Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/34352e3138332e34302e302f32342d3234203d3e20323731393136.roa
File:                     34352e3138332e34302e302f32342d3234203d3e20323731393136.roa (raw, json)
Hash identifier:          OEt23f/RjDK0hKVdqnRgHUePuGbT9WLExqKq3pkSi2M=
Subject key identifier:   1F:BE:1F:7A:00:6B:28:0F:28:2A:86:DC:16:0D:B8:EC:92:08:C5:B5
Certificate issuer:       /CN=E45215C1ABF0099BEFF5D5807A415849759B9467
Certificate serial:       76E15D78EC45A18F87BEE6AB4F816BF5A725FD13
Authority key identifier: E4:52:15:C1:AB:F0:09:9B:EF:F5:D5:80:7A:41:58:49:75:9B:94:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/34352e3138332e34302e302f32342d3234203d3e20323731393136.roa
Signing time:             Thu 23 Jul 2026 14:10:00 +0000
ROA not before:           Thu 23 Jul 2026 14:05:00 +0000
ROA not after:            Thu 22 Jul 2027 14:10:00 +0000
asID:                     271916
IP address blocks:        45.183.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e1:5d:78:ec:45:a1:8f:87:be:e6:ab:4f:81:6b:f5:a7:25:fd:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E45215C1ABF0099BEFF5D5807A415849759B9467
        Validity
            Not Before: Jul 23 14:05:00 2026 GMT
            Not After : Jul 22 14:10:00 2027 GMT
        Subject: CN=1FBE1F7A006B280F282A86DC160DB8EC9208C5B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:87:e2:0d:ed:71:7b:26:72:15:a4:86:95:
                    cb:93:ec:63:f3:47:b3:e6:58:05:d3:da:25:d7:63:
                    ab:eb:8e:d0:f7:8d:2a:da:59:a3:f1:15:dd:58:16:
                    38:3a:3a:1b:1e:08:cc:c7:47:7b:46:79:81:aa:c4:
                    b0:08:96:44:c6:46:55:8d:f0:9d:38:a1:92:c8:40:
                    67:72:90:4e:99:26:0c:a8:fe:6a:f0:79:70:25:dd:
                    4d:b2:c9:10:a7:2e:21:d3:5e:c7:f5:5d:2f:6f:ea:
                    82:f6:61:f4:f2:7f:3b:de:cf:85:d2:15:2a:40:ec:
                    47:98:a1:e3:25:82:62:74:47:fd:61:47:6b:55:71:
                    d9:b1:86:a8:ad:4d:1b:2e:02:7d:77:84:d2:c5:bc:
                    b0:a2:f0:a0:c6:ec:58:d0:3c:fd:0e:f8:c4:24:c2:
                    3e:c9:09:4d:a3:c5:2f:9a:2f:90:28:d4:16:bc:a1:
                    eb:62:c7:47:2e:b9:74:60:9e:b1:18:5e:cb:85:dd:
                    81:41:08:94:ae:b1:3a:ff:84:1f:12:40:5c:5f:9d:
                    e0:8a:6c:28:73:db:02:0e:16:4f:4c:87:c1:e6:d1:
                    ab:57:f9:fd:5c:1d:6f:fc:76:f0:ec:0a:7f:48:5c:
                    48:2d:f8:02:83:43:8f:73:bf:85:0b:b1:72:1d:88:
                    e6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BE:1F:7A:00:6B:28:0F:28:2A:86:DC:16:0D:B8:EC:92:08:C5:B5
            X509v3 Authority Key Identifier:
                keyid:E4:52:15:C1:AB:F0:09:9B:EF:F5:D5:80:7A:41:58:49:75:9B:94:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/34352e3138332e34302e302f32342d3234203d3e20323731393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:8a:c5:85:87:71:9c:9b:f0:20:6f:f8:27:1c:36:1d:5f:0e:
         86:34:c4:b0:ef:11:7d:46:35:36:16:5f:69:14:8b:00:d7:59:
         75:a0:d2:27:ed:30:93:91:55:d6:49:37:e3:b9:e9:6f:fd:45:
         a1:06:5d:07:cb:30:74:26:cd:32:04:ab:08:74:a1:20:60:93:
         f3:23:f9:1f:d3:35:5d:91:25:e4:ec:b3:97:17:94:b5:3e:8c:
         59:41:c5:34:23:0a:03:ca:65:13:c5:76:5d:13:d5:c2:ea:8b:
         73:a2:7b:0a:7a:15:f6:be:c0:73:a7:cd:a0:01:ba:66:45:ae:
         4e:7e:b2:eb:4a:84:e1:27:5d:2b:21:3b:9e:c4:ec:a7:c1:74:
         a1:74:30:67:b1:61:75:cf:7c:82:9b:1c:16:97:86:56:4a:ff:
         cf:82:42:e6:4b:12:4a:f9:39:89:d9:00:cc:fd:f8:bb:81:9d:
         4b:58:3d:28:5f:1f:e2:84:bd:2b:71:57:72:fc:b7:49:96:1c:
         9f:8a:53:b7:a8:dc:3e:40:74:39:1c:1d:2e:e3:d4:18:e0:97:
         84:3a:b1:a2:14:a0:f1:28:f3:6b:73:00:0c:16:84:52:48:6a:
         24:77:61:35:a2:ab:49:9b:8a:ba:14:9f:1f:f2:fe:00:f5:5a:
         6e:60:9f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:22:38 2026 by rpki-client