Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/34352e3233382e3139312e302f32342d3234203d3e20323635353531.roa
File:                     34352e3233382e3139312e302f32342d3234203d3e20323635353531.roa (raw, json)
Hash identifier:          LA3rM+hYqZeu8Pln8Zpy6pSJoaJ8Rs8h57NzspTsfvs=
Subject key identifier:   CE:51:40:14:1D:EC:90:7E:46:30:37:42:7A:CB:14:AF:28:B0:2E:BB
Certificate issuer:       /CN=22E20380327B2CB679071D7FE9AC4DBFA317A166
Certificate serial:       5C7750CFF186AAF37DDCF5AFF5EB7512538A5C33
Authority key identifier: 22:E2:03:80:32:7B:2C:B6:79:07:1D:7F:E9:AC:4D:BF:A3:17:A1:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/34352e3233382e3139312e302f32342d3234203d3e20323635353531.roa
Signing time:             Tue 06 Jan 2026 19:10:04 +0000
ROA not before:           Tue 06 Jan 2026 19:05:04 +0000
ROA not after:            Tue 05 Jan 2027 19:10:04 +0000
asID:                     265551
IP address blocks:        45.238.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:77:50:cf:f1:86:aa:f3:7d:dc:f5:af:f5:eb:75:12:53:8a:5c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22E20380327B2CB679071D7FE9AC4DBFA317A166
        Validity
            Not Before: Jan  6 19:05:04 2026 GMT
            Not After : Jan  5 19:10:04 2027 GMT
        Subject: CN=CE5140141DEC907E463037427ACB14AF28B02EBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:36:07:46:32:46:3c:34:8f:83:bd:f0:c5:3e:
                    d2:6a:d0:ed:fb:b8:19:f5:0c:e2:c4:b6:f6:f8:e5:
                    95:c7:5d:dd:6f:70:f3:42:97:e6:4e:31:fb:04:9d:
                    e3:96:22:27:4f:ab:2e:f2:dc:b5:69:8c:4a:14:cc:
                    91:7c:1d:39:e6:13:72:7a:f3:4e:c5:21:44:fe:05:
                    bb:d9:78:31:71:9d:2b:7e:e8:b1:4f:53:b6:c4:08:
                    fe:a8:06:80:d7:9f:c6:eb:cb:84:07:85:92:5f:02:
                    02:93:2c:5e:d5:d0:ba:0e:24:a1:44:80:b4:01:d5:
                    56:01:a0:d1:64:54:47:cc:aa:a0:5b:28:58:8b:a1:
                    67:1f:96:07:67:c4:49:1c:a0:95:5a:e7:fb:ba:f6:
                    07:6f:ab:f6:2f:db:2d:d7:af:ac:c9:be:4c:9d:32:
                    4d:c1:21:aa:83:dd:ca:3c:52:92:40:15:b9:a6:f2:
                    0d:0a:af:7a:50:e8:6d:2f:76:d9:13:e7:0d:51:78:
                    96:73:c8:8a:82:3f:42:2e:d9:9f:ca:87:4e:9b:ee:
                    76:d1:ca:9e:6c:ac:32:de:7a:d9:51:c4:2a:44:8f:
                    91:e0:a0:5c:f1:47:08:50:25:a5:79:e9:ec:ef:ed:
                    29:76:06:1b:34:25:ce:34:a1:34:df:43:e4:14:c8:
                    ac:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:51:40:14:1D:EC:90:7E:46:30:37:42:7A:CB:14:AF:28:B0:2E:BB
            X509v3 Authority Key Identifier:
                keyid:22:E2:03:80:32:7B:2C:B6:79:07:1D:7F:E9:AC:4D:BF:A3:17:A1:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/34352e3233382e3139312e302f32342d3234203d3e20323635353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:3c:fa:df:ba:38:39:9f:bd:ca:e0:e3:22:82:42:fe:de:44:
         7d:84:fa:01:3b:f0:2a:2f:38:c3:e3:af:d4:5e:40:94:34:c3:
         be:d6:58:0f:27:f3:2d:52:40:aa:3b:96:4d:9d:9c:18:a9:2e:
         b7:b0:bb:f5:13:70:21:60:da:c9:0c:33:8e:40:96:01:8c:4a:
         38:0a:02:db:f0:bd:40:26:a1:2a:7c:48:83:91:a2:f0:9a:b4:
         fa:a3:db:ab:47:84:51:d0:f7:35:ce:cb:d5:f3:a2:8e:7a:38:
         54:2f:8f:36:eb:b4:37:40:f4:2b:92:fb:30:f6:5a:1e:73:14:
         cf:07:5e:19:9c:15:b6:09:24:22:54:b8:6b:0e:63:fe:da:22:
         cd:ef:de:b2:c4:9a:5c:89:c9:87:24:84:78:42:af:c1:7d:47:
         da:b9:63:0c:eb:b4:a9:b7:fa:4b:9b:72:18:8f:f6:02:e2:fe:
         5f:b0:be:43:50:15:6e:f2:5c:2c:d5:b6:52:6d:37:45:f8:c9:
         e0:bc:71:a2:ed:d6:1f:e0:85:d5:b5:33:5e:66:29:eb:c7:59:
         d7:07:c5:09:f7:df:de:e1:9a:82:6a:ca:77:ac:3b:0f:c3:d9:
         e4:cd:f0:95:ac:ca:91:54:c3:db:5a:4a:e5:99:a1:28:2e:18:
         0b:1f:b5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:38:59 2026 by rpki-client