Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/34352e3138322e3139302e302f32332d3233203d3e20323731393136.roa
File:                     34352e3138322e3139302e302f32332d3233203d3e20323731393136.roa (raw, json)
Hash identifier:          rUoE+1TKc2D8UG6wa/2Pkf31R000Fy+jsElb9Hx/Iks=
Subject key identifier:   D7:19:67:5D:4A:2F:C7:F2:C6:C5:85:31:F7:34:E4:73:43:1D:1A:CC
Certificate issuer:       /CN=E45215C1ABF0099BEFF5D5807A415849759B9467
Certificate serial:       224AC2880EEA53F22E5046D673A803AD3B761B36
Authority key identifier: E4:52:15:C1:AB:F0:09:9B:EF:F5:D5:80:7A:41:58:49:75:9B:94:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/34352e3138322e3139302e302f32332d3233203d3e20323731393136.roa
Signing time:             Thu 23 Jul 2026 14:10:00 +0000
ROA not before:           Thu 23 Jul 2026 14:05:00 +0000
ROA not after:            Thu 22 Jul 2027 14:10:00 +0000
asID:                     271916
IP address blocks:        45.182.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4a:c2:88:0e:ea:53:f2:2e:50:46:d6:73:a8:03:ad:3b:76:1b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E45215C1ABF0099BEFF5D5807A415849759B9467
        Validity
            Not Before: Jul 23 14:05:00 2026 GMT
            Not After : Jul 22 14:10:00 2027 GMT
        Subject: CN=D719675D4A2FC7F2C6C58531F734E473431D1ACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0d:f7:be:5b:f9:fc:12:6c:ae:b0:74:2c:9e:
                    83:7f:2b:0d:7c:68:d3:b1:8b:42:58:3d:c8:f2:9c:
                    83:6d:01:54:a2:75:f0:7d:2b:ad:cb:73:47:d2:42:
                    80:09:7b:97:12:eb:0a:e1:d9:ef:5c:b4:f3:0b:4a:
                    78:61:79:a4:57:0c:f0:cf:b2:06:8b:9f:f8:ce:d0:
                    ba:05:4d:63:b0:2c:63:31:e6:0b:60:d8:5d:c3:d0:
                    c0:c3:3e:2d:93:d2:0e:f8:8f:f0:7c:90:91:b8:85:
                    0f:25:ff:c2:10:f4:0e:18:35:62:0c:7b:86:c6:0c:
                    5f:ab:0c:ca:80:0d:42:4e:eb:32:ab:40:68:e3:0f:
                    7b:7c:2c:9e:a4:72:c7:b9:a2:3e:f6:90:39:de:48:
                    f1:a1:bf:35:fa:56:bb:20:8a:f6:02:56:f7:02:fe:
                    c4:62:f5:f4:c5:ba:4a:6a:93:cc:62:f4:96:3c:c1:
                    3a:c7:a6:7f:83:c6:6b:84:09:60:78:d8:1d:a2:cc:
                    ff:0e:82:36:55:9d:25:a7:4a:ea:58:ac:08:9c:74:
                    ae:98:73:3d:1c:4e:89:0e:75:41:18:69:a5:53:00:
                    f4:99:31:e5:53:a8:eb:01:04:8c:7d:95:27:1b:e3:
                    17:9a:9b:6e:c7:ee:ca:fb:97:b2:b0:22:dc:f2:d1:
                    00:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:19:67:5D:4A:2F:C7:F2:C6:C5:85:31:F7:34:E4:73:43:1D:1A:CC
            X509v3 Authority Key Identifier:
                keyid:E4:52:15:C1:AB:F0:09:9B:EF:F5:D5:80:7A:41:58:49:75:9B:94:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/34352e3138322e3139302e302f32332d3233203d3e20323731393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:77:82:f4:04:b7:87:10:77:99:0c:a6:5d:91:cf:cb:23:ae:
