Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36342e302f32332d3233203d3e20323730313433.roa
File:                     34352e372e36342e302f32332d3233203d3e20323730313433.roa (raw, json)
Hash identifier:          G0bEgpeGA+w4+TSdG2s26z1Km4idyjSPspgmojE0coE=
Subject key identifier:   21:54:30:DC:47:80:50:A5:43:70:23:45:37:6A:F8:21:88:D7:6B:AB
Certificate issuer:       /CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
Certificate serial:       7FE6C41161F3496ECF705919BF919EECEEAE68FD
Authority key identifier: 3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36342e302f32332d3233203d3e20323730313433.roa
Signing time:             Tue 06 Jan 2026 19:38:54 +0000
ROA not before:           Tue 06 Jan 2026 19:33:54 +0000
ROA not after:            Tue 05 Jan 2027 19:38:54 +0000
asID:                     270143
IP address blocks:        45.7.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 05:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e6:c4:11:61:f3:49:6e:cf:70:59:19:bf:91:9e:ec:ee:ae:68:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
        Validity
            Not Before: Jan  6 19:33:54 2026 GMT
            Not After : Jan  5 19:38:54 2027 GMT
        Subject: CN=215430DC478050A543702345376AF82188D76BAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c7:a4:de:ef:8e:42:ec:d2:de:02:23:b5:7c:
                    84:cb:59:d6:90:f0:d1:73:0e:83:1f:7c:6d:fd:1e:
                    be:c6:bb:5d:27:c3:ac:c4:bf:74:f9:c0:96:4f:d5:
                    9f:38:62:f1:14:5f:2c:82:20:fb:97:cc:50:ed:02:
                    fd:49:ff:b1:03:e3:ba:97:7c:03:37:4b:a5:ce:1a:
                    31:6f:55:d8:d7:d3:1a:e3:0e:04:5d:e3:c5:31:99:
                    0c:e9:e9:06:b7:72:60:92:3e:75:ab:b7:60:17:0c:
                    0d:bd:0b:54:d5:c8:13:fc:eb:b6:6b:41:e4:9c:b6:
                    5d:0c:e2:4e:79:1b:94:31:28:71:52:ba:d7:99:ff:
                    53:03:75:f7:82:b3:0c:88:63:e8:15:e3:2f:a5:ac:
                    3b:68:e8:9b:c2:ae:e9:7d:d9:19:78:7e:4e:0f:69:
                    0b:c6:b6:68:45:1d:db:8d:2d:09:10:1b:4c:d7:38:
                    39:62:29:7d:75:9a:b4:52:94:29:de:80:a6:29:ca:
                    b3:40:3f:ed:99:a7:d6:d8:7d:4d:d6:0a:57:51:b9:
                    e7:62:19:39:5f:8b:22:3a:76:4b:4f:08:ac:f2:65:
                    c2:44:11:89:63:bd:b0:99:b2:7d:f4:e6:2a:1a:27:
                    62:8a:5b:cc:a7:b6:66:62:01:42:fc:34:74:16:3c:
                    c9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:54:30:DC:47:80:50:A5:43:70:23:45:37:6A:F8:21:88:D7:6B:AB
            X509v3 Authority Key Identifier:
                keyid:3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36342e302f32332d3233203d3e20323730313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:97:d9:54:29:bb:bc:0d:1f:a0:33:9d:49:c9:5f:12:77:61:
         55:5f:27:8d:3b:f1:ee:2d:4d:43:88:54:58:a2:ef:1e:98:f2:
         6a:08:d8:45:70:ba:25:10:ef:17:0c:9d:c4:81:f7:1d:42:fc:
         81:14:fa:57:ca:28:4c:09:bd:fa:f5:08:72:d6:b1:b0:6b:4f:
         7b:b3:f7:f6:d9:eb:1b:d2:d0:6f:b2:03:d2:4d:9e:de:63:7c:
         56:78:8c:b5:1b:d0:77:c3:0d:3b:64:70:25:d9:1e:2f:3d:77:
         65:5f:26:21:f4:4f:09:a1:a4:9e:63:c7:02:f9:71:f3:fb:75:
         e4:a4:5c:4d:77:50:0d:a2:a4:4d:c6:bc:22:93:ce:b3:a6:93:
         69:e2:e5:7f:80:6b:0d:46:53:08:cc:5c:45:74:d0:7b:ba:fc:
         4c:ec:d0:9d:b9:04:25:0e:14:71:fd:99:7f:fa:e0:70:27:e1:
         d5:cd:a6:2b:78:b0:f5:5d:29:35:74:11:2a:05:1b:d9:a8:20:
         75:33:a1:3c:15:57:53:63:a9:09:c7:05:01:2f:19:dd:1b:87:
         e2:6b:d4:d9:5f:52:af:28:38:fc:b0:d4:22:ea:7d:4f:75:27:
         36:f0:17:84:17:87:68:0a:cc:74:4d:4b:d2:2e:09:55:2f:3d:
         69:58:40:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:10:54 2026 by rpki-client