Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232302e302f32322d3232203d3e20323636363834.roa
File:                     34352e3232382e3232302e302f32322d3232203d3e20323636363834.roa (raw, json)
Hash identifier:          Ypv01WYcT5+2H6U4umT/eTj7I6ff7M5xVx+SflF8sq4=
Subject key identifier:   EB:85:CF:6D:70:5F:91:04:2A:A4:46:39:C1:68:3A:D6:8B:88:70:87
Certificate issuer:       /CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B
Certificate serial:       5D0948AE622BDE8D83244085ADDB853FE0CC5AFF
Authority key identifier: 63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232302e302f32322d3232203d3e20323636363834.roa
Signing time:             Tue 06 Jan 2026 19:38:27 +0000
ROA not before:           Tue 06 Jan 2026 19:33:27 +0000
ROA not after:            Tue 05 Jan 2027 19:38:27 +0000
asID:                     266684
IP address blocks:        45.228.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:09:48:ae:62:2b:de:8d:83:24:40:85:ad:db:85:3f:e0:cc:5a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B
        Validity
            Not Before: Jan  6 19:33:27 2026 GMT
            Not After : Jan  5 19:38:27 2027 GMT
        Subject: CN=EB85CF6D705F91042AA44639C1683AD68B887087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ae:d0:36:72:90:ee:2b:2c:72:bc:61:08:99:
                    f9:b3:2c:0c:e5:f8:cb:92:1d:ea:6b:2b:6a:f9:01:
                    5f:38:ec:de:cd:80:89:ee:2c:38:03:55:b1:44:ae:
                    a6:c1:9e:6f:5b:ca:5f:34:f8:ca:42:8d:02:1f:9d:
                    d4:8a:81:55:f9:4a:0b:bd:2a:96:77:42:99:52:c8:
                    a8:fa:3f:46:46:98:73:5f:ab:24:ea:d7:6d:48:79:
                    dc:a9:aa:cf:a1:11:81:98:01:34:f8:39:93:21:f3:
                    7f:ed:90:61:33:cf:63:fd:fd:fe:bb:71:df:b6:8a:
                    c8:77:50:1e:c3:1c:f4:88:c5:a2:c3:85:3d:df:69:
                    50:4c:a1:0b:4a:30:4c:b5:be:50:6f:2f:59:76:0f:
                    87:b5:51:ef:c5:91:5d:e8:d8:25:e2:e2:da:a0:19:
                    89:a3:d6:46:13:25:ee:ed:cf:8e:a2:3c:0a:94:dd:
                    b6:b4:9b:98:40:38:c1:e1:df:ca:b2:0a:c5:e2:ae:
                    e2:13:19:40:3d:d1:53:33:4e:19:83:0b:e4:d6:b8:
                    69:f8:4e:3a:44:61:75:30:33:47:98:4e:e5:5f:fd:
                    88:7c:3f:5f:e4:77:ea:44:73:b1:83:24:6e:b1:47:
                    d4:cb:0a:c5:b9:c8:2a:9c:f8:b5:00:40:1d:92:4f:
                    6b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:85:CF:6D:70:5F:91:04:2A:A4:46:39:C1:68:3A:D6:8B:88:70:87
            X509v3 Authority Key Identifier:
                keyid:63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232302e302f32322d3232203d3e20323636363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:bd:35:33:d2:d8:b0:27:e5:ac:b4:4a:20:32:c9:a4:a7:d4:
         f0:f8:d5:dc:ae:29:8f:b2:66:93:62:ed:fb:4a:f0:83:6a:ac:
         5a:d1:46:a8:7a:c0:d6:53:88:78:a1:34:33:0b:ca:80:c6:2d:
         e3:01:1f:5d:1d:39:56:7c:17:6b:69:fd:bc:59:86:78:e1:e0:
         d8:68:c6:17:00:2f:ac:5b:42:bc:c0:97:56:00:68:0b:a3:76:
         ca:b9:8f:30:7e:ce:60:e1:dc:4d:60:b9:30:c5:ed:d5:44:e9:
         8b:d0:14:b2:3b:59:8c:e3:c7:e0:0f:68:65:97:3e:61:97:cc:
         ef:ae:02:7c:d2:cf:5b:85:7f:e0:c0:66:52:ef:b4:1b:d4:d3:
         84:77:cc:92:61:49:02:ab:e8:7e:35:51:e7:bc:aa:48:48:20:
         d0:5a:21:88:07:be:46:84:e6:f3:ed:1f:50:d7:7f:33:bb:a5:
         91:08:c7:7c:14:67:0e:4f:8d:cc:93:8c:78:aa:db:9e:14:40:
         34:23:75:77:77:7f:c4:48:d2:0b:fa:47:e6:e8:5c:8d:ce:47:
         2b:c9:08:2c:14:11:5e:43:d8:8a:62:10:2b:77:93:83:3d:c7:
         86:8a:f9:b7:ad:59:5c:a6:87:3f:24:1c:15:a0:e0:51:99:4c:
         45:cf:4c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:50:47 2026 by rpki-client