         70:55:44:cf:6b:18:b9:d0:48:de:1c:61:c0:15:36:2b:45:24:
         27:2b:4c:7a:0d:f3:d2:66:47:eb:9f:e1:31:95:79:ca:99:c1:
         cf:77:f9:6c:5f:40:5d:69:eb:4f:b2:36:d9:77:1d:70:21:f1:
         46:2c:8d:52:21:73:51:8f:23:e8:09:25:11:26:38:c8:85:4f:
         37:e6:90:dc:14:6a:ea:bb:c0:02:ad:ea:81:09:07:59:32:30:
         1a:38:f3:1b:44:05:d0:b0:f4:81:fd:a2:51:6f:1a:2a:bc:d1:
         5c:80:a2:d1:a0:13:d6:03:7f:a6:5d:c3:a8:41:35:45:bb:33:
         c0:6c:87:39:ab:37:a3:d2:b8:b7:55:db:10:d3:35:67:87:f6:
         d3:99:83:b7:ee:45:2a:f2:26:9c:32:b3:37:46:1a:0b:a0:07:
         71:73:93:07:d8:56:5e:f9:a8:56:b5:dd:22:78:1c:3a:b4:80:
         ad:7e:38:65:68:41:8f:29:c9:3e:d6:53:04:fb:21:62:61:b8:
         9f:dd:a3:51:65:70:28:23:27:29:7e:b1:13:0d:9b:67:41:ab:
         d9:39:4e:bf:ab:de:1c:bf:0a:ac:60:e1:c7:e7:9d:54:21:7c:
         c2:cc:50:8d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIkrCiA7qU/IuUEbWc6gDrTt2GzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ1MjE1QzFBQkYwMDk5QkVGRjVENTgwN0E0MTU4NDk3
NTlCOTQ2NzAeFw0yNjA3MjMxNDA1MDBaFw0yNzA3MjIxNDEwMDBaMDMxMTAvBgNV
BAMTKEQ3MTk2NzVENEEyRkM3RjJDNkM1ODUzMUY3MzRFNDczNDMxRDFBQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrDfe+W/n8EmyusHQsnoN/Kw18
aNOxi0JYPcjynINtAVSidfB9K63Lc0fSQoAJe5cS6wrh2e9ctPMLSnhheaRXDPDP
sgaLn/jO0LoFTWOwLGMx5gtg2F3D0MDDPi2T0g74j/B8kJG4hQ8l/8IQ9A4YNWIM
e4bGDF+rDMqADUJO6zKrQGjjD3t8LJ6kcse5oj72kDneSPGhvzX6VrsgivYCVvcC
/sRi9fTFukpqk8xi9JY8wTrHpn+DxmuECWB42B2izP8OgjZVnSWnSupYrAicdK6Y
cz0cTokOdUEYaaVTAPSZMeVTqOsBBIx9lScb4xeam27H7sr7l7KwItzy0QAvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU1xlnXUovx/LGxYUx9zTkc0MdGswwHwYDVR0j
BBgwFoAU5FIVwavwCZvv9dWAekFYSXWblGcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMEJBQjRGREM0OUI3REZFMUQ4OUFDQjQ5RjhDOEE5MjI1
RkI2NDVBRkJGNkEwMEQ4MzJEQzlEQzNGMzlCMjUzLzAvRTQ1MjE1QzFBQkYwMDk5
QkVGRjVENTgwN0E0MTU4NDk3NTlCOTQ2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNDUyMTVDMUFCRjAwOTlCRUZG
NUQ1ODA3QTQxNTg0OTc1OUI5NDY3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjBCQUI0RkRDNDlCN0RGRTFEODlBQ0I0OUY4QzhBOTIyNUZCNjQ1QUZC
RjZBMDBEODMyREM5REMzRjM5QjI1My8wLzM0MzUyZTMxMzgzMjJlMzEzOTMwMmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMxMzkzMTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLba+
MA0GCSqGSIb3DQEBCwUAA4IBAQCtd4L0BLeHEHeZDKZdkc/LI65wVUTPaxi50Eje
HGHAFTYrRSQnK0x6DfPSZkfrn+ExlXnKmcHPd/lsX0BdaetPsjbZdx1wIfFGLI1S
IXNRjyPoCSURJjjIhU835pDcFGrqu8ACreqBCQdZMjAaOPMbRAXQsPSB/aJRbxoq
vNFcgKLRoBPWA3+mXcOoQTVFuzPAbIc5qzej0ri3VdsQ0zVnh/bTmYO37kUq8iac
MrM3RhoLoAdxc5MH2FZe+ahWtd0ieBw6tICtfjhlaEGPKck+1lME+yFiYbif3aNR
ZXAoIycpfrETDZtnQavZOU6/q94cvwqsYOHH551UIXzCzFCN
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:08:56 2026 by rpki-client