Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2BF4446931D73DAA5C04224B9B4E8CAB707A0D0001FAB451301919F0CCE5495C/0/34352e3137382e3136342e302f32322d3235203d3e20323637383838.roa
File:                     34352e3137382e3136342e302f32322d3235203d3e20323637383838.roa (raw, json)
Hash identifier:          N8/63j5XDO19K55If8Lgvq/NW7cNlllLY+ktRPKZMUI=
Subject key identifier:   30:DF:9D:94:44:DB:70:5A:50:6C:15:3F:C8:58:83:9D:53:19:34:A8
Certificate issuer:       /CN=F95D41A266B696530FEE7FE49A3D027D06AAA4D8
Certificate serial:       245A8247CC6538E441B20CA76C85CC64545540AF
Authority key identifier: F9:5D:41:A2:66:B6:96:53:0F:EE:7F:E4:9A:3D:02:7D:06:AA:A4:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F95D41A266B696530FEE7FE49A3D027D06AAA4D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2BF4446931D73DAA5C04224B9B4E8CAB707A0D0001FAB451301919F0CCE5495C/0/34352e3137382e3136342e302f32322d3235203d3e20323637383838.roa
Signing time:             Tue 06 Jan 2026 18:57:54 +0000
ROA not before:           Tue 06 Jan 2026 18:52:54 +0000
ROA not after:            Tue 05 Jan 2027 18:57:54 +0000
asID:                     267888
IP address blocks:        45.178.164.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2BF4446931D73DAA5C04224B9B4E8CAB707A0D0001FAB451301919F0CCE5495C/0/F95D41A266B696530FEE7FE49A3D027D06AAA4D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2BF4446931D73DAA5C04224B9B4E8CAB707A0D0001FAB451301919F0CCE5495C/0/F95D41A266B696530FEE7FE49A3D027D06AAA4D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F95D41A266B696530FEE7FE49A3D027D06AAA4D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5a:82:47:cc:65:38:e4:41:b2:0c:a7:6c:85:cc:64:54:55:40:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F95D41A266B696530FEE7FE49A3D027D06AAA4D8
        Validity
            Not Before: Jan  6 18:52:54 2026 GMT
            Not After : Jan  5 18:57:54 2027 GMT
        Subject: CN=30DF9D9444DB705A506C153FC858839D531934A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ff:34:2f:05:a2:e8:4f:83:6a:1b:6f:52:37:
                    2e:b1:c3:39:d5:34:d6:62:91:9d:b6:bf:f7:72:3a:
                    40:f1:29:e9:aa:9b:0e:13:3b:00:18:29:69:9a:1b:
                    6d:6b:87:64:04:9f:b0:82:56:1b:2b:85:4e:ca:85:
                    ac:dc:a7:bc:a3:4d:59:77:34:18:b7:0a:de:78:11:
                    c1:ea:ee:1d:87:ac:bb:b7:f8:9f:63:bf:71:5a:b2:
                    82:51:13:8b:e1:c9:7e:c6:c2:19:ab:84:f7:f0:63:
                    64:45:0a:04:19:e7:37:cb:19:14:67:11:bc:9e:d2:
                    41:70:76:42:a1:e1:3e:cc:85:b3:b2:93:33:e9:0b:
                    f6:b2:6b:72:b2:50:6b:02:e4:96:42:b6:4e:b1:1e:
                    d5:f3:f1:37:58:a1:73:6e:90:c8:db:ba:b5:5b:3d:
                    2b:b8:fc:ba:39:28:41:5a:e7:39:5c:36:61:1e:d4:
                    59:bc:68:4f:59:1b:e1:26:1c:81:55:cd:cb:09:81:
                    60:89:e8:3f:4a:e8:3d:61:69:68:45:c8:b3:ed:39:
                    b4:d6:98:07:dd:d7:e5:1a:9f:0d:43:e0:7f:3f:7f:
                    ed:24:b7:2a:3a:c9:9e:c3:50:ab:f6:b0:ef:3e:f8:
                    9f:93:fe:e7:f4:fe:11:da:72:17:bc:b0:48:28:63:
                    a8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DF:9D:94:44:DB:70:5A:50:6C:15:3F:C8:58:83:9D:53:19:34:A8
            X509v3 Authority Key Identifier:
                keyid:F9:5D:41:A2:66:B6:96:53:0F:EE:7F:E4:9A:3D:02:7D:06:AA:A4:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2BF4446931D73DAA5C04224B9B4E8CAB707A0D0001FAB451301919F0CCE5495C/0/F95D41A266B696530FEE7FE49A3D027D06AAA4D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F95D41A266B696530FEE7FE49A3D027D06AAA4D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2BF4446931D73DAA5C04224B9B4E8CAB707A0D0001FAB451301919F0CCE5495C/0/34352e3137382e3136342e302f32322d3235203d3e20323637383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:e4:05:34:a3:49:d5:50:dc:73:da:a4:38:b5:ba:57:ec:0c:
         ab:6a:26:9f:b7:9d:7a:97:86:f8:f0:16:0d:95:60:41:32:e9:
         40:4e:f0:2d:64:d1:89:58:9c:d6:a3:cd:0c:fa:f2:d3:cc:06:
         8b:0d:d0:15:3e:7e:c6:63:03:93:d3:40:97:17:89:31:45:c9:
         ab:d1:47:b0:aa:df:45:d5:30:ec:42:bb:59:d6:4a:44:56:47:
         0d:36:c1:b1:ce:cf:8b:13:72:c7:43:73:0c:38:c8:0d:fa:53:
         20:b4:a1:ab:4a:ca:6e:3e:94:b7:1c:b2:12:bd:55:97:3d:be:
         80:ec:f3:cd:b9:7b:81:35:b9:1f:6b:66:16:c7:79:21:d5:e7:
         92:01:ec:64:9f:e3:04:e4:31:7a:6b:0d:d7:11:2c:46:c9:ae:
         ee:10:25:c6:5a:da:5a:f2:46:3c:6e:dd:ce:95:c6:b2:37:57:
         28:fa:5f:3b:21:a3:6d:e3:24:7b:73:77:bf:41:a7:be:10:10:
         11:70:d5:02:17:90:8a:5f:d2:b1:c2:7f:15:22:19:1d:1a:20:
         ee:a9:a8:e0:ad:d2:81:34:d7:76:b3:e8:53:5f:75:89:c5:57:
         e7:76:4c:52:87:0b:62:46:c2:bb:d6:6b:40:65:5b:1c:41:39:
         95:0d:a7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:12:41 2026 by rpki-client