Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/34352e3232372e3230302e302f32322d3232203d3e20323636363635.roa
File:                     34352e3232372e3230302e302f32322d3232203d3e20323636363635.roa (raw, json)
Hash identifier:          QLOpVwNkLd47JD7rYqCrVsD4Op3sPsc1YKo20ZU9cAo=
Subject key identifier:   98:04:4D:96:0D:FC:15:28:D6:16:53:31:CE:44:C6:FE:7E:8D:88:00
Certificate issuer:       /CN=A42C2536663031C220CC68656426F3680C410069
Certificate serial:       45DEC665F0BDE98C442C95F64BC804F91415FE57
Authority key identifier: A4:2C:25:36:66:30:31:C2:20:CC:68:65:64:26:F3:68:0C:41:00:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A42C2536663031C220CC68656426F3680C410069.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/34352e3232372e3230302e302f32322d3232203d3e20323636363635.roa
Signing time:             Tue 06 Jan 2026 19:45:55 +0000
ROA not before:           Tue 06 Jan 2026 19:40:55 +0000
ROA not after:            Tue 05 Jan 2027 19:45:55 +0000
asID:                     266665
IP address blocks:        45.227.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/A42C2536663031C220CC68656426F3680C410069.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/A42C2536663031C220CC68656426F3680C410069.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A42C2536663031C220CC68656426F3680C410069.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:de:c6:65:f0:bd:e9:8c:44:2c:95:f6:4b:c8:04:f9:14:15:fe:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A42C2536663031C220CC68656426F3680C410069
        Validity
            Not Before: Jan  6 19:40:55 2026 GMT
            Not After : Jan  5 19:45:55 2027 GMT
        Subject: CN=98044D960DFC1528D6165331CE44C6FE7E8D8800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:79:76:6c:d4:5e:49:cb:f3:31:79:80:79:0b:
                    88:ea:84:18:4f:00:44:09:45:0f:bd:89:80:17:67:
                    62:d4:8a:8b:2b:f5:61:7b:38:a3:d5:13:b6:41:61:
                    ed:d4:9f:90:73:83:0a:ab:80:6a:50:7b:3d:a9:c4:
                    c7:3e:6b:8e:0f:eb:86:2a:bd:ce:01:11:6c:50:6e:
                    a2:fc:1b:43:30:96:61:61:32:72:a2:87:f4:be:ef:
                    a1:c2:4d:b0:9e:11:08:74:f6:49:bf:9b:e1:77:71:
                    68:64:28:21:94:1c:f6:29:8e:df:de:ab:cf:2c:56:
                    19:6b:bb:6f:8d:7a:03:96:31:9d:1b:1c:b3:92:04:
                    86:e8:16:a6:75:de:84:63:e4:0d:ee:54:ea:11:ab:
                    0a:d6:af:4c:46:dd:73:d9:b5:38:6d:e8:1c:10:08:
                    1d:31:a3:a5:44:c4:05:2c:ad:ee:f9:7f:48:ee:74:
                    d0:af:f3:f7:ab:fd:32:06:31:ef:bc:04:52:84:00:
                    64:43:30:26:8a:cd:a3:f2:d8:d3:61:f5:df:aa:6b:
                    96:d7:b5:21:5e:8c:6f:8b:d2:25:62:17:b2:4c:0a:
                    0e:51:7b:fe:a9:ba:db:84:c6:d5:d9:a8:87:68:9b:
                    2b:a8:5f:d1:5a:d9:09:35:00:43:16:5c:8c:5e:7b:
                    1e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:04:4D:96:0D:FC:15:28:D6:16:53:31:CE:44:C6:FE:7E:8D:88:00
            X509v3 Authority Key Identifier:
                keyid:A4:2C:25:36:66:30:31:C2:20:CC:68:65:64:26:F3:68:0C:41:00:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/A42C2536663031C220CC68656426F3680C410069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A42C2536663031C220CC68656426F3680C410069.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/34352e3232372e3230302e302f32322d3232203d3e20323636363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:e9:76:f4:4b:78:66:cd:b1:d5:33:7b:fb:98:f3:80:01:fc:
         b8:ec:7e:ae:7c:81:31:98:6b:e3:a6:70:5e:cf:25:a2:b3:3b:
         63:f4:42:82:72:1e:0b:eb:cf:06:f1:55:21:41:c9:f3:50:cc:
         c2:70:4b:17:e3:89:96:53:71:14:4d:b3:c7:db:54:ef:d1:9d:
         7e:e0:02:0f:7c:2a:ba:72:b3:82:e3:f0:98:58:3a:47:be:39:
         98:94:1c:3d:48:73:28:1a:bf:ad:78:e7:dd:68:c9:a9:f4:94:
         e3:53:b8:e1:b4:83:96:00:5c:f1:62:8b:32:da:00:be:49:38:
         10:60:07:d5:c1:c0:1e:23:3c:72:5b:ca:9e:fb:78:ec:8f:52:
         75:a4:c8:02:d4:06:cd:e5:7e:61:ad:a1:93:a3:f4:f1:1a:63:
         af:bf:cd:c3:69:03:f2:9d:7f:65:0b:80:26:4b:3b:73:ef:a0:
         4c:6e:ce:73:d8:91:0b:9e:58:f3:33:29:f2:a1:8f:ae:cd:72:
         91:4b:ae:3c:da:e3:17:ea:36:96:ff:b0:fb:a6:92:5d:aa:e6:
         fd:c6:44:d9:15:79:a7:93:51:0f:e9:7b:67:6b:79:7b:b7:ae:
         02:e0:a4:ba:fc:d3:86:74:75:41:b4:32:b0:6c:0f:26:3e:bf:
         78:c7:33:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:38:51 2026 by rpki-client