Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31362e302f32342d3234203d3e20323639383735.roa
File:                     34352e3139302e31362e302f32342d3234203d3e20323639383735.roa (raw, json)
Hash identifier:          E4ZwKZZc1wmeeuFZG79m3UThAB/hMSVWtokAuWcasI8=
Subject key identifier:   71:7F:DA:37:96:22:FC:C9:9A:04:51:29:3D:CB:ED:0F:53:A3:6E:AC
Certificate issuer:       /CN=34F8C1DD8450593AA754227576BF44115ADF427B
Certificate serial:       619B202BA4C90CC6CC284013E2C65E0C73E862F5
Authority key identifier: 34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31362e302f32342d3234203d3e20323639383735.roa
Signing time:             Tue 06 Jan 2026 20:51:01 +0000
ROA not before:           Tue 06 Jan 2026 20:46:01 +0000
ROA not after:            Tue 05 Jan 2027 20:51:01 +0000
asID:                     269875
IP address blocks:        45.190.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9b:20:2b:a4:c9:0c:c6:cc:28:40:13:e2:c6:5e:0c:73:e8:62:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34F8C1DD8450593AA754227576BF44115ADF427B
        Validity
            Not Before: Jan  6 20:46:01 2026 GMT
            Not After : Jan  5 20:51:01 2027 GMT
        Subject: CN=717FDA379622FCC99A0451293DCBED0F53A36EAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bb:54:73:40:b6:6f:5c:02:3d:a7:64:b5:d2:
                    bb:e5:7c:75:c7:6c:7f:41:14:95:cc:b2:08:d1:aa:
                    47:a1:89:dc:b7:d4:fd:57:46:21:26:f4:72:72:17:
                    3a:4e:e5:9f:44:39:5a:a1:a1:fe:48:e7:3c:20:78:
                    c0:3a:53:5f:1f:74:35:15:cd:ac:74:58:3a:0e:4d:
                    a0:8a:84:3d:88:c7:fc:ca:e8:c4:1f:fa:4c:c9:50:
                    ff:65:dd:03:9d:b4:5e:38:ca:3c:9b:70:b2:49:3c:
                    fe:53:b1:0d:0e:83:24:b7:e6:c1:71:7a:72:a5:b8:
                    cf:1d:29:a7:12:1f:68:e7:42:f6:c8:9c:94:16:ff:
                    cd:8e:24:ee:98:87:5b:57:6a:a4:78:ba:63:d3:c3:
                    83:a3:ed:b4:94:8e:38:34:df:6a:52:9f:4e:e6:8e:
                    90:bc:33:da:be:67:6d:c4:41:81:fd:87:b6:b2:83:
                    42:69:1b:99:ba:10:0a:e7:f2:e9:5f:b0:15:34:06:
                    0f:b8:40:ce:17:d9:6a:4a:d4:31:b8:be:a6:5c:42:
                    d4:c9:59:5a:22:82:6b:a8:aa:58:f7:16:fc:28:75:
                    ca:25:54:f3:91:4d:bd:73:a2:46:a3:f4:bf:ed:ca:
                    ef:18:d3:7f:50:b8:77:0b:7a:51:02:69:cd:c2:71:
                    cc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7F:DA:37:96:22:FC:C9:9A:04:51:29:3D:CB:ED:0F:53:A3:6E:AC
            X509v3 Authority Key Identifier:
                keyid:34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31362e302f32342d3234203d3e20323639383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:cb:62:44:88:8c:df:49:d7:1b:af:4c:59:ab:b2:d2:bd:f9:
         f1:70:34:f7:7c:b9:3b:56:e8:aa:ec:f7:43:cc:ec:f3:bb:b9:
         ea:14:87:94:d7:3d:11:ef:34:3c:84:c0:c7:ca:f6:5b:25:60:
         a9:62:53:28:b7:04:28:0a:95:46:68:84:3d:0e:18:61:7b:00:
         1b:97:5b:f7:99:12:2e:08:66:a9:8a:36:af:32:9a:f8:f5:df:
         27:9c:65:5e:ba:0b:48:13:10:2a:fa:11:80:d6:49:01:25:f9:
         07:98:76:68:ba:ed:18:9a:0e:fd:c0:c9:8c:80:aa:ec:d8:6a:
         28:a2:24:8c:c5:9a:32:62:cf:bf:65:7b:16:d6:cd:9e:52:04:
         fb:7c:af:c3:55:6a:4e:14:c1:be:6e:d1:2b:44:7a:a7:f6:14:
         90:5d:d5:c6:ae:d0:5b:2c:96:e9:7c:7a:23:06:c2:cd:76:69:
         da:a4:06:2d:7c:a8:48:6b:91:80:41:99:83:0e:b2:1f:4d:ef:
         11:11:ee:e7:7c:43:62:62:92:ad:39:68:a7:f6:33:3d:63:3c:
         3a:8e:1e:60:61:ad:9b:48:d0:9d:20:8d:90:dd:22:9f:5b:26:
         ca:db:00:99:20:26:67:66:23:53:cf:87:8d:ce:42:24:19:bd:
         d1:59:8d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:03:00 2026 by rpki-client