Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232322e302f32332d3233203d3e20323636383139.roa
File:                     34352e3233372e3232322e302f32332d3233203d3e20323636383139.roa (raw, json)
Hash identifier:          LkCZxCyAuIrADNbDworLC+OdX9XvaBOSze8dj/27xsI=
Subject key identifier:   C0:37:C3:10:5C:03:74:A0:DA:1D:7F:18:F2:5F:D9:0C:0B:4B:5A:71
Certificate issuer:       /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial:       5E6273C4FE9631780448BC3225ECF72151280AD1
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232322e302f32332d3233203d3e20323636383139.roa
Signing time:             Tue 06 Jan 2026 19:02:17 +0000
ROA not before:           Tue 06 Jan 2026 18:57:17 +0000
ROA not after:            Tue 05 Jan 2027 19:02:17 +0000
asID:                     266819
IP address blocks:        45.237.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
                          rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:62:73:c4:fe:96:31:78:04:48:bc:32:25:ec:f7:21:51:28:0a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
        Validity
            Not Before: Jan  6 18:57:17 2026 GMT
            Not After : Jan  5 19:02:17 2027 GMT
        Subject: CN=C037C3105C0374A0DA1D7F18F25FD90C0B4B5A71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:86:31:1c:39:17:26:d1:2f:92:1a:34:86:0b:
                    1b:07:fa:36:bb:54:97:3d:4e:24:9d:ae:c8:c4:cd:
                    b0:63:91:94:f6:46:c1:f3:4b:84:e1:62:de:05:52:
                    2a:df:b7:c3:91:fd:6b:92:69:d9:d8:53:43:c8:86:
                    52:56:26:39:13:27:c0:8a:72:02:f6:7a:c8:2c:8a:
                    25:f3:cd:ce:a3:35:78:d6:bc:46:4e:a7:92:db:17:
                    b8:8d:b6:c3:12:df:e0:43:73:0d:f8:96:2d:e0:50:
                    2e:fe:73:bc:47:f2:5a:d3:05:03:40:2a:3a:03:b2:
                    c4:0a:c1:0b:a1:6f:33:13:43:80:11:f0:21:cd:d7:
                    df:4a:7f:41:7b:dd:fc:9d:82:a0:59:a3:40:a2:8e:
                    50:4d:e7:a1:9a:69:e8:00:ac:c6:c8:ad:c9:5e:2d:
                    8e:eb:1e:e9:5b:80:a3:50:7e:0a:9f:ed:aa:ef:f4:
                    80:cc:f5:ce:e4:e7:23:59:95:01:79:b9:66:8d:a9:
                    50:7c:f6:a5:f2:43:16:fa:7b:be:fb:cd:65:ba:0a:
                    c3:fc:52:ba:6c:55:9e:ad:0c:2d:3c:47:18:e6:59:
                    0e:b5:63:2f:a3:13:84:29:32:dc:89:bf:40:0c:b5:
                    bd:3a:33:ac:a2:07:c4:56:15:de:7d:3c:09:0a:70:
                    c5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:37:C3:10:5C:03:74:A0:DA:1D:7F:18:F2:5F:D9:0C:0B:4B:5A:71
            X509v3 Authority Key Identifier:
                keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232322e302f32332d3233203d3e20323636383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:3a:26:54:79:c9:b8:72:d7:9f:ea:f9:01:e2:8a:fc:39:44:
         21:c1:c2:31:de:48:b3:37:73:9f:0b:12:e9:47:d5:4c:ee:0a:
         1a:9e:14:6f:47:6d:3b:17:0c:ee:c5:0f:72:d2:28:7f:b7:6c:
         c2:97:86:d0:02:82:25:fa:5d:c5:98:9d:f3:b9:7f:4d:03:c5:
         0c:f4:d0:bf:ee:17:a7:6a:8b:1c:27:f3:82:36:fc:ea:cb:5a:
         43:5e:06:01:cc:aa:61:ed:e3:0a:25:54:04:e6:4f:b8:6f:c5:
         d0:76:c7:45:7b:cc:13:86:9b:9c:f6:8f:32:65:50:18:0d:06:
         f5:95:6c:af:f9:ff:5b:55:ad:bd:8c:bb:de:3f:ec:a3:75:4c:
         97:70:a4:b9:70:14:08:16:0c:52:04:69:e5:3b:60:bf:ee:af:
         fc:13:e4:dc:64:81:6c:d3:5e:11:99:af:c5:48:ff:bb:a4:03:
         a9:65:01:b6:b5:ca:a9:0c:34:58:32:17:07:58:03:c7:77:da:
         4f:db:d8:1c:6c:fa:43:99:74:7f:91:eb:df:2a:dd:6c:b9:51:
         2b:1e:05:28:b9:a0:fa:1c:00:89:90:36:34:09:de:a4:63:bc:
         66:a0:e8:f4:89:14:5a:44:b7:4e:2a:18:88:d2:ce:15:78:37:
         3d:68:de:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:10:21 2026 by rpki-client