Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138312e3230342e302f32332d3234203d3e20323634363436.roa
File:                     34352e3138312e3230342e302f32332d3234203d3e20323634363436.roa (raw, json)
Hash identifier:          CGlDN/t5QQkvm0Y/qgiPinXpMBRuZe1GOvIVrivW2So=
Subject key identifier:   5B:E6:1C:C1:58:4F:54:58:FA:0E:1B:EF:83:19:20:FC:C5:FA:7D:84
Certificate issuer:       /CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
Certificate serial:       2AB88E0A5097F80CECDB1327F1B81073955A44E8
Authority key identifier: 7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138312e3230342e302f32332d3234203d3e20323634363436.roa
Signing time:             Mon 16 Feb 2026 14:30:44 +0000
ROA not before:           Mon 16 Feb 2026 14:25:44 +0000
ROA not after:            Mon 15 Feb 2027 14:30:44 +0000
asID:                     264646
IP address blocks:        45.181.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 12:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b8:8e:0a:50:97:f8:0c:ec:db:13:27:f1:b8:10:73:95:5a:44:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
        Validity
            Not Before: Feb 16 14:25:44 2026 GMT
            Not After : Feb 15 14:30:44 2027 GMT
        Subject: CN=5BE61CC1584F5458FA0E1BEF831920FCC5FA7D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4b:3e:43:3f:2e:01:94:c9:7d:34:d9:01:89:
                    3f:33:64:c5:07:b2:37:de:99:18:ce:8a:c5:dd:1f:
                    58:1b:b1:2d:90:47:a6:3a:1d:ad:aa:f9:86:b8:59:
                    bc:c0:39:a4:7d:b2:05:de:f0:19:64:1c:e9:60:89:
                    a0:06:78:6c:0f:da:ef:ad:00:84:be:28:d8:4d:c2:
                    3d:a1:6d:34:e4:6e:ba:01:fd:61:68:81:c9:c5:70:
                    0e:b1:6b:97:b5:8c:99:01:04:d9:ce:ad:bd:68:87:
                    d8:4b:2f:4f:22:58:95:f1:de:d7:3f:1d:10:de:03:
                    45:0f:e9:4e:5c:fe:61:a4:af:d1:be:b7:4b:59:aa:
                    b0:83:ce:81:e3:fb:86:a6:b2:9f:00:c8:a8:d4:f8:
                    57:ca:a0:fe:64:81:ac:04:91:a3:24:d2:23:e7:24:
                    3a:64:3c:17:31:5c:b5:c0:2a:24:8b:07:48:7f:16:
                    b1:d1:2e:81:c5:64:22:32:47:1e:f8:22:cf:aa:09:
                    6d:fc:9a:8b:28:40:f1:cf:5c:c8:05:3a:7b:2c:d2:
                    65:3f:9e:0c:c5:7d:9d:37:1f:2a:68:63:1b:6f:c2:
                    3f:18:66:d0:71:d4:1a:3c:6e:53:84:86:98:de:24:
                    02:b8:36:5e:18:61:e8:c7:ce:7c:94:e6:9d:66:7c:
                    7a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E6:1C:C1:58:4F:54:58:FA:0E:1B:EF:83:19:20:FC:C5:FA:7D:84
            X509v3 Authority Key Identifier:
                keyid:7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138312e3230342e302f32332d3234203d3e20323634363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:24:d0:f0:6f:db:92:9c:d9:22:1e:b2:d7:f2:5f:3b:76:ed:
