Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/34352e36352e3233322e302f32322d3232203d3e20323639383232.roa
File:                     34352e36352e3233322e302f32322d3232203d3e20323639383232.roa (raw, json)
Hash identifier:          7TfvDvtv9g7DzlEByMxW5yusQsiZakakXbX97y8+Tic=
Subject key identifier:   9B:FF:B0:1E:B2:B0:A2:FF:33:BA:02:6D:51:03:6E:B0:B9:4E:A5:F0
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       2C4E55CD4F43977C3F4FD0B884220E88F5D78AA0
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/34352e36352e3233322e302f32322d3232203d3e20323639383232.roa
Signing time:             Sat 29 Aug 2026 02:50:00 +0000
ROA not before:           Sat 29 Aug 2026 02:45:00 +0000
ROA not after:            Sat 28 Aug 2027 02:50:00 +0000
asID:                     269822
IP address blocks:        45.65.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 19:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4e:55:cd:4f:43:97:7c:3f:4f:d0:b8:84:22:0e:88:f5:d7:8a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Aug 29 02:45:00 2026 GMT
            Not After : Aug 28 02:50:00 2027 GMT
        Subject: CN=9BFFB01EB2B0A2FF33BA026D51036EB0B94EA5F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e7:b3:31:ad:6d:30:9d:09:66:0d:28:5c:b6:
                    17:26:48:01:21:27:4a:2b:e8:81:c6:2e:bf:24:e9:
                    20:10:b9:89:40:3e:45:20:d4:4d:c1:de:fc:bb:f8:
                    bc:5c:58:5a:00:0b:3f:6d:57:9b:01:9a:9d:61:62:
                    be:fe:3f:b2:01:6a:59:2b:c8:c4:69:75:da:14:09:
                    49:35:76:4d:33:e3:89:5a:a3:6c:e8:e9:8a:0c:ba:
                    97:aa:da:0e:6c:d9:5c:6e:f2:dd:d9:e6:9a:25:81:
                    5e:85:f4:c0:c4:89:ad:42:2a:88:84:5c:34:28:b5:
                    ff:d8:62:c8:61:00:1e:09:a0:22:a9:52:4b:b7:5d:
                    5b:7a:9e:c8:ae:de:25:85:cd:ea:b5:e8:b5:d4:0f:
                    d7:dd:d9:a8:ca:0b:0a:ed:07:93:70:e0:2c:42:03:
                    26:1f:25:d1:76:81:ee:64:8e:e0:e1:b3:c8:2c:bb:
                    63:28:9f:41:d7:73:2f:5d:ff:e7:cd:f3:09:cb:02:
                    2e:f2:60:02:c7:32:be:fc:ff:78:13:18:74:f8:97:
                    80:c3:a0:a0:d4:fa:9e:cc:11:39:f5:1a:17:02:07:
                    47:74:82:d9:5b:03:60:23:4b:16:55:61:a9:fa:69:
                    4e:19:47:6f:37:64:f2:07:b9:cf:3f:10:aa:21:4e:
                    1f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FF:B0:1E:B2:B0:A2:FF:33:BA:02:6D:51:03:6E:B0:B9:4E:A5:F0
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/34352e36352e3233322e302f32322d3232203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:73:9d:da:68:44:32:c4:62:19:c1:13:38:84:02:2d:74:b6:
         0a:21:08:b9:d0:fe:dc:f9:22:e0:b4:e1:8b:9f:ac:0d:8a:1f:
         bd:34:06:08:64:e3:8c:0f:ea:b4:30:42:aa:3c:25:11:d0:8b:
         58:0f:e6:bc:af:7a:17:3f:82:87:30:89:78:ae:5b:2f:08:d2:
         6d:46:92:1e:51:16:52:0d:af:52:2b:c3:02:cf:ac:b5:49:25:
         36:00:a4:ad:d7:29:89:43:f0:a9:0d:0e:97:a4:54:82:2f:3a:
         00:33:b2:00:28:d8:7f:06:b1:bc:d2:73:ef:6e:ae:3a:23:1f:
         9c:a6:a6:5f:2b:50:d0:02:5a:2c:12:0c:6e:90:47:e9:c7:7a:
         0c:94:29:6b:80:7f:cb:ce:e3:34:d7:16:52:55:25:55:5b:b2:
         6b:37:38:a4:87:25:86:7c:8b:a2:9b:75:54:f2:29:7d:91:dc:
         f7:fe:42:60:e5:69:17:58:f6:eb:e3:03:96:54:38:ec:46:f8:
         44:b7:4b:cd:68:3f:43:48:0b:eb:a5:80:70:ae:b9:c8:63:a4:
         c9:33:7a:58:49:92:ce:55:f5:a8:2a:4a:fa:f9:86:04:33:6d:
         cb:8d:fd:b0:67:5d:4b:2a:08:ae:86:74:06:aa:0f:51:95:82:
         9c:86:74:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:44:38 2026 by rpki-client