Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DFCCC5791B8415E8DE0146B404D0036D0AA081A0E7849F398E1134773BABE7E/0/34352e3233362e34302e302f32322d3234203d3e20323636383133.roa
File:                     34352e3233362e34302e302f32322d3234203d3e20323636383133.roa (raw, json)
Hash identifier:          wulbJdSqI3zZImPMTfds0AXg2hJsjAo0qWe7Ig9runM=
Subject key identifier:   70:51:3C:D5:E8:1B:93:CE:9B:CF:8B:94:01:F7:4B:80:36:06:98:B4
Certificate issuer:       /CN=1F94F6425AFDF2641F01874A7B2141A7A725DEFD
Certificate serial:       2B252DE5D113C78CC3080A144A16C21B15BA11CF
Authority key identifier: 1F:94:F6:42:5A:FD:F2:64:1F:01:87:4A:7B:21:41:A7:A7:25:DE:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F94F6425AFDF2641F01874A7B2141A7A725DEFD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DFCCC5791B8415E8DE0146B404D0036D0AA081A0E7849F398E1134773BABE7E/0/34352e3233362e34302e302f32322d3234203d3e20323636383133.roa
Signing time:             Fri 13 Feb 2026 18:25:00 +0000
ROA not before:           Fri 13 Feb 2026 18:20:00 +0000
ROA not after:            Fri 12 Feb 2027 18:25:00 +0000
asID:                     266813
IP address blocks:        45.236.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DFCCC5791B8415E8DE0146B404D0036D0AA081A0E7849F398E1134773BABE7E/0/1F94F6425AFDF2641F01874A7B2141A7A725DEFD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DFCCC5791B8415E8DE0146B404D0036D0AA081A0E7849F398E1134773BABE7E/0/1F94F6425AFDF2641F01874A7B2141A7A725DEFD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F94F6425AFDF2641F01874A7B2141A7A725DEFD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:25:2d:e5:d1:13:c7:8c:c3:08:0a:14:4a:16:c2:1b:15:ba:11:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F94F6425AFDF2641F01874A7B2141A7A725DEFD
        Validity
            Not Before: Feb 13 18:20:00 2026 GMT
            Not After : Feb 12 18:25:00 2027 GMT
        Subject: CN=70513CD5E81B93CE9BCF8B9401F74B80360698B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:87:42:ba:06:ca:a2:c5:46:1d:82:73:03:fe:
                    55:cf:59:2f:8d:2a:60:e2:5b:9f:c0:47:d7:66:27:
                    25:31:84:8c:07:cb:95:93:f7:b8:86:c8:fd:d4:1b:
                    eb:35:a4:63:9c:76:ed:78:7d:4c:6b:ad:11:0f:16:
                    57:6d:fd:e9:09:90:4d:91:30:8c:83:3c:0a:f6:10:
                    e2:0f:d4:c6:ee:07:25:34:81:c9:98:44:48:71:68:
                    26:84:66:23:b6:0d:25:72:c6:c0:52:c5:cf:99:d2:
                    76:90:8e:fa:53:2b:b5:73:6c:b2:16:f7:4f:09:53:
                    45:94:3d:96:ad:a4:99:4d:7a:21:43:7a:92:da:e0:
                    5c:6b:cd:a6:b1:17:ca:6e:5e:a4:1e:4b:03:a1:77:
                    0a:c0:44:d0:57:5c:af:7c:28:d0:bd:06:36:c0:5f:
                    24:26:dd:eb:5c:8e:2f:ce:ef:3d:66:34:ae:d5:cf:
                    db:02:ab:b7:9e:41:2c:f3:bb:3d:52:2d:ea:8d:4e:
                    00:8c:92:0b:20:c8:17:d6:07:1a:f1:0e:e3:a0:a5:
                    0f:f7:7d:ce:1c:3d:4d:a6:49:79:a1:d6:cf:8c:61:
                    69:f1:a4:aa:1d:f4:69:8f:60:1b:86:7e:83:29:d3:
                    db:e4:8c:98:1d:66:1a:22:1b:fd:5a:26:ce:0c:cb:
                    3b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:51:3C:D5:E8:1B:93:CE:9B:CF:8B:94:01:F7:4B:80:36:06:98:B4
            X509v3 Authority Key Identifier:
