Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F6B4C822081716AA253674D30C39D2615CA734AD739047929B5E0D6D86D3D8B2/0/34352e3233362e32342e302f32322d3234203d3e20323636373838.roa
File:                     34352e3233362e32342e302f32322d3234203d3e20323636373838.roa (raw, json)
Hash identifier:          hQKryPtutGPcmg+yGHwaFd8k7UO0gOl60oEQHT8lTiM=
Subject key identifier:   93:D6:11:DF:48:3C:81:ED:B5:9A:D5:D3:15:7D:1E:11:FE:E1:30:F0
Certificate issuer:       /CN=5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544
Certificate serial:       1D3D42BB1DD084566579436E016FB91D5847BD3E
Authority key identifier: 54:87:D0:A2:3F:79:A8:9E:A9:EA:0D:2C:CE:18:AC:BD:D7:04:D5:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F6B4C822081716AA253674D30C39D2615CA734AD739047929B5E0D6D86D3D8B2/0/34352e3233362e32342e302f32322d3234203d3e20323636373838.roa
Signing time:             Mon 20 Jul 2026 16:10:51 +0000
ROA not before:           Mon 20 Jul 2026 16:05:51 +0000
ROA not after:            Mon 19 Jul 2027 16:10:51 +0000
asID:                     266788
IP address blocks:        45.236.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F6B4C822081716AA253674D30C39D2615CA734AD739047929B5E0D6D86D3D8B2/0/5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F6B4C822081716AA253674D30C39D2615CA734AD739047929B5E0D6D86D3D8B2/0/5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 03:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3d:42:bb:1d:d0:84:56:65:79:43:6e:01:6f:b9:1d:58:47:bd:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544
        Validity
            Not Before: Jul 20 16:05:51 2026 GMT
            Not After : Jul 19 16:10:51 2027 GMT
        Subject: CN=93D611DF483C81EDB59AD5D3157D1E11FEE130F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:53:ce:ee:72:e1:ed:76:ed:01:b5:fc:e7:b8:
                    6f:67:14:c2:47:00:76:41:64:0f:51:69:44:fe:d6:
                    2c:d3:4f:d9:07:49:c8:0e:d7:45:df:30:b0:68:9c:
                    d9:1d:98:0d:c7:c3:76:5a:06:80:b8:bd:4d:7c:52:
                    b3:6b:9c:91:89:b4:b9:39:15:45:63:50:54:c4:41:
                    a6:c5:b1:13:ae:86:a4:ea:84:d0:2c:9f:4c:26:e6:
                    68:b2:71:4c:bb:5b:44:33:e7:77:ec:5e:51:de:e7:
                    e8:d7:ae:25:09:44:0b:ce:70:0d:54:d8:ce:86:96:
                    c3:d7:4d:6e:c0:8d:4c:7c:88:86:9b:d6:8a:60:18:
                    48:3f:3c:6b:97:28:f9:70:8e:ba:0b:e2:b3:f4:4c:
                    6c:95:49:c9:88:dd:56:d0:f9:c9:b9:9a:0e:7f:94:
                    fd:66:10:4c:b7:0d:c5:b6:1a:07:db:77:be:38:42:
                    f7:f3:28:1e:14:0d:3f:94:6b:3a:2e:c9:31:9a:c2:
                    2d:d9:6b:ba:7c:a0:1b:73:3e:8f:cf:d5:20:56:3c:
                    0c:15:55:8c:d3:6c:bb:66:b2:ea:25:86:f3:a7:2c:
                    40:d2:ca:29:b6:22:29:aa:65:fe:1d:a8:b4:0d:9a:
                    8e:9e:4b:33:94:1d:db:f1:be:da:b6:6d:9d:9c:d2:
                    cf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D6:11:DF:48:3C:81:ED:B5:9A:D5:D3:15:7D:1E:11:FE:E1:30:F0
            X509v3 Authority Key Identifier:
