Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/34352e3136332e32382e302f32342d3234203d3e20323637383431.roa
File:                     34352e3136332e32382e302f32342d3234203d3e20323637383431.roa (raw, json)
Hash identifier:          VTvE+kiuTX6WL7zpYBfLq9fV8FttG+7OJuJkG7vS4fc=
Subject key identifier:   C0:B9:15:22:21:38:C5:DD:CC:D6:06:39:55:EE:C8:A0:9E:63:E0:11
Certificate issuer:       /CN=B83212ED5241F8A76D1955EDB09C991FF777815E
Certificate serial:       63FF36BABDD82EC3B062CF808B91C8E0EF85B0D7
Authority key identifier: B8:32:12:ED:52:41:F8:A7:6D:19:55:ED:B0:9C:99:1F:F7:77:81:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B83212ED5241F8A76D1955EDB09C991FF777815E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/34352e3136332e32382e302f32342d3234203d3e20323637383431.roa
Signing time:             Tue 06 Jan 2026 20:48:30 +0000
ROA not before:           Tue 06 Jan 2026 20:43:30 +0000
ROA not after:            Tue 05 Jan 2027 20:48:30 +0000
asID:                     267841
IP address blocks:        45.163.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/B83212ED5241F8A76D1955EDB09C991FF777815E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/B83212ED5241F8A76D1955EDB09C991FF777815E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B83212ED5241F8A76D1955EDB09C991FF777815E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ff:36:ba:bd:d8:2e:c3:b0:62:cf:80:8b:91:c8:e0:ef:85:b0:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B83212ED5241F8A76D1955EDB09C991FF777815E
        Validity
            Not Before: Jan  6 20:43:30 2026 GMT
            Not After : Jan  5 20:48:30 2027 GMT
        Subject: CN=C0B915222138C5DDCCD6063955EEC8A09E63E011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f0:c2:23:41:fc:18:35:52:83:66:da:9c:bd:
                    f9:31:ea:8c:9f:f6:32:19:23:d2:7c:50:3d:3f:e3:
                    1e:84:2b:c7:cd:0e:56:2f:65:fd:8a:d9:10:d3:bb:
                    09:e0:40:90:32:23:d5:fc:12:eb:5f:61:83:a5:25:
                    8b:40:d5:cb:ba:7c:ad:29:ab:02:3d:d3:3c:d0:aa:
                    0b:a3:93:b1:5b:cb:9f:40:54:92:af:37:8e:bd:06:
                    a1:87:47:0d:f1:f3:05:da:13:e2:6d:7c:2f:0f:26:
                    2f:29:8a:40:99:33:36:17:c5:cf:45:35:68:97:d5:
                    e0:26:87:bd:ac:ab:89:d3:5f:79:7c:bd:a1:e3:96:
                    15:8b:1e:ae:73:05:f3:a9:74:9a:a5:a3:c6:2c:77:
                    b4:95:53:f6:b2:ce:b8:9d:87:bd:29:c8:4c:a8:c1:
                    d7:a3:bc:08:fc:cc:f3:0a:bd:72:19:c3:86:2b:a5:
                    7b:a0:24:a1:f8:4d:ef:04:6d:44:3e:2c:08:ce:45:
                    27:a9:43:41:37:69:41:ba:91:42:85:80:57:03:d5:
                    69:6a:7b:81:84:e5:d3:ad:07:2a:5e:be:1a:93:79:
                    c1:1c:bb:75:4a:ea:e0:c3:fb:0e:ec:6b:2c:39:b6:
                    0a:0b:95:29:38:c4:1a:13:0b:3a:b2:e8:4e:96:ac:
                    72:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B9:15:22:21:38:C5:DD:CC:D6:06:39:55:EE:C8:A0:9E:63:E0:11
            X509v3 Authority Key Identifier:
                keyid:B8:32:12:ED:52:41:F8:A7:6D:19:55:ED:B0:9C:99:1F:F7:77:81:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/B83212ED5241F8A76D1955EDB09C991FF777815E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B83212ED5241F8A76D1955EDB09C991FF777815E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/34352e3136332e32382e302f32342d3234203d3e20323637383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:65:72:20:e8:d7:50:bb:df:18:bc:67:aa:43:c2:b8:16:aa:
         f9:7b:8e:43:7d:aa:ea:48:89:f3:a0:88:0b:f2:ae:a0:ce:93:
         d4:21:73:f2:ed:aa:8e:7e:eb:a6:3d:9b:ab:a5:7b:2c:e4:d0:
         1f:f6:27:c5:99:ac:15:a4:0a:fa:e8:0f:78:56:77:7c:9f:ca:
         b5:c7:58:36:30:52:e6:33:3e:01:fe:81:e2:19:26:9b:a8:4f:
         06:04:f3:ca:a2:69:25:30:4b:15:a2:cc:af:83:84:5d:5d:e7:
         ea:bb:96:8a:61:e7:dc:6c:c5:ab:86:5e:c6:1a:33:a4:ca:49:
         f0:52:2a:de:ff:25:54:74:d8:7e:9f:8d:15:a9:96:e9:72:6e:
         3b:4b:f7:d5:24:23:05:46:d5:02:7c:bd:41:15:de:d0:f7:73:
         ef:ec:63:d2:90:50:b6:e7:7f:0f:70:03:4f:ea:97:c7:b1:9a:
         9b:5c:6c:ae:27:81:7f:29:e3:38:d1:c1:1c:3f:90:13:d2:49:
         b9:51:c4:5f:5a:a7:70:38:7b:1c:32:86:d1:97:87:99:9a:f6:
         43:d3:f2:31:7d:cb:69:75:ec:44:66:21:2c:9e:91:5d:f9:ac:
         a7:ca:ee:07:e0:3e:85:1d:37:04:69:3b:63:0e:f2:66:f1:44:
         88:5e:f5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:10:59 2026 by rpki-client