Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/34352e3232352e3133332e302f32342d3234203d3e20323636363535.roa
File:                     34352e3232352e3133332e302f32342d3234203d3e20323636363535.roa (raw, json)
Hash identifier:          Nj47CQBfFHj6GOV5Ysr0Agp9KwEx6NFry7AChsEnEfk=
Subject key identifier:   C1:33:F0:69:73:00:E3:FB:71:D0:1C:26:08:D4:1E:14:C0:08:9D:07
Certificate issuer:       /CN=97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB
Certificate serial:       43E9A04CE0E050EA4A2B075CCAEA9C77A6438EBC
Authority key identifier: 97:D1:E8:1C:AF:D7:CF:1F:5F:EE:08:28:5E:A1:17:7A:46:AB:17:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/34352e3232352e3133332e302f32342d3234203d3e20323636363535.roa
Signing time:             Tue 06 Jan 2026 19:19:43 +0000
ROA not before:           Tue 06 Jan 2026 19:14:43 +0000
ROA not after:            Tue 05 Jan 2027 19:19:43 +0000
asID:                     266655
IP address blocks:        45.225.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e9:a0:4c:e0:e0:50:ea:4a:2b:07:5c:ca:ea:9c:77:a6:43:8e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB
        Validity
            Not Before: Jan  6 19:14:43 2026 GMT
            Not After : Jan  5 19:19:43 2027 GMT
        Subject: CN=C133F0697300E3FB71D01C2608D41E14C0089D07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:60:7f:56:a1:34:ae:3d:65:03:88:fa:29:34:
                    69:0f:21:9c:3d:49:d9:8c:0d:df:a6:0e:90:83:35:
                    8e:3a:59:d2:63:a1:57:87:2c:e4:30:56:c4:41:36:
                    bd:5a:a9:2c:34:fb:99:ff:2a:b5:1d:67:f3:74:75:
                    5c:f6:b7:cc:01:b1:6e:62:5f:0b:e6:e0:1d:42:a9:
                    90:2f:6f:fd:81:f5:b0:ec:ef:a9:b5:cf:a2:ee:02:
                    db:29:cf:54:0c:96:ae:e1:d1:d3:5a:2c:5d:18:f1:
                    ed:59:e0:32:14:4e:47:00:ba:70:05:12:5b:f9:60:
                    77:f6:96:e5:d8:10:c2:91:7b:b4:27:72:db:56:c3:
                    58:5b:8b:89:92:1e:bd:e9:85:d0:f4:dc:30:37:af:
                    05:27:50:a3:d4:d8:75:02:7d:7d:4e:72:3b:8a:b0:
                    e4:f6:06:af:a8:47:ab:f8:04:98:22:e5:06:48:fd:
                    58:cf:80:28:76:58:8a:a3:c7:74:f5:73:7b:72:0d:
                    72:fd:53:90:75:0c:b7:35:ff:ca:55:ee:69:9a:1d:
                    70:e6:1b:27:dc:f2:99:09:89:cc:0c:ce:91:0b:ed:
                    ac:5f:9a:bd:6e:7f:80:13:dc:70:ec:65:fa:1f:56:
                    48:a3:bd:ed:ee:ba:91:0f:06:ce:88:de:38:d3:a3:
                    02:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:33:F0:69:73:00:E3:FB:71:D0:1C:26:08:D4:1E:14:C0:08:9D:07
            X509v3 Authority Key Identifier:
                keyid:97:D1:E8:1C:AF:D7:CF:1F:5F:EE:08:28:5E:A1:17:7A:46:AB:17:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/34352e3232352e3133332e302f32342d3234203d3e20323636363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:f8:07:14:43:f8:b2:0b:96:42:c8:b9:74:b7:7b:45:0b:5d:
         25:08:00:72:ad:2b:9e:05:b8:4b:a3:83:24:33:fc:18:60:59:
         4e:0f:09:6e:f0:2c:d2:4b:ad:16:2e:53:80:74:c0:5e:cb:d1:
         94:66:04:08:d1:64:30:a8:a9:2f:02:ba:40:d2:c5:e2:2c:62:
         e8:5b:f2:b6:5c:8b:a4:f4:a9:b7:5b:0f:19:c8:06:5e:b4:43:
         33:cc:0c:a8:12:ac:8d:03:ca:f4:e1:b7:bc:72:1e:c8:3a:11:
         bd:e5:7a:b8:1f:b8:04:1d:3f:b5:a1:57:13:44:c9:2d:54:4e:
         87:ce:b2:7b:23:12:26:9a:ba:8c:63:44:3c:1b:d5:b2:21:6c:
         b5:ef:2a:48:ec:80:13:6c:27:d2:e3:39:6d:bd:2a:9a:7c:e2:
         af:d1:7d:89:6e:a8:46:eb:a3:3a:bf:b6:2a:ed:31:12:28:7a:
         40:62:b2:26:c3:a5:c9:8e:fd:3a:38:92:0f:10:49:7d:e1:70:
         5f:f7:2e:fd:77:50:17:bb:e7:67:06:26:4b:f0:80:15:08:8f:
         4c:27:c5:7a:43:95:40:1d:5e:d4:ac:97:74:3c:c8:25:ff:8d:
         01:e6:ce:75:de:be:47:72:84:73:81:b0:1d:90:3e:6c:68:2f:
         4c:57:71:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:35:18 2026 by rpki-client