Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232302e302f32342d3234203d3e20323636363834.roa
File:                     34352e3232382e3232302e302f32342d3234203d3e20323636363834.roa (raw, json)
Hash identifier:          V7EOpBrg3O0mfGhd/EIEsvByJHYv9/bJz43tSxJshwY=
Subject key identifier:   4D:08:84:AA:0B:3B:4E:F0:C0:BB:CE:72:5D:57:E0:DF:E6:BE:CA:7E
Certificate issuer:       /CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B
Certificate serial:       03708830DE6E6DAC2F59B3DF3EDDFF3AC4103B53
Authority key identifier: 63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232302e302f32342d3234203d3e20323636363834.roa
Signing time:             Tue 06 Jan 2026 19:38:26 +0000
ROA not before:           Tue 06 Jan 2026 19:33:26 +0000
ROA not after:            Tue 05 Jan 2027 19:38:26 +0000
asID:                     266684
IP address blocks:        45.228.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:70:88:30:de:6e:6d:ac:2f:59:b3:df:3e:dd:ff:3a:c4:10:3b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B
        Validity
            Not Before: Jan  6 19:33:26 2026 GMT
            Not After : Jan  5 19:38:26 2027 GMT
        Subject: CN=4D0884AA0B3B4EF0C0BBCE725D57E0DFE6BECA7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7a:53:a2:bd:00:c7:8d:d6:19:65:2c:69:51:
                    b3:10:7d:5c:a4:2a:4a:79:d1:f8:72:5c:5c:97:2c:
                    ae:e0:34:ec:2c:a3:6b:5b:71:78:49:3d:d2:05:21:
                    db:55:54:6c:f3:ec:b1:78:46:a3:56:c7:90:50:5d:
                    c4:f9:ca:92:2d:2f:d4:62:78:18:2e:e2:84:0f:53:
                    de:09:18:14:a4:b5:50:04:46:0e:35:ac:33:f2:9e:
                    5b:1d:23:9e:87:6c:c6:2d:07:4a:78:25:06:e8:0e:
                    aa:14:97:32:77:72:7b:6a:aa:19:f1:eb:ff:03:6f:
                    59:b9:fe:5e:a1:ec:66:33:68:e9:e9:3d:64:42:89:
                    bf:ac:99:c4:35:26:c1:d2:5c:17:50:0f:9b:ff:51:
                    cb:56:0e:ad:75:36:5d:3f:ea:ba:eb:95:4c:7c:8c:
                    cb:4a:6b:63:a0:4f:f2:6f:e7:35:cc:0c:18:33:62:
                    b8:d2:5d:fb:cb:1f:e0:d6:d2:15:36:55:c6:64:52:
                    8a:e0:53:ab:b9:6c:f5:97:35:b6:75:43:2e:58:f2:
                    34:3a:65:a3:5a:ac:3a:4d:03:eb:e9:5d:ef:cd:6a:
                    5f:7c:c2:bb:62:64:45:f5:3e:4a:91:fc:e5:11:26:
                    ae:b8:2b:9d:bc:e7:17:c1:8b:d5:83:81:e1:bb:59:
                    32:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:08:84:AA:0B:3B:4E:F0:C0:BB:CE:72:5D:57:E0:DF:E6:BE:CA:7E
            X509v3 Authority Key Identifier:
                keyid:63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232302e302f32342d3234203d3e20323636363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:e7:77:73:6e:fa:9b:2f:2f:53:4c:bd:bf:5a:6e:c9:99:2f:
         15:ef:03:22:0b:4e:31:76:30:bd:17:d1:a7:6f:3d:3a:71:e2:
         8e:d0:18:9b:fc:1c:29:d2:c7:b8:9f:3c:9b:35:50:8a:2d:28:
         b2:2c:53:a7:7b:20:18:a5:63:c7:c0:bc:41:69:4b:bb:d6:73:
         f2:07:66:9f:c2:d6:61:51:21:9e:fa:9e:8f:e1:6d:e8:0e:69:
         ac:43:41:9a:28:5b:1f:14:26:11:aa:d6:79:f7:ab:25:a9:1c:
         82:4f:d6:32:24:e6:61:30:21:ca:1e:25:60:45:f4:4b:b8:1e:
         ac:ed:dd:57:74:43:26:9d:88:b2:bf:b5:f0:5c:9f:2b:96:89:
         6e:e2:9c:98:19:0c:ee:6a:d9:f6:b1:1d:5e:b4:a4:e3:87:32:
         a5:7c:1b:db:e5:4d:72:9f:04:e0:ac:98:bd:01:67:29:3a:8d:
         03:3b:d8:c1:5a:83:d6:34:ad:00:12:24:a3:bb:bc:67:77:09:
         42:07:89:39:70:49:9e:3a:af:30:7c:43:d8:a4:42:48:25:04:
         fb:13:92:48:ad:74:5c:70:af:1c:dd:9a:90:44:3d:fb:bd:e2:
         78:9a:a1:a5:60:08:88:50:0e:42:fb:b9:04:8d:82:7a:79:37:
         f4:8d:38:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:20:08 2026 by rpki-client