Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/34352e3233362e38382e302f32322d3234203d3e20323636373935.roa
File:                     34352e3233362e38382e302f32322d3234203d3e20323636373935.roa (raw, json)
Hash identifier:          oyTMCdOoEucVzF1yA9gW3NMLPtBhuQcTsN/MRmZkocs=
Subject key identifier:   42:D2:33:15:85:54:AC:A4:4D:81:1E:50:21:DD:2D:2D:67:26:15:52
Certificate issuer:       /CN=88E2BDEA430FFCDFCC0882418C4C3075773024C1
Certificate serial:       0D3B96E3B1B858259C2A9BAFB139D3C8617FAB20
Authority key identifier: 88:E2:BD:EA:43:0F:FC:DF:CC:08:82:41:8C:4C:30:75:77:30:24:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/34352e3233362e38382e302f32322d3234203d3e20323636373935.roa
Signing time:             Tue 06 Jan 2026 20:50:08 +0000
ROA not before:           Tue 06 Jan 2026 20:45:08 +0000
ROA not after:            Tue 05 Jan 2027 20:50:08 +0000
asID:                     266795
IP address blocks:        45.236.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3b:96:e3:b1:b8:58:25:9c:2a:9b:af:b1:39:d3:c8:61:7f:ab:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88E2BDEA430FFCDFCC0882418C4C3075773024C1
        Validity
            Not Before: Jan  6 20:45:08 2026 GMT
            Not After : Jan  5 20:50:08 2027 GMT
        Subject: CN=42D233158554ACA44D811E5021DD2D2D67261552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:56:51:e8:7b:9e:8a:66:00:74:6c:55:d3:
                    52:53:3d:cc:bc:9a:76:cb:be:35:97:be:34:b1:b7:
                    14:32:c2:bb:bd:db:01:84:1b:b6:33:d1:cb:20:ba:
                    64:81:86:4a:cf:37:08:24:56:26:b8:b6:6f:96:05:
                    f3:2c:95:6e:bb:2c:61:ce:7a:c5:66:3b:19:cf:98:
                    ca:dc:cd:3d:81:c1:11:13:e6:d1:2a:77:71:bb:43:
                    18:79:37:f1:78:64:55:5c:0c:84:d2:b5:26:29:37:
                    40:62:bb:47:81:0a:61:9f:f0:11:99:56:11:14:ed:
                    b5:85:76:ae:3a:06:34:2e:28:63:f9:92:52:f5:35:
                    10:ed:a2:33:87:28:4e:42:0d:f3:cd:6a:ac:62:ea:
                    25:2e:24:c5:6f:93:1e:90:31:63:cf:ff:85:3c:de:
                    51:47:d0:87:68:b8:9c:ed:05:d8:b0:c7:69:44:b9:
                    c8:3b:71:a9:b0:02:a0:29:12:ef:6f:7f:aa:d8:93:
                    14:23:c0:48:0f:bb:37:48:2c:e0:a2:ef:80:76:9f:
                    02:ff:fa:69:3f:68:21:aa:6b:c7:ab:68:97:e6:32:
                    bf:c5:8e:a2:1b:2c:e7:0e:f7:01:c9:3a:b6:f3:84:
                    aa:2e:3a:61:b6:ec:ba:51:55:2a:65:93:cf:5d:e4:
                    68:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D2:33:15:85:54:AC:A4:4D:81:1E:50:21:DD:2D:2D:67:26:15:52
            X509v3 Authority Key Identifier:
                keyid:88:E2:BD:EA:43:0F:FC:DF:CC:08:82:41:8C:4C:30:75:77:30:24:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88E2BDEA430FFCDFCC0882418C4C3075773024C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB9E530069183AFB099FC057F8F89A08984CA0284AF705D4F287FF075A8D816E/0/34352e3233362e38382e302f32322d3234203d3e20323636373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:e1:fc:83:2b:dd:d9:9c:7a:4e:26:e5:08:03:ef:63:cf:4e:
         f4:77:87:62:23:b1:b7:cd:f8:29:b9:26:5e:78:70:c1:24:68:
         0b:12:b8:18:09:7a:92:ea:b4:3e:6b:c7:6a:b8:a4:dc:ea:5a:
         d1:c5:b6:b6:0d:8e:3e:0d:ff:b0:b5:d5:93:9b:d0:dc:10:78:
         f2:4d:5a:df:64:65:8c:db:e1:95:b4:23:1a:d9:29:18:f8:8b:
         df:c1:63:bb:96:72:8c:43:a7:fd:fe:8d:01:fd:85:48:02:cc:
         47:7b:1f:57:c9:13:aa:aa:02:2d:96:2e:7b:70:90:4e:49:c8:
         ca:26:9d:03:01:65:fa:53:d3:fb:d8:02:d5:7b:13:1b:b9:2e:
         f6:b9:da:17:11:ff:01:94:95:0b:4d:19:9b:49:86:c9:bc:9d:
         4b:63:f5:0a:b6:45:75:9e:d6:74:73:ee:a6:15:e2:3a:f0:33:
         92:3d:6d:0b:9b:24:ea:2f:a3:2e:02:8c:03:ce:4a:32:51:22:
         99:82:34:1d:3e:fb:bb:dd:27:0e:a6:a1:23:c6:ad:67:bc:13:
         52:ed:7f:fd:59:41:e7:a2:34:c6:36:f3:27:49:d8:d0:3a:a2:
         0b:49:bd:66:71:ce:5b:c1:6e:67:5d:70:2d:56:0b:33:57:af:
         b2:13:9e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:21:32 2026 by rpki-client