Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB7DD4B24DA964B2F0F2497083EB6219C1BA77A7AF55488952597910589F3B75/0/34352e3138382e3234382e302f32322d3234203d3e20323639383634.roa
File:                     34352e3138382e3234382e302f32322d3234203d3e20323639383634.roa (raw, json)
Hash identifier:          SSM2W4hDqLPVdic0ULxVcGQyz6Q+UXYd+s7Nn2TD1Tw=
Subject key identifier:   1F:BC:C3:37:15:1F:F1:76:25:F6:37:89:F1:1C:6B:0A:8C:12:DB:2C
Certificate issuer:       /CN=4F4B9F71CC12D5FF90BEEDA372D687689D069F57
Certificate serial:       1D6B43D6E5F1F7FE01C47029BA5045568A916302
Authority key identifier: 4F:4B:9F:71:CC:12:D5:FF:90:BE:ED:A3:72:D6:87:68:9D:06:9F:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F4B9F71CC12D5FF90BEEDA372D687689D069F57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB7DD4B24DA964B2F0F2497083EB6219C1BA77A7AF55488952597910589F3B75/0/34352e3138382e3234382e302f32322d3234203d3e20323639383634.roa
Signing time:             Tue 06 Jan 2026 19:12:36 +0000
ROA not before:           Tue 06 Jan 2026 19:07:36 +0000
ROA not after:            Tue 05 Jan 2027 19:12:36 +0000
asID:                     269864
IP address blocks:        45.188.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB7DD4B24DA964B2F0F2497083EB6219C1BA77A7AF55488952597910589F3B75/0/4F4B9F71CC12D5FF90BEEDA372D687689D069F57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB7DD4B24DA964B2F0F2497083EB6219C1BA77A7AF55488952597910589F3B75/0/4F4B9F71CC12D5FF90BEEDA372D687689D069F57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F4B9F71CC12D5FF90BEEDA372D687689D069F57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6b:43:d6:e5:f1:f7:fe:01:c4:70:29:ba:50:45:56:8a:91:63:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F4B9F71CC12D5FF90BEEDA372D687689D069F57
        Validity
            Not Before: Jan  6 19:07:36 2026 GMT
            Not After : Jan  5 19:12:36 2027 GMT
        Subject: CN=1FBCC337151FF17625F63789F11C6B0A8C12DB2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:28:26:22:79:48:2f:9b:45:16:41:27:83:7c:
                    2a:76:4f:e5:0d:17:4f:68:9c:9a:a7:ac:3e:38:9d:
                    d4:28:f3:d1:d4:e1:6f:bf:2f:9d:23:8f:7e:92:ec:
                    bc:44:6e:b4:6b:7e:6d:35:d5:b7:46:a0:83:dd:52:
                    c2:73:64:99:f9:da:84:e5:97:8f:02:dc:be:a3:6c:
                    7c:ca:94:73:50:41:53:31:9c:2f:1a:a4:64:c0:c4:
                    6a:d0:62:c6:b8:77:a0:37:e0:e5:08:15:8a:aa:1c:
                    15:86:88:d3:07:cc:c8:a8:4c:38:94:7f:db:8a:d6:
                    4d:8c:7b:90:f3:03:5f:4d:6f:71:aa:e1:48:b9:34:
                    0f:90:97:b4:09:6a:a3:3c:01:23:43:de:21:d5:6a:
                    ef:fe:1e:61:d2:75:83:15:63:ef:b5:a9:14:82:7d:
                    01:6f:d3:3e:52:e7:bd:b2:cf:25:9d:bc:b8:d6:16:
                    82:bf:64:68:66:3f:ad:06:19:e9:d3:86:82:a4:cd:
                    c5:c9:cb:4b:57:d2:db:65:bf:5d:a2:cf:a8:e7:23:
                    74:2c:d2:0b:ba:83:ef:6d:61:48:cb:83:b9:01:a8:
                    ad:6c:1e:f9:bf:7c:98:cd:d7:80:24:08:1c:88:80:
                    f2:7c:6f:4c:c1:62:ef:a3:90:c1:de:3e:b3:b5:ea:
                    9f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BC:C3:37:15:1F:F1:76:25:F6:37:89:F1:1C:6B:0A:8C:12:DB:2C
            X509v3 Authority Key Identifier:
                keyid:4F:4B:9F:71:CC:12:D5:FF:90:BE:ED:A3:72:D6:87:68:9D:06:9F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB7DD4B24DA964B2F0F2497083EB6219C1BA77A7AF55488952597910589F3B75/0/4F4B9F71CC12D5FF90BEEDA372D687689D069F57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F4B9F71CC12D5FF90BEEDA372D687689D069F57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB7DD4B24DA964B2F0F2497083EB6219C1BA77A7AF55488952597910589F3B75/0/34352e3138382e3234382e302f32322d3234203d3e20323639383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:23:e0:b6:60:ab:a2:5e:0a:d7:a4:8e:51:77:36:d8:48:49:
         5e:49:b0:8e:36:ef:3f:a0:eb:bd:66:05:db:7e:44:7c:60:ea:
         18:97:a3:bb:3a:af:3e:19:3b:28:75:ac:79:29:2a:5e:93:f4:
         50:88:02:5b:a9:81:ae:ee:97:71:1f:a8:74:b7:96:45:79:31:
         ea:9d:fc:14:3d:55:ee:e8:d9:79:9d:ab:7c:3a:01:28:03:95:
         7c:27:58:2c:a4:f2:ea:95:bb:48:8f:0b:fb:24:cd:d9:f3:c0:
         c0:0a:07:37:68:9b:c2:d2:a3:13:e9:25:f5:24:af:de:b0:6d:
         0d:b7:1a:15:69:ea:bb:c2:3b:e6:86:48:fa:3d:98:ab:e4:14:
         ed:e0:cc:22:18:49:2a:b3:d0:6c:d7:8a:57:e1:06:88:21:7c:
         c3:2d:13:0b:31:17:99:59:75:6c:7c:ff:72:9b:86:1d:c1:12:
         e8:59:58:b8:32:9a:04:aa:00:6e:e4:0e:aa:1d:cf:54:2f:50:
         f8:24:7d:55:b5:d6:a4:42:43:51:f1:7d:de:62:17:8f:a5:84:
         df:46:dd:2c:30:c6:70:fd:bd:eb:e1:21:b4:d7:8b:cf:11:60:
         05:0f:cd:e7:27:03:99:db:bc:4d:48:cc:eb:2c:3c:6b:bc:28:
         a9:91:07:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:14:03 2026 by rpki-client