Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/34352e3232392e3139322e302f32362d3236203d3e20323637373537.roa
File:                     34352e3232392e3139322e302f32362d3236203d3e20323637373537.roa (raw, json)
Hash identifier:          ib1IGKvAktqUj2jic1UTNQ7LKEpXIEEPrj/+k/c4AZQ=
Subject key identifier:   AB:5C:AA:83:23:49:A4:0B:6D:21:E0:3B:30:51:A1:03:2D:68:89:97
Certificate issuer:       /CN=096026F2035C01DFDDA491A54F0110D751D4B655
Certificate serial:       5DE2016DEE68888D26C842633DD45C3BCC9E16F6
Authority key identifier: 09:60:26:F2:03:5C:01:DF:DD:A4:91:A5:4F:01:10:D7:51:D4:B6:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096026F2035C01DFDDA491A54F0110D751D4B655.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/34352e3232392e3139322e302f32362d3236203d3e20323637373537.roa
Signing time:             Tue 06 Jan 2026 19:05:30 +0000
ROA not before:           Tue 06 Jan 2026 19:00:30 +0000
ROA not after:            Tue 05 Jan 2027 19:05:30 +0000
asID:                     267757
IP address blocks:        45.229.192.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/096026F2035C01DFDDA491A54F0110D751D4B655.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/096026F2035C01DFDDA491A54F0110D751D4B655.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096026F2035C01DFDDA491A54F0110D751D4B655.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e2:01:6d:ee:68:88:8d:26:c8:42:63:3d:d4:5c:3b:cc:9e:16:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096026F2035C01DFDDA491A54F0110D751D4B655
        Validity
            Not Before: Jan  6 19:00:30 2026 GMT
            Not After : Jan  5 19:05:30 2027 GMT
        Subject: CN=AB5CAA832349A40B6D21E03B3051A1032D688997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:73:2b:27:d1:92:eb:ef:72:2f:61:c3:b5:91:
                    5c:62:e3:1b:71:5f:8f:5f:ff:19:57:9d:58:04:5b:
                    08:22:58:27:bc:41:c6:10:54:8b:41:d3:80:29:7c:
                    c7:e0:ed:d9:cc:fa:d3:9a:87:2a:cc:13:1e:84:96:
                    ac:19:dd:7f:c0:83:43:fa:dd:b5:e9:97:07:af:2d:
                    9f:58:95:f4:7d:4d:8e:4b:55:1f:4a:97:31:b8:95:
                    8e:62:b7:9d:83:d1:ed:13:43:b0:a6:8b:0a:e3:a2:
                    c9:37:60:fa:1e:df:2d:6d:90:4e:d1:bd:cf:d9:d7:
                    20:b0:5c:a2:73:a6:b9:9b:cc:3e:69:39:7c:bd:58:
                    97:04:72:7f:27:10:d7:b9:81:aa:68:c1:f7:ea:97:
                    a9:f7:b8:bd:0e:bc:49:16:0a:0e:56:f9:73:c5:c0:
                    22:6f:bc:bf:ef:bd:b4:5e:1a:9e:0c:2c:20:09:7a:
                    6f:82:83:03:f1:21:f7:fb:dd:82:e1:28:a7:b4:90:
                    3a:66:66:38:46:a1:dd:1f:f0:6c:4b:00:01:01:e1:
                    d0:c9:e6:11:21:1e:51:99:fd:36:94:2c:a9:5b:38:
                    b1:32:8d:dd:4d:9e:f4:58:0f:c6:13:82:de:e8:f5:
                    65:85:53:a5:4d:c9:9f:a2:29:24:ab:db:f7:1e:2c:
                    5f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5C:AA:83:23:49:A4:0B:6D:21:E0:3B:30:51:A1:03:2D:68:89:97
            X509v3 Authority Key Identifier:
