Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/34352e3137312e3132302e302f32332d3238203d3e20323639383533.roa
File:                     34352e3137312e3132302e302f32332d3238203d3e20323639383533.roa (raw, json)
Hash identifier:          RN0l/P/1eCfb7V4kDpOJJYC0b2dlitAdGiHwHzPmpPQ=
Subject key identifier:   E7:B4:3D:76:A4:AA:B4:EF:6B:D8:EB:E2:FA:BF:82:92:28:6D:05:18
Certificate issuer:       /CN=A705052BB6C34BD8AC98D939073DF4308F336B54
Certificate serial:       4743816CF530485C7A8BFBDE68470C8F376341ED
Authority key identifier: A7:05:05:2B:B6:C3:4B:D8:AC:98:D9:39:07:3D:F4:30:8F:33:6B:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A705052BB6C34BD8AC98D939073DF4308F336B54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/34352e3137312e3132302e302f32332d3238203d3e20323639383533.roa
Signing time:             Tue 06 Jan 2026 19:07:30 +0000
ROA not before:           Tue 06 Jan 2026 19:02:30 +0000
ROA not after:            Tue 05 Jan 2027 19:07:30 +0000
asID:                     269853
IP address blocks:        45.171.120.0/23 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/A705052BB6C34BD8AC98D939073DF4308F336B54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/A705052BB6C34BD8AC98D939073DF4308F336B54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A705052BB6C34BD8AC98D939073DF4308F336B54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:43:81:6c:f5:30:48:5c:7a:8b:fb:de:68:47:0c:8f:37:63:41:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A705052BB6C34BD8AC98D939073DF4308F336B54
        Validity
            Not Before: Jan  6 19:02:30 2026 GMT
            Not After : Jan  5 19:07:30 2027 GMT
        Subject: CN=E7B43D76A4AAB4EF6BD8EBE2FABF8292286D0518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3d:bb:02:c3:19:76:f6:60:24:25:0d:4d:06:
                    c8:b3:1a:4e:d1:b1:49:2f:63:da:52:9b:5e:a6:49:
                    1a:97:7f:f5:d4:79:26:d3:ba:d2:6a:ff:71:fb:59:
                    6b:13:b4:3d:9e:3b:4d:ca:37:9a:46:bf:88:34:30:
                    a1:cf:9e:4a:81:06:05:4a:16:d7:45:f3:ba:34:17:
                    6b:64:8f:60:46:a3:a9:1f:ef:50:ad:a2:9c:d9:ae:
                    88:a3:2f:70:ed:bc:65:65:a7:fc:cf:a0:16:00:9b:
                    8e:1b:a6:56:88:48:b3:74:e5:39:85:7f:87:27:89:
                    b1:0c:28:82:8d:50:89:9b:dd:9f:ce:d2:3e:f9:99:
                    0d:1d:fb:1d:39:72:82:17:8d:9a:16:f9:c4:90:42:
                    b2:26:91:64:89:b3:21:d0:64:14:bb:f3:a3:fb:32:
                    d6:50:49:83:f8:c8:f6:33:10:f0:b3:47:5a:b0:43:
                    9e:b6:29:07:0b:18:8f:12:1b:d1:f5:04:c6:4b:26:
                    3a:e3:34:ec:21:32:7d:5e:e1:02:ea:bb:a0:60:3a:
                    b5:e2:19:e3:fc:b6:3d:f8:2c:0d:54:cc:26:08:f3:
                    c1:cc:4a:ef:0a:3c:d6:36:6d:fa:8a:49:81:bd:45:
                    24:a6:c9:79:61:71:f3:0a:e7:f7:3e:46:85:60:4f:
                    75:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B4:3D:76:A4:AA:B4:EF:6B:D8:EB:E2:FA:BF:82:92:28:6D:05:18
            X509v3 Authority Key Identifier:
                keyid:A7:05:05:2B:B6:C3:4B:D8:AC:98:D9:39:07:3D:F4:30:8F:33:6B:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/A705052BB6C34BD8AC98D939073DF4308F336B54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A705052BB6C34BD8AC98D939073DF4308F336B54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/34352e3137312e3132302e302f32332d3238203d3e20323639383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:50:b8:ff:01:73:4b:09:72:c8:df:d1:b5:10:5f:9d:52:d0:
         56:04:f7:13:32:b8:b5:67:44:b4:95:05:30:48:ce:ef:78:3a:
         18:8e:e0:e8:23:40:29:58:20:ec:7c:67:95:91:ef:a7:81:33:
         08:e6:ca:db:2e:ca:06:2d:76:24:0e:6b:47:24:81:19:91:77:
         9a:a7:b4:92:3d:85:14:51:8c:05:e4:c3:91:53:05:96:da:d8:
         b0:07:e3:d0:ec:bd:32:0e:94:a8:18:aa:77:b8:8e:5e:06:61:
         4b:59:82:78:d8:54:e5:e5:6d:5a:a1:e1:93:eb:49:dc:46:65:
         33:00:f6:0a:a0:6f:23:b2:27:38:c1:61:80:ab:b8:cc:1c:07:
         f4:b3:45:b4:81:6c:d5:c8:4e:64:b7:13:24:5a:75:ec:d7:37:
         d5:9a:2b:f8:87:b9:e5:f2:d8:33:4f:83:12:71:c6:53:7b:c6:
         2c:dc:9e:29:33:0c:20:f3:ea:65:f2:91:a4:8a:21:88:de:6c:
         ae:ac:da:b1:e1:2e:14:3b:5b:7a:cd:15:97:79:44:e6:e0:79:
         95:e5:f4:7f:db:9e:88:bd:6f:1b:1d:12:ef:88:b6:ee:9f:c1:
         ba:4d:28:8a:45:d7:4d:f3:8c:50:1d:f7:b8:12:5c:64:86:85:
         95:60:f7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:40:22 2026 by rpki-client