Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/34352e36382e33342e302f32332d3234203d3e203634313530.roa
File:                     34352e36382e33342e302f32332d3234203d3e203634313530.roa (raw, json)
Hash identifier:          w6T/7IS+kbMFHLYm6FDsrNcoV9e4QJfJpDebzobpxz0=
Subject key identifier:   E5:5F:22:67:6F:8E:AA:BD:07:AD:E1:81:4F:A3:A2:15:59:85:5B:CB
Certificate issuer:       /CN=77B81134906868C6E3E9D1FFFFFA566816CB9125
Certificate serial:       349FF357AB07D29571738C20F4CC5695D420C362
Authority key identifier: 77:B8:11:34:90:68:68:C6:E3:E9:D1:FF:FF:FA:56:68:16:CB:91:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/34352e36382e33342e302f32332d3234203d3e203634313530.roa
Signing time:             Tue 04 Feb 2025 18:09:41 +0000
ROA not before:           Tue 04 Feb 2025 18:04:41 +0000
ROA not after:            Tue 03 Feb 2026 18:09:41 +0000
asID:                     64150
IP address blocks:        45.68.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:9f:f3:57:ab:07:d2:95:71:73:8c:20:f4:cc:56:95:d4:20:c3:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77B81134906868C6E3E9D1FFFFFA566816CB9125
        Validity
            Not Before: Feb  4 18:04:41 2025 GMT
            Not After : Feb  3 18:09:41 2026 GMT
        Subject: CN=E55F22676F8EAABD07ADE1814FA3A21559855BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:26:03:60:e6:66:e4:07:a2:46:cd:da:35:34:
                    e2:c2:1e:82:7a:ce:f5:b4:72:9a:f5:dd:0e:7e:3b:
                    22:2b:3f:26:18:2a:ea:89:d7:7d:dd:21:27:44:ea:
                    4f:9e:f3:a3:a7:8c:0f:46:23:58:ea:39:c3:b1:e6:
                    fe:12:f4:44:72:68:9a:4a:64:09:59:9a:b9:87:12:
                    f3:80:21:06:d4:7d:9b:8c:9a:8c:51:0e:e1:02:38:
                    1e:83:16:07:4c:32:9e:5b:d4:3c:c5:6a:35:55:e4:
                    e2:e6:44:1f:36:22:6d:2a:10:da:09:2e:5e:d9:69:
                    52:82:e0:4f:2d:3b:20:00:2e:6a:42:e7:26:f7:ad:
                    5a:05:5e:29:a6:5f:d5:a1:aa:fa:df:fa:ab:b3:82:
                    80:64:3d:55:a6:bb:de:5a:c2:11:03:db:92:c0:ba:
                    b6:d1:ad:cc:cb:c9:51:4a:7f:ff:33:43:b3:06:68:
                    50:55:e7:06:da:b1:58:0c:0c:01:9d:dc:b9:21:0f:
                    69:d6:35:a1:65:f6:9d:49:55:5e:f0:4d:d1:37:7c:
                    c0:bb:a1:bd:08:36:3a:4f:17:a4:dd:63:89:2c:45:
                    74:2b:42:f7:1b:7e:9c:fa:1d:33:c2:88:0f:e7:2c:
                    7c:46:7c:73:97:d1:74:5f:81:81:8d:e3:67:38:00:
                    c5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5F:22:67:6F:8E:AA:BD:07:AD:E1:81:4F:A3:A2:15:59:85:5B:CB
            X509v3 Authority Key Identifier:
                keyid:77:B8:11:34:90:68:68:C6:E3:E9:D1:FF:FF:FA:56:68:16:CB:91:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/34352e36382e33342e302f32332d3234203d3e203634313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:16:82:5f:a1:bb:f6:49:6e:f0:1f:c8:06:10:19:b2:ec:a1:
         fc:c3:6a:bd:6a:78:f9:53:42:36:5e:27:91:94:c4:05:5e:bb:
         30:f4:97:ee:64:10:1e:ce:19:82:88:9e:74:18:d5:aa:61:df:
         55:13:ed:19:5b:28:1e:d2:09:33:2c:0f:9d:35:60:b9:7c:2f:
         6f:02:a8:df:35:95:05:ad:25:0d:13:f1:b9:17:1a:3a:5c:de:
         08:df:8f:6f:19:cc:8f:cb:c3:e3:59:3f:20:54:51:02:ec:05:
         e7:2a:2e:e4:60:60:68:9e:a9:86:b1:1b:57:d3:3b:af:7a:ed:
         c1:0e:59:1c:4c:36:01:96:33:52:8c:97:5c:ad:83:4a:36:e2:
         a3:e9:2e:8e:d2:41:6c:28:40:77:dd:1f:bc:e3:f7:b7:6a:a5:
         21:0b:c7:ae:e2:df:ed:28:d5:4b:b8:79:70:34:2a:c6:08:8f:
         ca:99:43:b3:d3:9d:26:ed:07:12:21:b0:f8:56:71:29:f6:c6:
         02:9a:41:8c:d0:43:f1:14:c9:8b:ef:b8:5a:09:20:05:5a:57:
         dc:4e:6c:22:0c:4b:62:82:ba:3f:ae:38:1c:ad:b8:6b:7f:07:
         fb:28:9d:a4:df:3a:86:2e:2e:ee:9c:2d:98:76:0d:1e:87:f5:
         69:76:aa:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:47:56 2025 by rpki-client