Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/34352e3232392e37322e302f32342d3234203d3e20323636363938.roa
File:                     34352e3232392e37322e302f32342d3234203d3e20323636363938.roa (raw, json)
Hash identifier:          QfFpMRW/LZeqO7jprv645UvumIKMWBecZ251Ra10q9g=
Subject key identifier:   56:FF:B9:CE:C5:3C:BE:84:75:D3:F2:93:47:21:65:6C:B6:D4:9E:06
Certificate issuer:       /CN=C559B04771D8F6B48353C8C4430BDCCE24F336CD
Certificate serial:       3045C1851A81D1FAABE80DF022401CF4A6264A50
Authority key identifier: C5:59:B0:47:71:D8:F6:B4:83:53:C8:C4:43:0B:DC:CE:24:F3:36:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/34352e3232392e37322e302f32342d3234203d3e20323636363938.roa
Signing time:             Thu 05 Feb 2026 18:29:15 +0000
ROA not before:           Thu 05 Feb 2026 18:24:15 +0000
ROA not after:            Thu 04 Feb 2027 18:29:15 +0000
asID:                     266698
IP address blocks:        45.229.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:45:c1:85:1a:81:d1:fa:ab:e8:0d:f0:22:40:1c:f4:a6:26:4a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C559B04771D8F6B48353C8C4430BDCCE24F336CD
        Validity
            Not Before: Feb  5 18:24:15 2026 GMT
            Not After : Feb  4 18:29:15 2027 GMT
        Subject: CN=56FFB9CEC53CBE8475D3F2934721656CB6D49E06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:46:4d:8f:11:92:49:c9:3e:d7:0b:69:53:a6:
                    7d:c4:39:46:fe:bb:95:7b:25:1b:e1:c9:b0:38:3e:
                    86:70:c6:1c:dc:79:1e:a8:69:9e:ed:cf:fb:7f:25:
                    2d:5a:c5:91:0c:8e:7c:ee:a0:15:6d:bd:a7:7e:20:
                    00:a5:69:41:d7:15:96:85:66:a5:b2:69:98:ae:03:
                    6e:4f:f5:e4:1f:cb:cd:d2:73:2c:37:62:95:55:e8:
                    aa:64:ed:60:34:e0:46:12:f6:92:36:ca:8e:5e:2c:
                    9e:48:12:e9:dd:f1:64:92:8e:61:c5:12:9d:06:fd:
                    2d:35:88:97:a8:62:bd:50:38:95:3c:a5:9d:cf:9f:
                    3d:77:fb:fe:b4:e1:94:83:e9:59:65:76:51:70:32:
                    dc:d3:99:50:a0:5d:e0:19:87:b1:00:db:e4:e4:8f:
                    b0:15:ab:f2:a2:2f:1e:3c:25:a2:2c:e9:6d:b0:08:
                    ea:a5:0f:ea:43:ae:15:9c:57:5a:b6:1f:cd:46:b4:
                    f7:fb:04:3d:53:a4:d9:8d:49:39:f8:06:45:07:ea:
                    a6:f8:fc:ee:a1:5b:58:11:33:16:c0:41:43:6a:6f:
                    1a:3e:87:dc:26:73:19:0b:df:24:e5:f2:87:94:6e:
                    5a:00:40:a9:c9:25:50:60:20:c5:f9:e4:61:1a:f2:
                    22:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FF:B9:CE:C5:3C:BE:84:75:D3:F2:93:47:21:65:6C:B6:D4:9E:06
            X509v3 Authority Key Identifier:
                keyid:C5:59:B0:47:71:D8:F6:B4:83:53:C8:C4:43:0B:DC:CE:24:F3:36:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/34352e3232392e37322e302f32342d3234203d3e20323636363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:7e:0c:fc:37:b7:7b:66:bb:a5:6d:8a:c6:5c:cd:20:66:13:
         3a:e0:8c:ca:53:d6:f9:1f:7b:f6:28:33:b2:e9:6a:0e:6d:a9:
         68:ab:72:5d:f9:21:d1:34:25:d6:24:96:21:28:ab:48:40:13:
         ca:d3:ab:fb:c4:01:27:fb:76:00:46:9b:48:a7:11:7f:8d:15:
         38:20:88:a5:6e:2d:77:7d:83:40:bc:74:1c:9d:2a:36:c7:01:
         80:67:08:3b:58:58:57:40:7a:71:20:a3:b0:cd:95:dd:0a:07:
         7e:26:3d:94:21:32:c7:e4:1a:6e:4c:6a:45:7f:d0:60:59:ff:
         92:38:88:49:e1:06:07:0c:a4:fc:b4:12:cd:cc:7a:d8:83:f8:
         9c:f9:29:d1:7d:93:75:dd:22:fc:23:d1:8e:a5:5d:1a:53:c1:
         7b:30:82:87:72:2d:fd:4d:31:a8:67:06:1c:ed:aa:bc:89:26:
         bd:3f:71:7d:41:66:bd:de:c3:aa:22:a3:d1:09:19:c7:55:75:
         46:a1:0a:25:1e:7c:29:d7:19:d0:a1:03:4d:b7:3b:d9:9b:11:
         5e:72:49:8d:1f:fa:fe:84:41:c7:96:3e:20:18:6d:a7:cc:b1:
         bf:fb:76:0f:70:4b:61:aa:04:b3:c3:2f:af:8c:96:9c:cd:38:
         df:1c:88:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:02:29 2026 by rpki-client