Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/34352e36382e36322e302f32332d3234203d3e20323734303637.roa
File:                     34352e36382e36322e302f32332d3234203d3e20323734303637.roa (raw, json)
Hash identifier:          NvqguhpAjBoVUhHEhbIUUMTEqZKEq2LP3WFl6QtDEjc=
Subject key identifier:   5E:5A:3C:31:85:BC:88:E8:C4:9F:76:E8:D3:5F:CA:90:EB:91:92:99
Certificate issuer:       /CN=77B81134906868C6E3E9D1FFFFFA566816CB9125
Certificate serial:       5321F8245EECA03D932BBFADB9026463B9A14B25
Authority key identifier: 77:B8:11:34:90:68:68:C6:E3:E9:D1:FF:FF:FA:56:68:16:CB:91:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/34352e36382e36322e302f32332d3234203d3e20323734303637.roa
Signing time:             Wed 21 May 2025 18:05:00 +0000
ROA not before:           Wed 21 May 2025 18:00:00 +0000
ROA not after:            Wed 20 May 2026 18:05:00 +0000
asID:                     274067
IP address blocks:        45.68.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:21:f8:24:5e:ec:a0:3d:93:2b:bf:ad:b9:02:64:63:b9:a1:4b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77B81134906868C6E3E9D1FFFFFA566816CB9125
        Validity
            Not Before: May 21 18:00:00 2025 GMT
            Not After : May 20 18:05:00 2026 GMT
        Subject: CN=5E5A3C3185BC88E8C49F76E8D35FCA90EB919299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c3:f2:f1:41:c2:97:f0:73:a3:4b:d5:0d:f9:
                    04:3a:21:c8:6c:65:29:1c:f1:40:01:3f:70:8b:58:
                    48:83:9c:8f:85:5b:2b:b0:fd:4d:8d:f4:c9:28:a9:
                    87:6d:a7:83:2f:1a:f4:3b:4c:1c:15:5f:84:84:6f:
                    e4:f1:96:15:49:65:dd:f5:b1:01:87:f0:10:09:71:
                    6c:4f:60:14:c2:fd:93:37:6c:8a:5e:90:12:a6:18:
                    4a:94:11:93:31:a9:db:41:d0:e0:12:4d:00:e5:72:
                    f4:ed:c2:c6:a2:ab:ce:b9:c1:be:14:5e:d1:78:50:
                    b6:74:5d:76:f6:0a:6f:82:0b:5b:9d:d5:70:5b:37:
                    ee:91:7a:a4:f7:34:78:f8:fa:5b:f9:f3:3b:4f:b5:
                    54:d8:60:08:49:6d:19:77:4d:10:a2:da:a7:03:22:
                    6a:fb:14:e5:a4:86:8a:84:d9:e4:15:65:8c:77:f8:
                    7f:e2:e8:5d:26:16:ae:25:84:be:e3:2d:e0:14:0f:
                    c2:6f:fb:77:e7:2d:2c:0c:bf:ac:44:d5:8b:0c:71:
                    36:99:1f:7a:99:f3:e0:a6:82:02:c6:9c:3d:e1:b7:
                    46:9c:98:96:2c:a9:b6:48:ac:e2:f2:6d:50:11:f1:
                    fc:dc:33:83:f1:eb:26:c3:d3:67:23:ad:44:2c:c9:
                    30:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5A:3C:31:85:BC:88:E8:C4:9F:76:E8:D3:5F:CA:90:EB:91:92:99
            X509v3 Authority Key Identifier:
                keyid:77:B8:11:34:90:68:68:C6:E3:E9:D1:FF:FF:FA:56:68:16:CB:91:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/34352e36382e36322e302f32332d3234203d3e20323734303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:00:38:70:04:bb:58:74:ef:33:55:0c:24:af:7e:35:6b:c0:
