Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31362e302f32332d3233203d3e20323639383735.roa
File:                     34352e3139302e31362e302f32332d3233203d3e20323639383735.roa (raw, json)
Hash identifier:          VhmHnUIFr78QxxzC5d91sYDU0fCj9uewMSUGJLbaj4o=
Subject key identifier:   98:AB:08:0A:56:9F:4A:10:5C:A1:82:CB:43:BB:9A:E5:B7:95:A6:98
Certificate issuer:       /CN=34F8C1DD8450593AA754227576BF44115ADF427B
Certificate serial:       72FDC41AC1AF920B9B934AFE9787C36D8E3E0243
Authority key identifier: 34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31362e302f32332d3233203d3e20323639383735.roa
Signing time:             Tue 06 Jan 2026 20:51:01 +0000
ROA not before:           Tue 06 Jan 2026 20:46:01 +0000
ROA not after:            Tue 05 Jan 2027 20:51:01 +0000
asID:                     269875
IP address blocks:        45.190.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fd:c4:1a:c1:af:92:0b:9b:93:4a:fe:97:87:c3:6d:8e:3e:02:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34F8C1DD8450593AA754227576BF44115ADF427B
        Validity
            Not Before: Jan  6 20:46:01 2026 GMT
            Not After : Jan  5 20:51:01 2027 GMT
        Subject: CN=98AB080A569F4A105CA182CB43BB9AE5B795A698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2b:6b:63:31:92:45:77:d3:42:ba:f3:e5:9b:
                    60:62:71:8a:79:94:03:49:46:5b:8c:1b:3f:06:91:
                    76:4a:85:11:2a:87:c7:21:48:74:cb:76:83:c8:19:
                    45:1b:bc:aa:5d:91:5e:e9:f2:2b:e5:06:d0:a1:29:
                    15:ca:d4:93:bc:a2:1e:96:cb:be:13:e5:32:e4:30:
                    e2:b6:3c:a0:5b:4b:85:b8:6b:9b:45:64:53:54:27:
                    56:3d:97:55:f2:1a:53:7f:29:eb:28:b1:43:7a:1e:
                    7b:b3:94:d1:fa:82:cb:0b:a2:f5:1c:c8:b9:da:99:
                    4d:92:cc:d1:27:68:90:34:7a:b2:b7:24:98:84:ee:
                    4d:8e:ec:7c:0f:10:9e:92:04:01:bc:97:09:e8:6f:
                    93:a6:ee:c2:60:5b:88:0e:75:4c:34:5f:9b:df:c2:
                    d9:88:c4:ed:96:87:1b:64:b8:68:38:08:67:b1:62:
                    2f:da:9a:c4:62:c3:ad:f2:a8:53:d6:d1:b1:39:cf:
                    8e:33:5b:58:c9:11:c4:75:ae:5f:77:3f:48:2c:1a:
                    48:1d:42:3d:63:29:48:9a:19:65:e7:04:4a:9f:2b:
                    5e:62:9f:05:4c:8a:37:09:95:19:2a:bd:12:29:dc:
                    66:5e:19:8a:3f:0d:49:bb:87:4c:53:37:f9:dd:c6:
                    34:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AB:08:0A:56:9F:4A:10:5C:A1:82:CB:43:BB:9A:E5:B7:95:A6:98
            X509v3 Authority Key Identifier:
                keyid:34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31362e302f32332d3233203d3e20323639383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:10:a1:53:b0:01:93:80:a9:ef:b8:eb:7d:9a:4e:08:af:66:
         d3:e8:9b:50:04:e8:f4:48:40:64:f9:3e:7a:cd:b3:43:06:74:
         86:27:30:44:e7:1f:51:de:83:ea:15:e6:92:29:16:46:37:b4:
         6d:93:1e:98:0c:ba:ef:ee:6f:c3:c5:63:82:df:61:a3:5f:e0:
         ea:55:2c:9b:50:86:6d:8f:74:3e:eb:02:47:c8:6d:78:2f:95:
         86:f6:c8:48:b0:bb:a9:fd:f5:ba:90:cc:48:4e:69:cc:9e:88:
         64:2d:93:1e:73:96:29:f4:3a:55:1b:b1:62:8c:a4:fa:38:fe:
         e7:4f:b7:5e:76:91:b1:4d:31:a8:83:1e:65:cd:16:63:ef:37:
         93:36:c4:a0:24:9f:4d:e1:91:a0:23:d9:48:28:a7:ab:59:1c:
         7b:72:42:e0:11:97:cd:37:b1:42:e5:ac:20:18:e0:a1:a1:2c:
         6b:90:95:38:e8:b7:2e:fc:42:cd:fe:5b:63:a8:e5:8e:57:04:
         25:b0:3a:e6:27:8f:12:f6:72:47:60:02:87:18:f1:ab:3c:b7:
         7b:0d:aa:95:bc:67:ec:fd:d8:ed:cd:e5:a9:86:ed:87:07:aa:
         e1:bc:63:95:ff:50:f5:b9:d5:a0:c7:74:2b:c5:a0:6a:9a:19:
         c3:5f:9a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:02:40 2026 by rpki-client