Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31372e302f32342d3234203d3e20323639383735.roa
File:                     34352e3139302e31372e302f32342d3234203d3e20323639383735.roa (raw, json)
Hash identifier:          YTqJxOUGjxbnL2B6PFzlLH5ZysBBxxO6N15wZtmV6bw=
Subject key identifier:   13:79:58:B8:54:30:E3:C3:CB:A8:F4:AA:47:4A:CD:FE:2D:C2:EE:CB
Certificate issuer:       /CN=34F8C1DD8450593AA754227576BF44115ADF427B
Certificate serial:       269A54EF4F1F27444F269326E2EC4EC271639952
Authority key identifier: 34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31372e302f32342d3234203d3e20323639383735.roa
Signing time:             Tue 06 Jan 2026 20:51:02 +0000
ROA not before:           Tue 06 Jan 2026 20:46:02 +0000
ROA not after:            Tue 05 Jan 2027 20:51:02 +0000
asID:                     269875
IP address blocks:        45.190.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:9a:54:ef:4f:1f:27:44:4f:26:93:26:e2:ec:4e:c2:71:63:99:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34F8C1DD8450593AA754227576BF44115ADF427B
        Validity
            Not Before: Jan  6 20:46:02 2026 GMT
            Not After : Jan  5 20:51:02 2027 GMT
        Subject: CN=137958B85430E3C3CBA8F4AA474ACDFE2DC2EECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:33:29:8e:43:9a:fc:b1:ff:a8:be:a6:fe:6e:
                    54:be:00:10:80:6e:3d:20:f3:89:59:2b:82:d9:da:
                    93:bf:be:18:c7:52:ea:70:94:bc:e1:ca:03:a8:d8:
                    06:42:55:2c:23:49:48:36:b1:37:c4:ed:54:67:23:
                    6f:6c:90:86:51:3a:45:08:eb:02:83:33:a8:e5:6a:
                    81:c1:6a:91:22:4b:c4:83:1a:43:6a:11:05:02:6b:
                    ae:8f:52:60:d6:d3:7f:69:de:0e:88:ce:98:a2:9a:
                    9f:85:95:08:70:b7:51:82:93:0f:26:cc:57:17:07:
                    43:00:1b:ea:c8:b8:62:9d:2a:58:08:90:be:c4:6b:
                    8b:79:59:55:bb:8b:81:b2:a4:84:b1:8f:dd:81:89:
                    e2:ab:70:55:61:d6:80:03:4d:6e:6e:5a:f2:c1:63:
                    5f:02:c0:31:03:c4:d2:b6:14:3a:5b:b3:cc:71:74:
                    b4:77:f7:5c:fa:cb:e0:bf:e2:97:1d:4f:f5:91:95:
                    e9:ba:3b:5e:3e:da:2e:70:2c:89:58:1f:f3:6a:e3:
                    b0:8c:7f:c6:a3:48:b1:ea:d0:50:5b:ef:e6:9a:9d:
                    4a:e6:d9:93:cf:be:c3:fc:10:0c:6b:32:c5:a2:04:
                    2c:8a:3d:89:07:e9:25:11:50:2f:cf:fb:6c:cd:af:
                    a3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:79:58:B8:54:30:E3:C3:CB:A8:F4:AA:47:4A:CD:FE:2D:C2:EE:CB
            X509v3 Authority Key Identifier:
                keyid:34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31372e302f32342d3234203d3e20323639383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:da:53:f0:78:ed:ea:01:f5:9e:2e:36:92:8b:71:b0:f4:7d:
         4f:7d:75:d4:2f:f5:eb:81:7a:65:5a:dd:0d:cd:d1:ce:95:8e:
         14:f6:92:64:7e:a8:85:8d:ed:1a:df:f6:86:72:2c:6d:d6:de:
         a5:63:14:ff:cc:87:95:84:5a:72:b8:71:d3:9c:7f:12:5c:35:
         41:5c:bc:ef:27:3e:33:ff:6f:10:ec:ab:ee:85:ff:42:41:02:
         30:91:ec:5f:d2:eb:05:bf:90:69:80:7d:6a:84:4d:12:9b:1d:
         4c:ca:1e:74:50:33:eb:8b:0d:27:e8:21:49:e0:c6:c0:da:e0:
         bc:df:d7:d8:26:de:40:bb:35:2f:fa:e7:2d:11:78:c2:e4:c5:
         b4:40:60:c1:6b:47:6b:19:78:7d:ba:fb:63:ef:4c:09:ea:95:
         92:b1:a1:60:b8:06:9b:df:d8:bc:61:27:2d:e3:cf:d9:a7:fc:
         8d:b8:e4:29:f6:b2:1c:3e:c0:97:66:ab:13:c1:60:4b:99:b2:
         8c:8d:b8:e2:0f:51:71:5f:9b:f8:d0:b4:9f:6a:fe:71:3c:5f:
         14:b8:fd:a4:d9:8b:80:79:39:99:13:3a:c9:13:03:3a:de:67:
         81:95:3f:62:19:31:38:de:dd:45:dd:be:32:75:0f:49:c7:eb:
         9d:6e:f5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:03:00 2026 by rpki-client