Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/34352e3233342e38382e302f32322d3234203d3e20323636373632.roa
File:                     34352e3233342e38382e302f32322d3234203d3e20323636373632.roa (raw, json)
Hash identifier:          HklnkmYn4f3rA095ZoC1nUW/dwLMLj4KAR5O/DS7iOY=
Subject key identifier:   53:FA:F3:3D:98:AF:6E:97:74:E7:E7:D7:B9:AC:B6:01:06:D2:40:FF
Certificate issuer:       /CN=D09418521EA53A7D75F8FDF01F073B4955B0B259
Certificate serial:       1353FBDC424FD51F41236F9C9370EFCEC46B6AC0
Authority key identifier: D0:94:18:52:1E:A5:3A:7D:75:F8:FD:F0:1F:07:3B:49:55:B0:B2:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/34352e3233342e38382e302f32322d3234203d3e20323636373632.roa
Signing time:             Tue 06 Jan 2026 19:21:56 +0000
ROA not before:           Tue 06 Jan 2026 19:16:56 +0000
ROA not after:            Tue 05 Jan 2027 19:21:56 +0000
asID:                     266762
IP address blocks:        45.234.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:53:fb:dc:42:4f:d5:1f:41:23:6f:9c:93:70:ef:ce:c4:6b:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D09418521EA53A7D75F8FDF01F073B4955B0B259
        Validity
            Not Before: Jan  6 19:16:56 2026 GMT
            Not After : Jan  5 19:21:56 2027 GMT
        Subject: CN=53FAF33D98AF6E9774E7E7D7B9ACB60106D240FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3f:0d:10:69:e8:a2:fb:24:28:01:0a:80:6e:
                    01:c9:b8:b2:7d:fc:b0:b4:e1:63:c9:60:fc:2e:6d:
                    9f:d9:de:1d:87:f9:9b:05:e4:f6:8f:17:50:64:e6:
                    4b:e7:78:c8:64:b4:a8:76:cc:ee:78:ee:83:b1:b0:
                    c6:6f:3f:46:fb:35:0c:ef:c4:6b:0c:c9:f7:15:ed:
                    52:82:22:15:ef:db:e4:50:d5:09:f0:60:b2:39:f4:
                    3b:0e:39:9d:4d:3f:9d:15:50:13:94:a8:ce:b7:3a:
                    05:1a:e8:99:d5:84:01:af:d6:a2:0d:d5:bd:77:b9:
                    77:9f:b4:83:dc:1c:11:83:9f:8f:4f:ff:56:18:6a:
                    77:c3:a6:41:b4:dc:01:39:c5:7e:e9:14:d2:73:70:
                    04:e7:5c:86:fe:75:23:25:0a:40:e1:17:2b:3b:83:
                    c7:40:5d:55:26:4a:cc:1a:90:ae:f7:e3:e3:2f:6c:
                    cc:30:7a:81:d2:e8:d1:f1:18:10:ed:e3:ad:d9:ef:
                    1e:5c:f7:71:d0:88:2c:b5:bd:0f:26:ac:ce:da:80:
                    62:fd:70:55:20:14:a2:f7:d2:90:34:f4:54:34:c9:
                    8a:28:5f:a8:91:76:0c:5d:7b:89:ee:df:cb:17:6e:
                    40:bc:31:31:15:bb:87:cc:20:9d:87:7f:4c:75:ae:
                    c3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FA:F3:3D:98:AF:6E:97:74:E7:E7:D7:B9:AC:B6:01:06:D2:40:FF
            X509v3 Authority Key Identifier:
                keyid:D0:94:18:52:1E:A5:3A:7D:75:F8:FD:F0:1F:07:3B:49:55:B0:B2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/34352e3233342e38382e302f32322d3234203d3e20323636373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:8c:db:56:4c:5d:b1:37:19:ca:80:a8:cd:6f:27:60:3d:c2:
         b1:06:c3:98:ff:72:c1:a3:35:64:f0:6e:1f:b6:b0:64:8a:2f:
         0a:00:43:71:0f:31:e1:80:86:a0:e9:54:c0:b7:60:65:21:19:
         f3:a6:c0:93:ea:ac:69:d6:13:11:3e:24:b9:37:d6:9a:13:64:
         cb:a3:1c:df:b4:4f:0d:c2:45:7b:8c:93:aa:52:33:fa:e5:fb:
         78:36:c5:47:4a:c7:00:b5:ff:1c:f8:f9:ca:2a:a7:c4:fd:ea:
         03:d7:9a:3a:d6:aa:0c:a7:70:25:a4:a8:ef:c3:c8:28:29:c6:
         7b:6c:43:b6:29:28:35:46:10:84:fa:a4:1b:1a:26:68:e9:ab:
         c2:33:34:c0:3b:7f:2c:68:0c:1c:24:d1:b6:f5:5d:25:2b:55:
         53:50:e6:62:68:f7:19:b5:a5:f0:e9:4d:1b:89:ca:a6:78:92:
         95:01:65:39:3e:22:9d:ee:fc:f1:fc:51:6b:92:be:1b:c8:97:
         93:30:f9:52:a0:23:55:0e:01:03:f7:04:a3:ee:82:01:16:e8:
         50:a4:3f:dd:5b:e5:d6:76:31:5b:f8:99:f4:3e:11:a0:36:99:
         70:2c:05:04:5b:4a:0c:ee:7d:a3:9b:02:22:b8:fc:36:9f:7b:
         fa:03:90:78
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUE1P73EJP1R9BI2+ck3DvzsRrasAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA5NDE4NTIxRUE1M0E3RDc1RjhGREYwMUYwNzNCNDk1
NUIwQjI1OTAeFw0yNjAxMDYxOTE2NTZaFw0yNzAxMDUxOTIxNTZaMDMxMTAvBgNV
BAMTKDUzRkFGMzNEOThBRjZFOTc3NEU3RTdEN0I5QUNCNjAxMDZEMjQwRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsPw0Qaeii+yQoAQqAbgHJuLJ9
/LC04WPJYPwubZ/Z3h2H+ZsF5PaPF1Bk5kvneMhktKh2zO547oOxsMZvP0b7NQzv
xGsMyfcV7VKCIhXv2+RQ1QnwYLI59DsOOZ1NP50VUBOUqM63OgUa6JnVhAGv1qIN
1b13uXeftIPcHBGDn49P/1YYanfDpkG03AE5xX7pFNJzcATnXIb+dSMlCkDhFys7
g8dAXVUmSswakK734+MvbMwweoHS6NHxGBDt463Z7x5c93HQiCy1vQ8mrM7agGL9
cFUgFKL30pA09FQ0yYooX6iRdgxde4nu38sXbkC8MTEVu4fMIJ2Hf0x1rsNbAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUU/rzPZivbpd05+fXuay2AQbSQP8wHwYDVR0j
BBgwFoAU0JQYUh6lOn11+P3wHwc7SVWwslkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRjlDRUE5QTBGMDcwQzlBOTUyQjdCOEJDQTJCQjUxOUVF
MDAxMjg1RUMyREY0MTM5NDExODk4MUJGQkI1Mzg5LzAvRDA5NDE4NTIxRUE1M0E3
RDc1RjhGREYwMUYwNzNCNDk1NUIwQjI1OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMDk0MTg1MjFFQTUzQTdENzVG
OEZERjAxRjA3M0I0OTU1QjBCMjU5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkY5Q0VBOUEwRjA3MEM5QTk1MkI3QjhCQ0EyQkI1MTlFRTAwMTI4NUVD
MkRGNDEzOTQxMTg5ODFCRkJCNTM4OS8wLzM0MzUyZTMyMzMzNDJlMzgzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM3MzYzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3qWDAN
BgkqhkiG9w0BAQsFAAOCAQEAgozbVkxdsTcZyoCozW8nYD3CsQbDmP9ywaM1ZPBu
H7awZIovCgBDcQ8x4YCGoOlUwLdgZSEZ86bAk+qsadYTET4kuTfWmhNky6Mc37RP
DcJFe4yTqlIz+uX7eDbFR0rHALX/HPj5yiqnxP3qA9eaOtaqDKdwJaSo78PIKCnG
e2xDtikoNUYQhPqkGxomaOmrwjM0wDt/LGgMHCTRtvVdJStVU1DmYmj3GbWl8OlN
G4nKpniSlQFlOT4ine788fxRa5K+G8iXkzD5UqAjVQ4BA/cEo+6CARboUKQ/3Vvl
1nYxW/iZ9D4RoDaZcCwFBFtKDO59o5sCIrj8Np97+gOQeA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 01:35:15 2026 by rpki-client