Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/34352e3233332e3134332e302f32342d3234203d3e20323636373638.roa
File:                     34352e3233332e3134332e302f32342d3234203d3e20323636373638.roa (raw, json)
Hash identifier:          3gOfhDpmuzhDvtixYet9cBIZRpUSfuhAbBkpvNQhIX4=
Subject key identifier:   00:3E:31:7F:95:DE:01:CD:69:76:40:5E:5A:5A:FD:E2:3A:0F:85:99
Certificate issuer:       /CN=445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F
Certificate serial:       22ECBD01566B09F40EC19E87C68683AFE856B710
Authority key identifier: 44:5E:B5:AB:EE:7D:EC:22:09:4F:11:C6:A6:DC:E5:68:ED:16:D5:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/34352e3233332e3134332e302f32342d3234203d3e20323636373638.roa
Signing time:             Tue 06 Jan 2026 20:54:37 +0000
ROA not before:           Tue 06 Jan 2026 20:49:37 +0000
ROA not after:            Tue 05 Jan 2027 20:54:37 +0000
asID:                     266768
IP address blocks:        45.233.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 01:15:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ec:bd:01:56:6b:09:f4:0e:c1:9e:87:c6:86:83:af:e8:56:b7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F
        Validity
            Not Before: Jan  6 20:49:37 2026 GMT
            Not After : Jan  5 20:54:37 2027 GMT
        Subject: CN=003E317F95DE01CD6976405E5A5AFDE23A0F8599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5b:30:c9:8e:21:a4:9f:1a:62:e3:c2:5c:74:
                    b7:a0:b1:e6:6b:6a:03:66:49:22:b1:df:ee:36:ae:
                    43:7d:0a:a6:f6:ee:55:b9:a5:cf:e3:72:ae:35:40:
                    70:3b:10:86:16:c2:d0:f6:91:e6:c4:db:ef:c7:99:
                    54:c6:fd:b9:88:88:9b:d4:e2:f9:d0:5e:df:13:be:
                    94:f1:5c:a0:46:33:e4:8a:8d:80:83:87:d8:29:74:
                    23:b7:62:69:5a:06:69:43:ee:92:c7:c9:77:cb:e5:
                    de:dc:49:06:6f:9f:b1:55:23:c6:19:71:c9:29:37:
                    54:68:76:69:af:50:7e:41:c9:e1:e4:4c:79:51:30:
                    f3:74:34:b0:52:7e:32:e5:a4:66:92:6d:98:d8:22:
                    61:99:6d:21:44:54:4f:25:02:c5:4d:86:d6:a5:82:
                    73:f8:e1:40:11:76:47:2b:e9:90:a9:b1:64:22:d4:
                    c4:29:1a:ba:2b:66:5e:66:15:84:5c:e8:d0:29:a2:
                    e6:a3:c4:be:39:3c:20:1a:fc:05:3b:b3:64:8c:59:
                    a4:ad:39:e5:e5:57:fb:45:17:2f:f0:e7:0f:94:9b:
                    d9:16:40:b9:9f:63:6d:37:56:10:63:1e:66:10:db:
                    49:8e:b1:0a:22:30:f5:d1:c8:06:05:2e:41:d8:7d:
                    4a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3E:31:7F:95:DE:01:CD:69:76:40:5E:5A:5A:FD:E2:3A:0F:85:99
            X509v3 Authority Key Identifier:
                keyid:44:5E:B5:AB:EE:7D:EC:22:09:4F:11:C6:A6:DC:E5:68:ED:16:D5:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/34352e3233332e3134332e302f32342d3234203d3e20323636373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:67:bf:18:3b:be:71:fc:67:9e:10:89:1b:0d:0b:2f:7b:ca:
