Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6C9AD908600C598711EB9767A285533C47FC8CE42B64E3A0EC137491441912/0/34352e3233352e33362e302f32322d3234203d3e20323636373739.roa
File:                     34352e3233352e33362e302f32322d3234203d3e20323636373739.roa (raw, json)
Hash identifier:          iI3lGqxjn+ld+dTymLmBKFDqXIm7rFxPFKADrVZpWbo=
Subject key identifier:   73:0A:CF:58:5B:9E:38:16:48:FD:6E:37:8F:2D:B8:74:7C:48:F9:A1
Certificate issuer:       /CN=FB6B536E5AC0568F18F52C4985E67BCFBB7AEE72
Certificate serial:       11F2E4A4376E9A37EF5FE0BBEE6ED65EF435B266
Authority key identifier: FB:6B:53:6E:5A:C0:56:8F:18:F5:2C:49:85:E6:7B:CF:BB:7A:EE:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB6B536E5AC0568F18F52C4985E67BCFBB7AEE72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6C9AD908600C598711EB9767A285533C47FC8CE42B64E3A0EC137491441912/0/34352e3233352e33362e302f32322d3234203d3e20323636373739.roa
Signing time:             Wed 06 May 2026 13:30:00 +0000
ROA not before:           Wed 06 May 2026 13:25:00 +0000
ROA not after:            Wed 05 May 2027 13:30:00 +0000
asID:                     266779
IP address blocks:        45.235.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6C9AD908600C598711EB9767A285533C47FC8CE42B64E3A0EC137491441912/0/FB6B536E5AC0568F18F52C4985E67BCFBB7AEE72.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6C9AD908600C598711EB9767A285533C47FC8CE42B64E3A0EC137491441912/0/FB6B536E5AC0568F18F52C4985E67BCFBB7AEE72.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB6B536E5AC0568F18F52C4985E67BCFBB7AEE72.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 07:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f2:e4:a4:37:6e:9a:37:ef:5f:e0:bb:ee:6e:d6:5e:f4:35:b2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB6B536E5AC0568F18F52C4985E67BCFBB7AEE72
        Validity
            Not Before: May  6 13:25:00 2026 GMT
            Not After : May  5 13:30:00 2027 GMT
        Subject: CN=730ACF585B9E381648FD6E378F2DB8747C48F9A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:91:0d:2d:ff:98:cc:be:24:1b:c4:38:2d:
                    a3:ac:d1:15:18:db:08:3e:67:00:cb:c2:8e:cb:34:
                    9e:f5:8c:49:98:95:39:1b:0b:82:2e:ad:92:82:06:
                    fc:69:7f:52:dd:08:38:ea:d4:14:3d:18:b4:49:1b:
                    a5:ef:ff:2a:50:c3:49:80:f1:c4:f2:60:7e:f1:78:
                    55:f8:7d:82:bd:56:80:02:ae:d7:8f:22:f3:c9:04:
                    b1:9d:b0:e5:cb:ce:e3:0e:ac:f2:a1:12:b6:ea:79:
                    07:82:d3:9a:be:fc:cf:16:f9:46:84:34:0d:1b:9c:
                    e6:a2:34:3b:20:45:cf:b3:84:15:d7:5a:30:82:6e:
                    87:5c:79:11:96:20:c8:19:92:0e:b7:74:81:70:f3:
                    4a:42:58:85:57:9a:3b:19:88:91:38:29:18:a4:69:
                    5e:eb:bf:30:a3:23:0a:b0:0d:a8:25:c7:a9:6c:22:
                    59:43:79:87:f1:48:ad:f0:1b:1d:70:a6:64:42:45:
                    c5:54:7e:f1:86:69:eb:90:44:0e:db:79:c8:78:c6:
                    67:dd:16:f4:ab:e4:1c:04:59:6d:ea:f2:00:2e:b6:
                    4a:91:28:3d:15:31:2f:b3:5e:6d:64:a9:70:eb:42:
                    6e:4b:c5:53:91:11:c0:89:1d:39:54:70:ac:0e:fc:
                    df:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0A:CF:58:5B:9E:38:16:48:FD:6E:37:8F:2D:B8:74:7C:48:F9:A1
            X509v3 Authority Key Identifier:
                keyid:FB:6B:53:6E:5A:C0:56:8F:18:F5:2C:49:85:E6:7B:CF:BB:7A:EE:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6C9AD908600C598711EB9767A285533C47FC8CE42B64E3A0EC137491441912/0/FB6B536E5AC0568F18F52C4985E67BCFBB7AEE72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB6B536E5AC0568F18F52C4985E67BCFBB7AEE72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6C9AD908600C598711EB9767A285533C47FC8CE42B64E3A0EC137491441912/0/34352e3233352e33362e302f32322d3234203d3e20323636373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:3a:d0:d6:ac:90:cc:df:d0:5a:3f:17:e0:ae:f8:e7:8d:66:
         35:2b:bd:85:64:b9:72:38:ff:b2:2a:ff:5c:f6:ae:62:3a:16:
         9c:97:72:85:ee:5a:02:81:51:30:07:ea:d8:e1:93:af:5e:cd:
         91:0c:a1:4f:f3:27:c3:44:55:88:32:e4:e3:e6:70:c5:dd:ee:
         93:02:8f:55:47:b6:74:0e:b9:dc:02:af:4f:75:5e:2c:44:69:
         5d:51:43:70:7f:88:1c:57:63:16:b6:41:7e:84:c0:73:6e:8e:
         12:f0:c7:29:7e:41:c5:85:4e:40:54:86:d3:09:64:1f:57:03:
         89:c3:d9:f7:d4:57:5e:c4:ab:65:81:7f:31:47:68:11:1d:6c:
         d5:e0:fc:d8:6d:8b:d6:1b:3e:48:7c:24:40:cd:14:2a:fa:11:
         7a:51:9b:df:13:f9:99:f7:f5:8c:0d:7e:72:44:c6:d3:03:8c:
         0b:dc:ee:69:b0:fc:e6:69:f0:e6:ae:81:0b:16:b7:c6:01:4d:
         32:ef:08:5b:26:94:ae:13:08:e9:53:dc:ac:56:13:16:be:41:
         ee:7f:03:3c:01:a8:56:2d:37:0a:23:ad:5d:6a:b1:e5:b9:d5:
         f7:d6:df:28:d0:aa:26:59:e2:c9:05:cd:02:9a:7c:96:52:99:
         7b:66:be:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:26:26 2026 by rpki-client