Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/34352e3138302e34352e302f32342d3234203d3e20323634363638.roa
File:                     34352e3138302e34352e302f32342d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          BR9ZoGBbK5pQW/RLqtCCKjiWbpmRdb9CSF6E8iJZoMA=
Subject key identifier:   88:04:0A:F6:CC:47:BD:C1:72:09:E5:D6:C0:9A:EF:F8:2A:9E:D9:32
Certificate issuer:       /CN=1D5CEF406A72433445147FEB34D82682345AF563
Certificate serial:       6EC31F89EFA3FE7F6F40E4CD190E7E5739662362
Authority key identifier: 1D:5C:EF:40:6A:72:43:34:45:14:7F:EB:34:D8:26:82:34:5A:F5:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D5CEF406A72433445147FEB34D82682345AF563.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/34352e3138302e34352e302f32342d3234203d3e20323634363638.roa
Signing time:             Tue 06 Jan 2026 19:07:16 +0000
ROA not before:           Tue 06 Jan 2026 19:02:16 +0000
ROA not after:            Tue 05 Jan 2027 19:07:16 +0000
asID:                     264668
IP address blocks:        45.180.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/1D5CEF406A72433445147FEB34D82682345AF563.crl
                          rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/1D5CEF406A72433445147FEB34D82682345AF563.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D5CEF406A72433445147FEB34D82682345AF563.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c3:1f:89:ef:a3:fe:7f:6f:40:e4:cd:19:0e:7e:57:39:66:23:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D5CEF406A72433445147FEB34D82682345AF563
        Validity
            Not Before: Jan  6 19:02:16 2026 GMT
            Not After : Jan  5 19:07:16 2027 GMT
        Subject: CN=88040AF6CC47BDC17209E5D6C09AEFF82A9ED932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:27:93:e8:95:b9:78:e9:2e:21:00:9b:46:e3:
                    87:de:fc:78:93:51:32:d4:97:9a:0f:5f:36:12:ad:
                    15:3b:72:c4:83:f3:7d:26:00:e2:21:38:90:33:ab:
                    6a:23:0f:eb:0e:d4:2f:51:9c:59:6c:f9:fc:7d:b3:
                    0d:a7:8c:67:9b:6d:6a:79:3c:80:1d:bd:31:6c:fe:
                    67:99:fb:79:dc:47:f9:68:64:9e:95:de:10:d8:9c:
                    63:0b:5a:2c:8f:c0:72:d8:66:27:89:4a:5f:22:79:
                    41:25:88:a1:c7:99:18:e2:8f:76:84:9a:5f:03:6c:
                    7d:e2:1c:85:5f:d2:56:7d:d0:89:b2:7e:87:9f:25:
                    8a:7d:cc:08:07:a0:cf:5c:e0:95:24:22:2a:57:07:
                    50:a1:1b:ef:be:e9:d2:79:c6:0d:4c:02:9f:ae:b1:
                    68:39:83:58:15:49:aa:df:4f:67:ee:79:1a:82:bb:
                    8a:85:aa:66:34:10:e2:8d:20:6f:3f:c3:a6:16:ec:
                    14:f0:a3:cc:6a:e9:b4:0e:c4:de:b5:d8:7c:f9:82:
                    2f:7c:86:fa:39:6c:52:f7:04:81:67:b2:60:aa:5f:
                    cf:d6:81:92:08:9f:72:c0:60:a4:2a:27:7f:fd:26:
                    c3:16:07:a5:7a:f6:2d:35:c9:a1:d9:cd:7a:e7:3b:
                    05:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:04:0A:F6:CC:47:BD:C1:72:09:E5:D6:C0:9A:EF:F8:2A:9E:D9:32
            X509v3 Authority Key Identifier:
                keyid:1D:5C:EF:40:6A:72:43:34:45:14:7F:EB:34:D8:26:82:34:5A:F5:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/1D5CEF406A72433445147FEB34D82682345AF563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D5CEF406A72433445147FEB34D82682345AF563.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/34352e3138302e34352e302f32342d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:f7:eb:e2:48:b5:5c:4d:f2:cf:06:4d:d2:13:97:42:44:57:
         f6:0f:36:b9:fe:60:7b:45:7f:d2:4d:50:2b:03:21:50:3d:bc:
         5e:ae:f0:83:dc:49:e9:5a:f3:de:a0:8e:2c:6d:02:54:d1:6a:
         92:5e:84:e6:ae:a6:22:27:d7:0c:31:15:be:92:7e:2e:47:0a:
         58:16:fa:2c:1a:93:11:63:e4:6b:98:a7:4d:d8:c9:e9:71:99:
         77:7b:9c:11:7c:c9:2d:8a:80:d1:f1:c6:dd:26:82:1d:1d:c2:
         c0:22:ca:9f:f9:2e:20:8a:0f:11:c8:a3:0d:59:04:6a:5d:cf:
         26:8d:2f:5e:a8:eb:7c:04:e5:d3:5d:1e:a9:e9:92:40:51:52:
         7b:df:fa:5b:7c:1a:83:05:3a:2c:04:3f:f6:47:14:ab:27:6a:
         a3:c7:7d:4f:44:5c:20:62:a4:86:fe:8e:ea:60:7e:f0:a2:28:
         d3:04:a8:ba:09:c9:67:2b:a1:46:f5:2a:96:2f:2d:e3:f0:20:
         58:d7:0c:02:0e:0f:12:82:25:49:ab:7b:82:cb:93:6b:46:eb:
         c3:4f:cd:cc:23:54:38:73:06:75:bf:59:c1:bd:c9:54:b5:d3:
         9b:ee:39:e9:ce:1e:19:a2:ae:b4:3c:8b:52:f9:b0:bb:76:b9:
         e9:c4:34:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:56:23 2026 by rpki-client