Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14B0D2E9E63B0401B3DA49460C54C7F7C27C997D4DDFEBBDEB44507F5AB4C26B/0/34352e3137312e34382e302f32332d3234203d3e20323637373735.roa
File:                     34352e3137312e34382e302f32332d3234203d3e20323637373735.roa (raw, json)
Hash identifier:          k9WIPoUTsOVjalX6S1Oh+Xq4njXuFajTfqOAfoT/TxU=
Subject key identifier:   B9:1D:75:4B:0E:41:35:42:1C:C1:B0:63:89:9C:FA:19:0B:2E:8A:EA
Certificate issuer:       /CN=9BA0AE71B8F72C164479BAC088253D5E8C918F46
Certificate serial:       61ED0825B0C3A70FF5A56AE7F4A3C0A772CB8447
Authority key identifier: 9B:A0:AE:71:B8:F7:2C:16:44:79:BA:C0:88:25:3D:5E:8C:91:8F:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BA0AE71B8F72C164479BAC088253D5E8C918F46.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14B0D2E9E63B0401B3DA49460C54C7F7C27C997D4DDFEBBDEB44507F5AB4C26B/0/34352e3137312e34382e302f32332d3234203d3e20323637373735.roa
Signing time:             Tue 06 Jan 2026 19:41:02 +0000
ROA not before:           Tue 06 Jan 2026 19:36:02 +0000
ROA not after:            Tue 05 Jan 2027 19:41:02 +0000
asID:                     267775
IP address blocks:        45.171.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/14B0D2E9E63B0401B3DA49460C54C7F7C27C997D4DDFEBBDEB44507F5AB4C26B/0/9BA0AE71B8F72C164479BAC088253D5E8C918F46.crl
                          rsync://repository.lacnic.net/rpki/lacnic/14B0D2E9E63B0401B3DA49460C54C7F7C27C997D4DDFEBBDEB44507F5AB4C26B/0/9BA0AE71B8F72C164479BAC088253D5E8C918F46.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BA0AE71B8F72C164479BAC088253D5E8C918F46.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ed:08:25:b0:c3:a7:0f:f5:a5:6a:e7:f4:a3:c0:a7:72:cb:84:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BA0AE71B8F72C164479BAC088253D5E8C918F46
        Validity
            Not Before: Jan  6 19:36:02 2026 GMT
            Not After : Jan  5 19:41:02 2027 GMT
        Subject: CN=B91D754B0E4135421CC1B063899CFA190B2E8AEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:57:d1:06:0e:b2:45:ac:1d:85:31:a7:0b:
                    6d:6c:4d:0f:5c:38:09:9d:bd:8f:56:30:23:72:97:
                    3c:67:9e:97:c9:0e:74:55:b2:4d:b9:18:a2:59:95:
                    5c:d9:bc:0a:4d:f7:85:5e:a4:d0:79:e9:a4:dc:2a:
                    0d:6e:f9:67:eb:8c:bb:79:39:33:fe:4d:cb:b9:7c:
                    48:92:83:eb:28:87:a9:d3:db:59:86:27:e7:f1:ff:
                    9d:64:79:ae:3b:1c:1d:ec:89:77:f6:34:40:e9:8a:
                    49:d6:c1:4e:84:25:b3:b1:c8:99:64:5c:a2:0a:14:
                    6d:19:f2:89:7a:97:9f:81:21:8d:ef:45:15:39:cd:
                    2d:f9:e0:4e:5f:ed:01:92:8e:e0:03:f5:93:0f:fc:
                    62:a7:59:cb:18:24:83:9d:11:75:24:fc:5a:69:50:
                    c9:0e:aa:54:15:b0:26:01:6a:24:f0:62:99:eb:23:
                    fe:da:e8:b8:6c:cd:e8:93:64:9f:e7:20:ee:d4:24:
                    8e:fd:e1:e4:5c:53:38:ca:02:1d:84:c8:e1:7f:f8:
                    01:3b:9d:8d:e5:3f:33:1a:44:f0:a5:b2:ac:5d:24:
                    15:43:77:24:6a:bc:05:50:5d:b8:cb:3c:73:40:2f:
                    71:51:70:41:0f:ad:0f:d5:44:70:ff:09:c4:f5:72:
                    40:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1D:75:4B:0E:41:35:42:1C:C1:B0:63:89:9C:FA:19:0B:2E:8A:EA
            X509v3 Authority Key Identifier:
                keyid:9B:A0:AE:71:B8:F7:2C:16:44:79:BA:C0:88:25:3D:5E:8C:91:8F:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14B0D2E9E63B0401B3DA49460C54C7F7C27C997D4DDFEBBDEB44507F5AB4C26B/0/9BA0AE71B8F72C164479BAC088253D5E8C918F46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BA0AE71B8F72C164479BAC088253D5E8C918F46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14B0D2E9E63B0401B3DA49460C54C7F7C27C997D4DDFEBBDEB44507F5AB4C26B/0/34352e3137312e34382e302f32332d3234203d3e20323637373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:15:0d:86:aa:7a:1f:88:46:d4:5e:b6:ed:5a:ce:4f:8c:c3:
         6a:e6:7c:9b:6e:3c:45:2b:54:1a:f7:45:12:f8:3c:db:1f:16:
         c7:aa:2e:2e:31:6d:dd:e7:75:7b:03:e3:97:2c:c2:5d:df:53:
         64:eb:ba:ce:6e:b1:70:95:03:d6:75:1d:8a:82:d9:6b:86:5e:
         72:c5:ed:58:cd:f2:6f:4a:89:b9:ea:e7:b0:27:f0:22:ca:a9:
         37:63:2e:aa:8c:66:c8:62:4a:99:fb:32:6b:fd:0b:c5:54:e0:
         ae:fa:da:64:ba:d5:db:08:ed:21:6f:b9:a4:4b:16:83:04:f2:
         15:df:4c:0e:20:85:c8:c7:8d:a5:fc:64:6a:5e:96:2e:de:9e:
         c2:fd:b4:35:2e:cf:02:45:99:d7:b3:03:1d:65:2b:f9:22:48:
         b6:63:fe:d9:c9:61:66:f9:50:87:18:5d:75:37:b9:d9:02:6a:
         93:48:19:3a:37:ee:bc:8b:59:67:66:dd:17:b7:30:26:04:d7:
         4e:56:d1:b7:09:e8:00:89:fd:3e:17:d2:22:26:17:3d:f1:b8:
         fd:d8:93:39:29:79:2f:a0:6d:ba:67:b7:e5:b7:5e:f5:ed:15:
         bb:23:a3:46:b0:29:5b:a3:3e:96:46:f2:4f:a0:52:18:aa:b7:
         1d:ba:2a:32
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYe0IJbDDpw/1pWrn9KPAp3LLhEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJBMEFFNzFCOEY3MkMxNjQ0NzlCQUMwODgyNTNENUU4
QzkxOEY0NjAeFw0yNjAxMDYxOTM2MDJaFw0yNzAxMDUxOTQxMDJaMDMxMTAvBgNV
BAMTKEI5MUQ3NTRCMEU0MTM1NDIxQ0MxQjA2Mzg5OUNGQTE5MEIyRThBRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/FFfRBg6yRawdhTGnC21sTQ9c
OAmdvY9WMCNylzxnnpfJDnRVsk25GKJZlVzZvApN94VepNB56aTcKg1u+WfrjLt5
OTP+Tcu5fEiSg+soh6nT21mGJ+fx/51kea47HB3siXf2NEDpiknWwU6EJbOxyJlk
XKIKFG0Z8ol6l5+BIY3vRRU5zS354E5f7QGSjuAD9ZMP/GKnWcsYJIOdEXUk/Fpp
UMkOqlQVsCYBaiTwYpnrI/7a6LhszeiTZJ/nIO7UJI794eRcUzjKAh2EyOF/+AE7
nY3lPzMaRPClsqxdJBVDdyRqvAVQXbjLPHNAL3FRcEEPrQ/VRHD/CcT1ckD9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUuR11Sw5BNUIcwbBjiZz6GQsuiuowHwYDVR0j
BBgwFoAUm6Cucbj3LBZEebrAiCU9XoyRj0YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNEIwRDJFOUU2M0IwNDAxQjNEQTQ5NDYwQzU0QzdGN0My
N0M5OTdENERERkVCQkRFQjQ0NTA3RjVBQjRDMjZCLzAvOUJBMEFFNzFCOEY3MkMx
NjQ0NzlCQUMwODgyNTNENUU4QzkxOEY0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkEwQUU3MUI4RjcyQzE2NDQ3
OUJBQzA4ODI1M0Q1RThDOTE4RjQ2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTRCMEQyRTlFNjNCMDQwMUIzREE0OTQ2MEM1NEM3RjdDMjdDOTk3RDRE
REZFQkJERUI0NDUwN0Y1QUI0QzI2Qi8wLzM0MzUyZTMxMzczMTJlMzQzODJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYzNzM3MzczNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2rMDAN
BgkqhkiG9w0BAQsFAAOCAQEAaRUNhqp6H4hG1F627VrOT4zDauZ8m248RStUGvdF
Evg82x8Wx6ouLjFt3ed1ewPjlyzCXd9TZOu6zm6xcJUD1nUdioLZa4ZecsXtWM3y
b0qJuernsCfwIsqpN2MuqoxmyGJKmfsya/0LxVTgrvraZLrV2wjtIW+5pEsWgwTy
Fd9MDiCFyMeNpfxkal6WLt6ewv20NS7PAkWZ17MDHWUr+SJItmP+2clhZvlQhxhd
dTe52QJqk0gZOjfuvItZZ2bdF7cwJgTXTlbRtwnoAIn9PhfSIiYXPfG4/diTOSl5
L6Btume35bde9e0VuyOjRrApW6M+lkbyT6BSGKq3HboqMg==
-----END CERTIFICATE-----
Generated at Thu Feb 19 05:53:59 2026 by rpki-client