Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/34352e36382e33342e302f32332d3234203d3e20323734303637.roa
File:                     34352e36382e33342e302f32332d3234203d3e20323734303637.roa (raw, json)
Hash identifier:          I0B3Wg3MBT+Bv6Q8aD/00XZxWy4t+4UiJv5ZnhvL/1E=
Subject key identifier:   AC:C9:7D:A1:F0:12:95:84:82:2E:E0:02:9A:75:13:52:D5:41:0C:E3
Certificate issuer:       /CN=77B81134906868C6E3E9D1FFFFFA566816CB9125
Certificate serial:       7A43750C8178A91964ED17600AFE7908D5377E81
Authority key identifier: 77:B8:11:34:90:68:68:C6:E3:E9:D1:FF:FF:FA:56:68:16:CB:91:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/34352e36382e33342e302f32332d3234203d3e20323734303637.roa
Signing time:             Thu 04 Jun 2026 12:46:33 +0000
ROA not before:           Thu 04 Jun 2026 12:41:33 +0000
ROA not after:            Thu 03 Jun 2027 12:46:33 +0000
asID:                     274067
IP address blocks:        45.68.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:43:75:0c:81:78:a9:19:64:ed:17:60:0a:fe:79:08:d5:37:7e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77B81134906868C6E3E9D1FFFFFA566816CB9125
        Validity
            Not Before: Jun  4 12:41:33 2026 GMT
            Not After : Jun  3 12:46:33 2027 GMT
        Subject: CN=ACC97DA1F0129584822EE0029A751352D5410CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:72:7c:7a:f0:11:7c:5a:ca:bf:e3:87:eb:df:
                    f4:6a:ca:fb:2c:0b:2d:af:2e:4a:ec:c9:51:41:f3:
                    fa:8a:14:bb:3f:e6:37:a9:35:7c:a7:8f:c9:c3:3b:
                    7e:2b:63:14:ba:53:82:7b:6f:92:b6:a4:40:ff:44:
                    81:28:6e:30:1d:95:b2:d0:be:6e:ca:0f:d7:6c:7b:
                    6a:76:e0:28:b0:16:c6:12:10:3e:c4:2c:39:cc:96:
                    91:54:90:64:1a:08:a0:32:fa:b7:93:b9:af:10:44:
                    2b:63:10:af:88:92:ea:0e:ec:de:36:57:0c:3e:64:
                    59:84:ff:c3:03:ac:86:39:16:73:37:9f:a5:ef:91:
                    06:f3:b6:4c:e0:c0:7d:e4:07:97:fa:00:0e:7b:1d:
                    9b:71:14:5c:4f:c4:87:68:49:c9:3f:02:07:9c:85:
                    0d:81:7c:b3:8b:d4:dd:5a:cf:df:69:98:a8:c1:51:
                    6e:a9:ef:99:f9:46:43:2b:5e:ca:4c:ef:58:e6:1d:
                    f8:2a:03:75:ab:27:13:aa:4c:74:5e:9a:44:94:47:
                    ee:68:7f:54:a0:7d:12:51:d2:99:71:ff:bd:aa:47:
                    86:49:6b:71:4f:01:ef:80:08:2e:52:71:cd:8b:60:
                    0a:fc:3a:bf:da:6e:fa:55:d0:52:fc:07:d2:7a:37:
                    90:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C9:7D:A1:F0:12:95:84:82:2E:E0:02:9A:75:13:52:D5:41:0C:E3
            X509v3 Authority Key Identifier:
                keyid:77:B8:11:34:90:68:68:C6:E3:E9:D1:FF:FF:FA:56:68:16:CB:91:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/34352e36382e33342e302f32332d3234203d3e20323734303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:4f:1b:e2:78:0e:49:48:18:5d:71:16:fa:b6:68:a8:0c:a2:
