Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/34352e3233302e33332e302f32342d3234203d3e20323636363938.roa
File:                     34352e3233302e33332e302f32342d3234203d3e20323636363938.roa (raw, json)
Hash identifier:          XaCaS0SO3dUP1xlxLass+iaSeHnbNN2s3KJw5dgSBic=
Subject key identifier:   92:C8:AB:69:87:4B:49:FA:91:1F:6A:21:3B:42:61:96:75:38:9B:8E
Certificate issuer:       /CN=C559B04771D8F6B48353C8C4430BDCCE24F336CD
Certificate serial:       1730A07A67831867C530901D8338782AC50805A1
Authority key identifier: C5:59:B0:47:71:D8:F6:B4:83:53:C8:C4:43:0B:DC:CE:24:F3:36:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/34352e3233302e33332e302f32342d3234203d3e20323636363938.roa
Signing time:             Tue 06 Jan 2026 20:57:02 +0000
ROA not before:           Tue 06 Jan 2026 20:52:02 +0000
ROA not after:            Tue 05 Jan 2027 20:57:02 +0000
asID:                     266698
IP address blocks:        45.230.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:30:a0:7a:67:83:18:67:c5:30:90:1d:83:38:78:2a:c5:08:05:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C559B04771D8F6B48353C8C4430BDCCE24F336CD
        Validity
            Not Before: Jan  6 20:52:02 2026 GMT
            Not After : Jan  5 20:57:02 2027 GMT
        Subject: CN=92C8AB69874B49FA911F6A213B42619675389B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:84:ce:d4:0d:2e:81:26:3f:ee:23:53:be:96:
                    e9:f3:e7:7c:23:ef:6a:99:a0:ec:bf:45:81:af:eb:
                    b7:14:7e:dd:80:18:22:0f:93:dd:55:fd:11:1e:91:
                    d0:47:e7:4e:42:f6:7f:62:59:72:2c:af:08:df:f1:
                    4f:71:30:01:c8:4b:e9:b3:c2:c8:82:22:17:f9:c1:
                    28:65:59:f6:c8:b2:46:ae:f8:23:96:60:70:9a:c8:
                    b8:ec:b2:4b:17:73:8b:0c:be:f4:9d:52:da:e3:e9:
                    8d:06:de:fb:3a:a7:13:9c:5c:f6:4d:e9:49:b3:00:
                    77:4d:32:d8:d0:db:64:8f:9a:ae:3b:20:21:f7:91:
                    a3:e0:1f:e3:64:2c:79:85:07:d9:dd:17:5a:02:d9:
                    e6:4e:4d:82:9c:17:be:49:2a:61:58:d2:29:ec:56:
                    3c:9a:fa:f9:05:aa:04:ca:2b:6c:50:49:8e:89:f2:
                    c8:00:ab:a0:35:7f:3b:52:7a:98:13:0c:d3:f8:ad:
                    05:5b:34:aa:ca:dc:5f:e8:83:47:65:68:6a:ea:aa:
                    99:9a:6b:01:b2:52:6b:d6:cc:7a:09:d2:f2:e1:bd:
                    f2:19:8e:26:77:1c:27:d0:71:87:51:cc:e3:07:04:
                    7f:94:18:97:f1:2c:b5:cc:7e:f1:1e:6d:fe:85:0b:
                    7d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C8:AB:69:87:4B:49:FA:91:1F:6A:21:3B:42:61:96:75:38:9B:8E
            X509v3 Authority Key Identifier:
                keyid:C5:59:B0:47:71:D8:F6:B4:83:53:C8:C4:43:0B:DC:CE:24:F3:36:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/34352e3233302e33332e302f32342d3234203d3e20323636363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:0c:c9:fc:5d:bd:9c:65:5a:c9:53:48:58:72:21:16:12:3c:
         37:ac:39:59:d7:72:76:52:71:26:02:be:6f:2f:32:ea:8b:f7:
         1b:82:84:54:9f:63:75:ce:b9:00:89:20:50:06:ea:d7:75:30:
         79:dc:aa:d5:e7:47:39:65:97:6b:bc:35:55:8f:57:98:b3:b1:
         2e:5d:13:62:55:d8:22:d4:f1:49:10:a1:72:18:d4:6d:f9:11:
         d9:5d:f4:3a:ea:9c:99:85:08:9e:e4:f9:34:c1:5b:05:95:ff:
         cb:da:e5:71:03:70:ff:2b:06:1c:db:4b:0d:3b:55:16:00:60:
         07:2c:25:c3:65:de:ea:75:36:67:e8:19:dd:5b:16:fa:a3:00:
         81:02:b6:3d:a1:0a:84:f1:e3:3d:ad:6b:cd:aa:79:ee:57:c8:
         2a:d6:13:d1:49:99:ec:c3:be:43:6f:b8:49:92:af:56:6e:ea:
         6f:0e:40:51:89:8c:fa:4f:55:2c:70:bc:b8:cd:b5:e2:61:21:
         f6:92:0b:ff:97:8b:85:c7:cf:0e:16:84:ea:30:0c:14:53:50:
         55:9a:38:cc:81:a7:72:96:d3:ae:2d:bf:a6:36:88:27:3f:5b:
         54:9c:79:34:5e:f3:25:04:69:3b:5a:92:c7:23:87:7c:4e:b3:
         14:e8:63:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:01:35 2026 by rpki-client