         54:47:9e:68:b3:40:c2:8f:0c:07:c6:95:27:f6:6a:56:67:8f:
         89:3b:56:97:d9:06:b4:be:f5:f7:05:6d:09:92:c4:d4:0b:45:
         bf:af:1d:4d:b5:6b:7d:f6:76:fa:cb:fc:3d:58:77:b0:26:11:
         35:5c:aa:6b:a9:7c:3e:0b:dd:a4:b1:1e:58:72:a8:0b:df:c7:
         f8:b9:f0:be:56:5d:b1:e7:82:38:83:e6:f4:2b:c4:23:f4:56:
         1b:58:47:b2:6b:46:d9:50:86:91:18:96:c4:c3:28:ec:46:7e:
         0c:f0:b4:da:69:0f:1e:cc:3c:d8:71:bd:59:f7:3f:f8:7b:6f:
         97:1e:93:1c:77:5d:17:8b:13:31:54:78:f1:1a:92:e9:43:57:
         58:b5:5e:8a:37:a5:21:3a:8f:a1:04:db:c0:d2:fa:82:f9:d7:
         79:cb:eb:36:ab:06:ad:02:f7:a3:6d:92:84:e5:53:a2:e5:5e:
         ed:29:53:af:3e:e8:e3:b3:10:06:28:cf:38:fa:c2:9e:4f:43:
         fc:ae:ad:ce:5d:e6:a1:e2:e4:bf:57:f9:62:c5:40:07:38:33:
         e5:3b:07:41:9a:08:6d:f6:b6:85:44:76:27:b6:ae:92:e9:53:
         45:cf:d3:2e
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUUyH4JF7soD2TK7+tuQJkY7mhSyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdCODExMzQ5MDY4NjhDNkUzRTlEMUZGRkZGQTU2Njgx
NkNCOTEyNTAeFw0yNTA1MjExODAwMDBaFw0yNjA1MjAxODA1MDBaMDMxMTAvBgNV
BAMTKDVFNUEzQzMxODVCQzg4RThDNDlGNzZFOEQzNUZDQTkwRUI5MTkyOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOw/LxQcKX8HOjS9UN+QQ6Ichs
ZSkc8UABP3CLWEiDnI+FWyuw/U2N9MkoqYdtp4MvGvQ7TBwVX4SEb+TxlhVJZd31
sQGH8BAJcWxPYBTC/ZM3bIpekBKmGEqUEZMxqdtB0OASTQDlcvTtwsaiq865wb4U
XtF4ULZ0XXb2Cm+CC1ud1XBbN+6ReqT3NHj4+lv58ztPtVTYYAhJbRl3TRCi2qcD
Imr7FOWkhoqE2eQVZYx3+H/i6F0mFq4lhL7jLeAUD8Jv+3fnLSwMv6xE1YsMcTaZ
H3qZ8+CmggLGnD3ht0acmJYsqbZIrOLybVAR8fzcM4Px6ybD02cjrUQsyTAJAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUXlo8MYW8iOjEn3bo01/KkOuRkpkwHwYDVR0j
BBgwFoAUd7gRNJBoaMbj6dH///pWaBbLkSUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNUQ3RDM3REYzOThBQ0ZBNzE0REI5ODAwOEE4MEVDNjNB
QzY1QzZBNDNENjEzMEUwRkQ5ODBGRTNGMzEzRjlCLzAvNzdCODExMzQ5MDY4NjhD
NkUzRTlEMUZGRkZGQTU2NjgxNkNCOTEyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83N0I4MTEzNDkwNjg2OEM2RTNF
OUQxRkZGRkZBNTY2ODE2Q0I5MTI1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzVEN0QzN0RGMzk4QUNGQTcxNERCOTgwMDhBODBFQzYzQUM2NUM2QTQz
RDYxMzBFMEZEOTgwRkUzRjMxM0Y5Qi8wLzM0MzUyZTM2MzgyZTM2MzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMjM3MzQzMDM2Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEtRD4wDQYJ
KoZIhvcNAQELBQADggEBAJUAOHAEu1h07zNVDCSvfjVrwFRHnmizQMKPDAfGlSf2
alZnj4k7VpfZBrS+9fcFbQmSxNQLRb+vHU21a332dvrL/D1Yd7AmETVcqmupfD4L
3aSxHlhyqAvfx/i58L5WXbHngjiD5vQrxCP0VhtYR7JrRtlQhpEYlsTDKOxGfgzw
tNppDx7MPNhxvVn3P/h7b5cekxx3XReLEzFUePEakulDV1i1Xoo3pSE6j6EE28DS
+oL513nL6zarBq0C96NtkoTlU6LlXu0pU68+6OOzEAYozzj6wp5PQ/yurc5d5qHi
5L9X+WLFQAc4M+U7B0GaCG32toVEdie2rpLpU0XP0y4=
-----END CERTIFICATE-----
Generated at Fri Jun 6 07:22:00 2025 by rpki-client