         e2:f7:dc:2e:a2:d9:f8:8b:c9:54:b9:41:07:b3:09:44:55:95:
         88:3f:ca:e5:87:2d:5d:11:d0:7d:35:33:e4:0a:88:28:3d:92:
         82:25:72:62:20:00:d1:30:6a:84:8c:42:3a:84:5d:ee:d6:c7:
         08:d9:4c:89:62:84:7e:cf:2c:c5:03:2b:0f:31:2f:dc:f0:97:
         68:49:d9:54:9f:7e:7c:4d:7a:90:43:4d:5a:07:f4:77:ed:c2:
         07:95:fe:ec:41:6f:e7:6f:bd:a7:3a:29:5c:04:0b:ee:cc:74:
         90:7d:e7:2a:bc:9b:2c:c7:e8:ac:ed:6b:65:3b:b0:5d:f5:a5:
         25:e2:eb:43:9c:f0:fd:30:2e:93:7a:b7:ef:75:49:b2:78:b0:
         6f:37:66:e1:27:4c:9c:5d:df:f9:57:ba:b3:cb:76:40:70:9e:
         a5:4c:bc:d6:13:86:c6:54:37:2d:7a:72:14:ec:99:36:e8:24:
         87:cc:3d:cb:75:73:4a:7d:01:f0:b4:7a:7e:c2:a4:37:04:ce:
         8c:a6:ae:76:49:b2:30:2b:92:b6:fa:7c:4a:de:40:8b:29:c1:
         6d:9f:ae:cd:2b:47:08:ae:4e:fe:72:8c:de:04:a8:c6:89:61:
         5f:22:99:96
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKriOClCX+Azs2xMn8bgQc5VaROgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U2NTY0MThGQkQ2RjUxOUU4Q0ExNDZFMDYxQ0Y1NTNB
RkU0ODBGMTAeFw0yNjAyMTYxNDI1NDRaFw0yNzAyMTUxNDMwNDRaMDMxMTAvBgNV
BAMTKDVCRTYxQ0MxNTg0RjU0NThGQTBFMUJFRjgzMTkyMEZDQzVGQTdEODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGSz5DPy4BlMl9NNkBiT8zZMUH
sjfemRjOisXdH1gbsS2QR6Y6Ha2q+Ya4WbzAOaR9sgXe8BlkHOlgiaAGeGwP2u+t
AIS+KNhNwj2hbTTkbroB/WFogcnFcA6xa5e1jJkBBNnOrb1oh9hLL08iWJXx3tc/
HRDeA0UP6U5c/mGkr9G+t0tZqrCDzoHj+4amsp8AyKjU+FfKoP5kgawEkaMk0iPn
JDpkPBcxXLXAKiSLB0h/FrHRLoHFZCIyRx74Is+qCW38mosoQPHPXMgFOnss0mU/
ngzFfZ03HypoYxtvwj8YZtBx1Bo8blOEhpjeJAK4Nl4YYejHznyU5p1mfHpVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUW+YcwVhPVFj6Dhvvgxkg/MX6fYQwHwYDVR0j
BBgwFoAUfmVkGPvW9RnoyhRuBhz1U6/kgPEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEM1QUMzOUI1REI3MjVGNzZBQ0UyNTdBQjgxN0FFQzU4
RDM4Q0JBNDRGMjJCMzM4Nzk2NkI0QUI5QTIyOTZELzAvN0U2NTY0MThGQkQ2RjUx
OUU4Q0ExNDZFMDYxQ0Y1NTNBRkU0ODBGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RTY1NjQxOEZCRDZGNTE5RThD
QTE0NkUwNjFDRjU1M0FGRTQ4MEYxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRDNUFDMzlCNURCNzI1Rjc2QUNFMjU3QUI4MTdBRUM1OEQzOENCQTQ0
RjIyQjMzODc5NjZCNEFCOUEyMjk2RC8wLzM0MzUyZTMxMzgzMTJlMzIzMDM0MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM0MzYzNDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLbXM
MA0GCSqGSIb3DQEBCwUAA4IBAQAhJNDwb9uSnNkiHrLX8l87du3i99wuotn4i8lU
uUEHswlEVZWIP8rlhy1dEdB9NTPkCogoPZKCJXJiIADRMGqEjEI6hF3u1scI2UyJ
YoR+zyzFAysPMS/c8JdoSdlUn358TXqQQ01aB/R37cIHlf7sQW/nb72nOilcBAvu
zHSQfecqvJssx+is7WtlO7Bd9aUl4utDnPD9MC6TerfvdUmyeLBvN2bhJ0ycXd/5
V7qzy3ZAcJ6lTLzWE4bGVDctenIU7Jk26CSHzD3LdXNKfQHwtHp+wqQ3BM6Mpq52
SbIwK5K2+nxK3kCLKcFtn67NK0cIrk7+cozeBKjGiWFfIpmW
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:12:10 2026 by rpki-client