Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/34352e36382e32392e302f32342d3234203d3e20323732383036.roa
File:                     34352e36382e32392e302f32342d3234203d3e20323732383036.roa (raw, json)
Hash identifier:          AefMUie4/3/2UdTHyqLUswjG8Wtx97445TMOdAXsRaw=
Subject key identifier:   A3:7F:47:38:88:3C:61:CD:E8:1D:BB:12:63:6A:91:C1:A6:16:78:DD
Certificate issuer:       /CN=626DF4797B0744D66925A916672340501DC8D2CB
Certificate serial:       29473EC6025801D0AF07625B7DD264A94BBFD7D2
Authority key identifier: 62:6D:F4:79:7B:07:44:D6:69:25:A9:16:67:23:40:50:1D:C8:D2:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/34352e36382e32392e302f32342d3234203d3e20323732383036.roa
Signing time:             Tue 04 Feb 2025 18:32:53 +0000
ROA not before:           Tue 04 Feb 2025 18:27:53 +0000
ROA not after:            Tue 03 Feb 2026 18:32:53 +0000
asID:                     272806
IP address blocks:        45.68.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:47:3e:c6:02:58:01:d0:af:07:62:5b:7d:d2:64:a9:4b:bf:d7:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626DF4797B0744D66925A916672340501DC8D2CB
        Validity
            Not Before: Feb  4 18:27:53 2025 GMT
            Not After : Feb  3 18:32:53 2026 GMT
        Subject: CN=A37F4738883C61CDE81DBB12636A91C1A61678DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:86:41:e6:86:74:e0:bf:39:62:53:e9:a1:08:
                    0e:e4:5f:d1:9a:4d:44:35:19:0c:27:c8:f5:cd:b4:
                    a0:02:50:bb:30:a3:18:c4:34:23:e2:62:b7:85:79:
                    f3:00:79:7d:fe:e5:62:7b:00:95:e2:38:ff:cb:c4:
                    91:84:20:cc:2f:d5:cc:01:76:7e:07:d8:e7:dd:40:
                    94:35:6f:64:4c:49:ef:15:50:21:6c:10:8e:56:a1:
                    2c:51:5a:d6:5d:b0:5a:00:b6:25:da:28:88:a2:38:
                    bc:08:f1:f7:d2:0d:d6:97:16:f0:9c:fa:76:9b:e2:
                    15:75:28:79:43:cd:35:0f:d7:ba:1d:9c:f2:47:cf:
                    1c:42:41:67:95:64:d7:58:d2:8d:91:d3:5b:af:6d:
                    82:27:e5:04:be:d4:f4:88:75:76:21:79:a0:80:ec:
                    2e:32:86:e0:7d:85:fe:fd:43:61:2b:a7:b7:70:4d:
                    3c:eb:a2:86:e6:fa:21:7e:7a:c2:e0:be:d4:cb:43:
                    72:ae:e8:aa:78:49:d3:3f:1c:5a:2d:2f:d4:c0:02:
                    9b:71:73:78:5a:1d:4d:94:dc:fc:7f:aa:5b:40:4e:
                    fb:ad:54:98:4e:af:5c:25:3c:05:e2:8f:3a:cd:8a:
                    9a:42:d3:fb:fb:95:ce:8f:85:ea:65:37:90:13:70:
                    9f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7F:47:38:88:3C:61:CD:E8:1D:BB:12:63:6A:91:C1:A6:16:78:DD
            X509v3 Authority Key Identifier:
                keyid:62:6D:F4:79:7B:07:44:D6:69:25:A9:16:67:23:40:50:1D:C8:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/34352e36382e32392e302f32342d3234203d3e20323732383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:80:a3:5e:5a:fa:4c:4b:75:cc:62:23:47:21:43:d3:d8:be:
         d3:16:46:b6:39:fe:9e:42:50:ce:48:e4:55:6f:19:8a:b9:7f:
         47:45:5e:c6:66:3d:62:c0:13:0b:2f:8e:6e:b5:73:56:ea:25:
         5d:1c:5e:1d:8b:eb:b8:90:97:b9:16:67:07:94:86:b9:ff:80:
         48:e0:27:84:c8:9e:5f:d5:d0:c8:3e:01:4b:4e:de:5b:ae:ac:
         b5:2e:79:cc:84:ed:d0:f4:c6:c5:ac:31:5a:d9:e7:56:f0:a6:
         fb:7c:4d:39:67:04:24:88:f8:eb:3a:87:58:a7:02:1f:ed:a9:
         24:17:04:69:a2:f3:e7:43:1b:a2:8e:f3:75:ca:4a:88:92:71:
         20:a1:ac:24:27:36:03:38:61:3c:b9:49:f9:78:5d:6f:41:3d:
         d0:1c:f1:4c:77:ac:0a:6f:9f:98:71:83:88:e2:76:85:26:72:
         d0:80:9a:c9:b3:67:a7:0a:15:2f:f5:ad:ff:f9:b9:f6:ab:70:
         dd:4a:7c:94:e8:42:12:00:7e:1a:c2:f0:df:8f:9c:4a:fd:0c:
         7d:53:0f:a9:0d:65:88:ff:07:d5:a3:d9:8a:cf:57:ff:5d:9f:
         c0:fc:75:e8:a2:0d:b9:22:53:48:0d:1f:6d:f8:56:6a:3a:6b:
         6b:9f:db:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:14:23 2025 by rpki-client