Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/34352e36352e3233352e302f32342d3234203d3e20323639383232.roa
File:                     34352e36352e3233352e302f32342d3234203d3e20323639383232.roa (raw, json)
Hash identifier:          HQeDHZ5CTjL01sA0BuJ7fwrc8FrhOSO/GZd8aSiEyWg=
Subject key identifier:   E8:9E:6E:2C:0E:89:BD:1E:EF:64:1E:DA:00:24:A0:AE:3E:10:B1:8A
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       3C1F4FEC737110CF64352288CD262408AB4D722D
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/34352e36352e3233352e302f32342d3234203d3e20323639383232.roa
Signing time:             Sat 29 Aug 2026 02:50:02 +0000
ROA not before:           Sat 29 Aug 2026 02:45:02 +0000
ROA not after:            Sat 28 Aug 2027 02:50:02 +0000
asID:                     269822
IP address blocks:        45.65.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:1f:4f:ec:73:71:10:cf:64:35:22:88:cd:26:24:08:ab:4d:72:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Aug 29 02:45:02 2026 GMT
            Not After : Aug 28 02:50:02 2027 GMT
        Subject: CN=E89E6E2C0E89BD1EEF641EDA0024A0AE3E10B18A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bb:e7:ac:7e:43:71:60:cb:77:62:45:a5:e4:
                    54:26:b9:52:11:ee:03:2e:90:05:8a:4a:cc:06:7a:
                    9e:20:d6:4f:81:5e:e7:ba:56:6b:3b:1d:c7:47:1a:
                    ee:94:dd:b4:98:dc:97:63:6b:20:7e:07:6b:85:e7:
                    d9:a5:38:3e:c9:bc:76:e6:b2:31:67:75:45:e3:d6:
                    7e:f2:58:da:70:dd:45:f2:08:fa:ed:6e:ff:c0:50:
                    17:a0:b7:69:03:5a:01:0e:da:35:53:23:70:39:ba:
                    d4:77:38:00:e6:50:00:89:85:1d:ff:62:ae:cb:f6:
                    fd:45:11:68:c9:ec:19:b8:ca:f8:83:36:36:8c:09:
                    06:63:b8:58:a3:73:32:dc:90:ca:5a:36:c6:f5:d2:
                    35:48:36:6c:7b:aa:83:46:95:d2:80:d0:8c:44:da:
                    17:56:f6:31:04:e1:87:54:75:fb:0d:80:cd:f2:17:
                    37:bd:c1:5c:9d:59:ac:09:df:cb:41:8c:9c:2f:9f:
                    60:0f:b8:17:6d:7c:b3:9f:4c:46:50:90:b0:ef:29:
                    b4:e8:3b:ea:2d:2e:01:3a:08:98:ca:69:08:a1:a3:
                    77:e9:a6:56:dd:f8:16:a6:1f:f3:be:09:2c:f6:db:
                    15:56:5d:42:da:74:4c:a6:bd:d0:c0:88:7b:44:40:
                    52:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9E:6E:2C:0E:89:BD:1E:EF:64:1E:DA:00:24:A0:AE:3E:10:B1:8A
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/34352e36352e3233352e302f32342d3234203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:0b:ce:3b:94:1e:fd:20:62:14:51:e4:8f:a8:29:c7:c0:8e:
         82:cb:af:03:f1:42:79:49:7b:4f:39:23:e6:e4:7b:d3:24:ec:
         da:fd:3f:0e:6c:5e:3d:7a:20:7d:c4:ea:1e:32:b0:0a:4b:74:
         a0:0a:ac:8c:3a:76:e4:6d:be:a6:ea:cd:7b:b2:d0:67:a9:6e:
         39:7c:a8:14:4b:cf:07:0d:fc:b1:82:2e:48:b4:90:01:38:7c:
         b6:6e:5a:88:55:77:79:aa:05:6d:aa:2a:a3:56:17:e3:5a:89:
         80:db:12:79:49:a4:f6:0d:0d:fb:96:18:96:31:51:98:79:cf:
         35:50:62:08:3e:77:8f:b5:b1:f4:56:95:c5:08:02:57:24:be:
         5a:e8:d4:ee:b2:40:f8:9d:ec:35:21:67:93:af:94:6b:f2:8a:
         19:cb:0c:3f:11:dd:a1:b6:0e:c0:4f:60:c3:f1:f7:26:fe:1e:
         c2:36:8c:aa:99:91:db:fc:11:43:0e:bc:a5:35:dd:0b:c0:0b:
         aa:b5:bb:87:e0:d4:0e:f2:c7:19:ef:5f:c6:60:53:19:e2:a1:
         e6:77:8a:6b:a6:00:81:6c:bf:ce:c3:69:4d:ca:58:64:ef:14:
         3d:9a:f1:b5:f1:ab:c1:db:d7:7b:8b:ac:f9:a4:f7:98:f9:1d:
         fc:e3:fe:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:21:38 2026 by rpki-client