Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/34352e3138392e3233342e302f32342d3234203d3e20323639393436.roa
File:                     34352e3138392e3233342e302f32342d3234203d3e20323639393436.roa (raw, json)
Hash identifier:          KMmc0v8vUBsKyxTK1+H8YmR7rb1ylVoyI6xsc5szzQY=
Subject key identifier:   AB:81:13:4A:6F:F3:98:1C:5E:6D:F0:6B:2E:C8:FC:EF:C0:7A:AA:8C
Certificate issuer:       /CN=076D658E829278AC386107272C8E0E68EADD5F5E
Certificate serial:       2CB02FABE41122843DC2398E96025DCFAD0D8F61
Authority key identifier: 07:6D:65:8E:82:92:78:AC:38:61:07:27:2C:8E:0E:68:EA:DD:5F:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076D658E829278AC386107272C8E0E68EADD5F5E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/34352e3138392e3233342e302f32342d3234203d3e20323639393436.roa
Signing time:             Fri 30 Jan 2026 06:52:46 +0000
ROA not before:           Fri 30 Jan 2026 06:47:46 +0000
ROA not after:            Fri 29 Jan 2027 06:52:46 +0000
asID:                     269946
IP address blocks:        45.189.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/076D658E829278AC386107272C8E0E68EADD5F5E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/076D658E829278AC386107272C8E0E68EADD5F5E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076D658E829278AC386107272C8E0E68EADD5F5E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b0:2f:ab:e4:11:22:84:3d:c2:39:8e:96:02:5d:cf:ad:0d:8f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076D658E829278AC386107272C8E0E68EADD5F5E
        Validity
            Not Before: Jan 30 06:47:46 2026 GMT
            Not After : Jan 29 06:52:46 2027 GMT
        Subject: CN=AB81134A6FF3981C5E6DF06B2EC8FCEFC07AAA8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d6:88:79:27:70:aa:7b:c9:c8:f2:cc:ba:db:
                    a7:d1:0e:6e:62:af:86:47:e2:16:78:bd:78:7c:f2:
                    16:ef:82:0e:a2:70:76:25:cd:6e:64:a7:46:78:17:
                    4d:21:c6:95:cb:1e:2d:cc:fc:a4:a8:dd:b6:0f:59:
                    af:a1:96:a3:07:77:6f:0c:d1:3d:c4:7c:2e:2f:68:
                    4d:44:3d:a8:42:92:75:a8:f6:47:97:5f:68:36:84:
                    54:76:5d:04:97:b2:75:0a:e8:6b:e0:9d:12:7c:1e:
                    54:a3:45:fe:46:9c:b4:bf:94:ba:3d:3a:b5:a9:62:
                    c0:32:0a:6d:db:44:2e:33:3e:e3:2c:39:fd:f3:8c:
                    70:3d:06:1b:db:7e:36:f3:06:f9:c1:a5:15:2d:d5:
                    18:68:64:86:f6:bd:6b:18:52:39:b6:c2:98:26:9e:
                    05:13:bc:a0:1d:a8:a7:30:28:e9:59:8b:88:b4:9b:
                    d4:57:f9:45:2a:76:02:0b:b3:b4:6f:24:94:cd:e1:
                    ce:0f:92:83:41:a3:2d:ba:da:9a:85:80:a5:c1:fc:
                    5b:00:ad:ba:4d:4d:1a:3a:4b:ab:47:5f:9a:88:97:
                    af:25:0c:4e:52:6b:4c:81:2f:e4:d4:ad:5b:63:14:
                    f7:6f:66:24:ea:35:6c:5f:bf:30:4f:fb:ce:ba:20:
                    f8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:81:13:4A:6F:F3:98:1C:5E:6D:F0:6B:2E:C8:FC:EF:C0:7A:AA:8C
            X509v3 Authority Key Identifier:
                keyid:07:6D:65:8E:82:92:78:AC:38:61:07:27:2C:8E:0E:68:EA:DD:5F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/076D658E829278AC386107272C8E0E68EADD5F5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076D658E829278AC386107272C8E0E68EADD5F5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/34352e3138392e3233342e302f32342d3234203d3e20323639393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e5:92:48:2d:cf:ef:5a:2c:52:10:59:32:e0:98:9b:4a:90:6e:
         60:d7:bd:aa:c6:b8:6d:9c:1c:8b:05:e6:fe:f6:e0:e6:4b:dc:
         37:41:56:c0:bd:e2:c8:74:58:b6:2a:55:48:53:a3:ba:22:40:
         af:03:e5:78:f3:bb:01:9b:3d:77:de:a1:e3:70:c8:1e:36:e4:
         21:6d:bc:fb:76:d3:92:95:d6:e4:07:a8:f2:b5:3a:76:96:8b:
         e6:58:05:a0:69:39:70:82:6e:c4:61:1f:4f:c3:96:4a:18:dc:
         06:1b:f7:24:b0:2e:10:cd:44:e7:24:0b:e0:53:98:22:df:87:
         f6:a6:c8:0a:6f:c3:a5:13:f5:96:64:01:33:c2:0f:8c:f2:43:
         73:9f:c8:46:d6:91:db:06:b0:cc:d6:65:5a:bb:b8:3e:06:94:
         23:88:00:4d:bd:c2:9e:8e:02:b5:74:88:a3:cf:48:4f:db:a8:
         7b:f4:5f:c9:37:de:12:80:a1:f3:64:fd:51:94:da:5f:06:86:
         f5:38:c3:ea:f9:71:6c:99:0e:97:eb:3c:49:23:c9:9a:d2:e0:
         1e:c5:c5:a8:d6:9e:9b:ae:cd:de:d2:7d:cc:2e:68:99:00:bd:
         fd:30:ac:85:4b:d6:7b:60:34:26:db:75:39:bd:68:62:3e:fc:
         b2:81:d0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:23:35 2026 by rpki-client