Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/34352e3233392e36382e302f32322d3234203d3e203238353339.roa
File:                     34352e3233392e36382e302f32322d3234203d3e203238353339.roa (raw, json)
Hash identifier:          vD5vaxQsXe2Vj9y5gbLUcmxrCwOFDtHw8FdOo0SyPdY=
Subject key identifier:   71:ED:8C:D9:43:9A:E9:70:C2:38:FA:E5:C3:58:38:6D:F1:E9:2F:CF
Certificate issuer:       /CN=3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC
Certificate serial:       44B5394EB7D16B4DCCFC20AE84F7EF8FB82C5AED
Authority key identifier: 3B:8D:8C:3F:F0:C2:3C:7E:11:E8:96:CB:FF:8B:4E:C6:2D:EA:6D:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/34352e3233392e36382e302f32322d3234203d3e203238353339.roa
Signing time:             Thu 06 Aug 2026 17:20:05 +0000
ROA not before:           Thu 06 Aug 2026 17:15:05 +0000
ROA not after:            Thu 05 Aug 2027 17:20:05 +0000
asID:                     28539
IP address blocks:        45.239.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Aug 2026 06:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b5:39:4e:b7:d1:6b:4d:cc:fc:20:ae:84:f7:ef:8f:b8:2c:5a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC
        Validity
            Not Before: Aug  6 17:15:05 2026 GMT
            Not After : Aug  5 17:20:05 2027 GMT
        Subject: CN=71ED8CD9439AE970C238FAE5C358386DF1E92FCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7b:ae:bf:60:28:92:3b:0b:22:21:ba:01:db:
                    2e:5c:1d:a6:55:30:37:20:45:43:72:ca:7b:7d:88:
                    74:3d:d3:55:da:d9:4c:db:41:b9:e0:c3:c0:ba:4c:
                    e5:b0:77:7e:23:24:5b:e8:9a:a3:b2:f6:39:49:22:
                    f9:8b:09:7a:7a:e2:68:3e:7e:9b:11:36:02:bb:a6:
                    79:32:3c:3b:51:0e:74:35:cd:8b:8e:02:7b:c5:06:
                    07:0f:e2:ac:42:8a:1f:13:f8:46:7f:fd:dd:16:c6:
                    32:34:74:57:2e:e3:7e:f4:f6:13:7f:8a:88:d4:71:
                    9c:46:30:8e:8c:4c:be:10:c6:e3:d5:71:a1:c0:f4:
                    47:2c:bd:ad:87:08:b0:b3:cb:a4:a6:25:b6:44:b6:
                    43:d5:a7:b9:b8:9e:bb:8d:79:a0:21:f7:76:aa:80:
                    eb:69:a9:e7:63:c5:05:70:82:64:f8:04:a7:2b:d8:
                    90:aa:f8:fc:fc:17:6e:35:ff:23:39:22:92:5c:2b:
                    c5:40:6f:d5:8d:24:ac:b6:7d:83:78:34:2e:19:e7:
                    de:b5:3b:9d:02:0e:23:01:69:28:7b:5b:c0:da:3b:
                    f9:90:6e:22:c3:dc:38:19:54:66:69:b7:32:66:19:
                    22:6e:de:45:34:7e:54:6c:b6:fe:83:42:03:20:2c:
                    9e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:ED:8C:D9:43:9A:E9:70:C2:38:FA:E5:C3:58:38:6D:F1:E9:2F:CF
            X509v3 Authority Key Identifier:
                keyid:3B:8D:8C:3F:F0:C2:3C:7E:11:E8:96:CB:FF:8B:4E:C6:2D:EA:6D:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/34352e3233392e36382e302f32322d3234203d3e203238353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:60:d2:a6:46:f7:69:31:f7:4a:91:58:e8:e5:69:37:25:15:
         7f:0b:7a:dc:98:0e:73:45:97:66:af:87:b7:d7:94:17:bb:0a:
         a6:1e:2c:d1:23:f6:b2:89:7e:5a:56:e3:a5:53:f3:2c:cb:ec:
         76:65:7c:be:ac:80:ae:c8:99:52:46:64:64:47:04:82:e8:75:
         49:f2:59:91:09:85:a9:03:e3:e9:f5:d2:9f:cf:22:21:51:70:
         3b:4d:df:cc:8a:10:59:ef:b1:36:4b:73:6e:9a:fa:ea:f4:4d:
         2c:9c:04:62:f4:53:0e:32:46:4b:35:76:6c:96:fc:61:db:f3:
         bf:42:54:15:a2:c7:42:99:47:e5:69:2e:67:cc:39:7a:fb:30:
         bb:4c:42:77:0a:d5:43:34:99:9f:1e:f5:0f:fb:39:0d:0d:25:
         02:83:b4:4d:6d:70:ec:24:c2:d4:29:f9:4e:62:3a:b0:5c:16:
         07:ff:6e:36:27:de:6b:bc:66:a8:b5:37:af:7f:c2:9c:16:cf:
         85:8e:18:fe:f5:d5:6d:77:69:1b:01:f6:62:bc:a1:9d:0b:5b:
         98:5d:58:1e:71:d7:3b:c8:f2:14:28:56:69:a6:89:e6:9b:1c:
         ea:61:82:b6:66:a3:9f:76:6a:ed:46:5b:98:41:25:f4:10:0a:
         e0:ac:09:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 16:20:34 2026 by rpki-client