Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/34352e3137312e3136342e302f32322d3234203d3e20323732313431.roa
File:                     34352e3137312e3136342e302f32322d3234203d3e20323732313431.roa (raw, json)
Hash identifier:          /AqLKqFsPGQwuL5KIHWvhQnLOHV3FLHGnsUgihxA4+U=
Subject key identifier:   E8:B2:E9:83:78:CD:87:26:84:D3:F9:A4:7D:C5:73:A3:9B:87:79:77
Certificate issuer:       /CN=A6E3E992F10C16F74B23F741B96CFA7F84656F28
Certificate serial:       539C646ADAAB184FFB14FCD031243CED2F2CB8F1
Authority key identifier: A6:E3:E9:92:F1:0C:16:F7:4B:23:F7:41:B9:6C:FA:7F:84:65:6F:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/34352e3137312e3136342e302f32322d3234203d3e20323732313431.roa
Signing time:             Sat 10 Jan 2026 14:59:45 +0000
ROA not before:           Sat 10 Jan 2026 14:54:45 +0000
ROA not after:            Sat 09 Jan 2027 14:59:45 +0000
asID:                     272141
IP address blocks:        45.171.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9c:64:6a:da:ab:18:4f:fb:14:fc:d0:31:24:3c:ed:2f:2c:b8:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E3E992F10C16F74B23F741B96CFA7F84656F28
        Validity
            Not Before: Jan 10 14:54:45 2026 GMT
            Not After : Jan  9 14:59:45 2027 GMT
        Subject: CN=E8B2E98378CD872684D3F9A47DC573A39B877977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6f:80:90:de:8b:85:a0:ef:f8:10:34:00:2a:
                    d1:50:78:b5:ba:45:e4:71:7c:bc:c0:e6:52:5b:bc:
                    10:18:98:7e:da:d3:eb:d0:d6:d9:9e:2c:55:e1:72:
                    fd:1f:0f:21:9c:e1:b3:48:59:41:98:74:2b:50:f9:
                    a9:be:80:b6:35:47:cc:16:ea:9a:7a:01:c4:1d:34:
                    d6:cb:91:54:1e:93:de:33:4e:db:12:67:93:57:0b:
                    fb:1f:b8:9f:38:58:32:20:29:0e:78:44:28:44:e6:
                    56:4a:de:34:c7:22:64:e2:ab:04:fd:85:e6:86:e2:
                    e8:77:f8:0f:72:12:62:15:da:d8:1f:60:74:f8:19:
                    00:41:36:87:8c:a7:fd:0c:03:47:d1:be:2e:19:47:
                    89:c2:f3:0f:94:b8:1d:cb:1d:8a:f0:75:c6:56:92:
                    d5:38:53:27:04:6f:9a:e4:6d:a0:c6:ca:be:cb:39:
                    5a:9a:25:6d:9e:cb:be:68:c7:ab:7b:ff:4a:5c:9b:
                    6d:21:53:5f:5f:43:36:90:85:71:12:7f:73:c4:27:
                    28:1d:a2:f3:dc:00:e6:69:11:72:d0:32:9d:91:e3:
                    7f:72:6e:5f:38:cd:a2:62:23:8d:fa:88:3c:0e:e9:
                    cd:b9:31:ba:33:fd:cb:d5:5c:d7:f8:07:52:91:02:
                    5c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B2:E9:83:78:CD:87:26:84:D3:F9:A4:7D:C5:73:A3:9B:87:79:77
            X509v3 Authority Key Identifier:
                keyid:A6:E3:E9:92:F1:0C:16:F7:4B:23:F7:41:B9:6C:FA:7F:84:65:6F:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/34352e3137312e3136342e302f32322d3234203d3e20323732313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:57:41:20:cb:dd:19:70:d5:46:fd:1f:c9:c4:f7:2b:d3:23:
         c6:b3:54:6a:0b:ac:fd:8b:41:72:b7:3a:c3:9b:60:3c:0b:d2:
         f4:96:5f:37:20:40:08:68:af:70:55:3b:ce:c4:1d:b8:74:98:
         30:e2:c6:df:0e:8f:b9:30:f9:70:7a:e5:1d:73:d8:41:de:d3:
         c6:ef:1e:c1:8b:aa:e0:74:51:b6:46:ad:19:a9:3c:6d:33:ad:
         c5:0a:4b:77:40:31:ff:71:c0:fc:d1:d0:86:1c:20:df:17:d3:
         da:95:9d:8f:a5:a5:8e:82:c4:05:fa:f8:84:1d:9b:63:79:18:
         f1:4b:11:9e:7a:8b:13:83:c2:dc:7c:18:53:ed:ba:66:30:5e:
         7b:61:90:37:b2:78:9d:2e:3e:9b:6f:39:b8:26:71:5b:dd:9b:
         c9:73:fe:a8:50:bc:33:89:01:03:e7:2e:a3:7e:32:22:c0:38:
         9c:2b:fd:cd:0a:19:ca:b9:a2:bf:9d:b9:3b:58:65:bf:f6:c6:
         a3:bb:e5:51:84:52:66:ea:2a:2a:45:5d:e4:22:9e:c9:08:00:
         17:79:7f:05:40:d2:0e:46:a3:f6:e4:7f:34:e9:97:fa:76:f3:
         3e:9c:b9:fb:09:70:20:e6:8e:9e:6b:67:94:9f:9c:f4:7b:7e:
         90:6e:31:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:40:24 2026 by rpki-client