Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/34352e3233322e322e302f32332d3233203d3e20323636373534.roa
File:                     34352e3233322e322e302f32332d3233203d3e20323636373534.roa (raw, json)
Hash identifier:          mw7sD5JQEkMfHz2Wjf/LTQFeMZxBIGFGppLuXhAPxg0=
Subject key identifier:   2F:73:A7:96:D5:F2:53:55:A9:3E:9F:21:7D:AE:8C:1C:E3:4A:65:75
Certificate issuer:       /CN=64E2A9B1818F618CC381651138A0484A9CB1B197
Certificate serial:       67BE466A574E0747D962EEAB4EC99549A7BCF32E
Authority key identifier: 64:E2:A9:B1:81:8F:61:8C:C3:81:65:11:38:A0:48:4A:9C:B1:B1:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64E2A9B1818F618CC381651138A0484A9CB1B197.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/34352e3233322e322e302f32332d3233203d3e20323636373534.roa
Signing time:             Wed 17 Jun 2026 21:48:24 +0000
ROA not before:           Wed 17 Jun 2026 21:43:24 +0000
ROA not after:            Wed 16 Jun 2027 21:48:24 +0000
asID:                     266754
IP address blocks:        45.232.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/64E2A9B1818F618CC381651138A0484A9CB1B197.crl
                          rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/64E2A9B1818F618CC381651138A0484A9CB1B197.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64E2A9B1818F618CC381651138A0484A9CB1B197.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 02:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:be:46:6a:57:4e:07:47:d9:62:ee:ab:4e:c9:95:49:a7:bc:f3:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E2A9B1818F618CC381651138A0484A9CB1B197
        Validity
            Not Before: Jun 17 21:43:24 2026 GMT
            Not After : Jun 16 21:48:24 2027 GMT
        Subject: CN=2F73A796D5F25355A93E9F217DAE8C1CE34A6575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:dc:80:e7:65:d8:fe:36:86:73:23:11:b6:96:
                    76:7f:12:42:42:91:84:0d:aa:a9:10:6a:df:f6:b3:
                    0d:2e:35:53:7c:a5:71:49:63:77:cd:e3:87:1d:e5:
                    20:94:cf:af:06:85:13:bd:be:ea:6b:1d:e1:75:c2:
                    ee:cd:8b:5a:34:3a:ed:e0:19:79:e0:58:e1:42:91:
                    79:00:c1:c1:4b:49:05:2e:d5:88:6b:9e:14:65:90:
                    ef:60:fc:30:25:92:cf:32:5c:03:dd:76:fe:f7:4c:
                    47:75:aa:81:fe:63:e4:b9:aa:cc:8b:d9:11:be:65:
                    6f:06:6f:f0:bd:20:e0:2a:09:71:78:28:0b:2c:ae:
                    00:74:25:2c:7b:5a:83:38:c5:ca:6b:db:00:f3:69:
                    ad:e9:1c:0a:11:95:2a:2a:27:c5:f7:00:6e:b2:0d:
                    79:a2:82:ab:0e:8a:8c:39:c2:99:4e:fd:ba:7b:81:
                    3f:4e:cb:44:4b:f1:6a:ec:c9:a5:d8:43:f1:41:57:
                    3e:bd:6e:9d:9f:f8:5b:74:66:35:23:9c:1f:c4:08:
                    3a:0e:aa:23:03:1d:14:3c:01:f4:e1:4d:47:35:19:
                    e5:1f:3d:fc:da:3e:63:d4:69:90:20:d3:ae:6c:17:
                    d2:43:21:7c:0b:47:7b:e4:0a:b3:15:86:7b:5d:c0:
                    a4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:73:A7:96:D5:F2:53:55:A9:3E:9F:21:7D:AE:8C:1C:E3:4A:65:75
            X509v3 Authority Key Identifier:
                keyid:64:E2:A9:B1:81:8F:61:8C:C3:81:65:11:38:A0:48:4A:9C:B1:B1:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/64E2A9B1818F618CC381651138A0484A9CB1B197.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64E2A9B1818F618CC381651138A0484A9CB1B197.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/34352e3233322e322e302f32332d3233203d3e20323636373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:8a:f7:35:61:42:6e:3a:d6:b9:00:d1:34:3b:35:97:2d:71:
         7a:c4:f3:d3:60:4e:94:74:42:f6:db:10:c9:de:69:69:ec:36:
         8c:f4:11:0a:2e:aa:87:52:cd:73:87:e0:35:01:31:ff:fd:53:
         9b:60:f8:0d:9a:7f:67:8a:5a:b8:d3:90:7e:ef:e0:72:46:12:
         b3:95:56:a3:7d:1d:06:c7:b8:78:e0:d0:05:7c:53:a7:6a:f6:
         c7:94:19:50:34:05:c4:de:31:90:4c:82:34:e8:a4:a7:ee:d8:
         99:65:08:fc:85:4d:c6:1f:49:d0:09:78:46:0a:9e:c5:fc:2c:
         6e:1d:37:7d:16:8d:16:2e:48:af:51:02:5b:f6:bd:4b:e0:8f:
         79:e8:47:3a:b1:95:08:f7:fa:19:c3:59:f2:6c:77:a9:36:75:
         b0:03:2e:28:63:c9:22:c9:25:4b:85:7a:42:9c:0d:b6:08:f5:
         df:27:68:a2:48:e7:e4:4a:59:1a:1f:4b:85:14:b5:ea:90:99:
         a3:d6:27:cc:2b:f5:13:d6:9b:56:c3:a5:17:b2:a2:d8:47:77:
         b7:7f:a2:36:d4:ca:b0:8f:cc:c5:24:78:7d:06:9c:5a:0e:55:
         32:ff:d7:95:0e:a3:64:2b:66:7b:c2:11:c7:1a:60:80:88:3a:
         bc:89:12:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 05:38:51 2026 by rpki-client