Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7D89C2EF2E2F1A93E9A3BE2DD888CCF5C91515B288EB2B421D9FAC530B5B640/0/34352e3233342e3233322e302f32322d3234203d3e203237383834.roa
File:                     34352e3233342e3233322e302f32322d3234203d3e203237383834.roa (raw, json)
Hash identifier:          d3Cj1nyNRY9TCgr471W+t20358NUs7jJb2Pr7djuOkA=
Subject key identifier:   E1:9E:E8:CE:B7:2A:C1:DC:7A:E4:08:92:BC:27:C0:70:1F:D4:02:43
Certificate issuer:       /CN=0E361CEAE1F58D0D8671ECBFECD09AAE2E74F16A
Certificate serial:       16AC9295BB1D0A7FC350383824E90D6989992FFB
Authority key identifier: 0E:36:1C:EA:E1:F5:8D:0D:86:71:EC:BF:EC:D0:9A:AE:2E:74:F1:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E361CEAE1F58D0D8671ECBFECD09AAE2E74F16A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7D89C2EF2E2F1A93E9A3BE2DD888CCF5C91515B288EB2B421D9FAC530B5B640/0/34352e3233342e3233322e302f32322d3234203d3e203237383834.roa
Signing time:             Tue 06 Jan 2026 20:57:14 +0000
ROA not before:           Tue 06 Jan 2026 20:52:14 +0000
ROA not after:            Tue 05 Jan 2027 20:57:14 +0000
asID:                     27884
IP address blocks:        45.234.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7D89C2EF2E2F1A93E9A3BE2DD888CCF5C91515B288EB2B421D9FAC530B5B640/0/0E361CEAE1F58D0D8671ECBFECD09AAE2E74F16A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7D89C2EF2E2F1A93E9A3BE2DD888CCF5C91515B288EB2B421D9FAC530B5B640/0/0E361CEAE1F58D0D8671ECBFECD09AAE2E74F16A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E361CEAE1F58D0D8671ECBFECD09AAE2E74F16A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ac:92:95:bb:1d:0a:7f:c3:50:38:38:24:e9:0d:69:89:99:2f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E361CEAE1F58D0D8671ECBFECD09AAE2E74F16A
        Validity
            Not Before: Jan  6 20:52:14 2026 GMT
            Not After : Jan  5 20:57:14 2027 GMT
        Subject: CN=E19EE8CEB72AC1DC7AE40892BC27C0701FD40243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e4:b4:2c:19:6c:02:db:e3:4f:17:d0:49:75:
                    bd:02:f6:59:2b:1a:39:5e:9b:45:47:15:38:c6:10:
                    32:fe:b6:08:2f:ac:36:71:0a:4b:bc:8a:46:4f:21:
                    46:ab:c1:25:82:6e:16:c0:f2:90:c2:1e:49:a4:27:
                    f0:20:cc:ba:19:c2:a6:a1:f2:ac:ad:90:b5:be:21:
                    79:e4:bd:5a:b0:1d:ba:d6:2b:f4:8b:42:00:2b:59:
                    2f:be:a1:af:3b:94:78:c9:07:1d:17:c5:66:cf:09:
                    ee:33:31:7e:65:02:51:51:21:72:04:8e:37:02:c5:
                    34:ae:26:0c:a8:82:a2:8f:cf:54:e2:a9:39:c3:da:
                    b7:4d:7a:41:86:9e:44:01:4c:54:45:a9:76:a1:a0:
                    96:85:f3:b0:8a:d6:dc:ab:5d:9c:21:43:c8:ce:93:
                    da:7a:2a:ca:8d:51:c3:1c:af:f0:ad:61:a9:99:6b:
                    8d:d3:5f:40:2b:38:14:c9:04:b6:58:11:41:32:35:
                    ff:6d:3a:1a:5e:e8:95:3b:8d:85:1e:0c:15:2f:8b:
                    52:56:0f:1e:5a:ef:64:33:d1:b0:d2:98:38:60:9c:
                    15:86:39:28:56:6f:0f:ba:a2:db:77:ed:be:93:e5:
                    56:15:3d:1c:34:d9:f9:c4:56:7c:90:81:52:03:03:
                    34:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9E:E8:CE:B7:2A:C1:DC:7A:E4:08:92:BC:27:C0:70:1F:D4:02:43
            X509v3 Authority Key Identifier:
                keyid:0E:36:1C:EA:E1:F5:8D:0D:86:71:EC:BF:EC:D0:9A:AE:2E:74:F1:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7D89C2EF2E2F1A93E9A3BE2DD888CCF5C91515B288EB2B421D9FAC530B5B640/0/0E361CEAE1F58D0D8671ECBFECD09AAE2E74F16A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E361CEAE1F58D0D8671ECBFECD09AAE2E74F16A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7D89C2EF2E2F1A93E9A3BE2DD888CCF5C91515B288EB2B421D9FAC530B5B640/0/34352e3233342e3233322e302f32322d3234203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:04:2f:4d:1e:a0:70:d5:10:1b:9b:4c:b5:c4:0c:f3:d9:2c:
         28:90:1e:b5:d0:51:e9:c6:fa:04:ad:6d:48:6d:fc:d2:a2:b4:
         44:2f:7c:90:fb:a9:4a:67:91:dd:7f:c5:66:00:74:ba:89:e2:
         fa:3a:3d:aa:69:80:f4:13:c6:48:88:98:ca:53:b3:a1:fe:7f:
         aa:5c:22:52:ba:98:fc:3e:95:cc:3a:dd:8d:5c:d7:28:14:a9:
         ce:f8:86:f7:fa:c1:12:66:2c:ed:01:61:4e:6a:88:34:46:9e:
         95:ac:9e:5e:35:e4:5d:92:2e:9b:46:33:4e:f1:45:2e:09:d6:
         ff:ab:44:fe:47:7a:cf:ff:d8:37:b8:12:06:6e:ee:73:a9:c9:
         5b:e2:98:a0:26:8a:10:88:31:ce:ce:61:a9:04:d0:a7:3d:9b:
         32:f0:f8:0c:f9:2e:43:31:e6:c5:67:83:a8:3f:4c:37:5f:c7:
         f7:18:92:cf:78:9b:80:63:6e:93:67:9b:2d:2f:49:33:fc:96:
         88:85:4c:1a:ba:a4:19:9a:2d:9f:13:1e:58:61:e5:25:8c:9a:
         b2:6f:87:e2:2e:5e:50:3b:9c:3d:40:0a:6e:b2:33:b0:1c:6c:
         87:9a:d5:1c:21:91:02:99:21:7d:a2:82:fe:ee:5f:dd:75:74:
         38:22:3a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:40:41 2026 by rpki-client