Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3E9A4991FD842D5666DF3203FD2F467140DE08AB96328CA6460CE440A581B88/0/34352e3139302e3136342e302f32322d3232203d3e20323639383831.roa
File:                     34352e3139302e3136342e302f32322d3232203d3e20323639383831.roa (raw, json)
Hash identifier:          uLYP2Uuhqct0Uwbcv34ct0/6PIXP3qkpcpGfeF0i910=
Subject key identifier:   65:E3:A7:A5:B1:4F:30:8C:92:F1:02:79:B8:F9:9D:ED:54:8A:DC:D9
Certificate issuer:       /CN=C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659
Certificate serial:       38319BF304F81E5683A1C4C202019F94B0ECC511
Authority key identifier: C1:B7:5D:01:0A:CA:4B:0B:A2:08:6A:26:4F:1A:E1:FD:0F:0C:C6:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3E9A4991FD842D5666DF3203FD2F467140DE08AB96328CA6460CE440A581B88/0/34352e3139302e3136342e302f32322d3232203d3e20323639383831.roa
Signing time:             Wed 18 Feb 2026 14:31:06 +0000
ROA not before:           Wed 18 Feb 2026 14:26:06 +0000
ROA not after:            Wed 17 Feb 2027 14:31:06 +0000
asID:                     269881
IP address blocks:        45.190.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C3E9A4991FD842D5666DF3203FD2F467140DE08AB96328CA6460CE440A581B88/0/C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C3E9A4991FD842D5666DF3203FD2F467140DE08AB96328CA6460CE440A581B88/0/C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:31:9b:f3:04:f8:1e:56:83:a1:c4:c2:02:01:9f:94:b0:ec:c5:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659
        Validity
            Not Before: Feb 18 14:26:06 2026 GMT
            Not After : Feb 17 14:31:06 2027 GMT
        Subject: CN=65E3A7A5B14F308C92F10279B8F99DED548ADCD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:38:20:d9:7a:af:3a:aa:d3:8f:74:27:e6:4b:
                    a5:15:2b:25:f1:15:c1:71:7e:26:f2:b9:c3:67:34:
                    0e:5f:29:ea:8e:e2:fa:08:ad:fd:3e:27:c9:a0:e0:
                    7c:f6:49:c7:1d:06:47:c3:b3:e8:c2:5e:ca:b7:f2:
                    99:41:62:bd:d7:69:b9:be:d1:2a:68:ef:3a:9e:3b:
                    2c:a5:be:e6:fb:ae:04:c7:87:d1:3e:58:e0:90:75:
                    1c:18:87:db:68:5e:01:00:3b:a0:89:c0:71:63:83:
                    de:c5:5f:39:7d:12:ce:7d:66:23:e6:ec:92:b1:b4:
                    95:3b:86:ac:77:23:8c:65:a3:a3:d3:9f:97:c6:27:
                    f3:74:30:27:09:a9:b5:6d:cd:2b:4c:56:ec:6d:a0:
                    72:87:1e:35:81:be:00:1b:ed:c2:18:5a:f3:7c:75:
                    d9:e9:a4:b0:f1:1d:2f:f9:6f:1a:19:ba:0c:01:5e:
                    ac:10:4b:ef:ff:4b:61:da:be:8e:72:b9:6f:14:e2:
                    5e:81:a3:24:b4:10:8b:47:35:d3:f3:06:bf:29:cb:
                    6a:91:29:97:b6:7c:0b:c1:f6:b3:ff:2e:b6:f1:7e:
                    51:c0:9b:13:14:84:71:17:b8:01:56:bc:70:00:77:
                    cd:40:66:da:a3:fa:6e:e9:06:e9:9f:48:77:43:bb:
                    56:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E3:A7:A5:B1:4F:30:8C:92:F1:02:79:B8:F9:9D:ED:54:8A:DC:D9
            X509v3 Authority Key Identifier:
                keyid:C1:B7:5D:01:0A:CA:4B:0B:A2:08:6A:26:4F:1A:E1:FD:0F:0C:C6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3E9A4991FD842D5666DF3203FD2F467140DE08AB96328CA6460CE440A581B88/0/C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3E9A4991FD842D5666DF3203FD2F467140DE08AB96328CA6460CE440A581B88/0/34352e3139302e3136342e302f32322d3232203d3e20323639383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:b3:3d:e7:dc:d3:31:32:0f:42:c8:f3:ea:b6:35:a1:b3:d2:
         75:f9:4d:a8:23:2b:bf:99:c2:76:d8:0e:fb:48:23:b7:27:d8:
         d3:f3:c8:6a:14:11:50:b9:36:3a:7b:b5:5c:1e:fa:81:f3:b2:
         49:18:43:ab:8a:07:2b:99:f6:e6:30:05:f1:1e:86:c9:e8:40:
         a8:86:ec:78:02:25:5b:0b:65:9f:9f:88:09:a4:8b:ea:c0:9a:
         96:5a:b8:61:a1:4b:87:6b:63:b9:cf:c1:58:60:b8:7b:54:c0:
         3f:a7:71:ef:a0:56:e1:bd:1f:0f:61:7f:57:18:f9:e9:84:1c:
         a5:4d:51:54:67:1f:aa:49:58:8a:a0:53:2f:2e:f6:d5:03:cf:
         07:27:67:9e:8f:8e:f9:6d:39:14:82:65:da:27:0b:bd:25:90:
         35:31:c0:0d:e0:4f:2c:52:97:f5:57:07:9f:ec:49:a1:6a:66:
         19:39:2a:67:2d:02:e1:59:46:33:74:e2:96:92:2e:e3:d5:9d:
         f3:5a:63:96:9d:92:54:21:74:92:c8:a0:aa:30:c1:76:23:6c:
         e7:9e:a0:15:46:53:aa:f8:3c:de:86:e7:d4:8b:c0:8e:f4:f0:
         13:24:c4:74:f1:c4:da:03:fb:e6:7f:3e:46:89:05:9f:99:52:
         1f:99:1c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:23:02 2026 by rpki-client