Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E5F61B4A649E3C28E43BDD384B1AB917811314A8F25DB1CF7F995D0C7A1A3D0C/0/34352e3232362e3131322e302f32322d3234203d3e20323635383631.roa
File:                     34352e3232362e3131322e302f32322d3234203d3e20323635383631.roa (raw, json)
Hash identifier:          uoTGTz+Q2Ni778VvfZJb1w9ibtJ5UWy8yFnEINbePVY=
Subject key identifier:   97:85:B8:02:92:3D:0E:DE:84:3D:AC:B2:86:10:16:24:6D:BE:37:D7
Certificate issuer:       /CN=DB26E88C7390227494021E2EEF569C0DB192B472
Certificate serial:       07E4053ED897DD3A7B68706755BD438C36A2B2D0
Authority key identifier: DB:26:E8:8C:73:90:22:74:94:02:1E:2E:EF:56:9C:0D:B1:92:B4:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB26E88C7390227494021E2EEF569C0DB192B472.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E5F61B4A649E3C28E43BDD384B1AB917811314A8F25DB1CF7F995D0C7A1A3D0C/0/34352e3232362e3131322e302f32322d3234203d3e20323635383631.roa
Signing time:             Tue 23 Jun 2026 03:25:00 +0000
ROA not before:           Tue 23 Jun 2026 03:20:00 +0000
ROA not after:            Tue 22 Jun 2027 03:25:00 +0000
asID:                     265861
IP address blocks:        45.226.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E5F61B4A649E3C28E43BDD384B1AB917811314A8F25DB1CF7F995D0C7A1A3D0C/0/DB26E88C7390227494021E2EEF569C0DB192B472.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5F61B4A649E3C28E43BDD384B1AB917811314A8F25DB1CF7F995D0C7A1A3D0C/0/DB26E88C7390227494021E2EEF569C0DB192B472.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB26E88C7390227494021E2EEF569C0DB192B472.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:e4:05:3e:d8:97:dd:3a:7b:68:70:67:55:bd:43:8c:36:a2:b2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB26E88C7390227494021E2EEF569C0DB192B472
        Validity
            Not Before: Jun 23 03:20:00 2026 GMT
            Not After : Jun 22 03:25:00 2027 GMT
        Subject: CN=9785B802923D0EDE843DACB2861016246DBE37D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:aa:39:1e:63:dd:3c:88:8a:ef:e5:bb:09:86:
                    8f:8a:bf:05:23:22:ec:e8:1c:30:1a:25:52:42:a9:
                    d8:40:4e:bb:4a:79:f9:f9:85:e2:5e:09:fd:75:5a:
                    ed:ad:ea:48:53:e2:61:9b:ab:60:0e:0e:ec:15:07:
                    a6:c3:6b:ab:58:b1:9e:3f:90:6a:a5:42:e4:ff:0b:
                    0c:07:43:cc:dc:d1:e9:92:58:77:df:1e:d9:a6:c0:
                    e2:91:2d:07:20:2f:34:da:50:62:58:6a:dc:87:6b:
                    7a:2d:23:f3:40:5b:3f:c7:15:fa:e7:e5:39:ee:86:
                    c4:62:41:2d:71:e4:ae:fc:13:e1:92:08:94:24:2b:
                    c6:89:29:3b:df:07:5a:89:fa:44:0b:f6:5d:64:f0:
                    93:ca:0d:69:5d:10:18:75:83:8f:f4:1e:ce:44:bf:
                    55:a3:61:9e:ee:f3:c5:ea:4b:7a:d2:19:ac:d5:d6:
                    1c:44:4a:f6:8d:08:1a:86:1f:24:34:24:c7:52:91:
                    7c:f8:d4:8d:8e:a2:e9:0d:54:02:46:99:5f:cc:c2:
                    51:3f:c0:3c:53:60:62:ea:48:85:25:0c:47:0d:89:
                    92:7f:95:88:17:f2:4b:02:8c:10:c4:bf:fd:ce:c9:
                    25:6a:d7:5c:7f:8b:de:1c:b7:a9:e7:2c:5e:d4:e7:
                    97:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:85:B8:02:92:3D:0E:DE:84:3D:AC:B2:86:10:16:24:6D:BE:37:D7
            X509v3 Authority Key Identifier:
                keyid:DB:26:E8:8C:73:90:22:74:94:02:1E:2E:EF:56:9C:0D:B1:92:B4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E5F61B4A649E3C28E43BDD384B1AB917811314A8F25DB1CF7F995D0C7A1A3D0C/0/DB26E88C7390227494021E2EEF569C0DB192B472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB26E88C7390227494021E2EEF569C0DB192B472.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E5F61B4A649E3C28E43BDD384B1AB917811314A8F25DB1CF7F995D0C7A1A3D0C/0/34352e3232362e3131322e302f32322d3234203d3e20323635383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:91:b6:92:8e:8f:ab:3b:da:f1:ac:fa:0f:9d:23:f1:6d:fb:
         6c:ab:d7:0a:6f:4e:9e:1a:9f:e9:46:19:a2:12:00:a1:0b:71:
         90:1a:b5:9b:e9:19:d2:fd:6b:1e:04:b7:f9:12:e6:8a:85:12:
         83:75:07:bd:c3:ee:78:df:3d:7b:83:df:29:dc:ed:18:2e:37:
         b9:03:45:59:1b:0f:e8:f0:f6:d2:f5:8f:f8:f9:c7:ca:46:03:
         82:2d:8f:e2:f6:fd:63:e9:79:b3:6f:4e:a3:0b:0d:c8:09:9f:
         06:ea:21:fe:ee:fe:1b:3c:cb:59:72:03:03:c6:24:b9:51:26:
         c3:68:1f:74:5e:fc:46:33:7a:c2:fa:fe:ee:af:5e:c2:5c:a6:
         a9:5b:02:9f:62:91:61:4d:fb:f0:18:f6:82:5c:49:9a:84:23:
         fd:06:d0:b7:1c:11:ab:c3:08:22:c6:cc:83:79:fc:72:ef:99:
         c5:5b:fc:02:65:40:de:37:c1:bb:8a:c2:da:f5:3d:d5:ed:9e:
         44:ac:f6:25:69:78:06:10:d9:be:58:ca:ca:45:61:d2:84:cc:
         91:b1:f5:ac:8a:a4:c9:15:75:72:f4:9f:a4:5f:7d:c5:48:47:
         0a:57:42:be:2a:96:ae:32:fa:e3:52:07:03:e2:98:f2:1c:31:
         5c:79:a7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:46:47 2026 by rpki-client