Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2135A998E86B5C4ECFB76641F6486F118CB29BCBD993DE9C09B9EB22235F15EB/0/34352e3233312e3138342e302f32322d3234203d3e20323636373337.roa
File:                     34352e3233312e3138342e302f32322d3234203d3e20323636373337.roa (raw, json)
Hash identifier:          Tio5741JXiqI00v1tDSNvw/fO19cg/tVhWT3Ar0iCBs=
Subject key identifier:   8B:34:85:4B:5D:5A:B2:B0:05:20:31:09:73:6A:B2:AE:3F:E0:18:B2
Certificate issuer:       /CN=69D4A331FF0D28734F9E4E330ED38A514B7DB5BD
Certificate serial:       5C53109F75B2B15B63F8A82C1AE8520AB02E8FC0
Authority key identifier: 69:D4:A3:31:FF:0D:28:73:4F:9E:4E:33:0E:D3:8A:51:4B:7D:B5:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69D4A331FF0D28734F9E4E330ED38A514B7DB5BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2135A998E86B5C4ECFB76641F6486F118CB29BCBD993DE9C09B9EB22235F15EB/0/34352e3233312e3138342e302f32322d3234203d3e20323636373337.roa
Signing time:             Tue 17 Feb 2026 22:30:58 +0000
ROA not before:           Tue 17 Feb 2026 22:25:58 +0000
ROA not after:            Tue 16 Feb 2027 22:30:58 +0000
asID:                     266737
IP address blocks:        45.231.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2135A998E86B5C4ECFB76641F6486F118CB29BCBD993DE9C09B9EB22235F15EB/0/69D4A331FF0D28734F9E4E330ED38A514B7DB5BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2135A998E86B5C4ECFB76641F6486F118CB29BCBD993DE9C09B9EB22235F15EB/0/69D4A331FF0D28734F9E4E330ED38A514B7DB5BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69D4A331FF0D28734F9E4E330ED38A514B7DB5BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 20:05:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:53:10:9f:75:b2:b1:5b:63:f8:a8:2c:1a:e8:52:0a:b0:2e:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69D4A331FF0D28734F9E4E330ED38A514B7DB5BD
        Validity
            Not Before: Feb 17 22:25:58 2026 GMT
            Not After : Feb 16 22:30:58 2027 GMT
        Subject: CN=8B34854B5D5AB2B005203109736AB2AE3FE018B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4f:40:5a:c8:75:20:6a:96:59:31:48:e3:ee:
                    f2:3b:d7:09:62:99:f9:80:3e:23:1b:ec:18:55:cd:
                    48:ab:4e:b6:2e:67:dd:6f:2a:c4:a5:46:40:77:7d:
                    bd:60:fa:76:6e:60:02:b8:fd:28:fb:4e:fd:49:17:
                    27:4d:65:9e:e5:34:c9:a7:2f:bd:80:cf:22:f4:94:
                    7d:f1:d6:48:e8:96:76:bf:f8:80:fc:1d:20:4f:70:
                    8b:fc:7b:45:4d:ce:ba:31:e1:18:55:be:41:0d:6b:
                    74:1e:a5:6d:33:29:fb:49:bc:2b:91:dd:8e:ac:56:
                    8a:24:26:be:51:47:b6:6d:89:14:5d:88:5d:1b:ae:
                    28:00:e9:b6:7e:8f:24:d4:29:8d:98:a2:30:25:52:
                    dd:e4:cf:e7:39:2a:77:fc:7f:be:21:38:48:a8:78:
                    5e:94:d5:bf:71:0c:5b:78:93:15:2a:79:44:50:76:
                    9d:f5:52:b4:8d:d3:4a:c9:cb:c6:f6:b3:02:08:eb:
                    7f:e8:1d:99:08:d7:17:9b:14:ee:e5:de:06:a2:4c:
                    9c:f0:06:80:51:8a:8a:f0:1b:dc:f7:29:b2:f8:2b:
                    8f:71:e0:c2:f7:be:6c:ff:54:99:c3:a2:a4:d8:7e:
                    ef:da:61:be:98:c8:f1:06:f9:d6:b2:d1:da:38:94:
                    40:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:34:85:4B:5D:5A:B2:B0:05:20:31:09:73:6A:B2:AE:3F:E0:18:B2
            X509v3 Authority Key Identifier:
                keyid:69:D4:A3:31:FF:0D:28:73:4F:9E:4E:33:0E:D3:8A:51:4B:7D:B5:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2135A998E86B5C4ECFB76641F6486F118CB29BCBD993DE9C09B9EB22235F15EB/0/69D4A331FF0D28734F9E4E330ED38A514B7DB5BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69D4A331FF0D28734F9E4E330ED38A514B7DB5BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2135A998E86B5C4ECFB76641F6486F118CB29BCBD993DE9C09B9EB22235F15EB/0/34352e3233312e3138342e302f32322d3234203d3e20323636373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:6a:b7:a9:ef:5b:24:19:97:d4:6c:09:b5:52:fa:c5:de:87:
         60:44:53:b7:38:d1:c7:3e:13:af:55:de:55:a4:56:21:45:16:
         24:87:51:87:9b:5c:53:21:73:46:1e:6a:ee:82:63:3b:88:1c:
         98:c9:9a:7f:14:1f:a9:0e:72:d4:dd:7c:58:ba:cb:cd:8a:f4:
         61:82:09:cf:c9:34:48:01:59:77:4f:6b:5a:02:6d:04:88:2b:
         2e:9b:18:f5:21:cf:ac:dc:60:3f:88:6b:d9:76:05:ff:a6:6d:
         22:aa:67:6d:a4:cc:e9:d0:14:42:a2:a9:25:7c:4f:bb:a7:2f:
         90:03:14:a7:dc:ad:b8:ab:ae:48:a7:74:e0:c8:ff:34:58:d6:
         56:41:5d:ff:28:54:52:91:32:e5:b0:08:ca:4c:02:a0:74:8f:
         f5:0f:61:2a:39:18:d8:d4:9f:33:d1:c0:7b:2f:17:9a:3f:cb:
         be:2f:07:d7:3c:26:14:cd:08:93:76:4e:c6:e3:8d:42:15:27:
         08:94:d3:8b:7f:fe:35:df:3e:8e:69:fc:89:60:fa:9a:be:cf:
         7e:d5:f5:af:f5:99:9a:39:20:fc:87:d6:a5:8c:3a:cd:2f:ce:
         89:d8:eb:94:d5:b3:0f:9f:d1:da:16:0d:68:51:ac:49:05:c7:
         f2:c3:83:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:15:16 2026 by rpki-client