         22:1a:1d:b6:f7:ec:d6:ca:10:37:0a:dc:2d:48:32:7f:de:2a:
         c7:30:09:70:e1:e5:f5:37:51:ac:5f:09:29:b0:68:16:35:65:
         74:b4:49:6d:bc:ba:f8:14:23:ad:59:2a:de:71:0b:28:7a:01:
         39:be:43:a9:ac:df:b0:ae:bc:19:f5:4d:e3:20:41:dc:05:31:
         89:05:27:0b:01:dc:4b:db:7c:2d:08:a7:da:9f:91:8c:de:60:
         8f:ce:d4:d4:4c:d1:0f:01:7e:2c:81:5d:ee:f1:ed:79:28:2d:
         7d:e5:a4:3e:39:2b:b4:e4:c7:1a:7f:e1:a7:1c:aa:f0:b6:fc:
         10:cb:73:fc:24:04:0f:19:cd:9d:6e:e3:21:c0:83:ba:55:31:
         d2:ba:1f:97:8e:b4:4c:98:83:c2:d5:4b:85:7c:c1:3a:4a:a9:
         10:23:85:24:83:d2:78:6a:84:bf:8c:bc:b8:32:a7:74:f4:54:
         a9:2a:64:9a:d8:47:32:71:ec:fa:24:8e:87:07:4b:8c:39:f2:
         0a:f9:4d:4c:b9:f3:76:6f:e0:f7:e6:aa:45:d5:56:9c:ac:e0:
         f6:40:ba:8a:e1:6b:9c:07:a1:e5:10:fd:11:55:d4:7b:80:f7:
         19:44:d4:9c
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUekN1DIF4qRlk7RdgCv55CNU3foEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdCODExMzQ5MDY4NjhDNkUzRTlEMUZGRkZGQTU2Njgx
NkNCOTEyNTAeFw0yNjA2MDQxMjQxMzNaFw0yNzA2MDMxMjQ2MzNaMDMxMTAvBgNV
BAMTKEFDQzk3REExRjAxMjk1ODQ4MjJFRTAwMjlBNzUxMzUyRDU0MTBDRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjcnx68BF8Wsq/44fr3/Rqyvss
Cy2vLkrsyVFB8/qKFLs/5jepNXynj8nDO34rYxS6U4J7b5K2pED/RIEobjAdlbLQ
vm7KD9dse2p24CiwFsYSED7ELDnMlpFUkGQaCKAy+reTua8QRCtjEK+IkuoO7N42
Vww+ZFmE/8MDrIY5FnM3n6XvkQbztkzgwH3kB5f6AA57HZtxFFxPxIdoSck/Agec
hQ2BfLOL1N1az99pmKjBUW6p75n5RkMrXspM71jmHfgqA3WrJxOqTHRemkSUR+5o
f1SgfRJR0plx/72qR4ZJa3FPAe+ACC5Scc2LYAr8Or/abvpV0FL8B9J6N5CRAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUrMl9ofASlYSCLuACmnUTUtVBDOMwHwYDVR0j
BBgwFoAUd7gRNJBoaMbj6dH///pWaBbLkSUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNUQ3RDM3REYzOThBQ0ZBNzE0REI5ODAwOEE4MEVDNjNB
QzY1QzZBNDNENjEzMEUwRkQ5ODBGRTNGMzEzRjlCLzAvNzdCODExMzQ5MDY4NjhD
NkUzRTlEMUZGRkZGQTU2NjgxNkNCOTEyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83N0I4MTEzNDkwNjg2OEM2RTNF
OUQxRkZGRkZBNTY2ODE2Q0I5MTI1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzVEN0QzN0RGMzk4QUNGQTcxNERCOTgwMDhBODBFQzYzQUM2NUM2QTQz
RDYxMzBFMEZEOTgwRkUzRjMxM0Y5Qi8wLzM0MzUyZTM2MzgyZTMzMzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMjM3MzQzMDM2Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEtRCIwDQYJ
KoZIhvcNAQELBQADggEBABFPG+J4DklIGF1xFvq2aKgMoiIaHbb37NbKEDcK3C1I
Mn/eKscwCXDh5fU3UaxfCSmwaBY1ZXS0SW28uvgUI61ZKt5xCyh6ATm+Q6ms37Cu
vBn1TeMgQdwFMYkFJwsB3EvbfC0Ip9qfkYzeYI/O1NRM0Q8BfiyBXe7x7XkoLX3l
pD45K7Tkxxp/4accqvC2/BDLc/wkBA8ZzZ1u4yHAg7pVMdK6H5eOtEyYg8LVS4V8
wTpKqRAjhSSD0nhqhL+MvLgyp3T0VKkqZJrYRzJx7PokjocHS4w58gr5TUy583Zv
4PfmqkXVVpys4PZAuorha5wHoeUQ/RFV1HuA9xlE1Jw=
-----END CERTIFICATE-----
Generated at Sun Jun 14 12:09:45 2026 by rpki-client