         c3:80:6b:6f:7f:83:6a:20:9f:82:0d:30:78:64:cc:6f:8e:8e:
         50:33:11:d7:81:3d:ce:2b:b1:84:c9:02:a5:97:9f:6c:14:91:
         8c:4b:26:18:78:33:c5:cc:2d:5b:56:bd:63:9d:ad:ba:42:32:
         42:4f:df:e6:de:a9:bc:3b:e3:ac:c4:0d:da:ae:13:5d:08:6a:
         5c:89:5f:fb:d1:91:86:94:51:60:bf:de:db:db:42:02:10:fd:
         e1:4b:0b:fc:01:9f:b4:1c:de:d7:e6:52:ce:b1:ac:5c:3c:a7:
         ec:be:45:fb:53:28:24:50:8a:f3:e0:40:f7:69:5f:0f:68:53:
         01:01:b1:22:3e:66:75:dd:b6:3e:d8:c7:eb:3c:ad:88:15:f0:
         44:0c:5a:da:b4:50:cb:b8:60:f8:7d:19:94:ed:bd:a4:2f:1b:
         b0:13:69:93:f8:20:0e:31:b8:12:07:d7:29:3d:72:ca:ac:d5:
         a1:8b:ae:d0:b6:b2:af:71:8f:8b:f5:11:d9:62:02:29:8b:4f:
         d6:92:32:a5:73:a8:e1:48:af:e3:b7:23:6b:02:e2:43:25:39:
         8e:f2:82:14:e5:ba:99:ea:98:66:16:3d:61:c6:44:5b:55:d0:
         49:08:c8:c1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIuy9AVZrCfQOwZ6HxoaDr+hWtxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ1RUI1QUJFRTdERUMyMjA5NEYxMUM2QTZEQ0U1NjhF
RDE2RDU3RjAeFw0yNjAxMDYyMDQ5MzdaFw0yNzAxMDUyMDU0MzdaMDMxMTAvBgNV
BAMTKDAwM0UzMTdGOTVERTAxQ0Q2OTc2NDA1RTVBNUFGREUyM0EwRjg1OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChWzDJjiGknxpi48JcdLegseZr
agNmSSKx3+42rkN9Cqb27lW5pc/jcq41QHA7EIYWwtD2kebE2+/HmVTG/bmIiJvU
4vnQXt8TvpTxXKBGM+SKjYCDh9gpdCO3YmlaBmlD7pLHyXfL5d7cSQZvn7FVI8YZ
cckpN1RodmmvUH5ByeHkTHlRMPN0NLBSfjLlpGaSbZjYImGZbSFEVE8lAsVNhtal
gnP44UARdkcr6ZCpsWQi1MQpGrorZl5mFYRc6NApouajxL45PCAa/AU7s2SMWaSt
OeXlV/tFFy/w5w+Um9kWQLmfY203VhBjHmYQ20mOsQoiMPXRyAYFLkHYfUqBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUAD4xf5XeAc1pdkBeWlr94joPhZkwHwYDVR0j
BBgwFoAURF61q+597CIJTxHGptzlaO0W1X8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NDc0NDYyODRBQUIxQTQ3RkQ3OThGN0EwNzM3QTM0OUIw
MzBFNTVFODhFOENDQ0E2RDhBOUQ3NTc1NDc5QkIxLzAvNDQ1RUI1QUJFRTdERUMy
MjA5NEYxMUM2QTZEQ0U1NjhFRDE2RDU3Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NDVFQjVBQkVFN0RFQzIyMDk0
RjExQzZBNkRDRTU2OEVEMTZENTdGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTQ3NDQ2Mjg0QUFCMUE0N0ZENzk4RjdBMDczN0EzNDlCMDMwRTU1RTg4
RThDQ0NBNkQ4QTlENzU3NTQ3OUJCMS8wLzM0MzUyZTMyMzMzMzJlMzEzNDMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzczNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALemP
MA0GCSqGSIb3DQEBCwUAA4IBAQAsZ78YO75x/GeeEIkbDQsve8rDgGtvf4NqIJ+C
DTB4ZMxvjo5QMxHXgT3OK7GEyQKll59sFJGMSyYYeDPFzC1bVr1jna26QjJCT9/m
3qm8O+OsxA3arhNdCGpciV/70ZGGlFFgv97b20ICEP3hSwv8AZ+0HN7X5lLOsaxc
PKfsvkX7UygkUIrz4ED3aV8PaFMBAbEiPmZ13bY+2MfrPK2IFfBEDFratFDLuGD4
fRmU7b2kLxuwE2mT+CAOMbgSB9cpPXLKrNWhi67QtrKvcY+L9RHZYgIpi0/WkjKl
c6jhSK/jtyNrAuJDJTmO8oIU5bqZ6phmFj1hxkRbVdBJCMjB
-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:51 2026 by rpki-client