Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31382e302f32342d3234203d3e20323639383735.roa
File:                     34352e3139302e31382e302f32342d3234203d3e20323639383735.roa (raw, json)
Hash identifier:          4EWj9sDUT0FLizvYOSDLnCBHolvxRsD+7irJ4kc1EWQ=
Subject key identifier:   9F:FF:B9:2F:F8:91:8E:50:80:92:81:39:25:4F:0F:44:9D:26:42:EF
Certificate issuer:       /CN=34F8C1DD8450593AA754227576BF44115ADF427B
Certificate serial:       46E5C5F9FEA8219125F400FADFDF9F98D15BE789
Authority key identifier: 34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31382e302f32342d3234203d3e20323639383735.roa
Signing time:             Tue 06 Jan 2026 20:51:02 +0000
ROA not before:           Tue 06 Jan 2026 20:46:02 +0000
ROA not after:            Tue 05 Jan 2027 20:51:02 +0000
asID:                     269875
IP address blocks:        45.190.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e5:c5:f9:fe:a8:21:91:25:f4:00:fa:df:df:9f:98:d1:5b:e7:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34F8C1DD8450593AA754227576BF44115ADF427B
        Validity
            Not Before: Jan  6 20:46:02 2026 GMT
            Not After : Jan  5 20:51:02 2027 GMT
        Subject: CN=9FFFB92FF8918E5080928139254F0F449D2642EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:95:9f:7c:eb:90:8d:7e:40:65:2e:dd:84:e4:
                    8f:8c:5a:3f:46:2f:29:38:e3:97:22:81:3e:6f:58:
                    dc:2f:fc:2e:a9:2c:a9:b6:dc:d3:c9:7d:73:e6:fd:
                    88:51:37:b0:55:be:d4:68:4b:75:f5:42:76:51:01:
                    4c:d4:97:84:a7:82:ba:0b:3e:26:1e:8b:e8:43:f9:
                    69:3a:3d:c2:c6:76:69:7f:cb:2d:ed:b6:08:a6:46:
                    7c:0d:0d:18:4c:32:06:94:33:7f:f8:61:b3:7f:79:
                    4f:23:2a:01:f7:74:14:2a:4b:6b:90:fb:4e:e1:62:
                    9a:f4:52:28:d2:e1:32:2e:15:00:9c:22:6e:0b:a6:
                    7b:44:97:56:72:2f:17:5c:96:b0:8a:bf:4f:39:7d:
                    e3:52:9a:f5:d6:8f:2d:73:e9:f7:66:03:a2:09:df:
                    fb:22:41:6d:b8:8e:51:bb:b7:e1:81:09:1e:45:80:
                    1d:05:d4:dd:78:31:d7:52:18:95:3f:3e:8e:53:b5:
                    52:cd:b7:35:4c:7b:3b:6e:e5:5b:f4:d2:20:83:cd:
                    c0:f4:5e:0a:6d:89:79:17:68:c1:94:b2:ab:56:0c:
                    76:34:25:23:6a:22:d2:6e:8e:6a:f3:ef:53:75:42:
                    b5:df:6f:ed:a7:00:ba:ac:42:59:50:9b:ad:6a:c5:
                    c3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FF:B9:2F:F8:91:8E:50:80:92:81:39:25:4F:0F:44:9D:26:42:EF
            X509v3 Authority Key Identifier:
                keyid:34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31382e302f32342d3234203d3e20323639383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:13:9a:60:ba:f7:3c:1a:01:c1:42:b1:a5:f7:16:a8:77:5f:
         dc:9a:2f:7e:17:d5:8a:f9:32:d8:99:8b:be:0d:b9:15:75:8c:
         f9:b9:eb:9a:d7:c9:ca:90:19:a8:24:85:02:06:4c:4c:50:74:
         db:d9:2b:db:57:4c:9c:0d:86:2f:eb:78:e0:1e:d5:74:1a:c3:
         b1:56:fe:92:24:c1:ee:38:f2:f2:fa:61:1d:85:9b:f2:4b:18:
         38:34:af:5c:28:a1:42:29:6a:22:c6:35:e7:a5:7d:de:03:14:
         38:d6:d8:ad:fd:22:48:f3:a4:1e:db:a9:19:3c:4d:b9:75:ab:
         a3:a7:de:50:b2:f9:eb:f7:71:e2:bf:14:43:57:bd:bb:11:0c:
         13:bb:19:bb:6a:d7:dd:c6:43:5f:4e:e9:cd:66:f8:32:a6:00:
         1b:3f:a0:ab:46:e1:e3:17:ab:d9:9d:47:55:60:0c:7e:f7:3d:
         eb:82:05:ac:d1:6c:32:94:24:b4:de:0f:2e:78:db:55:d6:65:
         c0:f1:59:56:c1:df:07:49:f5:c0:fe:16:60:88:68:1c:71:8b:
         69:b1:43:41:87:50:8c:85:53:88:bd:44:3d:a3:01:1d:a6:57:
         0e:bf:12:93:db:48:5f:fd:20:5f:5a:7c:29:7a:8e:2d:d3:b4:
         ec:a7:fb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:03:00 2026 by rpki-client