Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/34352e36382e36322e302f32332d3234203d3e203634313530.roa
File:                     34352e36382e36322e302f32332d3234203d3e203634313530.roa (raw, json)
Hash identifier:          NGAFKQWAn5Fs8iqx1N5XsGinqEG24R3YJsRZYeF/Mvo=
Subject key identifier:   5F:66:E3:90:49:E2:0B:AC:73:52:47:99:D4:07:83:0F:95:32:BC:A0
Certificate issuer:       /CN=77B81134906868C6E3E9D1FFFFFA566816CB9125
Certificate serial:       3C607E05065F18E32F69941297A1076501614AEA
Authority key identifier: 77:B8:11:34:90:68:68:C6:E3:E9:D1:FF:FF:FA:56:68:16:CB:91:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/34352e36382e36322e302f32332d3234203d3e203634313530.roa
Signing time:             Tue 23 Jul 2024 20:05:00 +0000
ROA not before:           Tue 23 Jul 2024 20:00:00 +0000
ROA not after:            Tue 22 Jul 2025 20:05:00 +0000
asID:                     64150
IP address blocks:        45.68.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:60:7e:05:06:5f:18:e3:2f:69:94:12:97:a1:07:65:01:61:4a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77B81134906868C6E3E9D1FFFFFA566816CB9125
        Validity
            Not Before: Jul 23 20:00:00 2024 GMT
            Not After : Jul 22 20:05:00 2025 GMT
        Subject: CN=5F66E39049E20BAC73524799D407830F9532BCA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c0:af:28:fa:48:37:b8:f4:8c:b0:d7:95:0b:
                    e0:ce:70:06:4b:c0:60:8f:11:d5:9d:a9:0a:33:5f:
                    82:1b:0f:bb:6e:cb:a3:30:ab:59:c4:73:aa:54:b4:
                    17:bd:30:c4:d5:7b:c0:37:73:49:84:17:e5:c4:bc:
                    ab:eb:31:89:28:6b:f0:aa:09:54:f4:81:59:fe:9b:
                    03:94:a9:66:a6:19:02:90:db:a1:d6:fc:c9:5e:2d:
                    84:5e:15:66:0c:6b:99:9f:9d:e1:23:83:47:a4:d3:
                    83:68:dd:eb:d0:68:80:12:be:f3:d1:2b:c3:7c:8e:
                    20:95:0f:84:61:bd:65:65:23:0f:d5:66:02:6f:9c:
                    47:42:cc:30:52:34:59:41:53:8a:15:ec:4b:0f:02:
                    a6:8b:8b:64:ed:8c:e7:84:e3:00:e0:85:0c:80:42:
                    76:c9:cd:f9:24:e4:78:70:19:e2:9a:41:af:78:73:
                    eb:33:d3:82:dd:a9:30:45:6b:9e:7d:15:75:f7:34:
                    3d:41:ea:f7:e5:22:ea:e6:73:63:b9:4e:9e:ca:d4:
                    39:99:f9:9f:eb:b1:f9:80:76:f0:98:50:a1:8b:75:
                    6e:85:9f:65:2d:87:55:50:fb:4b:2d:5f:f7:c6:85:
                    92:40:65:47:c6:b3:d8:fb:6b:b6:bf:6e:10:b7:f6:
                    5a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:66:E3:90:49:E2:0B:AC:73:52:47:99:D4:07:83:0F:95:32:BC:A0
            X509v3 Authority Key Identifier:
                keyid:77:B8:11:34:90:68:68:C6:E3:E9:D1:FF:FF:FA:56:68:16:CB:91:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/34352e36382e36322e302f32332d3234203d3e203634313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:ef:ac:23:c3:f4:51:14:02:ee:1c:dd:97:19:49:75:cd:18:
         2a:d1:53:45:81:3c:01:c1:0a:88:f1:66:7b:c6:64:a3:8c:6b:
         d8:1a:a7:f0:1d:f7:0a:4f:c5:c0:68:74:66:5e:15:c9:64:5a:
         27:b2:5b:35:0f:5c:80:c2:4c:82:2a:b6:9c:bb:c8:5c:90:71:
         3e:69:bf:f3:48:8a:cd:3a:d2:ee:2c:4e:bf:82:ba:58:53:0f:
         1b:29:55:59:c8:71:73:7b:30:9a:44:8a:f9:d8:47:c2:3d:86:
         70:6e:24:a3:2b:3a:53:d1:68:e1:bd:90:fe:f3:a5:08:c0:0f:
         c8:58:6f:6b:c2:55:64:74:36:1a:92:30:fd:f2:d1:e3:65:09:
         bf:7d:0f:54:10:af:67:64:5f:b5:9b:35:98:50:ac:42:b2:10:
         84:2a:51:8a:ad:01:01:9e:57:ed:bb:fd:9e:72:97:43:7b:fa:
         8f:d1:e1:da:8e:c2:a1:0e:a1:ad:ba:7d:51:f3:2e:20:24:cb:
         cd:92:81:7d:39:15:b6:5a:8a:4e:df:d4:e4:ac:01:ee:38:f6:
         c0:7c:52:35:17:e2:96:09:c3:02:ef:65:4e:c4:b8:3a:00:13:
         ea:d4:30:c0:6b:d0:50:ac:35:63:1c:c9:d6:20:b3:b4:95:9e:
         21:ca:4f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:45 2025 by rpki-client