Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/34352e3232382e35342e302f32332d3234203d3e20323639383338.roa
File:                     34352e3232382e35342e302f32332d3234203d3e20323639383338.roa (raw, json)
Hash identifier:          f8oEcG4B4/XtC0ZPPtNMECDF3VxhRnddygVTVucOxyI=
Subject key identifier:   D0:7C:FA:47:9C:8E:CA:CF:E1:20:6C:BC:2E:BD:D0:6B:9C:E3:F7:13
Certificate issuer:       /CN=A8F348342236CEF0874883E7673551354708EDDE
Certificate serial:       0E164283E420620D375B04C2373742E0AB98BEBF
Authority key identifier: A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/34352e3232382e35342e302f32332d3234203d3e20323639383338.roa
Signing time:             Tue 17 Feb 2026 17:30:56 +0000
ROA not before:           Tue 17 Feb 2026 17:25:56 +0000
ROA not after:            Tue 16 Feb 2027 17:30:56 +0000
asID:                     269838
IP address blocks:        45.228.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:16:42:83:e4:20:62:0d:37:5b:04:c2:37:37:42:e0:ab:98:be:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F348342236CEF0874883E7673551354708EDDE
        Validity
            Not Before: Feb 17 17:25:56 2026 GMT
            Not After : Feb 16 17:30:56 2027 GMT
        Subject: CN=D07CFA479C8ECACFE1206CBC2EBDD06B9CE3F713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0e:2c:9b:26:bc:1b:73:21:6f:7f:79:cd:f7:
                    39:5c:3a:b4:2f:e2:16:fd:e8:cd:0f:1a:9d:9d:47:
                    69:00:44:71:c0:d3:d5:15:55:5b:ff:2e:c3:98:a8:
                    a3:90:89:8f:5d:78:29:b0:e2:2f:7f:ef:81:03:47:
                    c4:8e:89:83:4a:d1:77:ab:95:97:1c:b7:b5:54:3b:
                    39:40:1e:c0:b1:58:14:69:2b:61:7c:19:0c:c2:c7:
                    27:cb:c1:82:97:86:26:1d:79:3b:e5:67:16:9b:a9:
                    ef:5f:92:44:50:f2:5e:7a:04:cb:06:ae:58:f6:1c:
                    99:e9:f0:6d:5e:ec:4b:a3:0d:78:2d:c1:f0:2b:d3:
                    fd:5f:12:7e:3c:6b:53:53:0b:fc:e0:c0:cd:48:3c:
                    20:7d:70:87:b2:47:87:2d:58:70:da:9b:54:a2:69:
                    05:37:48:b3:cb:44:34:aa:b6:73:fb:30:58:eb:7e:
                    89:b0:ac:30:f3:4f:9c:b9:de:58:5b:d1:64:6c:74:
                    37:17:13:de:54:4d:72:2a:aa:d8:af:f6:7c:0b:16:
                    0d:0a:40:c3:e9:7d:e0:69:61:3c:d8:e6:92:ad:e0:
                    46:b7:9e:33:be:53:29:9c:64:61:d4:9e:b7:98:a0:
                    91:f1:31:4f:1e:a6:05:8c:f5:97:a3:53:e5:1f:ec:
                    1c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7C:FA:47:9C:8E:CA:CF:E1:20:6C:BC:2E:BD:D0:6B:9C:E3:F7:13
            X509v3 Authority Key Identifier:
                keyid:A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/34352e3232382e35342e302f32332d3234203d3e20323639383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:42:77:b4:f8:6f:bb:91:f9:3f:15:c8:a4:05:0e:53:8c:ec:
         ea:10:a3:99:e3:d2:17:72:b1:98:92:6d:2a:89:cb:22:6e:6e:
         4a:0b:bd:20:90:7b:e5:30:0a:22:1d:83:e5:64:5e:e5:23:6e:
         35:77:a4:34:00:29:d0:37:e5:db:cf:7e:1c:b0:7e:f9:e5:45:
         ee:b7:99:c7:b8:ea:52:2c:bc:f1:3d:2e:22:05:e7:0c:29:69:
         ac:c7:d6:26:74:45:46:69:ba:de:5a:2e:f3:e3:b8:29:79:ba:
         36:16:f0:b2:0c:1c:24:7f:03:05:33:f5:3f:e6:3b:ec:2e:42:
         60:e5:4f:9e:99:7d:19:6a:ff:cf:e3:5f:32:08:5d:7b:fe:ca:
         0f:e2:eb:fc:c1:26:2c:a9:80:0e:6c:e4:6d:14:5f:fc:3e:0e:
         e6:37:e5:f8:4d:83:4f:16:cc:29:98:fd:d8:58:2c:4c:21:7b:
         5c:bd:af:3a:01:a3:27:1d:89:3c:10:f8:04:88:15:3e:97:16:
         15:a6:61:59:af:3b:52:a4:5d:b8:d4:07:ad:11:ac:7d:b7:4a:
         77:7b:e2:a3:96:8a:a9:87:3f:92:b7:14:99:db:8b:47:6d:b8:
         63:fd:5c:8b:b7:21:dc:c9:06:be:36:a9:9b:4f:7b:90:27:4e:
         63:07:91:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:39:06 2026 by rpki-client