Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD166271DCAFC64759A73E3CD662AADFF8D3D334EEF553040EDC4052C7AAA035/0/34352e3233312e33322e302f32322d3234203d3e20323731393632.roa
File:                     34352e3233312e33322e302f32322d3234203d3e20323731393632.roa (raw, json)
Hash identifier:          NCSHy7TcmTS6Nbc4XMMSfYAHU7rxYV9R9EsTlBtZHpI=
Subject key identifier:   50:35:85:DA:AB:D3:3D:06:32:F3:BA:9B:BB:1B:FC:78:C8:24:AA:48
Certificate issuer:       /CN=87E091F07582CDB18DC35420D191E643401A6D6F
Certificate serial:       19AC489838A7F55EA788946A70DFF7EE81DE7798
Authority key identifier: 87:E0:91:F0:75:82:CD:B1:8D:C3:54:20:D1:91:E6:43:40:1A:6D:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87E091F07582CDB18DC35420D191E643401A6D6F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD166271DCAFC64759A73E3CD662AADFF8D3D334EEF553040EDC4052C7AAA035/0/34352e3233312e33322e302f32322d3234203d3e20323731393632.roa
Signing time:             Tue 06 Jan 2026 19:33:38 +0000
ROA not before:           Tue 06 Jan 2026 19:28:38 +0000
ROA not after:            Tue 05 Jan 2027 19:33:38 +0000
asID:                     271962
IP address blocks:        45.231.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD166271DCAFC64759A73E3CD662AADFF8D3D334EEF553040EDC4052C7AAA035/0/87E091F07582CDB18DC35420D191E643401A6D6F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD166271DCAFC64759A73E3CD662AADFF8D3D334EEF553040EDC4052C7AAA035/0/87E091F07582CDB18DC35420D191E643401A6D6F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87E091F07582CDB18DC35420D191E643401A6D6F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ac:48:98:38:a7:f5:5e:a7:88:94:6a:70:df:f7:ee:81:de:77:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87E091F07582CDB18DC35420D191E643401A6D6F
        Validity
            Not Before: Jan  6 19:28:38 2026 GMT
            Not After : Jan  5 19:33:38 2027 GMT
        Subject: CN=503585DAABD33D0632F3BA9BBB1BFC78C824AA48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:08:12:f8:f9:34:36:dc:ca:2b:4b:f0:aa:cf:
                    be:bb:88:5e:4d:86:a4:fd:53:d8:86:1c:77:ad:30:
                    99:fd:e1:21:2f:ad:83:5b:3b:6a:dd:9c:b7:c7:55:
                    ec:d5:43:4b:4c:bc:7a:43:6e:77:63:f3:97:83:4e:
                    40:da:55:31:a3:16:19:22:4a:f8:92:8d:4d:bb:71:
                    93:ae:67:34:03:6f:2d:9e:39:bf:12:6f:c1:43:1d:
                    95:1e:b5:71:35:b0:8f:d6:a4:7e:98:82:67:68:2e:
                    f2:84:e3:f1:d4:99:91:89:20:97:33:d3:eb:f8:e5:
                    1e:76:b4:32:95:c6:21:b0:5c:4a:f4:07:dc:f6:99:
                    51:c3:98:dc:41:e9:52:94:00:ed:6e:9c:de:35:09:
                    42:a9:0e:16:47:db:27:0a:f1:47:e2:04:8b:ab:ae:
                    81:e1:8b:4f:d8:52:75:38:11:ef:9a:d7:1b:5d:8a:
                    d6:e0:f7:43:b7:3f:44:42:55:e9:de:19:62:7b:bc:
                    78:82:2e:9f:51:83:fb:b1:28:d5:dd:7c:00:eb:5c:
                    90:06:d1:77:bb:41:3a:e4:8a:f1:ae:fc:41:21:d4:
                    e4:e2:4a:4a:41:93:be:d7:78:40:26:4d:37:f2:26:
                    47:7b:82:d9:b8:06:8d:28:b5:19:6e:f4:70:80:68:
                    f3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:35:85:DA:AB:D3:3D:06:32:F3:BA:9B:BB:1B:FC:78:C8:24:AA:48
            X509v3 Authority Key Identifier:
                keyid:87:E0:91:F0:75:82:CD:B1:8D:C3:54:20:D1:91:E6:43:40:1A:6D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD166271DCAFC64759A73E3CD662AADFF8D3D334EEF553040EDC4052C7AAA035/0/87E091F07582CDB18DC35420D191E643401A6D6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87E091F07582CDB18DC35420D191E643401A6D6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD166271DCAFC64759A73E3CD662AADFF8D3D334EEF553040EDC4052C7AAA035/0/34352e3233312e33322e302f32322d3234203d3e20323731393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:db:d7:9d:27:0c:0c:d9:8f:6e:d2:96:a6:19:94:9f:28:4b:
         49:75:f1:8b:9e:1f:ef:1a:81:17:38:fe:38:e5:df:b4:91:95:
         6c:ab:b5:a2:a7:a9:3f:c3:78:4a:23:4a:f8:4e:ea:29:f9:7a:
         b8:0a:9f:0c:d7:54:93:44:38:ce:c0:6a:83:85:50:61:a0:54:
         d8:fc:c0:91:c0:47:18:44:88:cc:fd:62:b3:13:32:a2:06:3b:
         03:ac:ad:6a:f9:44:6b:8c:90:4e:9d:19:80:f6:d8:61:7f:e9:
         42:2c:f1:d8:6d:31:73:3a:93:75:cb:69:9b:cb:0e:72:86:f6:
         32:1e:fd:87:ae:34:43:5a:27:89:a3:8f:d4:31:cd:d7:6c:31:
         8e:d1:b5:34:f2:11:78:9a:ad:54:1c:1b:67:02:15:7f:24:6d:
         3e:67:42:38:b2:72:c1:8d:2c:52:e0:bd:d9:b3:e6:6e:2f:e4:
         41:59:91:50:1b:c0:a3:37:fe:13:04:96:1b:2b:16:38:74:08:
         d7:27:ad:cd:65:da:a2:dc:47:29:60:8d:e4:8e:cb:9d:55:df:
         80:5d:40:c7:98:e8:b6:21:a8:4e:b2:9e:bb:90:82:27:62:06:
         bf:1c:2c:17:2c:07:68:6c:d3:00:98:28:b4:47:06:6a:ed:e5:
         e6:61:a7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:01:44 2026 by rpki-client