Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/34352e3138352e35322e302f32322d3232203d3e20323639383030.roa
File:                     34352e3138352e35322e302f32322d3232203d3e20323639383030.roa (raw, json)
Hash identifier:          GVSUyKUTtnYSTfYAWXf7XrxMBfE8YMnd1Ou8w5RUpVk=
Subject key identifier:   EA:0B:7B:C6:2F:82:97:3B:EE:99:4C:EC:FC:19:0C:FF:81:9C:CE:D8
Certificate issuer:       /CN=0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5
Certificate serial:       5E4DB14F5ED6C46277E31F9FFE7E66541B19A260
Authority key identifier: 0E:D1:F0:08:0B:7C:2A:16:B2:F5:41:D4:4A:42:3C:AC:74:1E:3E:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/34352e3138352e35322e302f32322d3232203d3e20323639383030.roa
Signing time:             Fri 13 Feb 2026 20:30:29 +0000
ROA not before:           Fri 13 Feb 2026 20:25:29 +0000
ROA not after:            Fri 12 Feb 2027 20:30:29 +0000
asID:                     269800
IP address blocks:        45.185.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 20:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4d:b1:4f:5e:d6:c4:62:77:e3:1f:9f:fe:7e:66:54:1b:19:a2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5
        Validity
            Not Before: Feb 13 20:25:29 2026 GMT
            Not After : Feb 12 20:30:29 2027 GMT
        Subject: CN=EA0B7BC62F82973BEE994CECFC190CFF819CCED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:34:6c:22:9c:db:34:e2:46:63:f4:35:3f:4b:
                    92:22:4f:35:67:1f:4a:28:d4:43:ad:a0:5a:ca:79:
                    c4:f6:76:96:2e:b2:fb:8e:fd:98:c1:61:19:9d:08:
                    f2:0c:dd:f7:43:19:5c:79:f3:ea:68:89:e8:cf:5c:
                    37:5f:50:c8:06:da:6d:42:63:4e:a6:76:50:cb:e7:
                    b9:a4:92:d2:7a:ac:0a:36:a8:39:b3:ef:28:bd:b8:
                    a7:d8:1d:9b:9b:64:67:34:88:47:77:40:b0:57:0d:
                    5a:a2:0a:d4:f7:43:80:5b:a1:92:b3:92:16:28:42:
                    ba:9d:6b:31:d9:95:76:10:8b:15:1d:57:0f:11:89:
                    9b:c8:8c:71:53:51:ee:65:57:b2:1b:85:f6:07:88:
                    80:09:48:21:8d:9d:4a:06:eb:d0:7c:a8:c7:3a:55:
                    35:87:78:22:36:a8:81:de:f9:12:45:a6:b3:35:99:
                    2c:cb:42:fd:b9:32:f5:5b:46:f9:64:db:80:b2:d3:
                    8d:b3:b5:aa:0b:ca:bf:1d:9a:fc:36:9a:72:d9:a7:
                    40:bc:ea:0e:69:10:03:a4:a1:6e:fd:30:8e:be:37:
                    43:d5:c0:e6:8e:fe:87:42:bc:70:ce:26:3e:a6:2f:
                    41:56:be:44:2e:93:10:de:dc:c5:eb:85:99:5d:64:
                    00:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0B:7B:C6:2F:82:97:3B:EE:99:4C:EC:FC:19:0C:FF:81:9C:CE:D8
            X509v3 Authority Key Identifier:
                keyid:0E:D1:F0:08:0B:7C:2A:16:B2:F5:41:D4:4A:42:3C:AC:74:1E:3E:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/34352e3138352e35322e302f32322d3232203d3e20323639383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:92:c9:ba:33:65:1c:71:25:9f:82:80:3f:a2:3a:bc:93:ae:
         2e:bd:19:4e:fa:fd:56:45:76:a7:37:0a:45:11:d5:1c:bc:b6:
         66:44:11:24:bc:3b:f0:5c:10:f0:b8:e5:05:87:6e:26:c3:44:
         53:18:b3:93:30:82:7a:9d:1f:f7:ea:34:ef:3a:ec:53:e5:54:
         34:8c:e3:75:b1:9d:f9:70:f2:a5:d9:f8:5b:39:6b:c4:0e:34:
         f4:4a:1d:cb:5b:bb:54:71:11:b7:60:f7:de:62:58:c2:c4:92:
         07:27:9d:9c:b4:37:a9:1c:ac:8f:85:08:e6:03:6c:60:5f:59:
         7e:05:97:66:58:d1:a2:cc:5d:fa:b7:a8:3a:09:48:1d:ee:1e:
         1d:16:03:ac:86:22:c7:45:e7:40:01:67:83:7f:82:b2:f7:80:
         a9:2a:bc:8c:f5:32:e8:0b:58:49:e5:e7:b5:92:79:6b:95:a3:
         18:0e:27:3e:8a:46:58:2e:d7:43:ca:e0:f6:d5:9e:27:55:84:
         2b:63:dc:98:86:2b:98:31:d4:1b:e7:2c:2c:bc:b7:c2:2a:65:
         46:94:54:9a:83:86:55:fa:d0:a6:be:4c:0d:a0:37:81:b2:d7:
         1e:49:c0:b3:4f:b4:6e:9c:03:63:a6:d8:d9:f7:9c:8a:af:59:
         b1:f5:68:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:17:52 2026 by rpki-client