c:c8:db:
         08:fb:89:2e:c9:56:b6:56:59:24:4d:12:f2:14:4c:2a:d0:2a:
         a2:29:cc:8a:ad:cf:bc:47:16:87:53:53:68:f7:d6:71:3c:b2:
         b9:45:33:98:61:f2:9c:bf:0c:12:2d:9d:df:7d:12:8a:36:2b:
         d3:ba:71:ba:e5:71:33:0b:79:b2:e8:0f:6a:12:43:68:97:55:
         fa:04:8f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:08:53 2025 by rpki-client