Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/34352e3138312e3230362e302f32342d3234203d3e20323639373337.roa
File:                     34352e3138312e3230362e302f32342d3234203d3e20323639373337.roa (raw, json)
Hash identifier:          WCNgawiWtGyvevtxIcfoECdNbLUrTpuWv0yUp31c+2E=
Subject key identifier:   22:9A:69:35:7D:BD:17:92:9A:1D:D9:DE:DB:A8:29:A3:AF:5D:AD:B3
Certificate issuer:       /CN=851F72AF17FC1DA87BB197750BC5B43F401D78D2
Certificate serial:       6FBA45D2E329ADDE7D7079EEDD73C72538B445
Authority key identifier: 85:1F:72:AF:17:FC:1D:A8:7B:B1:97:75:0B:C5:B4:3F:40:1D:78:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/34352e3138312e3230362e302f32342d3234203d3e20323639373337.roa
Signing time:             Tue 06 Jan 2026 19:23:23 +0000
ROA not before:           Tue 06 Jan 2026 19:18:23 +0000
ROA not after:            Tue 05 Jan 2027 19:23:23 +0000
asID:                     269737
IP address blocks:        45.181.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ba:45:d2:e3:29:ad:de:7d:70:79:ee:dd:73:c7:25:38:b4:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851F72AF17FC1DA87BB197750BC5B43F401D78D2
        Validity
            Not Before: Jan  6 19:18:23 2026 GMT
            Not After : Jan  5 19:23:23 2027 GMT
        Subject: CN=229A69357DBD17929A1DD9DEDBA829A3AF5DADB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a8:20:85:4b:f9:27:56:a7:40:d3:7e:69:76:
                    76:a5:a8:7e:4e:c3:e2:68:65:17:20:b9:5c:3c:5e:
                    85:af:80:b2:ca:b0:83:34:94:d1:96:40:07:67:38:
                    ae:ec:d6:58:30:da:e5:1e:c7:dc:e0:94:df:2d:c2:
                    88:43:76:c9:db:1c:0f:43:7d:2a:4b:aa:3a:23:9d:
                    29:93:f8:f9:e6:00:c9:bf:fc:7b:fd:50:b1:36:54:
                    e1:ca:db:b2:1b:f1:c6:42:60:83:64:22:22:ec:d2:
                    35:2b:7b:88:ee:d3:80:f1:ae:38:99:4d:6d:35:0e:
                    95:c5:cd:46:19:20:9f:f6:48:25:45:80:a4:b3:6d:
                    53:78:2d:3c:a2:cf:1e:67:97:8b:97:33:af:0b:31:
                    a0:9b:04:cb:08:b9:1a:b2:bf:e7:80:41:7c:93:25:
                    5e:a5:2b:51:e4:d5:8d:5a:0e:b6:5d:db:87:3e:a6:
                    30:55:57:fd:73:fb:a2:3e:ea:6f:41:32:d1:44:48:
                    c1:b7:d0:57:10:06:24:cf:34:e0:3d:93:07:4e:5d:
                    23:0e:49:f5:a9:94:90:88:4b:85:b5:09:99:a4:66:
                    e8:40:65:7e:c9:41:0c:34:56:c3:aa:bf:f8:7b:46:
                    71:ce:63:80:dc:ae:89:28:97:f8:af:6b:e8:25:f3:
                    59:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9A:69:35:7D:BD:17:92:9A:1D:D9:DE:DB:A8:29:A3:AF:5D:AD:B3
            X509v3 Authority Key Identifier:
                keyid:85:1F:72:AF:17:FC:1D:A8:7B:B1:97:75:0B:C5:B4:3F:40:1D:78:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/34352e3138312e3230362e302f32342d3234203d3e20323639373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:84:42:fc:6a:fd:82:d2:9b:24:28:30:b7:61:ce:e7:03:ec:
         db:51:95:9d:26:1f:70:13:48:7e:20:c4:1f:16:dd:c5:23:b4:
         1b:7f:de:02:23:cb:92:a2:12:5b:83:93:c4:23:e6:81:ee:27:
         50:84:12:32:91:97:41:a4:eb:3b:b8:c1:5a:68:9a:21:3e:e9:
         5b:10:a9:ef:06:01:a5:ae:28:bf:c9:d9:75:2d:4d:61:4f:bf:
         a4:b4:b2:75:42:11:ff:ee:30:09:2f:af:03:80:18:8d:5d:fa:
         f3:9f:e0:68:3b:db:7b:9a:59:a0:ce:a1:36:63:27:b6:4f:d2:
         db:f5:95:8f:f7:7f:3e:71:f8:8d:e8:8b:ce:eb:31:d1:6e:73:
         9e:72:61:dd:ca:eb:ce:d5:4d:75:aa:bb:0a:36:fc:d9:20:c5:
         f5:92:e9:41:0e:ca:ec:65:31:ff:59:81:13:14:42:31:55:eb:
         f8:09:c5:8d:a4:20:26:ba:00:0b:4f:38:ae:11:fb:2f:3a:6b:
         c4:2d:50:8c:44:ea:e4:90:24:d1:02:a6:cf:fb:85:f4:a5:aa:
         04:7a:1e:4b:4b:72:b5:3b:e0:c3:00:9a:0a:fb:56:f0:92:db:
         f3:61:79:df:cf:12:84:96:5e:92:71:f3:db:ca:51:f3:67:0e:
         71:f8:d7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:19 2026 by rpki-client