Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e3233392e33342e302f32342d3234203d3e20323636373235.roa
File:                     34352e3233392e33342e302f32342d3234203d3e20323636373235.roa (raw, json)
Hash identifier:          sXMOtttFOc2oUvWeEfSp/pdJL+iouizaneDa8y8nrCM=
Subject key identifier:   3C:84:70:79:87:5A:F1:24:B6:15:96:99:F6:98:A7:DB:1E:C3:AC:1A
Certificate issuer:       /CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Certificate serial:       776AE463F4D5F1430F5DA8C32FA88B67B65FEE5B
Authority key identifier: 9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e3233392e33342e302f32342d3234203d3e20323636373235.roa
Signing time:             Tue 17 Feb 2026 19:30:57 +0000
ROA not before:           Tue 17 Feb 2026 19:25:57 +0000
ROA not after:            Tue 16 Feb 2027 19:30:57 +0000
asID:                     266725
IP address blocks:        45.239.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 18:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6a:e4:63:f4:d5:f1:43:0f:5d:a8:c3:2f:a8:8b:67:b6:5f:ee:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
        Validity
            Not Before: Feb 17 19:25:57 2026 GMT
            Not After : Feb 16 19:30:57 2027 GMT
        Subject: CN=3C847079875AF124B6159699F698A7DB1EC3AC1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:b5:1c:c8:f1:d5:8e:46:1d:25:f1:ac:9b:
                    ad:a5:59:4b:89:91:47:79:73:74:e7:07:0a:3b:81:
                    a4:1a:79:da:ac:b1:3d:25:02:02:96:4c:b2:24:c3:
                    5b:24:d3:b7:42:9a:24:ee:20:e3:cc:ce:96:5c:51:
                    0e:37:1d:88:a8:c2:34:cb:9b:c4:61:01:c6:07:3c:
                    02:55:8d:8d:46:a7:a3:bc:08:f3:93:1c:8c:19:c5:
                    2b:df:6c:2b:16:62:1b:69:34:56:9f:e3:6f:7c:db:
                    58:2f:85:68:df:1c:06:67:fb:94:b5:a7:80:3e:f1:
                    76:6b:32:a1:10:64:79:27:2b:10:05:60:de:cd:05:
                    4f:a0:74:d0:27:9b:cf:ce:7e:91:e6:10:2a:d2:9c:
                    c8:d5:45:a6:d4:fa:79:0c:38:0d:1a:fd:53:3f:0a:
                    7b:49:2b:78:de:e6:99:6b:39:c6:e6:1a:18:02:ba:
                    f9:be:95:17:41:8a:a0:79:96:0a:41:1f:60:20:79:
                    b7:2d:e5:3c:6e:93:4e:4c:d5:0d:0b:76:24:a3:d2:
                    4d:9c:b5:46:18:4e:a5:62:6c:92:06:e1:9b:c4:1e:
                    a2:a3:79:38:28:bc:aa:a0:26:7e:50:4e:89:9a:6d:
                    b6:f4:6a:95:21:73:69:82:08:f4:26:b1:a8:10:49:
                    a0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:84:70:79:87:5A:F1:24:B6:15:96:99:F6:98:A7:DB:1E:C3:AC:1A
            X509v3 Authority Key Identifier:
                keyid:9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e3233392e33342e302f32342d3234203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:0c:60:56:6d:1d:9d:ea:4a:52:40:37:0e:3d:27:5d:d0:57:
         a4:1a:ce:04:68:d2:32:82:96:0a:c2:9b:f9:9b:3e:f4:3b:c5:
         9c:04:74:d8:31:4f:dc:ad:43:9b:a8:92:fb:5e:f6:5d:17:40:
         52:22:28:17:84:d1:be:f9:6d:65:da:34:39:6e:cc:1a:3f:14:
         72:14:54:44:20:df:2a:05:5a:ce:ae:9e:02:2b:25:41:bf:f5:
         8d:ad:fc:33:b6:2a:5f:ed:87:93:f3:51:05:ce:7d:c3:92:73:
         6a:33:5a:7e:e6:9f:2e:91:7c:98:e3:b1:76:75:e7:9e:4d:f6:
         1c:e8:8c:f8:cb:a9:88:f5:a2:42:c1:98:1f:44:7d:31:0f:46:
         32:88:5d:6d:14:6f:5a:c0:8f:26:18:ac:8e:54:03:b7:4c:c5:
         b7:31:36:da:2d:a2:bf:7c:d8:82:56:3c:f0:02:a9:49:8c:ec:
         c0:3c:8a:52:3a:32:f3:c1:7a:b2:43:92:ad:a3:26:e1:f0:09:
         47:44:af:1e:a8:31:71:e4:eb:d8:41:62:c1:b3:1d:68:23:d9:
         cc:d3:a3:89:9b:80:c6:d8:02:f9:2f:ec:5a:4f:0f:fd:85:c8:
         fd:7d:c8:80:e5:52:e6:56:f4:a2:d7:75:f4:94:4d:b2:ec:44:
         6b:10:7d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:00:54 2026 by rpki-client