                keyid:1F:94:F6:42:5A:FD:F2:64:1F:01:87:4A:7B:21:41:A7:A7:25:DE:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DFCCC5791B8415E8DE0146B404D0036D0AA081A0E7849F398E1134773BABE7E/0/1F94F6425AFDF2641F01874A7B2141A7A725DEFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F94F6425AFDF2641F01874A7B2141A7A725DEFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DFCCC5791B8415E8DE0146B404D0036D0AA081A0E7849F398E1134773BABE7E/0/34352e3233362e34302e302f32322d3234203d3e20323636383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:ca:03:79:7d:8f:9f:1c:1a:1f:b0:fe:57:29:da:f3:c2:8e:
         74:75:1f:2a:50:2d:9c:3d:c0:aa:74:e8:08:54:48:0f:6b:4d:
         e1:59:1c:58:ab:d1:60:92:a2:45:60:c9:aa:65:3c:39:0e:e6:
         7a:41:f9:95:b0:6d:74:bf:ac:63:16:0b:60:99:6d:16:ba:16:
         ad:70:bf:ba:c3:62:7d:6e:96:88:fa:9a:3c:54:3b:0f:cf:e7:
         59:b8:ba:ff:4d:92:71:54:4f:09:6d:4b:94:da:01:56:66:26:
         34:f9:df:54:de:b3:fa:7f:62:32:91:37:cf:4b:db:de:af:c9:
         de:d7:0a:db:03:9c:86:47:ac:53:92:85:74:70:ab:f0:0d:e6:
         ac:0b:f0:1a:e3:67:21:ba:19:f2:4f:ab:0a:11:2c:e2:69:7b:
         0d:c4:d8:b8:9c:25:f5:6e:ca:b2:44:ae:4d:5f:9e:6f:a4:e2:
         5e:e5:e4:83:03:35:8d:1d:87:2f:c3:9d:a9:75:b5:25:a8:db:
         34:30:d8:7b:d7:dc:fe:e0:5e:dc:0e:4d:81:e7:6b:6b:23:b8:
         1d:20:1e:b6:99:42:6c:ce:0f:d5:a9:07:60:f6:85:9a:bd:76:
         b4:16:e7:f2:a7:91:54:ce:1c:44:46:5a:97:9c:09:11:8b:1e:
         58:af:4b:ec
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUKyUt5dETx4zDCAoUShbCGxW6Ec8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY5NEY2NDI1QUZERjI2NDFGMDE4NzRBN0IyMTQxQTdB
NzI1REVGRDAeFw0yNjAyMTMxODIwMDBaFw0yNzAyMTIxODI1MDBaMDMxMTAvBgNV
BAMTKDcwNTEzQ0Q1RTgxQjkzQ0U5QkNGOEI5NDAxRjc0QjgwMzYwNjk4QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEh0K6BsqixUYdgnMD/lXPWS+N
KmDiW5/AR9dmJyUxhIwHy5WT97iGyP3UG+s1pGOcdu14fUxrrREPFldt/ekJkE2R
MIyDPAr2EOIP1MbuByU0gcmYREhxaCaEZiO2DSVyxsBSxc+Z0naQjvpTK7VzbLIW
908JU0WUPZatpJlNeiFDepLa4FxrzaaxF8puXqQeSwOhdwrARNBXXK98KNC9BjbA
XyQm3etcji/O7z1mNK7Vz9sCq7eeQSzzuz1SLeqNTgCMkgsgyBfWBxrxDuOgpQ/3
fc4cPU2mSXmh1s+MYWnxpKod9GmPYBuGfoMp09vkjJgdZhoiG/1aJs4MyzsrAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUcFE81egbk86bz4uUAfdLgDYGmLQwHwYDVR0j
BBgwFoAUH5T2Qlr98mQfAYdKeyFBp6cl3v0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82REZDQ0M1NzkxQjg0MTVFOERFMDE0NkI0MDREMDAzNkQw
QUEwODFBMEU3ODQ5RjM5OEUxMTM0NzczQkFCRTdFLzAvMUY5NEY2NDI1QUZERjI2
NDFGMDE4NzRBN0IyMTQxQTdBNzI1REVGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjk0RjY0MjVBRkRGMjY0MUYw
MTg3NEE3QjIxNDFBN0E3MjVERUZELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkRGQ0NDNTc5MUI4NDE1RThERTAxNDZCNDA0RDAwMzZEMEFBMDgxQTBF
Nzg0OUYzOThFMTEzNDc3M0JBQkU3RS8wLzM0MzUyZTMyMzMzNjJlMzQzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM4MzEzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3sKDAN
BgkqhkiG9w0BAQsFAAOCAQEAMcoDeX2PnxwaH7D+Vyna88KOdHUfKlAtnD3AqnTo
CFRID2tN4VkcWKvRYJKiRWDJqmU8OQ7mekH5lbBtdL+sYxYLYJltFroWrXC/usNi
fW6WiPqaPFQ7D8/nWbi6/02ScVRPCW1LlNoBVmYmNPnfVN6z+n9iMpE3z0vb3q/J
3tcK2wOchkesU5KFdHCr8A3mrAvwGuNnIboZ8k+rChEs4ml7DcTYuJwl9W7KskSu
TV+eb6TiXuXkgwM1jR2HL8OdqXW1JajbNDDYe9fc/uBe3A5NgedrayO4HSAetplC
bM4P1akHYPaFmr12tBbn8qeRVM4cREZal5wJEYseWK9L7A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:17:26 2026 by rpki-client