Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232332e302f32342d3234203d3e20323636363834.roa
File:                     34352e3232382e3232332e302f32342d3234203d3e20323636363834.roa (raw, json)
Hash identifier:          pGrpmw6wN0IYJfmg4+T+2+akqXPmU/zf8RUNj2gjqZo=
Subject key identifier:   C6:4C:C9:66:18:66:45:CE:8E:F1:80:A6:3B:26:1D:A3:84:CD:82:CC
Certificate issuer:       /CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B
Certificate serial:       6702C4EE4C8148282EF40E01DCA87B3B834D0552
Authority key identifier: 63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232332e302f32342d3234203d3e20323636363834.roa
Signing time:             Tue 06 Jan 2026 19:38:26 +0000
ROA not before:           Tue 06 Jan 2026 19:33:26 +0000
ROA not after:            Tue 05 Jan 2027 19:38:26 +0000
asID:                     266684
IP address blocks:        45.228.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:02:c4:ee:4c:81:48:28:2e:f4:0e:01:dc:a8:7b:3b:83:4d:05:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B
        Validity
            Not Before: Jan  6 19:33:26 2026 GMT
            Not After : Jan  5 19:38:26 2027 GMT
        Subject: CN=C64CC966186645CE8EF180A63B261DA384CD82CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:32:25:69:7c:a7:e7:e1:a8:45:0e:b6:12:0d:
                    a1:26:3f:c6:9c:c2:e0:59:ca:8d:46:c4:56:0b:38:
                    b6:53:5a:b7:87:1d:6e:bf:a8:c5:4e:bc:b9:6e:df:
                    32:e3:6b:64:85:95:82:5e:cb:e8:84:ea:99:a5:42:
                    46:00:fa:fe:db:33:ff:73:cc:0a:44:c7:8e:48:ca:
                    f3:ba:e1:bb:a6:5f:f4:76:b5:07:9f:1b:49:79:cc:
                    ad:35:9c:6b:0a:41:50:4d:5c:76:f1:0b:87:b5:4c:
                    dc:3c:4d:3b:ce:f9:ac:82:07:47:8a:b4:2b:71:c9:
                    eb:ce:52:3b:f6:c6:7d:f9:77:1b:9b:23:72:fa:af:
                    01:7a:21:c3:aa:c4:89:ad:59:f4:83:54:d7:c2:cc:
                    63:da:3c:2b:0a:7a:51:d4:b3:02:f2:b7:fa:77:e5:
                    c3:14:8b:ad:d0:1d:b7:3d:6b:d7:a0:82:0d:d5:4a:
                    67:08:f4:7e:72:36:48:98:ee:c7:90:13:7e:a3:68:
                    df:87:d1:15:8b:8a:d3:57:a9:10:59:cc:4b:c5:18:
                    95:d4:a2:cd:ad:e2:45:3e:bd:da:63:af:40:b3:7b:
                    1c:40:21:34:2f:47:7f:9e:4b:78:09:ad:ba:9c:f6:
                    da:9a:58:7a:45:55:02:d3:b5:29:f3:43:14:63:64:
                    c2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4C:C9:66:18:66:45:CE:8E:F1:80:A6:3B:26:1D:A3:84:CD:82:CC
            X509v3 Authority Key Identifier:
                keyid:63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232332e302f32342d3234203d3e20323636363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:0b:50:a1:69:be:ad:9f:e8:31:97:1c:9e:8d:71:40:18:31:
         c8:49:31:35:37:fb:5f:77:3e:c3:25:51:84:8d:c3:56:aa:b8:
         35:b4:65:b2:bf:41:eb:5a:46:fd:63:1d:56:70:a1:a8:cb:da:
         01:4c:40:54:4c:86:99:37:dc:60:f0:0d:4f:50:f3:9a:22:04:
         fe:1d:b5:e6:b1:b0:7a:55:21:4f:97:f7:46:e8:7b:2c:a9:4f:
         13:01:27:57:8a:38:db:ea:3a:c7:bc:1e:5b:c5:f3:30:55:49:
         ac:6d:e0:66:a2:b8:d6:16:b6:7f:18:10:13:76:8c:a7:f3:93:
         0a:3a:3c:a4:9a:8c:67:d1:1c:ed:c1:57:e5:4c:1a:41:57:8d:
         21:d8:99:d5:6c:f8:e8:da:c8:1d:68:a4:b8:52:67:ff:bd:f3:
         ac:a3:3b:a9:eb:15:02:f3:53:fa:16:e6:4e:b8:90:b6:d9:19:
         a6:43:10:96:b2:1f:6a:de:cf:d6:30:23:b2:2c:93:0f:d5:ec:
         8e:11:cf:c2:fe:c1:f4:7d:ea:bf:f1:06:dd:f9:63:3a:f4:cc:
         e4:70:b4:8a:24:b0:97:74:7f:01:4b:fa:cd:9d:9e:af:7a:6a:
         b7:47:07:f8:7b:88:c4:ec:67:10:ce:86:c2:10:48:4f:0c:9a:
         8b:7f:d3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:01:01 2026 by rpki-client