Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/34352e36382e36362e3139322f32362d3236203d3e20323732333935.roa
File:                     34352e36382e36362e3139322f32362d3236203d3e20323732333935.roa (raw, json)
Hash identifier:          C2WI/UkmQcL/PLpQ99AsDui8og1AMXmNpew61da3T8s=
Subject key identifier:   16:3B:A3:F7:64:35:23:BB:01:A1:C2:A8:0B:A1:A1:72:78:B8:FB:57
Certificate issuer:       /CN=42088D6FEC3FD14B71DEDB78860C90D825571466
Certificate serial:       71E81B20C729E19E636B9AB612C4612FCBE0222B
Authority key identifier: 42:08:8D:6F:EC:3F:D1:4B:71:DE:DB:78:86:0C:90:D8:25:57:14:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/34352e36382e36362e3139322f32362d3236203d3e20323732333935.roa
Signing time:             Thu 26 Feb 2026 11:31:57 +0000
ROA not before:           Thu 26 Feb 2026 11:26:57 +0000
ROA not after:            Thu 25 Feb 2027 11:31:57 +0000
asID:                     272395
IP address blocks:        45.68.66.192/26 maxlen: 26
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e8:1b:20:c7:29:e1:9e:63:6b:9a:b6:12:c4:61:2f:cb:e0:22:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42088D6FEC3FD14B71DEDB78860C90D825571466
        Validity
            Not Before: Feb 26 11:26:57 2026 GMT
            Not After : Feb 25 11:31:57 2027 GMT
        Subject: CN=163BA3F7643523BB01A1C2A80BA1A17278B8FB57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:58:81:4f:40:21:b3:df:a3:26:46:b7:80:e7:
                    e6:ff:7f:a3:b2:3d:87:0a:57:ff:89:ad:f6:a4:d8:
                    92:31:96:af:ca:50:ed:2f:fe:d3:49:f8:7b:e5:34:
                    9f:7e:2a:74:75:fb:51:43:02:40:cf:55:57:2a:bc:
                    63:88:51:56:77:05:53:7b:fc:8f:d2:87:24:98:ff:
                    24:4b:88:e7:f4:78:8b:78:7c:27:b5:71:b8:78:47:
                    1a:a4:2f:e7:d2:92:d2:b7:5a:c8:47:45:44:99:fb:
                    1e:97:c7:b3:98:38:a8:8b:b0:46:5d:5c:94:af:d3:
                    4a:c3:08:29:b5:f0:3d:6e:69:73:81:d4:82:7a:c4:
                    8c:68:bd:46:a4:d1:66:f8:ac:30:8d:2b:02:45:29:
                    2f:8e:d7:32:c3:1b:54:b5:5a:7e:4a:e7:c1:47:5e:
                    a5:57:a3:9f:b0:6b:d9:04:c1:cb:d0:a7:ed:17:ba:
                    db:61:b7:9f:02:48:d8:f7:d7:87:cb:f5:01:74:08:
                    b8:4e:66:d4:59:01:e8:3a:8d:d2:ed:e4:90:69:24:
                    54:32:82:7c:5e:ae:08:b3:0d:a7:6e:73:24:a2:bd:
                    cf:c1:71:73:4c:a5:31:af:f7:77:df:56:90:00:24:
                    d1:2c:83:59:ca:56:46:cb:5c:d0:79:e1:0d:46:ed:
                    eb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3B:A3:F7:64:35:23:BB:01:A1:C2:A8:0B:A1:A1:72:78:B8:FB:57
            X509v3 Authority Key Identifier:
                keyid:42:08:8D:6F:EC:3F:D1:4B:71:DE:DB:78:86:0C:90:D8:25:57:14:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/34352e36382e36362e3139322f32362d3236203d3e20323732333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.66.192/26

    Signature Algorithm: sha256WithRSAEncryption
         8b:4c:f5:8e:71:09:aa:6f:20:0b:f3:41:d0:0c:c7:ed:dc:47:
         c5:c7:47:fc:3b:46:ca:6d:5f:ec:01:64:24:12:ec:68:63:ac:
         28:c5:77:69:4b:19:56:60:15:8f:64:91:a5:9f:7f:fb:23:b4:
         a4:a0:db:b0:e8:7b:d6:01:ae:e2:34:d7:a5:3b:0d:4f:0f:89:
         65:a0:ad:86:cb:03:9e:8e:ad:a7:b9:db:d9:0b:08:f1:44:02:
         5e:1e:de:e5:0a:d9:34:01:3f:f0:63:b1:b0:a9:df:70:b0:51:
         1f:5d:a3:ce:a0:bb:42:d9:92:fb:c3:97:cf:da:47:c6:98:5a:
         4d:66:f7:00:c3:89:64:36:b7:db:3c:b7:b8:06:7d:8a:93:2f:
         53:32:b2:b6:a4:58:8c:74:e2:30:2b:bc:30:2c:ec:82:ac:25:
         f8:5c:c7:9a:3d:54:07:2d:50:f8:81:f5:af:fb:bc:d5:14:30:
         0c:f2:03:cb:5b:1c:2b:16:26:19:3a:a0:e0:8d:67:ce:91:70:
         ec:67:4f:fc:20:9e:18:a3:92:68:7e:bf:f5:d9:4b:1f:9c:10:
         75:c9:5b:6e:72:8a:88:e7:68:8e:ef:9d:d8:81:9c:2b:f8:43:
         fd:41:14:43:2f:35:c7:c2:60:eb:38:6a:4f:45:74:ac:f2:86:
         95:fd:ce:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:00:28 2026 by rpki-client