                keyid:09:60:26:F2:03:5C:01:DF:DD:A4:91:A5:4F:01:10:D7:51:D4:B6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/096026F2035C01DFDDA491A54F0110D751D4B655.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096026F2035C01DFDDA491A54F0110D751D4B655.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/34352e3232392e3139322e302f32362d3236203d3e20323637373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.192.0/26

    Signature Algorithm: sha256WithRSAEncryption
         61:b7:6a:c8:ca:e9:ce:0d:66:f9:0b:f6:a3:54:2a:18:23:7b:
         8f:47:4c:9b:50:22:6a:3d:04:63:5f:7a:de:80:f6:09:3f:7b:
         57:68:7a:e5:98:07:d7:eb:91:61:58:6a:f1:4f:4f:84:23:0d:
         0d:10:c2:92:8e:db:78:ae:5d:ec:df:2c:37:79:78:94:fb:76:
         2f:1e:6e:fb:22:15:bc:39:88:12:d3:32:ea:68:f1:f9:35:35:
         a8:28:44:79:b6:0e:b4:56:a9:62:a7:53:c1:c0:72:94:9b:9a:
         30:cb:14:56:d5:cf:eb:08:f4:bc:8f:59:e8:74:e8:38:8d:ec:
         08:b0:58:d9:be:26:43:ee:45:e2:7b:8b:d7:7c:4e:7c:3b:ae:
         f7:7f:53:09:be:c6:0b:67:06:25:0c:49:e4:2e:07:a4:6d:be:
         40:77:ab:30:28:a6:8e:56:c1:77:d8:99:81:23:c1:6e:81:06:
         70:4b:92:90:dd:53:7a:d6:58:bf:dd:ed:ae:bb:95:b5:1f:b6:
         96:13:74:b0:58:93:f8:0c:49:4a:08:71:ae:e1:98:15:1f:c1:
         ad:e1:9a:44:e1:ce:99:12:b1:0e:83:89:05:bd:20:50:56:1c:
         a1:1f:eb:0d:11:d5:92:aa:5e:e1:dc:a4:85:dd:32:eb:3b:6e:
         e2:67:75:d4
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUXeIBbe5oiI0myEJjPdRcO8yeFvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk2MDI2RjIwMzVDMDFERkREQTQ5MUE1NEYwMTEwRDc1
MUQ0QjY1NTAeFw0yNjAxMDYxOTAwMzBaFw0yNzAxMDUxOTA1MzBaMDMxMTAvBgNV
BAMTKEFCNUNBQTgzMjM0OUE0MEI2RDIxRTAzQjMwNTFBMTAzMkQ2ODg5OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmcysn0ZLr73IvYcO1kVxi4xtx
X49f/xlXnVgEWwgiWCe8QcYQVItB04ApfMfg7dnM+tOahyrMEx6ElqwZ3X/Ag0P6
3bXplwevLZ9YlfR9TY5LVR9KlzG4lY5it52D0e0TQ7Cmiwrjosk3YPoe3y1tkE7R
vc/Z1yCwXKJzprmbzD5pOXy9WJcEcn8nENe5gapowffql6n3uL0OvEkWCg5W+XPF
wCJvvL/vvbReGp4MLCAJem+CgwPxIff73YLhKKe0kDpmZjhGod0f8GxLAAEB4dDJ
5hEhHlGZ/TaULKlbOLEyjd1NnvRYD8YTgt7o9WWFU6VNyZ+iKSSr2/ceLF+/AgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUq1yqgyNJpAttIeA7MFGhAy1oiZcwHwYDVR0j
BBgwFoAUCWAm8gNcAd/dpJGlTwEQ11HUtlUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQjdEQ0RDQTk5Nzk2NTk2RTJCMkYxOEQ5NzcwMUEwMTEx
RDg3MTI3NzhDNkEyNDlGOTQ1OThDQzhFMDFGMUE2LzAvMDk2MDI2RjIwMzVDMDFE
RkREQTQ5MUE1NEYwMTEwRDc1MUQ0QjY1NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOTYwMjZGMjAzNUMwMURGRERB
NDkxQTU0RjAxMTBENzUxRDRCNjU1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkI3RENEQ0E5OTc5NjU5NkUyQjJGMThEOTc3MDFBMDExMUQ4NzEyNzc4
QzZBMjQ5Rjk0NTk4Q0M4RTAxRjFBNi8wLzM0MzUyZTMyMzIzOTJlMzEzOTMyMmUz
MDJmMzIzNjJkMzIzNjIwM2QzZTIwMzIzNjM3MzczNTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGLeXA
ADANBgkqhkiG9w0BAQsFAAOCAQEAYbdqyMrpzg1m+Qv2o1QqGCN7j0dMm1Aiaj0E
Y1963oD2CT97V2h65ZgH1+uRYVhq8U9PhCMNDRDCko7beK5d7N8sN3l4lPt2Lx5u
+yIVvDmIEtMy6mjx+TU1qChEebYOtFapYqdTwcBylJuaMMsUVtXP6wj0vI9Z6HTo
OI3sCLBY2b4mQ+5F4nuL13xOfDuu939TCb7GC2cGJQxJ5C4HpG2+QHerMCimjlbB
d9iZgSPBboEGcEuSkN1TetZYv93trruVtR+2lhN0sFiT+AxJSghxruGYFR/BreGa
ROHOmRKxDoOJBb0gUFYcoR/rDRHVkqpe4dykhd0y6ztu4md11A==
-----END CERTIFICATE-----
Generated at Thu Feb 19 00:12:09 2026 by rpki-client