Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/34352e3232352e34302e302f32332d3234203d3e20323635383432.roa
File:                     34352e3232352e34302e302f32332d3234203d3e20323635383432.roa (raw, json)
Hash identifier:          mJ1q5GQkGTn7WDc0LqBn/KHyqS84eCxrqmx5fjf9gj4=
Subject key identifier:   BA:E5:4E:57:1A:DC:5B:04:40:D3:DA:50:37:C5:2C:B9:C5:61:C6:E4
Certificate issuer:       /CN=DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1
Certificate serial:       7AA2CB38D99F069F09FF8B59A55A814E9F135CE2
Authority key identifier: DE:0E:9C:48:41:E7:FD:1E:40:27:86:DB:D8:A1:B3:5F:69:AD:C5:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/34352e3232352e34302e302f32332d3234203d3e20323635383432.roa
Signing time:             Tue 06 Jan 2026 19:26:04 +0000
ROA not before:           Tue 06 Jan 2026 19:21:04 +0000
ROA not after:            Tue 05 Jan 2027 19:26:04 +0000
asID:                     265842
IP address blocks:        45.225.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 07:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a2:cb:38:d9:9f:06:9f:09:ff:8b:59:a5:5a:81:4e:9f:13:5c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1
        Validity
            Not Before: Jan  6 19:21:04 2026 GMT
            Not After : Jan  5 19:26:04 2027 GMT
        Subject: CN=BAE54E571ADC5B0440D3DA5037C52CB9C561C6E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:26:61:c6:32:41:a9:30:a9:69:e7:28:cc:08:
                    30:63:aa:02:ae:79:41:e8:5b:c2:81:4d:78:3c:70:
                    6b:66:12:35:63:bd:ba:fd:68:aa:ad:82:14:6f:43:
                    cb:fe:15:7f:ae:dc:a6:13:5b:47:c1:e9:ca:d8:96:
                    5e:fd:5b:00:94:b6:af:81:d3:c9:64:26:1d:29:90:
                    d6:53:1b:6e:f6:08:13:af:5e:43:ac:b1:35:2b:fa:
                    99:f3:50:fd:03:64:dc:56:9c:e9:db:b6:85:a7:91:
                    1e:80:b0:a5:fc:ff:12:fb:a5:f5:99:84:bd:5e:ab:
                    69:1f:4f:29:21:7a:bc:7e:71:9c:21:d3:5b:85:cf:
                    52:47:6d:97:da:af:3d:41:13:27:0e:f6:83:87:94:
                    36:4f:36:25:ab:7e:fe:7c:0b:43:30:45:fe:1d:fc:
                    e1:95:7a:8b:94:26:55:00:39:9a:55:a1:ad:bc:71:
                    5e:99:ec:f1:80:35:c6:c5:1e:e9:8a:78:4d:74:30:
                    d5:44:77:d4:9a:41:a9:5e:84:19:5a:e2:1b:22:2e:
                    e5:a5:b7:80:5b:d1:2d:ca:2a:5a:fb:bb:88:74:9b:
                    e5:62:24:40:b8:93:81:2b:bc:a0:6a:0a:02:c6:b9:
                    cf:3d:3a:ee:26:24:b0:b1:c7:40:7b:1b:16:99:84:
                    53:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E5:4E:57:1A:DC:5B:04:40:D3:DA:50:37:C5:2C:B9:C5:61:C6:E4
            X509v3 Authority Key Identifier:
                keyid:DE:0E:9C:48:41:E7:FD:1E:40:27:86:DB:D8:A1:B3:5F:69:AD:C5:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/34352e3232352e34302e302f32332d3234203d3e20323635383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:f8:b0:08:70:07:40:1a:da:56:ad:b9:50:b9:09:a1:e2:08:
         07:5e:47:1b:a2:6b:ad:60:14:06:be:50:dd:3d:d9:6c:a8:38:
         3b:94:cc:92:38:fd:fa:8d:c4:7d:59:c4:85:44:83:54:72:91:
         b6:30:7b:cb:00:d7:67:36:c5:3d:76:ce:1c:fd:08:9b:5d:50:
         32:15:f7:2f:1f:7c:1d:33:4c:e7:89:4e:55:25:0b:01:3b:78:
         ba:26:d5:8c:7e:dc:b5:48:1e:4a:cb:8c:e8:80:3b:74:8f:0f:
         a1:df:e0:56:38:93:e3:65:a7:e5:44:b8:a2:04:7d:d6:b9:c2:
         cd:66:e9:65:da:cc:99:24:fe:85:3e:a0:9b:e6:3b:7c:3b:3e:
         a0:56:1d:9e:21:4e:27:0f:e7:e2:8d:8f:2c:c2:f4:5f:64:57:
         f3:bd:d1:2c:eb:b0:1d:24:17:49:7d:36:84:49:07:79:e9:b4:
         21:2e:d7:ab:a6:a0:9a:e1:e8:5d:80:51:bf:dc:1b:96:98:e3:
         fa:90:9e:81:0b:9c:d0:97:36:3a:bb:61:cf:db:b2:a8:00:b5:
         e2:ba:ab:6a:9c:48:c8:6d:e6:fc:0c:4a:86:8b:e3:5b:d1:66:
         2c:55:de:1d:97:bf:f7:b3:a0:68:7c:58:87:14:2c:de:60:af:
         b1:bd:68:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:07:03 2026 by rpki-client