                keyid:54:87:D0:A2:3F:79:A8:9E:A9:EA:0D:2C:CE:18:AC:BD:D7:04:D5:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F6B4C822081716AA253674D30C39D2615CA734AD739047929B5E0D6D86D3D8B2/0/5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5487D0A23F79A89EA9EA0D2CCE18ACBDD704D544.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F6B4C822081716AA253674D30C39D2615CA734AD739047929B5E0D6D86D3D8B2/0/34352e3233362e32342e302f32322d3234203d3e20323636373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:ad:13:51:29:6a:51:17:cb:a0:a3:42:62:51:e9:1e:bb:d7:
         1a:0a:f6:52:4f:b4:30:8a:5e:c5:e6:18:ab:ac:2d:33:18:02:
         ee:5b:21:43:98:82:d9:27:88:a1:7d:80:c6:88:b1:5a:9e:01:
         39:90:fc:97:22:fe:e7:f0:5a:8f:a1:09:7f:f8:1a:e4:af:14:
         be:42:82:b0:c0:83:8b:1e:be:5d:d1:7a:17:32:35:be:9e:9a:
         16:6b:b3:6a:9e:7c:83:a3:e3:0f:45:47:0b:27:18:66:6b:1e:
         20:a6:85:ff:2b:ae:17:7d:3e:ae:ff:f1:90:f8:f6:d7:7b:05:
         74:3c:f5:59:3f:97:ab:93:2a:d4:d5:e8:8b:cc:4c:cd:bd:a3:
         b0:d6:1d:1a:63:7a:d3:4e:c8:f5:6d:68:2a:ee:4e:bf:10:1c:
         2f:7a:9c:88:83:f9:aa:83:a4:49:b3:aa:3b:29:cf:78:02:83:
         41:ad:6b:19:b9:68:ec:7f:a8:50:66:dc:9a:cf:f0:81:c8:e7:
         d5:40:88:2c:47:f5:40:38:ab:38:dc:f9:35:07:2e:8a:ba:a8:
         19:49:0f:b4:8b:dc:6f:18:4d:0d:0d:f0:bd:05:fa:f9:c8:9f:
         8a:d8:f5:a3:90:54:28:70:3d:dc:de:bc:00:ed:a2:9e:7c:61:
         9e:c3:a1:d5
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHT1Cux3QhFZleUNuAW+5HVhHvT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ4N0QwQTIzRjc5QTg5RUE5RUEwRDJDQ0UxOEFDQkRE
NzA0RDU0NDAeFw0yNjA3MjAxNjA1NTFaFw0yNzA3MTkxNjEwNTFaMDMxMTAvBgNV
BAMTKDkzRDYxMURGNDgzQzgxRURCNTlBRDVEMzE1N0QxRTExRkVFMTMwRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcU87ucuHtdu0BtfznuG9nFMJH
AHZBZA9RaUT+1izTT9kHScgO10XfMLBonNkdmA3Hw3ZaBoC4vU18UrNrnJGJtLk5
FUVjUFTEQabFsROuhqTqhNAsn0wm5miycUy7W0Qz53fsXlHe5+jXriUJRAvOcA1U
2M6GlsPXTW7AjUx8iIab1opgGEg/PGuXKPlwjroL4rP0TGyVScmI3VbQ+cm5mg5/
lP1mEEy3DcW2Ggfbd744QvfzKB4UDT+UazouyTGawi3Za7p8oBtzPo/P1SBWPAwV
VYzTbLtmsuolhvOnLEDSyim2IimqZf4dqLQNmo6eSzOUHdvxvtq2bZ2c0s8HAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUk9YR30g8ge21mtXTFX0eEf7hMPAwHwYDVR0j
BBgwFoAUVIfQoj95qJ6p6g0szhisvdcE1UQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNkI0QzgyMjA4MTcxNkFBMjUzNjc0RDMwQzM5RDI2MTVD
QTczNEFENzM5MDQ3OTI5QjVFMEQ2RDg2RDNEOEIyLzAvNTQ4N0QwQTIzRjc5QTg5
RUE5RUEwRDJDQ0UxOEFDQkRENzA0RDU0NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NDg3RDBBMjNGNzlBODlFQTlF
QTBEMkNDRTE4QUNCREQ3MDRENTQ0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjZCNEM4MjIwODE3MTZBQTI1MzY3NEQzMEMzOUQyNjE1Q0E3MzRBRDcz
OTA0NzkyOUI1RTBENkQ4NkQzRDhCMi8wLzM0MzUyZTMyMzMzNjJlMzIzNDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM3MzgzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3sGDAN
BgkqhkiG9w0BAQsFAAOCAQEAN60TUSlqURfLoKNCYlHpHrvXGgr2Uk+0MIpexeYY
q6wtMxgC7lshQ5iC2SeIoX2AxoixWp4BOZD8lyL+5/Baj6EJf/ga5K8UvkKCsMCD
ix6+XdF6FzI1vp6aFmuzap58g6PjD0VHCycYZmseIKaF/yuuF30+rv/xkPj213sF
dDz1WT+Xq5Mq1NXoi8xMzb2jsNYdGmN6007I9W1oKu5OvxAcL3qciIP5qoOkSbOq
OynPeAKDQa1rGblo7H+oUGbcms/wgcjn1UCILEf1QDirONz5NQcuirqoGUkPtIvc
bxhNDQ3wvQX6+cifitj1o5BUKHA93N68AO2innxhnsOh1Q==
-----END CERTIFICATE-----
Generated at Sat Jul 25 04:41:03 2026 by rpki-client